KR20070107990A - Method and system for processing payment and program recording medium - Google Patents

Abstract

A method and a system for processing payment, and a program recording medium thereof are provided to process the payment without any payment error in a payment process using a phone by making the phone provide payment tool information read through an embedded card reader to a voice call-based member shop server and making the member shop server generate/process a payment approval request message. A phone(300) is equipped with the card reader, and orders goods/services and transmits card information read through the embedded card reader to the member shop server(100) after connecting a call with the member shop server. The member shop server transmits guide information for processing the goods/service order and payment to the phone, and receives goods/service order information and the card information from the phone after connecting the call with the phone. The member shop server generates a payment approval request message by using the card information and the goods/service order information, and transmits the generated message to a financial company serer(200) corresponding to the card information.

Description

Payment processing method and system and program recording medium therefor {Method and System for Processing Payment and Program Recording Medium}

1 is a diagram illustrating a payment system configuration using a call terminal according to an embodiment of the present invention.

2 is a diagram showing a specialized structure for payment processing using a call terminal according to an embodiment of the present invention.

3 is a diagram illustrating a functional configuration of a call terminal according to an embodiment of the present invention.

4 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

5 is a diagram illustrating an IC card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

6 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in a call terminal according to an embodiment of the present invention.

FIG. 7 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server by a symmetric key (or secret key) method according to an embodiment of the present invention.

8 is a diagram illustrating a method for encrypting and transmitting payment means information in a public key infrastructure structure in a communication terminal according to an embodiment of the present invention.

9 is a diagram illustrating a method for decrypting payment means information encrypted and received by a server according to an embodiment of the present invention using a public key infrastructure.

10 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal according to an embodiment of the present invention.

FIG. 11 is a diagram illustrating a method for decrypting payment means information encrypted and received by a server according to an embodiment of the present invention by an electronic envelope method.

12A and 12B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a communication terminal according to an embodiment of the present invention.

13A and 13B illustrate a method of decrypting payment means information encrypted and received at a server by a key exchange method according to an embodiment of the present invention.

14 illustrates a product ordering and purchasing process for payment processing using a call terminal according to an exemplary embodiment of the present invention.

15 is a flowchart illustrating a payment means information reading process for payment processing using a call terminal according to an embodiment of the present invention.

16 illustrates a process of generating a payment approval request full text for payment processing using a call terminal according to an embodiment of the present invention.

17 is a flowchart illustrating a payment approval process for payment processing using a call terminal according to an embodiment of the present invention.

18 is a diagram illustrating a payment system configuration using a call terminal according to another embodiment of the present invention.

19 is a diagram showing a specialized structure for payment processing using a call terminal according to another embodiment of the present invention.

20 is a diagram showing the functional configuration of a call terminal according to another embodiment of the present invention.

21 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

22 is a diagram illustrating an IC card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

FIG. 23 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in a call terminal according to an embodiment of the present invention.

FIG. 24 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server by a symmetric key (or secret key) method according to an embodiment of the present invention.

FIG. 25 is a diagram illustrating a method for encrypting and transmitting payment means information in a public key infrastructure structure in a call terminal according to an embodiment of the present invention.

FIG. 26 illustrates a method for decrypting payment means information encrypted and received by a server according to an embodiment of the present invention using a public key infrastructure.

FIG. 27 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal according to an embodiment of the present invention.

FIG. 28 is a diagram illustrating a method of decrypting payment means information encrypted and received by a server according to an embodiment of the present invention by an electronic envelope method.

29A and 29B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a call terminal according to an embodiment of the present invention.

30A and 30B illustrate a method of decrypting payment means information encrypted and received at a server by a key exchange method according to an embodiment of the present invention.

31 is a flowchart illustrating a product order and purchase process for payment processing using a call terminal according to another exemplary embodiment of the present invention.

32 is a flowchart illustrating a payment means information reading process for payment processing using a call terminal according to another embodiment of the present invention.

33 is a flowchart illustrating a payment approval request full text generation process for payment processing using a call terminal according to another embodiment of the present invention.

34 is a flowchart illustrating a payment approval process for payment processing using a call terminal according to another embodiment of the present invention.

35 is a diagram illustrating a payment system configuration using a call terminal according to another embodiment of the present invention.

36 is a view showing the functional configuration of a call terminal according to another embodiment of the present invention.

37 is a diagram illustrating an MS card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

38 illustrates an IC card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

39 is a diagram illustrating a specialized structure for payment processing using a call terminal according to another embodiment of the present invention.

40 is a diagram illustrating a method for encrypting and transmitting a payment approval request message in a symmetric key (or secret key) manner in a call terminal according to an embodiment of the present invention.

FIG. 41 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at a payment server using a symmetric key (or secret key) method according to an embodiment of the present invention.

FIG. 42 is a diagram for a method of encrypting and transmitting a payment approval request message in a public key based structure in a call terminal according to an embodiment of the present invention.

43 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a payment server according to an embodiment of the present invention using a public key infrastructure.

44 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in an electronic envelope method in a call terminal according to an embodiment of the present invention.

45 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a payment server according to an embodiment of the present invention by an electronic envelope method.

46A and 46B are diagrams illustrating a method of encrypting and transmitting a payment approval request message in a key exchange method in a communication terminal according to an embodiment of the present invention.

47A and 47B illustrate a method of decrypting a full payment approval request message encrypted and received by a payment server according to an embodiment of the present invention by a key exchange method.

48 is a flowchart illustrating a product order and purchase process for payment processing using a call terminal according to another exemplary embodiment of the present invention.

49 is a flowchart illustrating a payment approval request full text generation process for payment processing using a call terminal according to another embodiment of the present invention.

50 is a flowchart illustrating a payment approval request specialized process for payment processing using a call terminal according to another embodiment of the present invention.

51 is a flowchart illustrating a payment approval process for payment processing using a call terminal according to another embodiment of the present invention.

<Description of main parts of drawing>

100: server 115: voice guidance

120: sound signal processing unit 125: information receiving unit

130: professional generation unit 135: information confirmation unit

140: professional transceiver 150: order processing unit

200: payment server 300: call terminal

325: card reader 335: beep processing unit

340: communication processing unit 360: information reading unit

According to the present invention, after a call connection is made with a telephone having a card (IC card and / or MS card) reader in a predetermined information transmitting / receiving means, a predetermined product or service order request and payment processing guide information are transmitted to the telephone. An information transmitting / receiving step of receiving goods or service order request information and card information from the service; A full text generation step of generating a full text of a payment approval request by using a predetermined text generation means by using the received card information and payment information corresponding to the product or service order request information; And a specialized processing step of transmitting the generated payment approval request text in a predetermined professional processing means to a financial company server corresponding to the card information, and receiving a payment approval text from the financial company server. To provide a processing method and system and a program recording medium therefor.

Conventional payment method after the telephone order using a telephone (telephone), and / or home shopping payment method using a telephone, the payment means information by voice after the telephone connection with the counselor through the telephone, and / or ARS through the telephone (Automatic Response Service) A method of inputting payment method information through a key button as a customer after connecting a voice call channel with a server has been mainly used. The payment method using the above-described phone is not only inconvenient to use, but also payment method information. Because the customer has to enter it manually, it contains a problem that a payment error may occur due to an incorrect operation.

Recently, the wired telephone network has evolved from the conventional inverter switching method to the electronic switching method, and in the form of an intelligent network capable of voice communication and data communication, and a VoIP service that adds a voice communication function to the data communication function also appeared. It was. In addition, the wireless telephone network (mobile communication network) is capable of both voice calls and data communication based on the Code Division Multiple Access (CDMA) stack.

The present invention has been made to solve the above problems, and after ordering a call with a telephone having a card (IC card and / or MS card) reader in a predetermined information transmitting and receiving means, ordering a predetermined product or service to the telephone Transmitting / receiving request and payment processing guide information and receiving product or service order request information and card information from the telephone; A full text generation step of generating a full text of a payment approval request by using a predetermined text generation means by using the received card information and payment information corresponding to the product or service order request information; And a professional processing step of transmitting the generated payment approval request text in a predetermined professional processing means to a financial company server corresponding to the card information, and receiving a payment approval text from the financial company server. It is aimed at processing method and system and program recording medium therefor.

The present invention includes a card (IC card and / or MS card) reader, connects to a merchant terminal (or server), requests a predetermined product or service order, and reads card information read through a card reader. A telephone to transmit to (or a server); And after a call connection with the telephone, sends a product or service order request and payment processing guide information to the telephone, receives a product or service order request information and card information from the telephone, and receives the received card information and the product or A merchant terminal (or server) generating a predetermined payment approval request text using payment information corresponding to service order request information and transmitting the generated payment approval request text to a financial company server corresponding to the card information; Characterized in that made.

The present invention transmits a predetermined goods or service order request and payment processing guide information to the phone when the call is connected to a phone having a card (IC card and / or MS card) reader, and requests a product or service order from the phone. Information transmitting and receiving means for receiving information and card information; Full-text generating means for generating a predetermined payment approval request message using the received card information and payment information corresponding to the product or service order request information; And specialized processing means for transmitting the generated payment approval request text to the financial company server corresponding to the card information and receiving the payment approval text from the financial company server.

The present invention includes a card (IC card and / or MS card) reader, connects to a merchant payment agent server (or call center server), requests a predetermined product or service order, and reads card information read through the card reader. A telephone for transmitting to the affiliated store payment agent server (or call center server); And after a call connection with the telephone, sends a product or service order request and payment processing guide information to the telephone, receives a product or service order request information and card information from the telephone, and receives the received card information and the product or When generating a predetermined payment approval request text using the service order request information, the payment approval request text is generated using the terminal unique number of the merchant corresponding to the order request information, and the generated payment approval request text is stored in the card. A merchant payment agent server (or call center server) which transmits to a financial company server corresponding to the information, receives a payment approval result from the financial company server, and then transmits the result to a terminal (or server) and / or a telephone provided at the merchant; Characterized in that comprises a.

The present invention transmits a predetermined goods or service order request and payment processing guide information to the phone when the call is connected to a phone having a card (IC card and / or MS card) reader, and requests a product or service order from the phone. Information transmitting and receiving means for receiving information and card information; When generating a predetermined payment approval request full text using the received card information and the product or service order request information, generating a full text for generating a payment approval request full text using the terminal unique number of the merchant corresponding to the order request information Way; And transmitting the generated payment approval request text to the financial company server corresponding to the card information, receiving the payment approval text from the financial company server, and transmitting the received text to the merchant (or server) provided at the affiliate store. Or specialized processing means for transmitting to the telephone.

According to the present invention, after a call connection is made with a telephone having a card (IC card and / or MS card) reader in a predetermined information transmitting / receiving means, a predetermined product or service order request and payment processing guide information are transmitted to the telephone. An information transmitting / receiving step of receiving goods or service order request information and card information from the service; A full text generation step of generating a full text of a payment approval request by using a predetermined text generation means by using the received card information and payment information corresponding to the product or service order request information; And a specialized processing step of transmitting the generated payment approval request full text in a predetermined professional processing means to a financial company server corresponding to the card information and receiving the payment approval full text from the financial company server.

According to the present invention, after a call is connected to a telephone having a card (IC card and / or MS card) reader in a predetermined information transmission / reception means, a predetermined product or service order request and payment processing guide information are transmitted to the telephone. An information transmitting / receiving step of receiving goods or service order request information and card information from the service; When generating a predetermined payment approval request text using the received card information and the product or service order request information by a predetermined text generation means, the payment approval request is performed using a terminal unique number of the affiliate store corresponding to the order request information. A full text generation step of generating a full text; And transmitting the generated payment approval request text to the financial company server corresponding to the card information in a predetermined professional processing means, receiving the payment approval text from the financial company server, and then storing the received text in the affiliated store. (Or a server) and / or a specialized processing step for transmitting to the phone; characterized in that it comprises a.

According to the present invention, there is provided a computer-readable recording medium characterized by recording a program for executing the payment processing method.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

For example, in the following embodiment, the phone is called a call terminal, the merchant terminal (or server) is called a server, and the financial company server is called a payment server.

In addition, if a person of ordinary skill in the art to which the present invention belongs, the technical configuration of the present invention is not used only for payment processing using a call terminal, and if the server shown in the following embodiment is a phone banking server, the call terminal It will be clearly understood that it can be used for a phone banking system using.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a payment system configuration using a call terminal 300 according to an embodiment of the present invention.

In more detail, Figure 1 is a telephone order using a voice call through the call terminal 300 is provided with a predetermined card reader, through the card reader to read the predetermined payment means information from a predetermined customer owned card through the telephone Regarding a system configuration for processing payment corresponding to an order, those skilled in the art to which the present invention pertains, various payment system configuration using the call terminal 300 by referring to and / or modified in the Figure 1 It may be inferred, but the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

That is, in the implementation method illustrated in FIG. 1, a predetermined customer makes a call with a server 100 (eg, an ARS (Automatic Response Service) server 100) provided at a predetermined affiliated store through a predetermined call terminal 300. After connecting a channel, performing a predetermined telephone ordering procedure through the call channel, and receiving predetermined payment means information from a customer-owned card provided with a predetermined payment means through a card reader provided in the call terminal 300. When reading and transmitting to the server 100 by a dual frequency multi-frequency (DTMF) method, the server 100 generates a predetermined payment approval request text based on the payment means information, and generates a predetermined network ( For example, a system configuration for transmitting a payment approval request message to a predetermined payment server 200 through a dedicated communication network connecting the server 100 and the payment server 200 to process a payment.

In addition, although the functional component for the payment processing using the call terminal 300 according to the present invention is shown in the predetermined server 100 through the embodiment shown in FIG. 1, this is a technical feature of the present invention. The present invention is not limited by this, but the present invention is not limited thereto. The payment processing system using the call terminal 300 according to the present invention includes a plurality of servers (or terminals) 100 having the above-described functional components. The implementation method, and / or the method (or terminal) 100 on the call center system, if the predetermined call center is provided in the affiliated store, the implementation method comprising the functional configuration unit, and / or a predetermined ARS server ( If 100 is already provided, an implementation method of additionally providing the functional configuration unit in the ARS server 100, and / or the affiliated store is provided with a predetermined affiliated store terminal. It may include any one of the implementation method further comprising the function configuration unit in the point terminal.

The call terminal 300 used by the customer is a wired telephone (and / or a wireless telephone communicating with the radio frequency (RF) with the wired telephone) connected to a public switched telephone network (PSTN), and / or CDMA (Code) Division Multiple Access (Telephone) connected to a stack based mobile communication network (e.g., Personal Communication System (PCS) and / or Global System for Mobile (GSM) terminals), and / or Transmission Control Protocol / Internet Protocol (TCP / IP) And / or at least one VoIP terminal connected to a User Datagram Protocol / Internet Protocol (UDP / IP) based wired communication network and / or a Voice over IP (VoIP) network operating based on an IEEE 802.16x based portable Internet network. Characterized in that made.

According to the present invention, the call terminal 300 is a card reader for reading predetermined payment means information from a magnetic stripe (MS) card conforming to the ISO / IEC 7810 standard, and / or a contact type conforming to the ISO / IEC 7816 standard. At least one card reader for reading predetermined payment means information from an IC (Integrated Circuit) card and / or at least one card reader for reading predetermined payment means information from a contactless IC card conforming to ISO / IEC 14443 standard, Characterized in that the preferred embodiment is described in detail with reference to Figure x.

In addition, the call terminal 300 may include at least one telephone network (eg, a general switched telephone network (PSTN), and / or a mobile communication network), and / or a VoIP network (eg, a TCP / IP and / or UDP / IP-based wired communication network). And / or a server provided at a merchant through a network in which a Real-time Transport Protocol / RTP Control Protocol (RTP) layer is defined in a transport layer on a protocol stack based on the IEEE 802.16x-based portable Internet. It is characterized in that the connection 100 and the predetermined call channel.

Referring to FIG. 1, the server 100 provided in the affiliated store includes a call channel processing unit 105 for connecting a call channel with a call terminal 300 used by a customer through at least one or more telephone networks and / or VoIP networks. The voice guide unit 115 provides a voice call for a predetermined telephone order and payment processing according to the present invention in association with the call channel processing unit 105 and the voice guide in connection with the call channel processing unit 105. It is characterized in that it comprises a signal sound processing unit 120 for receiving a key signal generated in the call terminal 300, and read out the key signal sound by DTMF method to extract predetermined information.

The call channel processing unit 105 is assigned a predetermined telephone number for connecting a predetermined call channel with at least one call terminal 300, and corresponds to the telephone network and / or VoIP network based on the telephone number. By performing a predetermined call processing procedure it is characterized in that the at least one or more communication terminals 300 and the communication channel is connected.

Those skilled in the art will be familiar with certain call processing procedures corresponding to the telephone network and / or the VoIP network, and thus a detailed description thereof will be omitted.

The voice guide unit 115 is connected to at least one or more call terminals 300 through the call channel processing unit 105, the customer authentication and / or goods to the call terminal 300 through the call channel Characterized in that it outputs a predetermined voice guidance for order processing, and also outputs a voice guidance for payment processing using the call terminal 300 according to the present invention to the call terminal 300 through the call channel. Characterized in that.

According to an exemplary embodiment of the present invention, the voice guide unit 115 is connected to the call terminal 300 through the call channel based on product information stored in a predetermined storage medium 140 and payment amount information corresponding to the product. Extract a predetermined voice announcement (eg, extract from a predetermined voice announcement storage database (not shown)), and / or generate (for example, create a voice guide comment in a TTS (Text To Speech) method) After that, it is preferable to output the voice announcement to the call terminal 300 through the call channel.

According to another exemplary embodiment of the present invention, the voice guide unit 115 outputs voice guidance of a counselor corresponding to a predetermined call center terminal (and / or affiliated phone) to the call terminal 300 through the call channel. It is possible that the invention is not limited thereby.

The signal tone processor 120 reads the key tone using the DTMF scheme when a DTMF tone is generated from the call terminal 300 in response to the voice guidance and is received through the call channel. (Eg, “0 to 9”, “*”, “#”, etc.) are identified and extracted.

Those skilled in the art to which the present invention pertains will understand the method for generating the DTMF type key beep and the method for reading and confirming and extracting predetermined information by reading the key beep. Detailed description thereof will be omitted for convenience.

According to the present invention, the server 100 provided in the affiliated store combines the information extracted by the signal processing unit 120, the information receiving unit 125 for receiving the payment means information transmitted from the call terminal 300 It characterized by comprising a.

According to the method of the present invention, the payment means information is credit card payment read from the MS card and / or contact IC card and / or contactless IC card through at least one card reader provided in the call terminal (300) And at least one or more means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information. Card payment method information (e.g., credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information) of the payment method information may be a predetermined card number and And / or TRACK II information including expiration date, etc., wherein the transfer payment means information includes a predetermined financial account number and And / or customer-owned financial account information including branch number and / or account opening date.

According to one embodiment of the present invention, the payment means information is arranged in a number information (and / or number structure) in a predetermined information processing method in the call terminal 300 in order to prevent exposure to the outside from eavesdropping and / or interception ) After processing the key tone, and in this case, when the tone processing unit 120 reads the processed information from the key tone, the information receiving unit 125 performs the original payment from the processed information. The means information can be restored, thereby providing security to the payment means information.

According to another exemplary embodiment of the present invention, the payment means information is encrypted by a predetermined encryption method in the call terminal 300 to prevent exposure to the outside from eavesdropping and / or eavesdropping, and then processes the key tone. In this case, when the signal processing unit 120 reads the encrypted information from the key tone, the information receiving unit 125 decrypts the encrypted information by a decryption method corresponding to the encryption method. It can receive, thereby providing a high level of security for the payment means information.

In addition, in the case of the payment means information, a checksum may be further included in order to prevent transmission and reception errors caused by noise during transmission and reception through key tones, thereby preventing transmission and reception errors for the payment means information. can do.

In addition, the information receiving unit 125 is characterized in that for receiving the predetermined product information purchased from the call terminal 300, the purchase product information is the call terminal 300 through the voice guide unit 115 The purchase product selection information corresponding to the voice announcement provided by the user; It is preferable to include, by this, the product information (and / or payment amount information associated with the product information) corresponding to the purchased product information is extracted from the predetermined storage medium 140.

According to another exemplary embodiment of the present invention, the information receiving unit 125 may directly receive predetermined payment amount information (eg, payment amount amount) transmitted from the call terminal 300, whereby the present invention It is not limited.

In addition, the information receiving unit 125 may further receive a predetermined discount information transmitted from the call terminal 300, the discount information is a coupon number corresponding to a predetermined discount coupon possessed by the customer It is preferable to include, and thereby the payment amount can be discounted.

In addition, the information receiving unit 125 may further receive a predetermined product delivery address information transmitted from the call terminal 300, the product delivery information is the call terminal 300 through the voice guide unit 115 The product delivery destination selection number corresponding to the voice announcement (for example, a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement) And delivery address information (eg, in the form of voice information) through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), or / or a detailed address ("address / call") number, etc.). , Customer's address), thereby securing an address to which the purchased product will be delivered.

According to the present invention, when the predetermined payment means information is received through the information receiving unit 125, the server 100 provided in the affiliated store performs the payment processing through the payment means information from the predetermined storage medium 140. Characterized in that it comprises an information confirmation unit 135 for confirming the merchant information for.

According to one embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information. If applicable, the information verification unit 135 is a merchant number (e.g., a unique number assigned to the merchant for processing the card payment) and / or terminal number (e.g. to process the card payment from the storage medium 140) It is preferable to check the merchant information including at least one or more of the unique number provided in the merchant terminal (or payment terminal) provided in the merchant for.

According to another exemplary embodiment of the present invention, when the payment means information corresponds to the account transfer payment means information, the information checking unit 135 from the storage medium 140 merchant account information (for example, the merchant's financial account) Number, and / or branch number, and / or account holder information, etc.).

If the affiliated store is a franchise company and a server 100 for payment processing using the call terminal 300 is provided in the call center of the franchise company, the affiliated store information is affiliated store information corresponding to the franchise company, and And / or affiliated store information corresponding to a franchise chain store that manufactures and packages a product corresponding to the purchased product information to the customer and delivers the product to the customer, and thus, the present invention is not limited thereto.

According to the present invention, the server 100 provided in the affiliated store includes the payment means information received through the information receiving unit 125 and the affiliated store confirmed from the predetermined storage medium 140 by the information checking unit 135. Generating a predetermined payment approval request text for payment processing of an amount corresponding to the payment amount through a payment means corresponding to the payment means information based on the information and at least one item information and / or payment amount information; Sending the full text of the payment approval request to the payment server 200 corresponding to the payment means through the full text generation unit 130 and a predetermined network, the payment corresponding to the full text of the payment approval request from the payment server 200 Characterized in that it comprises a specialized transmission and reception unit 145 for receiving a payment approval message including the processing history.

According to the exemplary embodiment of the present invention, when the payment means information received through the information receiving unit 125 corresponds to the credit card payment means information, the full text of the payment approval request generated by the full text generation unit 130 is the credit. It is preferable to include a full credit card-based payment approval request corresponding to the card payment means.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the check card payment means information, the full text of the payment approval request generated by the full text generation unit 130 is checked corresponding to the check card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the debit card payment means information, the full text of the payment approval request generated by the professional generation unit 130 is a debit corresponding to the debit card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the prepaid card payment means information, the full text of the payment approval request generated by the full text generation unit 130 may be prepaid corresponding to the prepaid card payment means. It is desirable to include a full card-based payment approval request.

According to another exemplary embodiment of the present invention, when the payment means information received through the information receiving unit 125 corresponds to the account transfer payment means information, the full text of the payment approval request generated by the full text generation unit 130 may be used. It is preferable to include a full financial transaction request for withdrawing the payment amount from the customer's financial account and transfers it to the financial account of the merchant.

The specialized transmission / reception unit 145 transmits the payment approval request text generated by the text generation unit 130 to the payment server 200 corresponding to the payment means through a predetermined network, thereby providing the full text of the payment approval request. It is characterized in that the request for payment approval through, and if the payment approval message corresponding to the payment approval request full text is transmitted from the payment server 200, characterized in that it is received through the network.

Here, when the payment means information corresponds to credit card payment means information, the payment server 200 comprises a credit card payment server 200 of the card company (or financial company) that issued the credit card to the customer. And / or when the payment means information corresponds to check card payment means information, including a check card payment server 200 of a card company (or financial company) that issued the check card to the customer, and / or Or when the payment method information corresponds to the debit card payment method information, the debit card payment server 200 of the card company (or financial company) that issued the debit card to the customer, and / or the payment If the means information corresponds to the prepaid card payment means information, the prepaid card payment server 200 of the card company (or financial company) that issued the prepaid card to the customer; And / or if the payment means information corresponds to the account transfer payment means information, includes a financial server (eg, ledger server) of the financial company (bank) that opened the financial account for the account transfer to the customer It is done by

In addition, the professional transmission / reception unit 145 checks the payment processing details included in the payment approval message when the payment approval message corresponding to the payment approval request message is received through the network, in the payment server 200. The method may further include checking whether payment processing using the payment means information provided from the call terminal 300 is normally processed or whether a payment error has occurred.

If a predetermined payment error occurs in the payment processing using the payment means information provided from the call terminal 300, the specialized transmission and reception unit 145 is the call terminal 300 of the customer through the voice guide unit 115 After outputting the payment error information, the payment processing process using the call terminal 300 according to the present invention ends.

According to the present invention, the server 100 provided in the affiliated store is provided with an order processing unit 150 for performing an order processing for the payment processed products when the payment processing through the payment means information is normally performed Characterized in that made.

According to an embodiment of the present invention, when the information receiving unit 125 receives the order processing information including the purchase product information and product delivery information from the call terminal 300 of the customer, the order processing unit 150 is the Order processing terminal of the department for manufacturing and packaging the purchased goods in the affiliated store through the predetermined communication means 190, the order processing information including the payment processing details and the purchase product information and product delivery address information to the customer And / or when the affiliate is a franchise, manufacturing and packaging the purchased goods through predetermined communication means 190 with order processing information including the payment processing details, the purchased goods information, and the goods delivery information. It is preferable to provide to the order processing terminal of the chain stores to deliver to the customer.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal 300 in the payment processing using the call terminal 300, the order processing unit 150 Is further processed to receive the goods delivery address information from the call terminal 300 through the voice guide unit 115 (and / or call center terminal, and / or merchant phone) to include the purchase goods information and goods delivery destination information Secures information, manufactures and packages the purchased goods in the affiliated store through the predetermined communication means 190 and delivers the order processing information including the payment processing details, the purchased goods information, and the goods delivery address information to the customer. Provide to the order processing terminal of the department, and / or if the merchant is a franchise, the payment processing history, the purchase product information and product delivery designation The order processing information including through a predetermined communication means 190 to provide the purchased items to the order processing terminal chain of which the manufacture and packaging shipped to the customer are preferred.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal 300 in the payment processing using the call terminal 300, the order processing unit 150 ) Provides the payment processing details and the purchased product information to an order processing terminal of a department that manufactures, packages, and delivers the purchased product in the affiliated store through a predetermined communication means 190, and / or When the affiliated store is a franchise, a chain store that manufactures and packages the purchased product through a predetermined communication means 190 and delivers the order processing information including the payment processing history, the purchased product information, and the product delivery address information to the customer. After providing the order processing terminal of the, the call channel between the customer's call terminal 300 and the server 100 between the call terminal 300 and the order processing terminal By changing to a screen channel, it is possible to to further obtain the product shipping information from the order processing terminal and, in addition, it is possible to perform various types of order processing process according to one of ordinary skill in the art of intent.

2 is a diagram showing a specialized structure for payment processing using the call terminal 300 according to an embodiment of the present invention.

In more detail, FIG. 2 illustrates that the payment means information transmitted from the call terminal 300 to the server 100 is read from a customer-owned credit card on a payment system using the call terminal 300 shown in FIG. If it corresponds to the credit card payment means information, the credit card payment approval request generated on the basis of the credit card payment means information structure, the person having ordinary knowledge in the technical field to which the present invention belongs, 2 and / or modified to infer a payment approval request specialized structure corresponding to other payment means information in addition to the credit card payment means information, the present invention includes all the inferred implementation method, this figure 2 It is not limited to the implementation method shown by.

Referring to Figure 2, the payment approval request full-text structure is at least one or more specialized information defined between the predetermined start character (STX (Start of TeXt), 0X02) and the end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text may include a transaction classification item (eg, a credit approval request, a credit approval cancellation, etc.), a Terminal_ID item, a POS Entry Mode item, and a card reader provided in the call terminal 300. TRACK II Data items corresponding to the payment means information obtained from a predetermined card through (for example, from the Primary Account Number (PAN) and Additional Data (AD) and / or Discretionary Data (DD) areas of TRACK II of the MS card. Credit card information obtained from the credit card file of the IC card or the credit card information obtained), and the total number of installment months corresponding to the credit card payment information after the predetermined FS (File Separator, 0X1C) It includes an amount item and a service fee item, and also includes a working key index item, a password item, a product code item and a document serial number item. Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

The Terminal_ID item in the payment approval request specialist information item corresponds to the affiliated store information, the total amount item corresponds to total payment amount information corresponding to the purchase product information, and the document serial number is the server 100. Corresponds to a serial number assigned to manage the payment processing using the call terminal 300 according to the present invention.

In addition, the TRACK II Data item of the information on the payment approval request specialist is read out from a predetermined card reader provided in the call terminal 300 and received by the server 100 as the payment means information. According to the payment means information corresponds to credit card information.

3 is a diagram showing the functional configuration of the call terminal 300 according to an embodiment of the present invention.

In more detail, Figure 3 relates to one embodiment of a call terminal 300 for payment processing using the call terminal 300 according to the present invention, and a person having ordinary knowledge in the art to which the present invention belongs. By referring to and / or modifying the drawing 3, it is possible to infer various call terminal 300 functional configuration for payment processing using the call terminal 300, but the present invention includes all the inferred implementation method, It is not limited to the implementation method shown in FIG.

Referring to FIG. 3, the call terminal 300 basically includes a control unit 305, a memory unit 350, a key input unit 310, a voice processing unit 315, a screen output unit 320, and a signal tone processing unit 335. And a power supply unit 330 for supplying power to the communication terminal 340 and the call terminal 300, the card reader unit 325 for payment processing using the call terminal 300 according to the present invention. And / or the security application module 345, etc., and may further include at least one or more functional components (not shown) according to the intention of those skilled in the art.

The control unit 305 basically controls the key input unit 310, the voice processing unit 315, the screen output unit 320, and the communication processing unit 340 so that a predetermined telephone input through the key input unit 310 is performed. Connect a voice call channel with at least one other call terminal (or server) 100 through a telephone network and / or a VoIP network connected to the communication processor 340 based on the number, and through the voice processor 315. It converts the input / output voice signal into an electrical signal (and / or digital signal) to operate and control the voice call function for transmitting and receiving through the voice call channel. At least one processor and execution memory (for example, a register and / or including a Central Processing Unit (CPU) / Micro Processing Unit (MPU) provided in the call terminal 300 to realize the function of the RAM (Random Access Memory) and a bus (BUS) for inputting and outputting predetermined data, characterized in that it is provided in the call terminal 300 to realize the function of the call terminal 300 by software A program routine that is loaded from a recording medium into the execution memory and is processed by the processor may be a generic term.

In addition, the controller 305 controls the communication processor 340 to access data channels defined in a telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network connected to the communication processor 340. Connecting a predetermined data channel for data communication with at least one terminal (or server) 100 and operating and controlling a function of transmitting and receiving at least one digital information (or digital data) through the data channel. To this end, the communication terminal includes at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data to the call terminal 300 for the data communication in hardware. Characterized in that, the execution message from the recording medium provided in the call terminal 300 for the data communication in software Program routines and / or program data loaded into the memory and processed by the processor may be collectively referred to.

In addition, the control unit 305 controls the predetermined card reader unit 325 provided in the call terminal 300 for the payment processing using the call terminal 300, through the card reader unit 325 It is characterized in that the operation and control to read the predetermined payment means information from the customer-owned card to transmit to the server 100, for this purpose, the call terminal for payment processing using the call terminal 300 in hardware And at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data, wherein the payment processing is performed by software using the call terminal 300. Program routines and / or programs that are loaded into the execution memory from the recording medium provided in the call terminal 300 and processed by the processor. Characterized in that the general term for RAM data.

Therefore, the call terminal 300 shown in FIG. 3 is loaded into the execution memory from the recording medium provided in the call terminal 300 for the payment processing using the call terminal 300 and operated by the processor. Program routines to be processed are described in block form in the controller 305 for convenience.

The memory unit 350 inputs and outputs when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the call terminal 300 is performed. General term of non-volatile memory for storing information or data), including at least hardware-based electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD). It includes one or more storage means, the control unit 305 is a predetermined program routine and program data required to perform a predetermined control function (for example, the program routine is input or output to perform a predetermined function) Data) is stored.

The key input unit 310 is provided with at least one key button including at least one or more number keys and / or character keys and / or function keys. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or operation mode of the call terminal 300 controlled by the controller 305. When predetermined information (or signal) is input from the key button, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 305.

When the current input mode and / or operation mode of the call terminal 300 is a voice call mode, the controller 305 obtains predetermined key data corresponding to the key event and provides the same to the beep processor 335. The tone processing unit 335 may generate a key tone corresponding to the key data according to a dual tone multifrequency (DTMF) scheme.

When the current input mode and / or operation mode of the call terminal 300 is a data communication mode, the controller 305 acquires predetermined key data corresponding to the key event, and then information corresponding to the key data. And performing a processing procedure, and / or acquiring an instruction for executing a predetermined function matched with the key event, and then performing a function corresponding to the instruction.

According to the exemplary embodiment of the present invention, the key input unit 310 and the key input device having at least one or more key buttons interoperate with each other to perform a function of key input means provided in the call terminal 300.

According to an embodiment of the present invention, the key input device which is interlocked with the key input unit 310 may include a keypad device having at least one numeric key, a letter key ('*', '#') and a function key, and / Or at least one or more keyboard devices including at least one numeric key, character keys (eg, English character keys, and / or Korean character keys) and function keys.

The voice processing unit 315 converts a predetermined voice input from a predetermined voice input device (for example, a microphone) included in the call terminal 300 into a predetermined voice signal (or an electrical signal), and the communication processor 340. Is encoded using a voice encoding scheme corresponding to a telephone network and / or a VoIP network connected to the PDP network to generate predetermined voice data, and provides the voice data to the controller 305. It is preferable that the processing unit 315 is provided with a predetermined vocoder and a codec.

Thereafter, the controller 305 transmits the generated voice data to the telephone network and / or the VoIP network through the communication processor 340.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the voice processing unit 315 transmits the voice signal (or electrical signal) to the general telephone switching network (or intelligent network). It is preferable to generate the voice data by encoding by using a coding scheme that can be transmitted through).

According to another exemplary embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the voice processor 315 may transmit the voice signal (or electrical signal) through the mobile communication network. Division Multiple Access) It is preferable to generate the speech data by encoding in a coding scheme corresponding to the stack.

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a VoIP network, the voice processor 315 may transmit the voice signal (or electrical signal) through the VoIP network. Preferably, the voice data is generated by encoding with a coding scheme corresponding to a stack, wherein the coding scheme corresponding to the VoIP network is an H.323 protocol standard and / or an Internet Engineering Task defined by the International Telecommunication Union (ITU). It is preferable to include at least one or more of the Session Initiation Protocol (SIP) protocol specifications defined by the Force.

According to an embodiment of the present invention, the voice processing unit 315 and the voice input device interoperate with each other to perform a function of voice input means for receiving a voice signal for voice call through the telephone network and / or the VoIP network.

When voice data encoded by a predetermined encoding method is received through the communication processor 340, the controller 305 provides the voice data to the voice processor 315, at which time the voice processor 315 is provided. Decodes the voice data by a voice coding scheme corresponding to a telephone network and / or a VoIP network connected to the communication processor 340 to generate a predetermined voice signal (or an electrical signal), and generates the voice signal (or Electrical signal) is output through a predetermined voice output device (for example, a speaker) provided in the call terminal 300. For this purpose, the voice processing unit 315 is provided with a predetermined vocoder and a codec. desirable.

When the communication processing unit 340 is connected to a general telephone switching network (or an intelligent network) according to an exemplary embodiment of the present invention, the voice processing unit 315 may convert the voice data received through the communication processing unit 340 into the general telephone. It is preferable to generate the speech signal (or electrical signal) by decoding by encoding scheme corresponding to the switching network (or intelligent network).

According to another exemplary embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the voice processing unit 315 may transmit voice data received through the communication processing unit 340 to correspond to the mobile communication network. It is preferable to generate the speech signal (or electrical signal) by decoding by stack-based encoding.

According to another embodiment of the present invention, when the communication processing unit 340 accesses the VoIP network, the voice processing unit 315 may convert the voice data received through the communication processing unit 340 into the VoIP network. It is preferable to generate the voice signal (or electrical signal) by decoding by encoding method, wherein the encoding method corresponding to the VoIP network is at least one of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable that the above specification is included.

According to the embodiment of the present invention, the voice processing unit 315 and the voice output device interoperate with each other to perform a function of voice output means for outputting a voice signal for voice call through the telephone network and / or the VoIP network.

The screen output unit 320 is a liquid crystal display (LCD) by the control unit 305 while the call terminal 300 performs a voice call function and / or a payment processing function using the call terminal 300. And / or at least one or more information or data which is predefined or defined in real time to be output to a predetermined display device including a Cathode Ray Tube (CRT) and / or a CRT (Cathode Ray Tube). The screen output unit 320 and the screen output device interoperate with each other to perform a function of a screen output means provided in the call terminal 300.

Predefined information or data to be output from the call terminal 300 to the screen output device includes key data input through the key input unit 310 and / or components provided in the call terminal 300. Information (or data) stored or generated by the information, information (or data) transmitted / received through the communication processing unit 340, and / or (or data) corresponding to a predetermined operation result performed by the call terminal 300. It comprises at least one.

According to a preferred embodiment of the present invention, the screen output unit 320 of the screen output means for outputting the payment processing screen according to each payment processing step to the screen output device for payment processing using the call terminal 300 It is desirable to perform the function.

The signal processing unit 335 is a predetermined number key ("0 ~ 9") and / or letter key ('*) through the key input unit 310 in the state that the operation mode of the call terminal 300 is the voice call mode ',' # 'Is input, generates a key tone corresponding to the input key data in a complex frequency code (DTMF) scheme, and the key tone is connected to the telephone network and / or to which the communication processor 340 is connected. Characterized in that the voice encoding method corresponding to the VoIP network characterized in that provided to the communication processor 340.

According to an embodiment of the present invention, when the communication processor 340 is connected to a general telephone switching network (or intelligent network), the voice processing unit 315 may transmit the key tone through the general telephone switching network (or intelligent network). It is preferable to generate the speech data by encoding by a coding scheme.

According to another embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the voice processing unit 315 may transmit a code division multiple access (CDMA) stack capable of transmitting the key tone through the mobile communication network. It is preferable to generate the speech data by encoding by a coding scheme corresponding to.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a VoIP network, the voice processing unit 315 encodes a key corresponding to a VoIP protocol stack capable of transmitting the key tone through the VoIP network. It is preferable to generate the voice data by encoding in a scheme, wherein the encoding scheme corresponding to the VoIP network includes at least one or more of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable.

The communication processor 340 connects the call terminal 300 to a predetermined telephone network and / or VoIP network, and at least one or more other call terminals (or servers) according to a call processing procedure defined in the telephone network and / or VoIP network. ) And the voice call channel.

According to one embodiment of the present invention, the communication processing unit 340 is a physical network configuration (eg, the call terminal 300 to connect the call terminal 300 to a general telephone switching network (or intelligent network) general telephone switching network) (Or a network configuration connecting the switch and the wired communication section provided on the intelligent network), by performing a call processing procedure corresponding to the communication protocol standard defined in the general telephone switching network (or intelligent network) It is preferable to connect the voice call channel with at least one or more other call terminals (or servers) 100.

According to another embodiment of the present invention, the communication processing unit 340 is a physical network configuration for connecting the call terminal 300 to a mobile communication network (for example, the base station provided on the mobile communication network 300) And a network configuration connecting a wireless communication section corresponding to the CDMA stack, and performing at least one call processing procedure corresponding to a communication protocol standard defined in the mobile communication network. It is preferable to connect the voice communication channel with 100).

According to another exemplary embodiment of the present invention, the communication processing unit 340 is a physical network configuration (for example, VoIP provided with the call terminal 300 on the VoIP network) to connect the call terminal 300 to the VoIP network. Network configuration that connects wired communication intervals through the Gateway and / or VoIP Gatekeeper and the Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) protocol layer implemented on top of the UDP / IP protocol stack It is preferable that the call processing procedure corresponding to the communication protocol standard defined in the VoIP is performed to connect the voice call channel with at least one other call terminal (or server) 100.

In addition, the communication processor 340 transmits and receives voice data encoded with at least one other call terminal (or server) 100 and an encoding scheme corresponding to the telephone network and / or VoIP network through the voice call channel. It features.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the communication processing unit 340 is encoded by an encoding scheme corresponding to the general telephone switching network (or intelligent network). It is preferable to transmit and receive at least one voice data.

According to another embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the communication processor 340 transmits and receives at least one voice data encoded by a corresponding encoding scheme corresponding to the mobile communication network. It is desirable to.

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a VoIP network, the communication processor 340 transmits and receives at least one voice data encoded by an encoding scheme corresponding to the VoIP network. It is preferable.

In addition, when it is possible to add (or assign) a predetermined data channel to the voice call channel, the communication processor 340 assigns a predetermined data channel to the voice call channel connected through a predetermined telephone network and / or a VoIP network. Add (or assign) and perform data communication with at least one other call terminal (or server) 100 to which the call channel is connected through the added (or assigned) data channel.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or an intelligent network), the communication processing unit 340 uses a predetermined data channel defined in the general telephone switching network (or an intelligent network). In addition to (or assigning) to the voice call channel, it is preferable to perform predetermined data communication with the at least one other call terminal (or server) 100 connected with the call channel through the data channel, in addition to the voice call. .

According to another embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the communication processing unit 340 adds (or assigns) a predetermined data channel defined in the mobile communication network to the voice call channel. In addition to the voice call, it is preferable to perform predetermined data communication with at least one other call terminal (or server) 100 to which the call channel is connected through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses the VoIP network, the communication processing unit 340 adds a predetermined data channel defined in the VoIP network to the voice call channel (or And a predetermined data communication in addition to the voice call with at least one other call terminal (or server) 100 to which the call channel is connected through the data channel.

In addition, the communication processor 340 connects at least one terminal (or server) 100 and a predetermined data channel (or communication channel) through a predetermined telephone network and / or a VoIP network independently of the voice call channel. Characterized in that the predetermined data communication with at least one terminal (or server) 100 through the data channel (or communication channel).

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the communication processing unit 340 is a predetermined data communication standard defined in the general telephone switching network (or intelligent network). According to at least one terminal (or server) 100 is preferably connected to a predetermined data channel (or communication channel), at least one terminal (or server) through the data channel (or communication channel) 100 ) Performs a predetermined data communication.

According to another exemplary embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the communication processor 340 may include at least one terminal according to a CDMA stack based data communication standard defined in the mobile communication network. Or a server) 100 and a predetermined data channel (or communication channel), and communicate data with at least one terminal (or server) 100 through the data channel (or communication channel). Perform.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a VoIP network, the communication processing unit 340 may include at least one or more data according to a VoIP protocol stack based data communication standard defined in the VoIP network. It is preferable to connect a terminal (or server) 100 and a predetermined data channel (or communication channel), and at least one terminal (or server) 100 and predetermined data through the data channel (or communication channel). Perform communication.

According to the present invention, the call terminal 300 is a card reader unit 325 for reading predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 300 according to the present invention. It is characterized by comprising a).

That is, the customer receiving payment processing using the call terminal 300 according to the present invention through the call terminal 300, based on the ISO / IEC 7810 standard MS (Magnetic Stripe) card, and / or ISO / IEC Have (or own) a contact IC card (or wireless IC chip) based on the 7816 standard and / or at least one contactless IC card (or wireless IC chip) based on the ISO / IEC 14443 standard. The card reader 325 may provide an interface for reading at least one or more payment means information from the customer-owned card.

According to the method of the present invention, the card reader unit 325 is an MS reader unit for providing an interface between the MS card and the call terminal 300, and / or the contact IC card and the call terminal 300. And a contact IC reader unit for providing an interface, and / or a contactless IC reader unit for providing an interface between the contactless IC card and the call terminal 300.

The MS reader unit is a card reader unit 325 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. It is characterized by interfacing the predetermined payment means information to the call terminal 300 from at least one track (for example, track II area) provided in the MS of the MS card by using the loading.

The contact IC reader unit is a card reader unit 325 based on ISO / IEC 7816. The contact IC reader unit may include at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It is included, the power supply to the IC chip of the IC card through the contact point, and predetermined payment means information from the IC chip through the half-duplex transaction using an APDU (Application Protocol Data Unit) It characterized in that the interface to the call terminal 300.

The contactless IC reader unit is a card reader unit 325 based on ISO / IEC 14443. The contactless IC reader unit uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, and calls the predetermined payment means information from the IC chip through the half-duplex transaction using the APDU It is characterized in that the interface to the terminal 300.

According to the method of the present invention, the card reader unit 325 is credit card payment means information, and / or check card payment means information from the customer-owned card for payment processing using the call terminal 300, and / Or it is preferable to read at least one or more of the debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information.

According to the present invention, the call terminal 300 is a predetermined payment approval request text including predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 300 according to the present invention. A security application module for managing a function of generating and transmitting a payment approval message corresponding to the payment approval request message from the server 100 through the telephone network and / or the VoIP network and transmitting the same to the server 100 345 (Secure Application Module; SAM) characterized in that comprises a.

The Secure Application Module (345) is a confidentiality and / or authentication required by the call terminal 300 in the process of performing the electronic payment and / or electronic payment using the card. And / or security requirements, including integrity and / or nonrepudiation, can be secured within the call terminal 300 without using an authentication server (or payment server 200) on the network. As a safety device for performing a reliable structure, a predetermined message (information or data) processed in the process of the call terminal 300 performing a predetermined security request function (for example, electronic payment and / or electronic payment function). Encrypt or decrypt, add an authenticator to prevent forgery (or tampering) of the message, or store important information in the process of performing the security request function. It is characterized in that it performs a function.

In general, the security application module 345 is preferably composed of a predetermined security application module 345 inserter and security application module 345 chip, the security application module 345 chip is a chip containing at least 8-bit CPU IC cards in the form of Application Specific Integrated Circuit (ASIC) chips (e.g., PLCC 44-pin chips) and / or IC chips (e.g., SIM (Subscriber Identity Module)) with more than 2 Million Instructions Per Second (MIPS) performance It is preferable to comprise).

In addition, the security application module 345 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value, etc.) required for the call terminal 300 to perform a predetermined security request function. ) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, previous transaction cancellation protocols, collection protocols, SAM issuance protocols, (e-money company / card company) Registration protocol, authorization protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / disposal / initialization) / Reprocessing / cancellation command).

Referring to FIG. 3, the call terminal 300 includes a mode checking unit 355 for checking an operation mode of the call terminal 300 for payment processing using the call terminal 300 according to the present invention. When the call terminal 300 is in the payment mode using the call terminal 300 according to the present invention as a result of the check by the mode confirming unit 355, a predetermined payment is made from a predetermined customer-owned card through the card reader unit 325. An information reading unit 360 for reading the means information, and the payment means information to the predetermined key signal tone through the tone processing unit 335 to transmit to the server 100 through the communication processing unit 340 An information transmission unit 375 is provided.

In addition, the call terminal 300 further includes an information processing unit 365 for processing a number arrangement (and / or number structure) to prevent the payment means information is intercepted and / or intercepted and / or hacked Characterized in that made.

In addition, the call terminal 300 is characterized in that it further comprises an encryption processing unit 370 for encrypting in a predetermined encryption method in order to prevent the payment means information is intercepted and / or intercepted and / or hacked.

The mode checking unit 355 checks whether an operation mode of the call terminal 300 is a voice call mode, a voice call / data communication mode, or a data communication mode.

In addition, when the operation mode of the call terminal 300 is a voice call mode, the mode checker 355 determines whether the voice call mode is a simple voice call mode or a voice call-based payment processing mode according to the present invention. Characterized in that.

If the check result is that the operation mode of the call terminal 300 is a voice call-based payment processing mode, the mode check unit 355 is a customer through the screen output unit 320 (and / or voice processing unit 315) By requesting the owning card to be interfaced through the card reader unit 325, the information reading unit 360 processes to read predetermined payment means information from the customer owned card through the card reader unit 325.

According to an exemplary embodiment of the present invention, the server 100 generates and transmits a predetermined key ring tone promised to switch from the simple voice call mode to a voice call-based payment processing mode from the call terminal 300 to the call terminal 300. It is possible to remotely switch the operation mode of the call terminal 300 from the simple voice call mode to the voice call based payment processing mode that provides the payment processing function using the call terminal 300 according to the present invention.

As a result of the check by the mode checking unit 355, when the call terminal 300 is in the payment mode using the call terminal 300 according to the present invention, the information reading unit 360 uses the card reader unit 325. And reading predetermined payment means information from a predetermined customer-owned card, wherein the payment means information includes credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and And / or at least one of prepaid card payment means information, and / or bank transfer payment means information.

According to an embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information In the case of payment means information, the payment means information read out by the information reader 360 through the card reader 325 includes at least one or more number arrays such as a 16-digit card number and / or an expiration date. It is preferable to make it.

In addition, when the payment means information corresponds to the account transfer payment means information, the payment means information read out by the information reader 360 through the card reader 325 is a 16-digit account number and / or branch number It is preferable to include at least one or more number arrangements, such as.

That is, the payment means information read by the information reading unit 360 is a combination of numbers that allow the signal processing unit 335 to generate a predetermined key ring tone in a complex frequency code (DTMF) manner.

The information transmission unit 375 processes the payment means information read by the information reader 360 into a predetermined data structure standard promised with the server 100, and the payment means information corresponding to the data structure standard. To generate a predetermined key ring tone through the tone processing unit 335, and transmits to the server 100 through the communication processing unit 340.

For example, if the payment means information read by the information reader 360 is credit card payment means information, the information transmission unit 375 has a data structure such as "1234123412341234 * 0407". Where "1234123412341234" corresponds to a 16-digit card number, "0407" corresponds to an expiration date corresponding to "month / year" for 2 digits each, and "*" distinguishes the card number from the expiration date. The credit card payment means information is processed by the tone processing unit 335 as a key tone corresponding to a complex frequency code method, and is transmitted to the server 100 through the communication processing unit 340. .

According to an embodiment of the present invention, the information transmitter 375 may further include a predetermined checksum in the payment means information to prevent a transmission / reception error caused by noise during transmission and reception through a key tone. As a result, a transmission / reception error regarding the payment means information can be prevented.

However, such payment means information may be exposed to eavesdropping and / or eavesdropping and / or hacking, and to prevent this, the processing unit is a combination of the numbers included in the payment means information in the server 100 originally; Characterized in that the processing process to a data structure capable of restoring the payment means information of the, characterized in that the processed payment means information is restored to the original payment means information in the server (100).

For example, if the payment means information read out by the information reader 360 is credit card payment means information, then the credit card payment means information is a 16-digit card number such as "1234123412341234" and "0407". And a four-digit validity period, wherein the processing unit performs a bit operation (for example, an XOR operation) on the 16-digit card number with a predetermined 16-byte key value, such as an entirely different 16-digit number such as "1357246714692358". After generating the card number, the four-digit expiration date is combined to process payment means information such as "1357246714692358 * 0407", and the processed payment means information is "1234123412341234 * 0407" in the server 100. The same original payment method information is restored.

Of course, the method of processing the payment means information in the present invention is not limited to the above-described method, the above-described method is to the person having ordinary knowledge in the art to which the present invention belongs It is only one means for explaining the technical characteristic to process efficiently.

Alternatively, in order to prevent the payment means information from being exposed to eavesdropping and / or interception and / or hacking, the encryption processing unit 370 may encrypt the payment means information using a predetermined encryption method. The encrypted payment means information is decrypted by the server 100 in a predetermined decryption method corresponding to the encryption method.

According to an embodiment of the present invention, in order to transmit the encrypted payment means information to the server 100 in the form of a key tone, the encryption processing unit 370 encrypts the encrypted payment means information to be represented by a predetermined number. It is desirable to.

For example, if the payment means information read out by the information reader 360 is credit card payment means information, then the credit card payment means information is a 16-digit card number such as "1234123412341234" and "0407". It includes a four-digit validity period, the encryption processing unit 370 encrypts the 16-digit card number by a predetermined encryption method to generate a completely different 16-digit card number, such as "2472354698671135", and the "0407" Combining the four-digit expiration date, such as "2472354698671135 * 0407" generates encrypted payment means information, such as the encrypted payment means information is decrypted by the server 100, the original payment, such as "1234123412341234 * 0407" The means information is restored.

Of course, the method of encrypting the payment means information in the present invention is not limited to the above-described manner, the illustrated method is to encrypt the payment means information to those of ordinary skill in the art to which the present invention belongs It is only one means for effectively explaining the technical characteristics.

According to another exemplary embodiment of the present invention, when it is difficult for the encryption processing unit 370 to encrypt the payment means information in the form of a number, the encryption processing unit 370 converts the encrypted payment means information in the form of a key tone. It is preferable to convert the encrypted payment means information to a number for transmission to the server 100.

For example, the encryption processing unit 370 may divide the encrypted payment means information by three bits, and convert the three bits into numbers of "0 to 7", whereby the encrypted payment means information is a key. It is transmitted to the server 100 in the form of a beep.

In addition, the encryption processing unit 370 may divide the encrypted payment means information by two bytes, and convert the two bytes into numbers up to five digits (for example, "0 to 65535"). The encrypted payment means information is transmitted to the server 100 in the form of a key tone.

Of course, in the present invention, the method of converting the encrypted payment means information in the form of key tones and converting it into a predetermined number for transmission to the server 100 is not limited to the illustrated method, and the illustrated method is One means for efficiently explaining the technical feature of converting the encrypted payment means information to a number for transmission to the server 100 by processing the encrypted payment means information in the form of a key tone to those skilled in the art to which the present invention pertains It's just

4 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

More specifically, Figure 4 is an embodiment of the MS card for storing the payment means information read from the customer-owned card through the card reader provided in the predetermined call terminal 300, shown in Figure 4 for convenience The MS card shows a case in which an MS card having a Track I storage area, a Track II storage area, and a Track III storage area stores payment means information according to the present invention in the Track II storage area. Those of ordinary skill in the art may refer to and / or modify this drawing 4 to provide credit card payment means information, and / or check card payment means information, and / or debit in the Track II storage area of the MS card. Card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is provided in the Track I storage area and / or Track III storage area. It is possible to infer various implementation methods for storing the present invention, but the present invention includes all implementation methods inferred from the above, and is not limited to the implementation methods illustrated in FIG.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 4, the payment means information providing the payment processing function using the call terminal 300 according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area. do.

5 is a view showing an IC card in which predetermined payment means information is stored according to one embodiment of the present invention.

In more detail, Figure 5 is an embodiment of the IC card for storing the payment means information read from the customer-owned card through the card reader provided in the predetermined call terminal 300, this figure 5 for convenience A case of storing the payment means information according to the present invention in the memory of the type IC card, and those skilled in the art to which the present invention pertains, the IC card by referring to and / or modified in Figure 5 Various implementation methods for storing credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or wire transfer payment method information in a memory of It may be inferred that, but the present invention includes all the implementation method inferred above, and is not limited to the implementation method illustrated in FIG.

With reference to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip's IC chip may include power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), and programming. I / O interfaces for communicating with (eg, exchanging commands or data) the call terminal 300 through contact points such as power supply (VPP) and / or input / output (I / O), CPU (Central Process Unit), MPU ( A processor unit including at least one computing element including a micro process unit, a coprocessor, and the like, a read only memory (ROM), a random access memory (RAM), and an electrically erasable and programmable read only (EEPROM). And a memory unit 350 including at least one memory element including a memory, a flash memory, and the like. In particular, at least one of the memory elements (eg, a ROM) manages internal resources of the IC card. And operating chip A Chip Operating System (COS) is stored, and when a predetermined power is supplied from the call terminal 300 through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory unit 350 is executed. Loaded into memory to control the overall operation of the IC chip, and communicates with the IC chip through an APDU (Application Protocol Data Unit) based on the clock frequency (eg, 3.57 MHz or 4.9 MHz) of the clock signal (CLK) contact point. Controls information or data exchange between the terminals 300.

According to the present invention, the memory unit 350 of the IC chip terminates at least one or more programs of the programs loaded and loaded in the card terminal, and drives a specific program among a plurality of programs stored in the card terminal, Or card storage information for executing a function of converting a screen configuration and / or a function set in the card terminal into a specific screen configuration and / or a specific function, wherein the card storage information is stored by the terminal program. A data unit for storing a data set corresponding to predetermined information or data to be read and read and / or used, and operated or executed by an arithmetic function of the processor unit and an instruction set provided by a COS. Program routines used by the programmer (eg Javacard) An applet (JAVA Applet) is provided with a processing unit corresponding to an application including an instruction call code that interacts with the instruction set of the COS and an execution code that is processed by a processor unit. Read a command provided from the terminal program via an input / output interface, and read or write at least one or more information or data stored in the data unit based on the read command, and as a result or read information or data It is characterized in that to provide to the terminal program via the input and output interface through the APDU.

According to a preferred embodiment of the present invention, the memory unit 350 of the IC chip includes a security structure based on ISO / IEC 10202. Accordingly, the memory unit 350 may include a CSN (Chip Serial Number) and the like. It consists of a protected area where the same secret information is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the like. It is preferably stored in an area excluding the protection area and the COS control area.

In addition, according to ISO / IEC 7816 and / or ISO / IEC 14443 ICC standard, the memory unit 350 includes one master file (MF) corresponding to a root file and a lower subordinate to the master file. At least one Dedicated File (DF) corresponding to each ICC stored information, and at least one Dedicated File (DF) corresponding to each ICC stored information; It includes a file structure consisting of an element file (EF) containing the actual information and / or data for the smart card service, the card storage information for the present invention also includes the file structure as described above.

Referring to FIG. 5 according to an embodiment of the present invention, the data unit of the card storage information may store at least one payment means information for payment processing using the call terminal 300 according to the present invention. The payment method information may be at least one of credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. It is made, including.

6 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in the call terminal 300 according to an embodiment of the present invention.

In more detail, Figure 6 relates to an embodiment of the present invention for encrypting and transmitting the payment means information in a symmetric key (or secret key) method in the call terminal 300 with the encryption function as shown in Figure 3, the present invention If one of ordinary skill in the art, with reference to the Figure 6 and / or modified in the call terminal 300 on the telephone network and / or VoIP network the payment means information in a symmetric key (or secret key) method Various implementation methods of encryption may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 6 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read out from the official certificate provided in the call terminal 300, the official certificate to the call terminal 300 Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or in the call terminal When a predetermined IC card reader is provided at 300, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit 350 provided in the call terminal 300 in addition to the public certificate, and / or the call terminal from the server 100 It may be included in the interface screen provided to 300, and / or embedded in the communication program to communicate with the server 100 on the call terminal 300, thereby the anti-invention is not limited.

Referring to FIG. 6, when predetermined payment means information is read from the information reader 360 of the call terminal 300, the predetermined payment means information is provided to the cryptographic processor 370 (600). The encryption processing unit 370 reads a predetermined symmetric key (or secret key) for encrypting payment means information from an authorized certificate provided in the call terminal 300 (605), and reads the read symmetric key (or Secret key) to encrypt the payment means information (610).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the symmetric key (or secret key) is k (key), the payment means information P (Plaintext), and the symmetric key (or secret). If the payment means information encrypted with the key) is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Ek (P) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, It is preferable to include at least one or more of the International Data Encryption Algorithm (IDEA), and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the payment means information is encrypted through the symmetric key (or the secret key) as described above, the encryption processing unit 370 converts the encrypted payment means information into a number that can be processed in the form of key tones, the ring tone processing unit 335 615, the tone processing unit 335 generates a key tone corresponding to the encrypted payment means information in a complex frequency code method (620), and then the server 100 through the communication processing unit 340. And transmit (625).

7 is a diagram illustrating a method of decrypting the payment means information encrypted and received by the server 100 in a symmetric key (or secret key) manner according to an embodiment of the present invention.

In more detail, Figure 7 is a symmetric key (or secret key) method in the server 100 as shown in Figure 1 to the payment means information received encrypted from the call terminal 300 with the encryption function as shown in Figure 3 As an embodiment of the present invention, the present invention includes a method of decrypting the encryption in the call terminal 300 on the telephone network and / or the VoIP network by referring to and / or modifying the present invention. Although various embodiments of the present invention may be inferred from the method of decrypting the payment means information by a symmetric key (or secret key) method, the present invention includes all of the inferred implementation methods and is not limited to the implementation method illustrated in FIG. No.

In this figure 7 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the server 100, the public certificate is linked to the server 100 It is preferably stored in a predetermined database (not shown), and the present invention is not limited thereby.

Referring to FIG. 7, the information receiver 125 of the server 100 is received in the form of a key tone through the telephone network and / or the VoIP network in cooperation with the tone processing unit 120 provided in the server 100. The encrypted payment means information is extracted and provided to the decryption unit 155 (700). The payment means information is preferably received through a communication protocol stack defined in the telephone network and / or the VoIP network.

Thereafter, the decryption unit 155 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment means information from the authorized certificate provided in the server 100 (705), and the extracted symmetry. The encrypted payment means information is decrypted using a key (or secret key) (710).

Here, the decryption function of the decryption unit 155 is called D (Decryption), and the payment means information encrypted with the symmetric key (or secret key) with k (key) and the symmetric key (or secret key) with C ( Ciphertext) and the decrypted payment means information is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 155 is " Dk = P, or Dk (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, an algorithm for decrypting the encrypted payment means information by the decryption unit 155 through the symmetric key (or secret key) may include SEED, DES (Data Encryption Standard), Triple-DES, At least one of Skipjack and International Data Encryption Algorithm (IDEA) is preferably included. Various types of decryption algorithms may be used, but the decryption algorithm matches the encryption algorithm used in the call terminal 300. The present invention is not limited to the specific decoding algorithm.

When the payment means information encrypted through the symmetric key (or secret key) as described above, the decrypting unit 155 provides the decrypted payment means information to the full text generation unit 130 (715), The full text generation unit 130 performs the full text creation procedure defined in the server 100 using the payment means information.

8 is a diagram illustrating a method of encrypting and transmitting payment means information in a public key infrastructure structure in a call terminal 300 according to an embodiment of the present invention.

In more detail, FIG. 8 is an embodiment of the present invention for encrypting and transmitting the payment means information in a public key infrastructure structure in a call terminal 300 having an encryption function as shown in FIG. 3. In the art, various embodiments of the present invention can be inferred by referring to and / or modifying the drawing of FIG. 8 to encrypt the payment means information in a public key manner in the call terminal 300 on the telephone network and / or the VoIP network. As will be appreciated, the invention encompasses all of the inferred practice methods, and is not limited to the practice method shown in FIG.

In this figure 8 according to the embodiment of the present invention, the public key of the server 100 is preferably read from the public certificate provided in the call terminal 300, and the public certificate is provided to the call terminal 300. Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or in the call terminal When a predetermined IC card reader is provided at 300, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server 100 side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the public certificate to the call terminal 300, whereby the present invention It is not limited.

Referring to FIG. 8, when the information reading unit 360 of the call terminal 300 reads predetermined payment means information, the information is provided to the encryption processing unit 370 (800). The encryption processing unit 370 extracts a predetermined server 100 side public key for encrypting the payment means information from the authorized certificate (805), and performs the payment through the extracted server 100 side public key. The means information is encrypted (810).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the public key k1 (key) on the server 100 side, the payment information P (Plaintext), and the server 100 side When the payment means information encrypted with the public key is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by a formula such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital). Signature Algorithm (DH), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithm may be used, but specific encryption algorithm The present invention is not limited by the.

For example, in the case of encrypting the payment means information through the RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by different prime factors of n and a b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment means information is encrypted through the server 100 side public key as described above, the encryption processing unit 370 converts the encrypted payment means information into a number that can be processed in the form of key tones, the signal tone processing unit 335 (815), and the tone processing unit 335 generates a key tone corresponding to the encrypted payment means information in a complex frequency code method (820), and then through the communication processing unit 340, the server 100 825.

9 is a diagram illustrating a method of decrypting payment means information encrypted and received by the server 100 according to an embodiment of the present invention using a public key infrastructure.

In more detail, FIG. 9 illustrates a method of decrypting the payment means information received from the call terminal 300 having the encryption function as shown in FIG. 3 in a public key infrastructure scheme in the server 100 as shown in FIG. As to the implementation method, if the skilled in the art to which the present invention pertains, the server 100 in the call terminal 300 on the telephone network and / or VoIP network with reference to and / or modifying this figure 9 Various implementation methods for decrypting the payment means information encrypted with the public key infrastructure may be inferred, but the present invention includes all the inferred implementation methods and is limited to the implementation method shown in FIG. Not.

In the figure 9 according to the embodiment of the present invention, the server 100 side private key for decrypting the payment means information encrypted with the server 100 side public key is provided in the server 100. It is preferable that the public certificate is read from the public certificate, and the public certificate is preferably stored in a predetermined database (not shown) interworking with the server 100, and the present invention is not limited thereto.

Referring to FIG. 9, the information receiver 125 of the server 100 is received in the form of a key tone through the telephone network and / or the VoIP network in cooperation with the tone processing unit 120 provided in the server 100. The encrypted payment means information is extracted and provided to the decryption unit 155 (900). The payment means information is preferably received through a communication protocol stack defined in the telephone network and / or the VoIP network.

Thereafter, the decryption unit 155 extracts a private key of the server 100 for decrypting the encrypted payment means information from the authorized certificate provided in the server 100 (905), and the extracted server 100. The encrypted payment means information is decrypted using the side private key (910).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), the server 100 private key k2 (key), and the payment method information encrypted with the server 100 public key C (Ciphertext). ) And the payment means information decrypted with the private key of the server 100 is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 155 is "Dk2 = P, or Dk2 ( Ek (P)) = P ".

According to an embodiment of the present invention, the decryption unit 155 decrypts the payment means information encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100, It is preferable to include at least one of RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, In addition to this, various types of decryption algorithms may be used, but the decryption algorithm is matched with an encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the payment means information through the RSA decryption algorithm of the public key based decryption algorithm, n is a public method (Modulus) used in the decryption process, n, a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e, the undisclosed index is d, the n satisfies "n = a * b", d is "de = 1 mod (a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dk2 = Cd mod n ".

As described above, when the payment means information encrypted with the public key of the server 100 in the call terminal 300 is decrypted through the server 100 side private key, the decryption unit 155 reads the decrypted payment means information. Provided to the full text generation unit 130 (915), the full text generation unit 130 performs the full text generation procedure defined in the server 100 using the payment means information.

10 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal 300 according to an embodiment of the present invention.

More specifically, FIG. 10 is an embodiment of the present invention for encrypting and transmitting the payment means information in an electronic envelope method in the call terminal 300 having an encryption function as shown in FIG. If the knowledge of the present invention can be inferred by referring to and / or modifying the drawing 10 and various implementation methods for encrypting the payment means information in an electronic envelope method in the call terminal 300 on the telephone network and / or VoIP network. However, the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

In this figure 10 according to the embodiment of the present invention, the public key of the server 100 is preferably read from the public certificate provided in the call terminal 300, and the public certificate is provided to the call terminal 300. Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or in the call terminal When a predetermined IC card reader is provided at 300, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server 100 side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the public certificate to the call terminal 300, whereby the present invention It is not limited.

Referring to FIG. 10, when the information reading unit 360 of the call terminal 300 reads predetermined payment means information, the information is provided to the encryption processing unit 370 (1000). The encryption processing unit 370 generates a random secret key for encrypting the payment means information using a secret key (symmetric key) method (1005), and generates the generated secret key. The payment means information is encrypted (1010).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the secret key is r (random secret key), the payment means information P (Plaintext), and the payment means information encrypted with the secret key Suppose C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by a formula such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption) It is preferable to include at least one of the algorithm (Algorithm), and various forms of encryption algorithm may be used, but the present invention is not limited by a specific encryption algorithm.

Thereafter, the encryption processing unit 370 encrypts the secret key (random secret key) used to encrypt the payment means information. To this end, the encryption processing unit 370 discloses a predetermined server 100 from the public certificate. The key is extracted (1015), and the private key is encrypted using the public key of the server 100 (1020).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the public key on the server 100 side is k1 (key), the secret key is r (random secret key), and the server 100 If the secret key encrypted with the side public key is C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by a formula such as "Ek1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the secret key through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature). Algorithm, DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithms may be used, but in a specific encryption algorithm The present invention is not limited by this.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Ek1 (r) = re mod n ".

If the payment means information is encrypted with the secret key, and the secret key is encrypted through the public key on the server 100 side, the encryption processing unit 370 is the payment means information and the server 100 encrypted with the secret key. Generate transaction data associated with the secret key encrypted with the side public key, convert the transaction data into a number that can be processed in the form of key tones, and provide it to the tone processing unit 335 (1025), and the tone processing unit 335 After generating a key signal sound corresponding to the transaction data in a complex frequency code method (1030), and transmits to the server 100 through the communication processing unit 340 (1035).

11 is a diagram illustrating a method of decrypting payment means information encrypted and received by the server 100 according to an embodiment of the present invention by an electronic envelope method.

In more detail, in FIG. 11, the transaction data is transmitted from the server 100 as shown in FIG. 1 to receive transaction data including encrypted payment means information from the call terminal 300 having the encryption function as shown in FIG. 3. As an embodiment of the present invention, a method of decrypting by an envelope method, and having ordinary skill in the art to which the present invention pertains, will be described with reference to FIG. 11 and / or modified in the call terminal 300 on the telephone network and / or the VoIP network. Various implementation methods for decrypting the transaction data encrypted by the electronic envelope method may be inferred by the same electronic envelope method, but the present invention includes all the inferred implementation methods and is limited to the implementation method shown in FIG. Not.

In this figure 11 according to the embodiment of the present invention, the private key of the server 100 for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate provided in the server 100. The certificate is preferably stored in a predetermined database (not shown) that cooperates with the server 100, whereby the present invention is not limited.

Referring to FIG. 11, the information receiver 125 of the server 100 is received in the form of a key tone through the telephone network and / or the VoIP network in cooperation with the tone processing unit 120 provided in the server 100. Extracts predetermined transaction data including encrypted payment means information and provides it to the decryption unit 155 (1100), wherein the transaction data is received through a communication protocol stack defined in the telephone network and / or VoIP network. It is preferable.

Thereafter, the decryption unit 155 extracts the private key of the server 100 for decrypting the encrypted secret key included in the transaction data from the public certificate provided in the server 100 (1105), and extracts the private key. Decrypting a secret key encrypted by the server 100 side public key in the call terminal 300 through the private key of the server 100 side 1110, extracts a predetermined secret key for decrypting the payment means information In operation 1115, the payment means information is decrypted using the extracted secret key (1120), and the payment means information encrypted with the secret key is extracted from the call terminal 300 (1125).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), the private key encrypted with the server 100 private key k2 and the public key encrypted with the server 100 C (Ciphertext) And a secret key decrypted with the private key of the server 100 is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 155 is " Dk2 = r, or Dk2 (Ek1). It can be expressed by an expression such as (r)) = r ".

According to the exemplary embodiment of the present invention, the decryption unit 155 decrypts the secret key encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100, the RSA. (Ron Rivest, Adi Shamir, Len Adleman), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although various types of decryption algorithms may be used, the decryption algorithm is matched with an encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the decryption unit 155 is called D (Decryption), the secret key is r (random secret key), the payment means information encrypted with the secret key (C (Ciphertext)), and the decrypted When the payment means information is called P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 155 may be expressed by an expression such as "Dr = P, or Dr (Er (P)) = P". Can be.

According to an embodiment of the present invention, the decryption unit 155 decrypts the encrypted payment means information using the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International). It is preferable to include at least one or more of the Data Encryption Algorithm, and in addition to the decryption algorithm of various forms may be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 300 However, the present invention is not limited to the specific decoding algorithm.

When the payment means information is decrypted as described above, the decoding unit 155 provides the decrypted payment means information to the full text generation unit 130 (1130), the full text generation unit 130 is the payment means information Perform the full text generation procedure defined in the server 100 using.

12A and 12B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a call terminal 300 according to an embodiment of the present invention.

12A and 12B illustrate a method of encrypting and transmitting the payment means information in a key exchange method in a call terminal 300 having an encryption function as shown in FIG. In the art, various embodiments of the present invention can be inferred by referring to and / or modifying the drawing of FIG. 12 to encrypt the payment means information in a key exchange method in the call terminal 300 on the telephone network and / or the VoIP network. As will be appreciated, the present invention encompasses all of the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

In the figure 12 according to the embodiment of the present invention, the terminal-side private key and the server 100-side public key are preferably read from the public certificate provided in the call terminal 300, the public certificate is the call Stored in a predetermined memory unit 350 provided in the terminal 300, and / or stored in an ID-000 type IC chip (or IC card) mounted or detached from the call terminal 300, and / Or the predetermined number of IC card reader is provided in the call terminal 300 can be stored in the IC card to be inserted into the IC card reader, it is not limited by the present invention.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate to the call terminal 300. Thereby, this invention is not limited.

12A and 12B, when the information reading unit 360 of the call terminal 300 reads predetermined payment means information, the information is provided to the encryption processing unit 370 (1200). If is provided, the encryption processing unit 370 is a message digest containing a predetermined one-way hash function (for example, a hash code of a predetermined length regardless of the length of the payment means information) Message Digest (Message Digest) ) And a one-way hash function that cannot identify (or infer) the original message via the hash code (or message digest.) The call terminal 300 and the server 100 have the same hash function. Generate a predetermined message digest (1205), and digitally sign the message digest by encrypting the message digest with the terminal-side private key (1210).

Herein, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the terminal-side private key is t1 (13erminal side key), the message digest is m (message digest), and the terminal-side private key is encrypted. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 370 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the message digest through the terminal-side private key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm, among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the undisclosed prime numbers with different prime factors of n are a and a. b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the digital signature function of the encryption processing unit 370 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 370 generates a predetermined random secret key for encrypting the payment means information by a secret key (symmetric key) method (1215), and the payment means information and The message digest encrypted with the terminal-side private key and a copy of a certificate (eg, a certificate including a terminal-side public key) included in the public certificate are linked to each other and encrypted through the generated secret key (1220).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the secret key is r (random secret key), the payment means information and the copy of the certificate P (Plaintext), and the encrypted payment with the secret key If the means information and the copy of the certificate are referred to as C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by an equation such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 370 extracts a predetermined server 100 side public key from the authorized certificate in order to encrypt the secret key that encrypts the payment means information (1225), and discloses the server 100 side. The secret key encrypting the payment means information is encrypted using a key (1230).

Here, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the server 100 public key is s1 (server side key), the secret key is r (random secret key), and the server ( If the secret key encrypted with the public key of side 100 is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the secret key through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature). Algorithm, DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithms may be used, but in a specific encryption algorithm The present invention is not limited by this.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Es1 (r) = re mod n ".

The payment method information, the message digest encrypted with the terminal-side private key, and a copy of the certificate including the terminal-side public key are linked to each other, encrypted using the generated secret key, and the secret key is disclosed to the server 100. When encrypted with a key, the encryption processing unit 370 may include a copy of a certificate including the message digest encrypted with the private key and the message digest encrypted with the terminal-side private key, and the terminal-side public key. 100) generates predetermined transaction data in association with the secret key encrypted with the public key on the side, converts the transaction data into a number that can be processed in the form of a key tone, and provides the transaction signal to the tone processing unit 335 (1235). After the beep processor 335 generates a key beep corresponding to the transaction data in a complex frequency code method (1240), And it transmits it to the server 100 through the group communication processing unit 340 (1245).

13A and 13B illustrate a method of decrypting payment means information encrypted and received by the server 100 by a key exchange method according to an embodiment of the present invention.

In more detail, FIGS. 13A and 13B are views of the server 100 as shown in FIG. 1 that receives transaction data including encrypted payment means information from a call terminal 300 having an encryption function as shown in FIG. The present invention relates to a method for decrypting transaction data by a key exchange method. If the present invention belongs to one of ordinary skill in the art, a call terminal on the telephone network and / or VoIP network will be described with reference to FIG. Although it is possible to infer various implementation methods for decrypting the transaction data encrypted by the key exchange scheme in the same key exchange scheme at 300, the present invention includes all the inferred implementation methods, as shown in FIG. It is not limited to implementation method.

In FIG. 13 according to an embodiment of the present invention, the server 100 side private key and the terminal side public key for decrypting the transaction data in a key exchange method are read out from the public certificate provided in the server 100. Preferably, the public certificate is preferably stored in a predetermined database (not shown) interworking with the server 100, whereby the present invention is not limited.

Referring to FIGS. 13A and 13B, the information receiver 125 of the server 100 interlocks with the signal tone processor 120 provided in the server 100 in the form of a key tone through the telephone network and / or the VoIP network. Extract predetermined transaction data including the received encrypted payment means information (1300), and provide the transaction data to the decryption unit 155 (1305), the transaction data is the telephone network and / or VoIP Preferably, a copy of a certificate including the message digest and the terminal-side public key encrypted with the payment means information encrypted with the secret key and the terminal-side private key, and / or received via a communication protocol defined in a network; The server 100 preferably comprises the secret key encrypted with the public key.

Thereafter, the decryption unit 155 extracts the server 100 side private key from the public certificate provided in the server 100 to decrypt the secret key encrypted with the server 100 side public key (1310). Decrypting the private key through the server 100 side private key (1315) to decrypt the certificate copy including the message digest encrypted with the payment means information and the terminal side private key and the terminal side public key; The secret key for the extraction (1320).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), and the private key encrypted with the server side key (s2) and the public key encrypted with the server 100 side C ( Ciphertext) and a secret key decrypted by the server 100 side private key are r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 155 is "Ds2 = r, or Ds2. It can be expressed by an expression such as (Es1 (r)) = r ".

According to the exemplary embodiment of the present invention, the decryption unit 155 decrypts the secret key encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100, the RSA. (Ron Rivest, Adi Shamir, Len Adleman), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although various types of decryption algorithms may be used, the decryption algorithm is matched with an encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the decryption unit 155 copies the certificate including the message digest and the terminal side public key encrypted with the payment means information and the terminal side private key using the extracted secret key. By decrypting (1325), a copy of the certificate including the payment means information encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key is extracted.

Here, the decryption function of the decryption unit 155 is called D (Decryption), and the secret key is r (random secret key), the payment means information encrypted with the secret key, and the message digest encrypted with the terminal-side private key; C (Ciphertext) is a copy of the certificate containing the terminal-side public key, and P (Plaintext) is a copy of the certificate including the message digest encrypted with the decrypted payment means information and the terminal-side private key and the terminal-side public key. , The decrypting unit 155 decrypts the copy of the certificate including the encrypted payment means information, the message digest encrypted with the terminal-side private key, and the terminal-side public key, "Dr = P, or Dr." It can be expressed by an expression such as (Er (P)) = P ".

According to an embodiment of the present invention, the decryption unit 155 decrypts a copy of the certificate including the message digest encrypted with the encrypted payment means information and the terminal-side private key and the terminal-side public key through the secret key. Preferably, the algorithm includes at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA). In addition, various types of decryption algorithms may be used. The decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 300, the invention is not limited by a specific decryption algorithm.

In addition, the decryption unit 155 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (1330), thereby generating and transmitting the message from the payment means information in the call terminal 300. The digest is extracted (1335).

Here, the decryption function of the decryption unit 155 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. If the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the decryption unit 155 is " Dt2 = m, or Dt2 (Es1 (r)) = m " The same formula can be used.

According to an embodiment of the present invention, the decryption unit 155 decrypts the message digest encrypted with the terminal-side private key in the call terminal 300 through the terminal-side public key, RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it can be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 300, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dt2 = Cd mod n ".

Subsequently, the decoder 155 generates a predetermined message digest using the same one-way hash function from the received payment means information (1340), and then generates the generated message digest and the decoded message. By comparing the message digest (1345), the validity of the received payment means information is verified.

If the generated message digest coincides with the decrypted message digest (1350), the decryption unit 155 provides the payment means information to the full text generation unit 130 (1355). 130 performs the full text generation procedure defined in the server 100 using the payment means information.

Figure 14 illustrates a product order and purchase process for payment processing using the call terminal 300 according to an embodiment of the present invention.

In more detail, in FIG. 14, the call terminal 300 shown in FIG. 3 connects to the server 100 shown in FIG. 1 through at least one or more telephone networks and / or VoIP networks to order and purchase certain products. Regarding a process in which payment processing using the call terminal 300 according to the present invention is started through the process, a person having ordinary skill in the art to which the present invention pertains may refer to and / or modify the present invention. A predetermined call terminal 300 connects a call channel for ordering and purchasing a product with a predetermined server 100 through at least one telephone network and / or a VoIP network, and orders and supplies at least one product through the call channel. By purchasing, various implementation methods for initiating payment processing using the call terminal 300 according to the present invention may be inferred, but the present invention includes all the inferred implementation methods. The present invention is not limited to the implementation method shown in FIG.

Hereinafter, in FIG. 14, the call terminal 300 having the card reader shown in FIG. 3 is referred to as a "terminal" for convenience.

Referring to FIG. 14, a terminal complying with the functional configuration shown in FIG. 3 may include at least one telephone network (e.g., a general telephone switching network (or intelligent network), and / or a mobile communication network) and / or a VoIP network (e.g., TCP / IP (And / or UDP / IP) based wired communication network, IEEE 802.16x based portable Internet) connects a predetermined call channel with the server 100 (1400), and provides the server 100 through the call channel. In operation 1405, a procedure for selecting, ordering, and purchasing at least one or more purchased products is performed according to a product ordering procedure.

If the person skilled in the art to which the present invention pertains, the terminal connects a predetermined communication channel with the server 100, and a predetermined product ordering procedure (for example, ARS and / or counselor through the communication channel). As you will be familiar with the key beep based product ordering process through connection, the detailed procedure for this will be omitted for convenience.

During the product ordering process as described above, the server 100 checks whether the payment process for the purchased product (1410), if the payment process for the purchased product is confirmed (1415), the server ( 100 requests to the terminal to read the predetermined payment means information from the customer-owned card through the card reader provided in the terminal through a predetermined voice guidance (1420).

In addition, the server 100 is a predetermined key promised to switch the operation mode of the terminal from the simple voice call mode to a voice call-based payment processing mode that provides a payment processing function using the call terminal 300 according to the present invention. By generating and transmitting a beep (1425), it is possible to remotely switch the operation mode of the terminal to the voice call-based payment processing mode.

15 illustrates a payment means information reading process for payment processing using the call terminal 300 according to an embodiment of the present invention.

In more detail, FIG. 15 shows the call terminal 300 shown in FIG. 3 through at least one telephone network and / or a VoIP network by performing the process shown in FIG. 14 in the server 100 shown in FIG. When requesting the predetermined payment means information, the call terminal 300 reads the predetermined payment means information from the customer-owned card through a predetermined card reader to provide to the server 100, Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 15 to read predetermined payment means information from a predetermined call terminal 300 to establish at least one telephone network and / or VoIP network. It will be possible to infer various implementation methods provided to a predetermined server 100 through the present invention, but the present invention includes all the inferred implementation methods, the implementation method shown in FIG. It shall not be limited.

For example, in FIG. 15, the terminal performs an encryption procedure for predetermined payment means information read from the customer's own card. The encryption procedure is performed to satisfy the high security of the payment means information. As performed, it may be omitted in accordance with the intention of those skilled in the art, whereby the present invention is not limited.

Hereinafter, in FIG. 15, the call terminal 300 having the card reader shown in FIG. 3 is referred to as "terminal" for convenience.

Referring to FIG. 15, the terminal operates the terminal through a call channel corresponding to at least one or more telephone networks and / or VoIP networks by performing the process illustrated in FIG. 14 by the server 100 shown in FIG. In operation 1500, a predetermined key tone is received from the simple voice call mode to a voice call-based payment processing mode that provides a payment processing function using the call terminal 300 according to the present invention.

If a key tone is received to switch the operation mode of the terminal to the voice call based payment processing mode through the call channel (1505), the terminal switches the operation mode to the voice call based payment processing mode using the call channel. 1510, output through a screen output means provided in the terminal to read predetermined payment means information from the customer-owned card through a card reader provided in the terminal, and / or output the voice provided in the terminal Output through means (1515).

After the predetermined payment means information reading is requested from the customer-owned card as described above, the terminal checks whether the predetermined payment means information is read from the customer-owned card through the card reader (1520). If predetermined payment means information is read from the user (1525), the terminal performs an encryption procedure for the read payment means information (1530).

Thereafter, when the payment means information is encrypted (1535), the terminal processes the encrypted payment means information in the form of a key signal tone corresponding to the telephone network and / or VoIP network to transmit to the server 100. (1540).

Figure 16 illustrates a payment approval request full text generation process for payment processing using the call terminal 300 according to an embodiment of the present invention.

In more detail, FIG. 16 shows the server 100 shown in FIG. 1 through at least one telephone network and / or VoIP network by performing the process shown in FIG. 15 in the call terminal 300 of FIG. When the predetermined means for payment information is transmitted to the process for generating a predetermined payment approval request message including the payment means information in the server 100 to process the payment, the general knowledge in the technical field to which the present invention belongs If you have a person with reference to the Figure 16 and / or modified to infer various implementation methods for generating a predetermined payment approval request full text using the payment means information provided from the call terminal 300 in a predetermined server 100 Although the present invention may be implemented, the present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

For example, FIG. 16 illustrates that the terminal performs a decryption procedure on payment means information provided from the call terminal 300. The decryption procedure is performed only when the payment means information is encrypted. It may be omitted depending on the intention, and thereby the present invention is not limited.

In addition, the full text of the payment approval request generated by the server 100 in FIG. 16 is a full credit card payment approval request including the credit card payment means information shown in FIG. 2, which is common in the art. If you have the knowledge, the full check card payment approval request, and / or debit card payment approval request in the server 100 in response to the payment means information provided from the call terminal 300, and / or prepaid card payment It will be possible to infer an implementation method for generating a full approval request, and / or a full account transfer payment approval request, and the like, and the present invention includes all the inferred implementation methods.

Hereinafter, in FIG. 16, the call terminal 300 having the card reader shown in FIG. 3 is referred to as "terminal" for convenience.

Referring to FIG. 16, the server 100 shown in FIG. 1 may perform a process shown in FIG. 15 in the terminal, and may perform a key tone through a call channel corresponding to at least one or more telephone networks and / or VoIP networks. When the predetermined payment means information is received (1600), if the predetermined payment means information is received from the terminal through a call channel corresponding to at least one or more telephone networks and / or VoIP networks (1605), the server 100 ) Checks whether the received payment means information is encrypted, thereby confirming whether the payment means information is decrypted (1610).

If it is confirmed that the payment means information is decrypted (1615), the server 100 performs a decryption procedure on the encrypted payment means information, so that the terminal possesses the customer through a predetermined card reader. The payment method information read from the card is restored (1620).

On the other hand, if it is determined that the payment means information does not need to be decrypted (eg, when the payment means information is not encrypted) 1615 and / or the encrypted payment means information is decrypted, the server 100 After extracting payment information including the merchant information and the total payment amount information to be included in the full payment approval request message from the storage medium 140 (1625), and generating a document serial number to be included in the full payment approval request message (1630). In step 1635, a predetermined payment approval request message including payment means information received from the terminal, merchant information, a total payment amount, and a document serial number are generated.

Thereafter, the server 100 transmits the full payment approval request message to the payment server 200 corresponding to the payment means information through a predetermined network (1640), and the payment server 200 completes the payment approval request message. Receives and reads and performs a payment processing procedure corresponding to the payment means information to generate a predetermined payment processing details (eg, payment processing approval details, or payment processing error details) (1645), and includes the payment processing details. After generating a predetermined payment approval message (1650), the payment approval message is transmitted to the server 100 through the network (1655).

Those skilled in the art to which the present invention pertains, a method for transmitting the full text of the payment approval request from the server 100 to the payment server 200 through a predetermined network, and / or the payment server ( A method of performing a payment processing procedure by reading the full text of the payment approval request at 200), and / or generating a predetermined payment processing history after performing the payment processing procedure at the payment server 200 and generating the payment processing history. Since you will be familiar with how to generate a payment approval message including a transmission to the server 100 through the network, such a detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the payment server 200 may directly transmit the payment approval message (or payment processing details) to the terminal through the telephone network and / or the VoIP network (eg, a payment approval request). The terminal information providing the payment means information in a preamble), and the present invention is not limited thereto.

Figure 17 illustrates a payment approval process for payment processing using the call terminal 300 according to an embodiment of the present invention.

In more detail, in FIG. 17, the server 100 shown in FIG. 1 performs the process shown in FIG. 16 to generate a full payment approval request message corresponding to the payment means information. After performing the payment approval procedure through, when a payment approval message including the payment processing history is received, the process for processing the payment approval message in the server 100, the present invention generally belongs to Those skilled in the art will be able to infer various implementation methods for processing the payment approval full text in a predetermined server 100 by referring to and / or modifying the drawing 17, but the present invention provides a method for inferring the implementation method. All are included and the present invention is not limited to the implementation method shown in FIG.

Hereinafter, in FIG. 17, the call terminal 300 having the card reader shown in FIG. 3 is referred to as "terminal" for convenience.

Referring to FIG. 17, the server 100 shown in FIG. 1 may perform a process shown in FIG. 16 to complete a payment approval message corresponding to the payment approval message from the payment server 200 through a predetermined network. If it is received (1700), if the payment approval message containing the payment processing history corresponding to the payment approval request full text from the payment server 200 through the network (1705), the server 100 is By extracting and reading a predetermined payment processing history from the payment approval full text, it is checked whether payment processing through payment means information provided from the terminal is approved (1710).

If the payment processing through the payment means information provided from the terminal is not approved (1715), the server 100 transmits and outputs the error details of the payment processing to the terminal through a predetermined voice guidance (1720), The payment processing process using the call terminal 300 according to the present invention ends.

On the other hand, when the payment processing through the payment means information provided from the terminal is approved (1715), the server 100 transmits and outputs the payment processing approval details to the terminal through a predetermined voice guidance (1725), By performing an order procedure after the payment processing approval (1730), the payment processing process using the call terminal 300 according to the present invention is completed.

18 is a diagram showing the configuration of a payment system using a call terminal 300 according to another embodiment of the present invention.

In more detail, Fig. 18 shows a telephone order using a voice call through a call terminal 300 equipped with a predetermined card reader, and reads predetermined payment means information from a predetermined customer-owned card through the card reader. As a system configuration for processing a payment corresponding to an order, a person having ordinary skill in the art to which the present invention pertains, various payment system configurations using the call terminal 300 by referring to and / or modifying the drawing 18 It may be inferred that, but the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

That is, in the implementation method illustrated in FIG. 18, a predetermined customer makes a call with a server 100 (eg, an ARS (Automatic Response Service) server 100) provided at a predetermined affiliated store through a predetermined call terminal 300. After connecting a channel, performing a predetermined telephone ordering procedure through the call channel, and receiving predetermined payment means information from a customer-owned card provided with a predetermined payment means through a card reader provided in the call terminal 300. When the data is read and transmitted to the server 100 through the data channel based on the call channel, the server 100 generates a predetermined payment approval request message based on the payment means information, and generates a predetermined network (e.g., And a dedicated communication network connecting the server 100 and the payment server 200) to transmit a payment approval request message to a predetermined payment server 200 to process a payment.

In addition, although the functional component for payment processing using the call terminal 300 according to the present invention is shown in the predetermined server 100 through the embodiment shown in FIG. 18, this is a technical feature of the present invention. The present invention is not limited by this, but the present invention is not limited thereto. The payment processing system using the call terminal 300 according to the present invention includes a plurality of servers (or terminals) 100 having the above-described functional components. The implementation method, and / or the method (or terminal) 100 on the call center system, if the predetermined call center is provided in the affiliated store, the implementation method comprising the functional configuration unit, and / or a predetermined ARS server ( If 100 is already provided, an implementation method of additionally providing the functional configuration unit in the ARS server 100, and / or if a predetermined affiliated store terminal is provided in the affiliated store, In that the terminal can comprise any of the exemplary method comprising a further configuration the function.

The call terminal 300 used by the customer is a wired telephone (and / or a wireless telephone communicating with the radio frequency (RF) with the wired telephone) connected to a public switched telephone network (PSTN), and / or CDMA (Code) Division Multiple Access (Telephone) connected to a stack based mobile communication network (e.g., Personal Communication System (PCS) and / or Global System for Mobile (GSM) terminals), and / or Transmission Control Protocol / Internet Protocol (TCP / IP) And / or at least one VoIP terminal connected to a User Datagram Protocol / Internet Protocol (UDP / IP) based wired communication network and / or a Voice over IP (VoIP) network operating based on an IEEE 802.16x based portable Internet network. Characterized in that made.

In addition, the call terminal 300 may include at least one telephone network (eg, a general switched telephone network (PSTN), and / or a mobile communication network), and / or a VoIP network (eg, a TCP / IP and / or UDP / IP-based wired communication network). And / or a server provided at a merchant through a network in which a Real-time Transport Protocol / RTP Control Protocol (RTP) layer is defined in a transport layer on a protocol stack based on the IEEE 802.16x-based portable Internet. It is characterized in that the connection 100 and the predetermined call channel.

According to an embodiment of the present invention, the general switched telephone network is a recent intelligent network (for example, a communication network connecting a plurality of circuits using at least one or more exchangers) in a conventional intelligent network (for example, interspersed within a communication network). And at least one switch, a service control node, an in-network control database, and the like, which are organically integrated through a common line signal network or data network, and controlled through a computing technology), and / or the intelligent network. In this way, a landline telephone (and / or a radiotelephone in RF communication with the landline telephone) connected to the general telephone switching network (= intelligent network) basically provides a voice call service and also provides a predetermined data channel. Provides data communication (eg, message transmission and reception) services.

In addition, the mobile communication network provides both a CDMA stack-based circuit switched voice call channel and a data channel, whereby a mobile phone connected to the mobile communication network basically provides a voice call service as well as a predetermined data channel. Data communication (eg, wireless message transmission, and / or wireless Internet access, etc.) services.

In addition, the VoIP network basically provides a predetermined RTP / RTCP (Real-) to provide a real-time voice call service to a higher layer of a UDP on a wired / wireless communication network supporting TCP / IP (and / or UDP / IP) supporting data communication. As a communication network defining a time transport protocol / RTP control protocol (Layer) layer, the VoIP network basically provides both a voice call channel and a data channel, whereby a VoIP terminal connected to the VoIP network basically provides a voice call service. Of course, it provides a data communication (eg, message transmission and reception) service through a predetermined data channel.

According to the present invention, the call terminal 300 is a card reader for reading predetermined payment means information from a magnetic stripe (MS) card conforming to the ISO / IEC 7810 standard, and / or a contact type conforming to the ISO / IEC 7816 standard. At least one card reader for reading predetermined payment means information from an IC (Integrated Circuit) card and / or at least one card reader for reading predetermined payment means information from a contactless IC card conforming to ISO / IEC 14443 standard, It is characterized in that the preferred embodiment for this will be described in detail with reference to FIG.

Referring to FIG. 18, the server 100 provided in the affiliated store may communicate with a call terminal 300 used by a customer through at least one or more telephone networks (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network. A call channel processor 105 for connecting a channel, a voice guide unit 115 for providing a predetermined telephone order and voice guidance for payment processing according to the present invention in connection with the call channel processor 105, and the call In response to the voice guidance in conjunction with the channel processing unit 105, a key tone generated by the call terminal 300 is received, and the predetermined tone information is extracted by reading the key tone using a dual frequency multi-frequency code (DTMF) scheme. Characterized in that it comprises a sound signal processing unit 120 to.

The call channel processing unit 105 is assigned a predetermined telephone number for connecting a predetermined call channel with at least one call terminal 300, and corresponds to the telephone network and / or VoIP network based on the telephone number. By performing a predetermined call processing procedure it is characterized in that the at least one or more communication terminals 300 and the communication channel is connected.

Those skilled in the art will be familiar with certain call processing procedures corresponding to the telephone network and / or the VoIP network, and thus a detailed description thereof will be omitted.

The voice guide unit 115 is connected to at least one or more call terminals 300 through the call channel processing unit 105, the customer authentication and / or goods to the call terminal 300 through the call channel Characterized in that it outputs a predetermined voice guidance for order processing, and also outputs a voice guidance for payment processing using the call terminal 300 according to the present invention to the call terminal 300 through the call channel. Characterized in that.

According to an exemplary embodiment of the present invention, the voice guide unit 115 is connected to the call terminal 300 through the call channel based on product information stored in a predetermined storage medium 140 and payment amount information corresponding to the product. Extract a predetermined voice announcement (eg, extract from a predetermined voice announcement storage database (not shown)), and / or generate (for example, create a voice guide comment in a TTS (Text To Speech) method) After that, it is preferable to output the voice announcement to the call terminal 300 through the call channel.

According to another exemplary embodiment of the present invention, the voice guide unit 115 outputs voice guidance of a counselor corresponding to a predetermined call center terminal (and / or affiliated phone) to the call terminal 300 through the call channel. The present invention is not limited thereto.

The signal tone processor 120 reads the key tone using the DTMF scheme when a DTMF tone is generated from the call terminal 300 in response to the voice guidance and is received through the call channel. (Eg, “0 to 9”, “*”, “#”, etc.) are identified and extracted.

In addition, the signal tone processing unit 120 may receive the purchase product information in the form of a key tone signal transmitted from the call terminal 300, the purchase product information is the call terminal (115) through the voice guide unit (115) Purchase product selection information in the form of voice information through a voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), or / or the purchase product selection number corresponding to the voice announcement provided at 300). Preferably, it comprises a, whereby the product information corresponding to the purchase product information (and / or payment amount information associated with the product information) is extracted from the predetermined storage medium 140.

According to another exemplary embodiment of the present invention, the signal processing unit 120 may directly receive predetermined payment amount information (for example, payment amount) transmitted from the call terminal 300, whereby the present invention It is not limited.

In addition, the signal processing unit 120 may further receive a predetermined discount information transmitted from the call terminal 300, the discount information is a coupon number corresponding to a predetermined discount coupon possessed by the customer It is preferable to include, and thereby the payment amount can be discounted.

In addition, the signal processing unit 120 may further receive a predetermined product delivery information transmitted from the call terminal 300, the product delivery information is the call terminal 300 through the inside of the voice (115) The product delivery destination selection number corresponding to the voice announcement (for example, a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement) And delivery address information (eg, in the form of voice information) through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), or / or a detailed address ("address / call") number, etc.). , Customer's address), thereby securing an address to which the purchased product will be delivered.

Those skilled in the art to which the present invention pertains will understand the method for generating the DTMF type key beep and the method for reading and confirming and extracting predetermined information by reading the key beep. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the information extracted based on the key tone of the DTMF method may be extracted through a predetermined data channel based on the call channel instead of the key tone. The present invention is not limited thereby.

According to the present invention, the server 100 provided in the affiliated store connects the call terminal 300 to the voice call channel in association with a telephone network and / or a VoIP network component to which the call terminal 300 is connected during the voice call. Add (or assign) a predetermined data channel for payment processing, and / or open a data channel to which the voice call channel is added (or assign) for payment processing using the call terminal 300. And / or a channel controller 110 for converting the voice call channel into a data channel for payment processing using the call terminal 300.

According to an exemplary embodiment of the present invention, when the telephone network and / or VoIP network connecting the call terminal 300 and the server 100 simultaneously support a voice call channel and a data channel, the channel control unit 110 controls the call. A predetermined data channel for payment processing using the call terminal 300 is added (or assigned) to the connected call channel for voice call between the terminal 300 and the server 100.

According to another exemplary embodiment of the present invention, a telephone network and / or a VoIP network connecting the call terminal 300 and the server 100 simultaneously support a voice call channel and a data channel, and the call terminal 300 and the server ( When a predetermined data channel is added (or assigned) to a connected call channel for voice call between 100, the channel controller 110 is a call channel connected between the call terminal 300 and the server 100. The data channel added to (or assigned) to is characterized in that for opening the payment processing using the call terminal (300).

According to another exemplary embodiment of the present invention, when the telephone network and / or the VoIP network connecting the call terminal 300 and the server 100 do not simultaneously support a voice call channel and a data channel, the channel controller 110 Is characterized in that the communication channel is connected between the call terminal 300 and the server 100 for a voice call to a predetermined data channel for payment processing using the call terminal 300.

According to the present invention, the server 100 provided in the affiliated store is provided from the call terminal 300 through the data channel added (or assigned) and / or switched to the voice call channel by the channel controller 110. Characterized in that it comprises an information receiving unit 125 for receiving the transmitted payment means information.

According to the method of the present invention, the payment means information is credit card payment read from the MS card and / or contact IC card and / or contactless IC card through at least one card reader provided in the call terminal (300) And at least one or more means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information. Card payment method information (e.g., credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information) of the payment method information may be a predetermined card number and / Or TRACK II information including the expiration date, etc., wherein the bank transfer payment means information is a predetermined financial account number and / Or customer-owned financial account information including branch number and / or account opening date.

According to an exemplary embodiment of the present invention, the payment means information is arranged in a predetermined information processing manner in the call terminal 300 in order to prevent exposure to the outside from eavesdropping and / or interception and / or hacking. And / or number structure), and may be transmitted through the data channel. In this case, the information receiver 125 may receive the processed information through the data channel to restore original payment means information. In this way, security of the payment means information may be provided.

According to another exemplary embodiment of the present invention, after the payment means information is encrypted with a predetermined encryption method in the call terminal 300 to prevent exposure to the outside from eavesdropping and / or interception and / or hacking, The data receiver 125 may transmit the data through the data channel. In this case, the information receiver 125 may restore the payment means information by receiving the encrypted information and decrypting it with a decryption method corresponding to the encryption method. High security of the means information can be provided.

In addition, in the case of payment means information transmitted and received through the data channel, a checksum may be further included in order to prevent a transmission and reception error, thereby preventing transmission and reception errors with respect to the payment means information.

In addition, the information receiver 125 may receive predetermined purchase product information from the call terminal 300 through the data channel, and the purchase product information may be provided to the call terminal 300 through the data channel. It is preferable to include purchase product selection information corresponding to at least one or more product information, and / or when the call channel supports a voice call channel and a data channel at the same time, the purchased product information is the voice guide unit ( It comprises a purchase product selection number corresponding to the voice announcement provided to the call terminal 300 through 115, and / or through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone) It is possible to include purchase product selection information in the form of voice information, whereby the predetermined storage medium 140 from the The product information (and / or payment information associated with the item information) corresponding to the product information sheet are extracted.

According to another exemplary embodiment of the present invention, the information receiver 125 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal 300 through the data channel. Thereby, this invention is not limited.

In addition, the information receiver 125 may further receive predetermined discount information transmitted from the call terminal 300 through the data channel, and the discount information is stored in a predetermined discount coupon possessed by the customer. It is preferable to include corresponding coupon information, and / or coupon information provided in the customer-owned discount card, whereby the payment amount can be discounted.

In addition, the information receiving unit 125 may further receive predetermined goods delivery address information transmitted from the call terminal 300 through the data channel, and the goods delivery address information is provided in the call terminal 300. And address information stored in a stored memory, and / or subscriber address information stored in a database (eg, subscriber information D / B) on a telephone network and / or a VoIP network to which the call terminal 300 is connected. And / or when the call channel supports the voice call channel and the data channel at the same time, the goods delivery destination information is a goods delivery destination selection number corresponding to the voice announcement provided to the call terminal 300 through the voice guidance unit 115. (E.g., a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement, a detailed address ("address / number") number, etc. This including) It is preferable to include delivery address information (eg, a customer's address) in the form of voice information through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), and / or the purchase. The address to which the goods will be delivered is secured.

According to the present invention, when the payment means information received through the information receiving unit 125 is encrypted in at least one encryption method, the server 100 provided in the affiliated store stores the encrypted payment means information in the encryption method. And a decoding unit 155 for decoding by at least one decoding method corresponding to.

According to the exemplary embodiment of the present invention, when the payment means information is encrypted using a symmetric key (or secret key) method, the decryption unit 155 uses the decryption method corresponding to the symmetric key (or secret key) method. Preferably, the means information is decrypted, and / or when the payment means information is encrypted using a public key method, the decryption unit 155 decrypts the payment means information by a decryption method corresponding to the public key method. Preferably, and / or when the payment means information is encrypted by the electronic envelope method, the decryption unit 155 preferably decrypts the payment means information by a decryption method corresponding to the electronic envelope method, and / or When the payment means information is encrypted by a key exchange method, the decryption unit 155 determines the determination by a decryption method corresponding to the key exchange method. Preferably it means for decoding the information.

According to the present invention, when the predetermined payment means information is received through the information receiving unit 125, the server 100 provided in the affiliated store performs the payment processing through the payment means information from the predetermined storage medium 140. Characterized in that it comprises an information confirmation unit 135 for confirming the merchant information for.

According to one embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information. If applicable, the information checking unit 135 may be configured to store an affiliate store number (eg, a unique number assigned to an affiliate store for processing a card payment) and / or a terminal number (for example, processing a card payment) from the storage medium 140. It is preferable to check the merchant information including at least one or more of the unique number provided in the merchant terminal (or payment terminal) provided in the merchant for.

According to another exemplary embodiment of the present invention, when the payment means information corresponds to the account transfer payment means information, the information checking unit 135 from the storage medium 140 merchant account information (for example, the merchant's financial account) Number, and / or branch number, and / or account holder information, etc.).

If the affiliated store is a franchise company and a server 100 for payment processing using the call terminal 300 is provided in the call center of the franchise company, the affiliated store information is affiliated store information corresponding to the franchise company, and And / or affiliated store information corresponding to a franchise chain store that manufactures and packages a product corresponding to the purchased product information to the customer and delivers the product to the customer, and thus, the present invention is not limited thereto.

According to the present invention, the server 100 provided in the affiliated store includes the payment means information received through the information receiving unit 125 and the affiliated store confirmed from the predetermined storage medium 140 by the information checking unit 135. Generating a predetermined payment approval request text for payment processing of an amount corresponding to the payment amount through a payment means corresponding to the payment means information based on the information and at least one item information and / or payment amount information; Sending the full text of the payment approval request to the payment server 200 corresponding to the payment means through the full text generation unit 130 and a predetermined network, the payment corresponding to the full text of the payment approval request from the payment server 200 Characterized in that it comprises a specialized transmission and reception unit 145 for receiving a payment approval message including the processing history.

According to the exemplary embodiment of the present invention, when the payment means information received through the information receiving unit 125 corresponds to the credit card payment means information, the full text of the payment approval request generated by the full text generation unit 130 is the credit. It is preferable to include a full credit card-based payment approval request corresponding to the card payment means.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the check card payment means information, the full text of the payment approval request generated by the full text generation unit 130 is checked corresponding to the check card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the debit card payment means information, the full text of the payment approval request generated by the professional generation unit 130 is a debit corresponding to the debit card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the prepaid card payment means information, the full text of the payment approval request generated by the full text generation unit 130 may be prepaid corresponding to the prepaid card payment means. It is desirable to include a full card-based payment approval request.

According to another exemplary embodiment of the present invention, when the payment means information received through the information receiving unit 125 corresponds to the account transfer payment means information, the full text of the payment approval request generated by the full text generation unit 130 may be used. It is preferable to include a full financial transaction request for withdrawing the payment amount from the customer's financial account and transfers it to the financial account of the merchant.

The specialized transmission / reception unit 145 transmits the payment approval request text generated by the text generation unit 130 to the payment server 200 corresponding to the payment means through a predetermined network, thereby providing the full text of the payment approval request. It is characterized in that the request for payment approval through, and if the payment approval message corresponding to the payment approval request full text is transmitted from the payment server 200, characterized in that it is received through the network.

Here, when the payment means information corresponds to credit card payment means information, the payment server 200 comprises a credit card payment server 200 of the card company (or financial company) that issued the credit card to the customer. And / or when the payment means information corresponds to check card payment means information, including a check card payment server 200 of a card company (or financial company) that issued the check card to the customer, and / or Or when the payment means information corresponds to the debit card payment means information, and comprises a debit card payment server 200 of the card company (or financial company) that issued the debit card to the customer, and / or the payment means If the information corresponds to the prepaid card payment means information, includes a prepaid card payment server 200 of the card company (or financial company) that issued the prepaid card to the customer And / or if the payment means information corresponds to the account transfer payment means information, includes a financial server (eg, ledger server) of the financial company (bank) that opened the financial account for the account transfer to the customer It is done by

In addition, the professional transmission / reception unit 145 checks the payment processing details included in the payment approval message when the payment approval message corresponding to the payment approval request message is received through the network, in the payment server 200. The method may further include checking whether payment processing using the payment means information provided from the call terminal 300 is normally processed or whether a payment error has occurred.

If a predetermined payment error occurs in the payment processing using the payment means information provided from the call terminal 300, the specialized transmission and reception unit 145 is the call terminal 300 of the customer through the voice guide unit 115 After outputting the payment error information, the payment processing process using the call terminal 300 according to the present invention ends.

According to the present invention, the server 100 provided in the affiliated store is provided with an order processing unit 150 for performing an order processing for the processed product when the payment processing through the payment means information is normally performed. It is characterized by.

According to an embodiment of the present invention, when the information receiving unit 125 receives the order processing information including the purchase product information and the goods delivery information from the call terminal 300 of the customer, the order processing unit 150 is the Order processing terminal of the department for manufacturing and packaging the purchased goods in the affiliated store through the predetermined communication means 190, the order processing information including the payment processing details and the purchase product information and product delivery address information to the customer And / or when the affiliate is a franchise, manufacturing and packaging the purchased goods through predetermined communication means 190 with order processing information including the payment processing details, the purchased goods information, and the goods delivery information. It is preferable to provide to the order processing terminal of the chain stores to deliver to the customer.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal 300 in the payment processing using the call terminal 300, the order processing unit 150 Is further processed to receive the goods delivery address information from the call terminal 300 through the voice guide unit 115 (and / or call center terminal, and / or merchant phone) to include the purchase goods information and goods delivery destination information Secures information, manufactures and packages the purchased goods in the affiliated store through the predetermined communication means 190 and delivers the order processing information including the payment processing details, the purchased goods information, and the goods delivery address information to the customer. Provided to the order processing terminal of the department, and / or if the merchant is a franchise, the payment processing history, the purchase product information and the goods delivery address information It is preferable to provide the order processing information including the order to the order processing terminal of the chain stores to manufacture and package the purchased goods through a predetermined communication means 190 to deliver to the customer.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal 300 in the payment processing using the call terminal 300, the order processing unit 150 ) Provides the payment processing details and the purchased product information to an order processing terminal of a department that manufactures, packages, and delivers the purchased product in the affiliated store through a predetermined communication means 190, and / or When the affiliated store is a franchise, a chain store that manufactures and packages the purchased product through a predetermined communication means 190 and delivers the order processing information including the payment processing history, the purchased product information, and the product delivery address information to the customer. After providing the order processing terminal of the, the call channel between the customer's call terminal 300 and the server 100 between the call terminal 300 and the order processing terminal By changing to a screen channel, it is possible to to further obtain the product shipping information from the order processing terminal and, in addition, it is possible to perform various types of order processing process according to one of ordinary skill in the art of intent.

19 is a diagram showing a specialized structure for payment processing using the call terminal 300 according to another embodiment of the present invention.

In more detail, in FIG. 19, the payment means information transmitted from the call terminal 300 to the server 100 is read from a customer-owned credit card on the payment system using the call terminal 300 shown in FIG. If it corresponds to the credit card payment means information, the credit card payment approval request generated on the basis of the credit card payment means specialized structure, if the person of ordinary skill in the art to which the present invention belongs, this figure 19 By referring to and / or modified to infer the payment approval request specialized structure corresponding to other payment means information in addition to the credit card payment means information, the present invention includes all the inferred implementation method, as shown in Figure 19 It is not limited to the implementation method shown.

Referring to FIG. 19, the payment approval request full text structure may include at least one or more specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and an end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text may include a transaction classification item (eg, a credit approval request, a credit approval cancellation, etc.), a Terminal_ID item, a POS Entry Mode item, and a card reader provided in the call terminal 300. TRACK II Data items corresponding to the payment means information obtained from a predetermined card through (for example, from the Primary Account Number (PAN) and Additional Data (AD) and / or Discretionary Data (DD) areas of TRACK II of the MS card. Credit card information obtained from the credit card file of the IC card or the credit card information obtained), and the total number of installment months corresponding to the credit card payment information after the predetermined FS (File Separator, 0X1C) It includes an amount item and a service fee item, and also includes a working key index item, a password item, a product code item and a document serial number item. Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

The Terminal_ID item in the payment approval request specialist information item corresponds to the affiliated store information, the total amount item corresponds to total payment amount information corresponding to the purchase product information, and the document serial number is the server 100. Corresponds to a serial number assigned to manage the payment processing using the call terminal 300 according to the present invention.

In addition, the TRACK II Data item of the information on the payment approval request specialist is read out from a predetermined card reader provided in the call terminal 300 and received by the server 100 as payment information. According to the payment means information corresponds to credit card information.

20 is a diagram showing the functional configuration of a call terminal 300 according to another embodiment of the present invention.

More specifically, FIG. 20 illustrates an embodiment of a call terminal 300 for payment processing using the call terminal 300 according to the present invention. Those skilled in the art to which the present invention pertains, It will be possible to infer the configuration of various call terminal 300 for payment processing using the call terminal 300 by referring to and / or modifying the figure 20, but the present invention includes all the implementation methods inferred, It is not limited to the implementation method shown in FIG.

Referring to FIG. 20, the call terminal 300 basically includes a control unit 305, a memory unit 350, a key input unit 310, a voice processing unit 315, a screen output unit 320, and a signal tone processing unit 335. And a power supply unit 330 for supplying power to the communication terminal 340 and the call terminal 300, the card reader unit 325 for payment processing using the call terminal 300 according to the present invention. And / or the security application module 345, etc., and may further include at least one or more functional components (not shown) according to the intention of those skilled in the art.

The control unit 305 basically controls the key input unit 310, the voice processing unit 315, the screen output unit 320, and the communication processing unit 340 so that a predetermined telephone input through the key input unit 310 is performed. Connect a voice call channel with at least one other call terminal (or server) 100 through a telephone network and / or a VoIP network connected to the communication processor 340 based on the number, and through the voice processor 315. It converts the input / output voice signal into an electrical signal (and / or digital signal) to operate and control the voice call function to transmit and receive through the voice call channel, so that the hardware of the call terminal 300 At least one processor and execution memory (eg, registers and / or Rs) including a central processing unit (CPU) / microprocessor unit (MPU) included in the call terminal 300 to realize a function. It comprises a AM (Random Access Memory) and a bus (BUS) for inputting and outputting predetermined data, and is provided in the call terminal 300 to realize the function of the call terminal 300 by software A program routine that is loaded from a recording medium into the execution memory and is processed by the processor may be a generic term.

In addition, the controller 305 controls the communication processor 340 to access data channels defined in a telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network connected to the communication processor 340. Connecting a predetermined data channel for data communication with at least one terminal (or server) 100 and operating and controlling a function of transmitting and receiving at least one digital information (or digital data) through the data channel. To this end, the communication terminal includes at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data to the call terminal 300 for the data communication in hardware. Characterized in that, the execution message from the recording medium provided in the call terminal 300 for the data communication in software Program routines and / or program data loaded into the memory and processed by the processor may be collectively referred to.

In addition, the control unit 305 controls the predetermined card reader unit 325 provided in the call terminal 300 for the payment processing using the call terminal 300, through the card reader unit 325 It is characterized in that the operation and control to read the predetermined payment means information from the customer-owned card to transmit to the server 100, for this purpose the hardware for payment processing using the call terminal 300 in hardware The terminal 300 includes at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data, wherein the payment is performed using the call terminal 300 in software. Program routines and / or programs which are loaded into the execution memory from the recording medium provided in the communication terminal 300 and processed by the processor for processing. The gram data is collectively characterized.

Therefore, the call terminal 300 shown in FIG. 20 is loaded into the execution memory from the recording medium provided in the call terminal 300 for payment processing using the call terminal 300, and operated by the processor. Program routines to be processed are described in block form in the controller 305 for convenience.

The memory unit 350 inputs and outputs when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the call terminal 300 is performed. General term of non-volatile memory for storing information or data), including at least hardware-based electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD). It includes one or more storage means, the control unit 305 is a predetermined program routine and program data required to perform a predetermined control function (for example, the program routine is input or output to perform a predetermined function) Data) is stored.

According to the method of the present invention, the memory unit 350 preferably stores a predetermined encryption key for encryption processing required in the payment processing using the call terminal 300.

The key input unit 310 is provided with at least one key button including at least one or more number keys and / or character keys and / or function keys. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or operation mode of the call terminal 300 controlled by the controller 305. When predetermined information (or signal) is input from the key button, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 305.

When the current input mode and / or operation mode of the call terminal 300 is a voice call mode, the controller 305 obtains predetermined key data corresponding to the key event and provides the same to the beep processor 335. The tone processing unit 335 may generate a key tone corresponding to the key data according to a dual tone multifrequency (DTMF) scheme.

When the current input mode and / or operation mode of the call terminal 300 is a data communication mode, the controller 305 acquires predetermined key data corresponding to the key event, and then information corresponding to the key data. And performing a processing procedure, and / or acquiring an instruction for executing a predetermined function matched with the key event, and then performing a function corresponding to the instruction.

According to the exemplary embodiment of the present invention, the key input unit 310 and the key input device having at least one or more key buttons interoperate with each other to perform a function of key input means provided in the call terminal 300.

According to an embodiment of the present invention, the key input device which is interlocked with the key input unit 310 may include a keypad device having at least one numeric key, a letter key ('*', '#') and a function key, and / Or at least one or more keyboard devices including at least one numeric key, character keys (eg, English character keys, and / or Korean character keys) and function keys.

The voice processing unit 315 converts a predetermined voice input from a predetermined voice input device (for example, a microphone) included in the call terminal 300 into a predetermined voice signal (or an electrical signal), and the communication processor 340. Is encoded using a voice encoding scheme corresponding to a telephone network and / or a VoIP network connected to the PDP network to generate predetermined voice data, and provides the voice data to the controller 305. It is preferable that the processing unit 315 is provided with a predetermined vocoder and a codec.

Thereafter, the controller 305 transmits the generated voice data to the telephone network and / or the VoIP network through the communication processor 340.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the voice processing unit 315 transmits the voice signal (or electrical signal) to the general telephone switching network (or intelligent network). It is preferable to generate the voice data by encoding by using a coding scheme that can be transmitted through).

According to another exemplary embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the voice processor 315 may transmit the voice signal (or electrical signal) through the mobile communication network. Division Multiple Access) It is preferable to generate the speech data by encoding in a coding scheme corresponding to the stack.

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a VoIP network, the voice processor 315 may transmit the voice signal (or electrical signal) through the VoIP network. Preferably, the voice data is generated by encoding with a coding scheme corresponding to a stack, wherein the coding scheme corresponding to the VoIP network is an H.323 protocol standard and / or an Internet Engineering Task defined by the International Telecommunication Union (ITU). It is preferable to include at least one or more of the Session Initiation Protocol (SIP) protocol specifications defined by the Force.

According to an embodiment of the present invention, the voice processing unit 315 and the voice input device interoperate with each other to perform a function of voice input means for receiving a voice signal for voice call through the telephone network and / or the VoIP network.

When voice data encoded by a predetermined encoding method is received through the communication processor 340, the controller 305 provides the voice data to the voice processor 315, at which time the voice processor 315 is provided. Decodes the voice data by a voice coding scheme corresponding to a telephone network and / or a VoIP network connected to the communication processor 340 to generate a predetermined voice signal (or an electrical signal), and generates the voice signal (or Electrical signal) is output through a predetermined voice output device (for example, a speaker) provided in the call terminal 300. For this purpose, the voice processing unit 315 is provided with a predetermined vocoder and a codec. desirable.

When the communication processing unit 340 is connected to a general telephone switching network (or an intelligent network) according to an exemplary embodiment of the present invention, the voice processing unit 315 may convert the voice data received through the communication processing unit 340 into the general telephone. It is preferable to generate the speech signal (or electrical signal) by decoding by encoding scheme corresponding to the switching network (or intelligent network).

According to another exemplary embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the voice processing unit 315 may transmit voice data received through the communication processing unit 340 to correspond to the mobile communication network. It is preferable to generate the speech signal (or electrical signal) by decoding by stack-based encoding.

According to another embodiment of the present invention, when the communication processing unit 340 accesses the VoIP network, the voice processing unit 315 may convert the voice data received through the communication processing unit 340 into the VoIP network. It is preferable to generate the voice signal (or electrical signal) by decoding by encoding method, wherein the encoding method corresponding to the VoIP network is at least one of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable that the above specification is included.

According to the embodiment of the present invention, the voice processing unit 315 and the voice output device interoperate with each other to perform a function of voice output means for outputting a voice signal for voice call through the telephone network and / or the VoIP network.

The screen output unit 320 is a liquid crystal display (LCD) by the control unit 305 while the call terminal 300 performs a voice call function and / or a payment processing function using the call terminal 300. And / or at least one or more information or data which is predefined or defined in real time to be output to a predetermined display device including a Cathode Ray Tube (CRT) and / or a CRT (Cathode Ray Tube). The screen output unit 320 and the screen output device interoperate with each other to perform a function of a screen output means provided in the call terminal 300.

Predefined information or data to be output from the call terminal 300 to the screen output device includes key data input through the key input unit 310 and / or components provided in the call terminal 300. Information (or data) stored or generated by the information, information (or data) transmitted / received through the communication processing unit 340, and / or (or data) corresponding to a predetermined operation result performed by the call terminal 300. It comprises at least one.

According to a preferred embodiment of the present invention, the screen output unit 320 of the screen output means for outputting the payment processing screen according to each payment processing step to the screen output device for payment processing using the call terminal 300 It is desirable to perform the function.

The signal processing unit 335 is a predetermined number key ("0 ~ 9") and / or letter key ('*) through the key input unit 310 in the state that the operation mode of the call terminal 300 is the voice call mode ',' # 'Is input, generates a key tone corresponding to the input key data in a complex frequency code (DTMF) scheme, and the key tone is connected to the telephone network and / or to which the communication processor 340 is connected. Characterized in that the voice encoding method corresponding to the VoIP network characterized in that provided to the communication processor 340.

According to an embodiment of the present invention, when the communication processor 340 is connected to a general telephone switching network (or intelligent network), the voice processing unit 315 may transmit the key tone through the general telephone switching network (or intelligent network). It is preferable to generate the speech data by encoding by a coding scheme.

According to another embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the voice processing unit 315 may transmit a code division multiple access (CDMA) stack capable of transmitting the key tone through the mobile communication network. It is preferable to generate the speech data by encoding by a coding scheme corresponding to.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a VoIP network, the voice processing unit 315 encodes a key corresponding to a VoIP protocol stack capable of transmitting the key tone through the VoIP network. It is preferable to generate the voice data by encoding in a scheme, wherein the encoding scheme corresponding to the VoIP network includes at least one or more of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable.

The communication processor 340 connects the call terminal 300 to a predetermined telephone network and / or VoIP network, and at least one or more other call terminals (or servers) according to a call processing procedure defined in the telephone network and / or VoIP network. ) And the voice call channel.

According to one embodiment of the present invention, the communication processing unit 340 is a physical network configuration (eg, the call terminal 300 to connect the call terminal 300 to a general telephone switching network (or intelligent network) general telephone switching network) (Or a network configuration connecting the switch and the wired communication section provided on the intelligent network), by performing a call processing procedure corresponding to the communication protocol standard defined in the general telephone switching network (or intelligent network) It is preferable to connect the voice call channel with at least one or more other call terminals (or servers) 100.

According to another embodiment of the present invention, the communication processing unit 340 is a physical network configuration for connecting the call terminal 300 to a mobile communication network (for example, the base station provided on the mobile communication network 300) And a network configuration connecting a wireless communication section corresponding to the CDMA stack, and performing at least one call processing procedure corresponding to a communication protocol standard defined in the mobile communication network. It is preferable to connect the voice communication channel with 100).

According to another exemplary embodiment of the present invention, the communication processing unit 340 is a physical network configuration (for example, VoIP provided with the call terminal 300 on the VoIP network) to connect the call terminal 300 to the VoIP network. Network configuration that connects wired communication intervals through the Gateway and / or VoIP Gatekeeper and the Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) protocol layer implemented on top of the UDP / IP protocol stack It is preferable that the call processing procedure corresponding to the communication protocol standard defined in the VoIP is performed to connect the voice call channel with at least one other call terminal (or server) 100.

In addition, the communication processor 340 transmits and receives voice data encoded with at least one other call terminal (or server) 100 and an encoding scheme corresponding to the telephone network and / or VoIP network through the voice call channel. It features.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the communication processing unit 340 is encoded by an encoding scheme corresponding to the general telephone switching network (or intelligent network). It is preferable to transmit and receive at least one voice data.

According to another embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the communication processor 340 transmits and receives at least one voice data encoded by a corresponding encoding scheme corresponding to the mobile communication network. It is desirable to.

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a VoIP network, the communication processor 340 transmits and receives at least one voice data encoded by an encoding scheme corresponding to the VoIP network. It is preferable.

In addition, when it is possible to add (or assign) a predetermined data channel to the voice call channel, the communication processor 340 assigns a predetermined data channel to the voice call channel connected through a predetermined telephone network and / or a VoIP network. Add (or assign) and perform data communication with at least one other call terminal (or server) 100 to which the call channel is connected through the added (or assigned) data channel.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or an intelligent network), the communication processing unit 340 uses a predetermined data channel defined in the general telephone switching network (or an intelligent network). In addition to (or assigning) to the voice call channel, it is preferable to perform predetermined data communication with the at least one other call terminal (or server) 100 connected with the call channel through the data channel, in addition to the voice call. .

According to another embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the communication processing unit 340 adds (or assigns) a predetermined data channel defined in the mobile communication network to the voice call channel. In addition to the voice call, it is preferable to perform predetermined data communication with at least one other call terminal (or server) 100 to which the call channel is connected through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses the VoIP network, the communication processing unit 340 adds a predetermined data channel defined in the VoIP network to the voice call channel (or And a predetermined data communication in addition to the voice call with at least one other call terminal (or server) 100 to which the call channel is connected through the data channel.

In addition, the communication processor 340 connects at least one terminal (or server) 100 and a predetermined data channel (or communication channel) through a predetermined telephone network and / or a VoIP network independently of the voice call channel. Characterized in that the predetermined data communication with at least one terminal (or server) 100 through the data channel (or communication channel).

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the communication processing unit 340 is a predetermined data communication standard defined in the general telephone switching network (or intelligent network). According to at least one terminal (or server) 100 is preferably connected to a predetermined data channel (or communication channel), at least one terminal (or server) through the data channel (or communication channel) 100 ) Performs a predetermined data communication.

According to another exemplary embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the communication processor 340 may include at least one terminal according to a CDMA stack based data communication standard defined in the mobile communication network. Or a server) 100 and a predetermined data channel (or communication channel), and communicate data with at least one terminal (or server) 100 through the data channel (or communication channel). Perform.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a VoIP network, the communication processing unit 340 may include at least one or more data according to a VoIP protocol stack based data communication standard defined in the VoIP network. It is preferable to connect a terminal (or server) 100 and a predetermined data channel (or communication channel), and at least one terminal (or server) 100 and predetermined data through the data channel (or communication channel). Perform communication.

According to the present invention, the call terminal 300 is a card reader unit 325 for reading predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 300 according to the present invention. It is characterized by comprising a).

That is, the customer receiving payment processing using the call terminal 300 according to the present invention through the call terminal 300, based on the ISO / IEC 7810 standard MS (Magnetic Stripe) card, and / or ISO / IEC Have (or own) a contact IC card (or wireless IC chip) based on the 7816 standard and / or at least one contactless IC card (or wireless IC chip) based on the ISO / IEC 14443 standard. The card reader 325 may provide an interface for reading at least one or more payment means information from the customer-owned card.

According to the method of the present invention, the card reader unit 325 is an MS reader unit for providing an interface between the MS card and the call terminal 300, and / or the contact IC card and the call terminal 300. And a contact IC reader unit for providing an interface, and / or a contactless IC reader unit for providing an interface between the contactless IC card and the call terminal 300.

The MS reader unit is a card reader unit 325 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. It is characterized by interfacing the predetermined payment means information to the call terminal 300 from at least one track (for example, track II area) provided in the MS of the MS card by using the loading.

The contact IC reader unit is a card reader unit 325 based on ISO / IEC 7816. The contact IC reader unit may include at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It is included, the power supply to the IC chip of the IC card through the contact point, and predetermined payment means information from the IC chip through the half-duplex transaction using an APDU (Application Protocol Data Unit) It characterized in that the interface to the call terminal 300.

The contactless IC reader unit is a card reader unit 325 based on ISO / IEC 14443. The contactless IC reader unit uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, and calls the predetermined payment means information from the IC chip through the half-duplex transaction using the APDU It is characterized in that the interface to the terminal 300.

According to the method of the present invention, the card reader unit 325 is credit card payment means information, and / or check card payment means information from the customer-owned card for payment processing using the call terminal 300, and / Or it is preferable to read at least one or more of the debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information.

According to the present invention, the call terminal 300 is a predetermined payment approval request text including predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 300 according to the present invention. A security application module for managing a function of generating and transmitting a payment approval message corresponding to the payment approval request message from the server 100 through the telephone network and / or the VoIP network and transmitting the same to the server 100 345 (Secure Application Module; SAM) characterized in that comprises a.

The Secure Application Module (345) is a confidentiality and / or authentication required by the call terminal 300 in the process of performing the electronic payment and / or electronic payment using the card. And / or security requirements, including integrity and / or nonrepudiation, can be secured within the call terminal 300 without using an authentication server (or payment server 200) on the network. As a safety device for performing a reliable structure, a predetermined message (information or data) processed in the process of the call terminal 300 performing a predetermined security request function (for example, electronic payment and / or electronic payment function). Encrypt or decrypt, add an authenticator to prevent forgery (or tampering) of the message, or store important information in the process of performing the security request function. It is characterized in that it performs a function.

In general, the security application module 345 is preferably composed of a predetermined security application module 345 inserter and security application module 345 chip, the security application module 345 chip is a chip containing at least 8-bit CPU IC cards in the form of Application Specific Integrated Circuit (ASIC) chips (e.g., PLCC 44-pin chips) and / or IC chips (e.g., SIM (Subscriber Identity Module)) with more than 2 Million Instructions Per Second (MIPS) performance It is preferable to comprise).

In addition, the security application module 345 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value, etc.) required for the call terminal 300 to perform a predetermined security request function. ) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, previous transaction cancellation protocols, collection protocols, SAM issuance protocols, (e-money company / card company) Registration protocol, authorization protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / disposal / initialization) / Reprocessing / cancellation command).

Referring to FIG. 20, the call terminal 300 includes a mode checking unit 355 for checking an operation mode of the call terminal 300 for payment processing using the call terminal 300 according to the present invention. When the call terminal 300 is in the payment mode using the call terminal 300 according to the present invention as a result of the check by the mode confirming unit 355, a predetermined payment is made from a predetermined customer-owned card through the card reader unit 325. Information reading unit 360 for reading the means information and the payment means information is transmitted to the server 100 through a data channel corresponding to the communication channel connected to the server 100 through the communication processing unit 340 Characterized in that it comprises an information transmission unit 375.

In addition, the call terminal 300 further includes an information processing unit 365 for processing a number arrangement (and / or number structure) to prevent the payment means information is intercepted and / or intercepted and / or hacked Characterized in that made.

In addition, the call terminal 300 is characterized in that it further comprises an encryption processing unit 370 for encrypting in a predetermined encryption method in order to prevent the payment means information is intercepted and / or intercepted and / or hacked.

The mode checking unit 355 checks whether an operation mode of the call terminal 300 is a voice call mode, a voice call / data communication mode, or a data communication mode.

In addition, when the operation mode of the call terminal 300 is a voice call / data communication mode, the mode checking unit 355 may include data channels added (or assigned) to the voice call channel for general data communication. Mode or a data communication mode for payment processing according to the present invention.

If the check result is that the operation mode of the call terminal 300 is a data communication mode for payment processing according to the present invention, the mode checking unit 355 is the screen output unit 320 (and / or voice processing unit 315) By requesting to interface a customer-owned card through the card reader unit 325 through)), the information reader 360 receives predetermined payment means information from the customer-owned card through the card reader unit 325. Process to read.

In addition, when the operation mode of the call terminal 300 is a data communication mode, the mode checking unit 355 is whether the data communication mode is a simple data communication mode or a data communication mode for payment processing according to the present invention. It is characterized by checking.

If the check result is that the operation mode of the call terminal 300 is a data communication mode for payment processing according to the present invention, the mode checking unit 355 is the screen output unit 320 (and / or voice processing unit 315) By requesting to interface a customer-owned card through the card reader unit 325 through)), the information reader 360 receives predetermined payment means information from the customer-owned card through the card reader unit 325. Process to read.

As a result of the check by the mode checking unit 355, when the call terminal 300 is in the payment mode using the call terminal 300 according to the present invention, the information reading unit 360 uses the card reader unit 325. And reading predetermined payment means information from a predetermined customer-owned card, wherein the payment means information includes credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and And / or at least one of prepaid card payment means information, and / or bank transfer payment means information.

According to an embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information In the case of payment means information, the payment means information read out by the information reader 360 through the card reader 325 includes at least one or more number arrays such as a 16-digit card number and / or an expiration date. It is preferable to make it.

In addition, when the payment means information corresponds to the account transfer payment means information, the payment means information read out by the information reader 360 through the card reader 325 is a 16-digit account number and / or branch number It is preferable to include at least one or more number arrangements, such as.

The information transmission unit 375 processes the payment means information read by the information reader 360 into a predetermined data structure standard promised with the server 100, and the payment means information corresponding to the data structure standard. The communication processor 340 processes the data to be transmitted to the server 100 through the data channel.

According to the exemplary embodiment of the present invention, the information transmitter 375 may further include a predetermined checksum for preventing a transmission / reception error of payment means information transmitted through the data channel. Transmission and reception errors with respect to the payment means information can be prevented.

However, such payment means information may be exposed to eavesdropping and / or eavesdropping and / or hacking, and to prevent this, the processing unit is a combination of the numbers included in the payment means information in the server 100 originally; Characterized in that the processing process to a data structure capable of restoring the payment means information of the, characterized in that the processed payment means information is restored to the original payment means information in the server (100).

Alternatively, in order to prevent the payment means information from being exposed to eavesdropping and / or interception and / or hacking, the encryption processing unit 370 may encrypt the payment means information by a predetermined encryption method. The encrypted payment means information is characterized in that the server 100 is decrypted by a predetermined decryption method corresponding to the encryption method.

21 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

More specifically, FIG. 21 illustrates an embodiment of an MS card for storing payment means information read from a customer-owned card through a card reader provided in a predetermined call terminal 300, and is shown in FIG. 21 for convenience. The MS card shows a case in which an MS card having a Track I storage area, a Track II storage area, and a Track III storage area stores payment means information according to the present invention in the Track II storage area. Those skilled in the art may refer to and / or modify this drawing 21 to provide credit card payment means information, and / or check card payment means information, and / or debit in the Track II storage area of the MS card. Card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is stored in the Track I storage area and / or Track III storage area. Would be able to infer a variety of exemplary ways to store available), the invention includes all embodiments in which the inference method, not limited to the exemplary method illustrated in the figure 21.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 21, payment means information providing a payment processing function using the call terminal 300 according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area. do.

22 is a diagram showing an IC card in which predetermined payment means information is stored according to an embodiment of the present invention.

More specifically, FIG. 22 illustrates an embodiment of an IC card for storing payment means information read from a customer's own card through a card reader provided in a predetermined call terminal 300. For convenience, this figure 22 is a contact. A case in which payment means information according to the present invention is stored in a memory of a formula IC card, and a person having ordinary knowledge in the technical field to which the present invention pertains may refer to and / or modify this drawing 22 to make the IC card. Various implementation methods for storing credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or wire transfer payment method information in a memory of Although it can be inferred that the present invention includes all the implementation methods inferred above, it is not limited to the implementation method illustrated in FIG.

With reference to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip's IC chip may include power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), and programming. I / O interfaces for communicating with (eg, exchanging commands or data) the call terminal 300 through contact points such as power supply (VPP) and / or input / output (I / O), CPU (Central Process Unit), MPU ( A processor unit including at least one computing element including a micro process unit, a coprocessor, and the like, a read only memory (ROM), a random access memory (RAM), and an electrically erasable and programmable read only (EEPROM). And a memory unit 350 including at least one memory element including a memory, a flash memory, and the like. In particular, at least one of the memory elements (eg, a ROM) manages internal resources of the IC card. And operating chip A Chip Operating System (COS) is stored, and when a predetermined power is supplied from the call terminal 300 through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory unit 350 is executed. Loaded into memory to control the overall operation of the IC chip, and communicates with the IC chip through an APDU (Application Protocol Data Unit) based on the clock frequency (eg, 3.57 MHz or 4.9 MHz) of the clock signal (CLK) contact point. Controls information or data exchange between the terminals 300.

According to the present invention, the memory unit 350 of the IC chip terminates at least one or more programs of the programs loaded and loaded in the card terminal, and drives a specific program among a plurality of programs stored in the card terminal, Or card storage information for executing a function of converting a screen configuration and / or a function set in the card terminal into a specific screen configuration and / or a specific function, wherein the card storage information is stored by the terminal program. A data unit for storing a data set corresponding to predetermined information or data to be read and read and / or used, and operated or executed by an arithmetic function of the processor unit and an instruction set provided by a COS. Program routines used by the programmer (eg Javacard) An applet (JAVA Applet) is provided with a processing unit corresponding to an application including an instruction call code that interacts with the instruction set of the COS and an execution code that is processed by a processor unit. Read a command provided from the terminal program via an input / output interface, and read or write at least one or more information or data stored in the data unit based on the read command, and as a result or read information or data It is characterized in that to provide to the terminal program via the input and output interface through the APDU.

According to a preferred embodiment of the present invention, the memory unit 350 of the IC chip includes a security structure based on ISO / IEC 10202. Accordingly, the memory unit 350 may include a CSN (Chip Serial Number) and the like. It consists of a protected area where the same secret information is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the like. It is preferably stored in an area excluding the protection area and the COS control area.

In addition, according to ISO / IEC 7816 and / or ISO / IEC 14443 ICC standard, the memory unit 350 includes one master file (MF) corresponding to a root file and a lower subordinate to the master file. An ATR (Aswer To Reset) including function information on at least one stored information, at least one dedicated file corresponding to each ICC stored information, and a dedicated file (DF) corresponding to each ICC stored information, and disposed below the dedicated file. Includes a file structure consisting of an element file (EF) containing the actual information and / or data for the smart card service, the card storage information for the present invention also includes the file structure as described above.

Referring to FIG. 22 according to an embodiment of the present invention, the data unit of the card storage information may store at least one or more payment means information for payment processing using the call terminal 300 according to the present invention. The payment method information may be at least one of credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. It is made, including.

FIG. 23 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in the call terminal 300 according to an embodiment of the present invention.

More specifically, FIG. 23 illustrates an embodiment of the present invention for encrypting and transmitting the payment means information in a symmetric key (or secret key) method in the call terminal 300 having the encryption function as shown in FIG. If one of ordinary skill in the art, referring to Figure 23 and / or modified by the symmetric key (or secret key) method to the payment means information in the call terminal 300 on the telephone network and / or VoIP network Various implementation methods of encrypting may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 23 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the call terminal 300, the public certificate 300 to the call terminal 300 Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or in the call terminal When a predetermined IC card reader is provided at 300, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit 350 provided in the call terminal 300 in addition to the public certificate, and / or the call terminal from the server 100 It may be included in the interface screen provided to 300, and / or embedded in the communication program to communicate with the server 100 on the call terminal 300, thereby the anti-invention is not limited.

Referring to FIG. 23, when predetermined payment means information is read from the information reader 360 of the call terminal 300, the predetermined payment means information is provided to the cryptographic processor 370 (2300). The encryption processing unit 370 reads a predetermined symmetric key (or secret key) for encrypting payment means information from an authorized certificate provided in the call terminal 300 (2305), and reads the read symmetric key ( Or encrypting the payment means information through a secret key (2310).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the symmetric key (or secret key) is k (key), the payment means information P (Plaintext), and the symmetric key (or secret). If the payment means information encrypted with the key) is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Ek (P) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, It is preferable to include at least one or more of the International Data Encryption Algorithm (IDEA), and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When payment means information is encrypted through a symmetric key (or secret key) as described above, the communication processor 340 transmits the encrypted payment means information to the server through a communication protocol defined on the telephone network and / or VoIP network. Transmit to 100 (2315).

24 is a diagram illustrating a method of decrypting payment means information encrypted and received by the server 100 in a symmetric key (or secret key) manner according to an embodiment of the present invention.

In more detail, FIG. 24 illustrates a method of symmetric key (or secret key) method in the server 100 as shown in FIG. 18, wherein the payment means information received from the call terminal 300 having the encryption function as shown in FIG. As an embodiment of the present invention, the present invention may be encrypted by the call terminal 300 on the telephone network and / or the VoIP network by referring to and / or modifying the drawing of FIG. Although various embodiments of the present invention may be inferred from the method of decrypting the payment means information by a symmetric key (or secret key) method, the present invention includes all of the inferred embodiments and is not limited to the embodiment shown in FIG. No.

In this figure 24 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the server 100, the public certificate is linked to the server 100 It is preferably stored in a predetermined database (not shown), and the present invention is not limited thereby.

Referring to FIG. 24, the information receiving unit 125 of the server 100 receives the encrypted payment means information through the telephone network and / or the VoIP network and provides the encrypted payment means information to the decrypting unit 155 (2400). The payment means information is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 155 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment means information from the authorized certificate provided in the server 100 (2405), and extracts the extracted symmetry. The encrypted payment means information is decrypted using a key (or secret key) (2410).

Here, the decryption function of the decryption unit 155 is called D (Decryption), and the payment means information encrypted with the symmetric key (or secret key) with k (key) and the symmetric key (or secret key) with C ( Ciphertext) and the decrypted payment means information is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 155 is " Dk = P, or Dk (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, an algorithm for decrypting the encrypted payment means information by the decryption unit 155 through the symmetric key (or secret key) may include SEED, DES (Data Encryption Standard), Triple-DES, At least one of Skipjack and International Data Encryption Algorithm (IDEA) is preferably included. Various types of decryption algorithms may be used, but the decryption algorithm matches the encryption algorithm used in the call terminal 300. The present invention is not limited to the specific decoding algorithm.

When the payment means information encrypted through the symmetric key (or secret key) as described above, the decrypting unit 155 provides the decrypted payment means information to the full text generation unit 130 (2415), The full text generation unit 130 performs the full text creation procedure defined in the server 100 using the payment means information.

FIG. 25 is a diagram illustrating a method of encrypting and transmitting payment means information in a public key infrastructure structure in a call terminal 300 according to an embodiment of the present invention.

In more detail, FIG. 25 is an embodiment of the present invention for encrypting and transmitting the payment means information in a public key infrastructure structure in a call terminal 300 having an encryption function as shown in FIG. 20. If it is known to those skilled in the art, by referring to and / or modifying this figure 25 infer various implementation methods for encrypting the payment means information in a public key method in the call terminal 300 on the telephone network and / or VoIP network. As will be appreciated, the invention encompasses all of the inferred practice methods, and is not limited to the practice method shown in FIG.

In this figure 25 according to the embodiment of the present invention, the public key of the server 100 is preferably read from the public certificate provided in the call terminal 300, and the public certificate is provided to the call terminal 300. Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or in the call terminal When a predetermined IC card reader is provided at 300, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server 100 side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the public certificate to the call terminal 300, whereby the present invention It is not limited.

Referring to FIG. 25, when the information reading unit 360 of the call terminal 300 reads predetermined payment means information, the information is provided to the encryption processing unit 370 (2500). The encryption processing unit 370 extracts a predetermined server 100 side public key for encrypting the payment means information from the authorized certificate (2505), and performs the payment through the extracted server 100 side public key. The means information is encrypted (2510).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the public key k1 (key) on the server 100 side, the payment information P (Plaintext), and the server 100 side When the payment means information encrypted with the public key is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by a formula such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital). Signature Algorithm (DH), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithm may be used, but specific encryption algorithm The present invention is not limited by the.

For example, in the case of encrypting the payment means information through the RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by different prime factors of n and a b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment means information is encrypted through the public key of the server 100 as described above, the communication processor 340 transmits the encrypted payment means information to the server 100 through a network component on the telephone network and / or the VoIP network. (2515).

FIG. 26 illustrates a method of decrypting payment means information encrypted and received by the server 100 in a public key infrastructure according to an embodiment of the present invention.

In more detail, FIG. 26 decrypts the payment means information received from the call terminal 300 having the encryption function as shown in FIG. 20 in a public key infrastructure in the server 100 as shown in FIG. As to the implementation method, if one of ordinary skill in the art to which the present invention pertains, the server 100 in the call terminal 300 on the telephone network and / or VoIP network by referring to and / or modified in this figure 26 Various implementation methods for decrypting payment means information encrypted with the public key infrastructure may be inferred, but the present invention includes all the inferred implementation methods and is limited to the implementation method shown in FIG. Not.

In FIG. 26 according to an embodiment of the present invention, the server 100 side private key for decrypting the payment means information encrypted with the server 100 side public key is provided in the server 100. It is preferable that the public certificate is read from the public certificate, and the public certificate is preferably stored in a predetermined database (not shown) interworking with the server 100, and the present invention is not limited thereto.

Referring to FIG. 26, the information receiving unit 125 of the server 100 receives encrypted payment means information through the telephone network and / or the VoIP network and provides the information to the decrypting unit 155 (2600). Means information is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 155 extracts the private key of the server 100 for decrypting the encrypted payment means information from the authorized certificate provided in the server 100 (2605), and the extracted server 100. The encrypted payment means information is decrypted using the side private key (2610).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), the server 100 private key k2 (key), and the payment method information encrypted with the server 100 public key C (Ciphertext). ) And the payment means information decrypted with the private key of the server 100 is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 155 is "Dk2 = P, or Dk2 ( Ek (P)) = P ".

According to an embodiment of the present invention, the decryption unit 155 decrypts the payment means information encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100, It is preferable to include at least one of RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, In addition to this, various types of decryption algorithms may be used, but the decryption algorithm is matched with an encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the payment means information through the RSA decryption algorithm of the public key based decryption algorithm, n is a public method (Modulus) used in the decryption process, n, a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e, the undisclosed index is d, the n satisfies "n = a * b", d is "de = 1 mod (a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dk2 = Cd mod n ".

As described above, when the payment means information encrypted with the public key of the server 100 in the call terminal 300 is decrypted through the server 100 side private key, the decryption unit 155 reads the decrypted payment means information. Provided to the full text generation unit 130 (2615), the full text generation unit 130 performs the full text generation procedure defined in the server 100 using the payment means information.

FIG. 27 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal 300 according to an embodiment of the present invention.

More specifically, Figure 27 is an embodiment of a method for encrypting and transmitting the payment means information in an electronic envelope method in the call terminal 300 with the encryption function as shown in Figure 20, which is usually in the art If the knowledge of the present invention can be inferred by referring to and / or modifying this figure 27, various implementation methods for encrypting the payment means information in an electronic envelope method in the call terminal 300 on the telephone network and / or VoIP network. However, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 27 according to the embodiment of the present invention, the public key of the server 100 is preferably read from the public certificate provided in the call terminal 300, and the public certificate is provided to the call terminal 300. Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or in the call terminal When a predetermined IC card reader is provided at 300, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server 100 side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the public certificate to the call terminal 300, whereby the present invention It is not limited.

Referring to FIG. 27, when the information reading unit 360 of the call terminal 300 reads predetermined payment means information, the information is provided to the encryption processing unit 370 (2700). The encryption processing unit 370 generates a predetermined random secret key for encrypting the payment means information using a secret key (symmetric key) method (2705), and generates the generated secret key. In operation 2710, the payment means information is encrypted.

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the secret key is r (random secret key), the payment means information P (Plaintext), and the payment means information encrypted with the secret key Suppose C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by a formula such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption) It is preferable to include at least one of the algorithm (Algorithm), and various forms of encryption algorithm may be used, but the present invention is not limited by a specific encryption algorithm.

Thereafter, the encryption processing unit 370 encrypts the secret key (random secret key) used to encrypt the payment means information. To this end, the encryption processing unit 370 discloses a predetermined server 100 from the public certificate. The key is extracted (2715), and the secret key is encrypted using the public key of the server 100 (2720).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the public key on the server 100 side is k1 (key), the secret key is r (random secret key), and the server 100 If the secret key encrypted with the side public key is C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by a formula such as "Ek1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the secret key through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature). Algorithm, DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, in addition to a variety of encryption algorithms may be used, a specific encryption algorithm The present invention is not limited by the.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Ek1 (r) = re mod n ".

If the payment means information is encrypted with the secret key, and the secret key is encrypted through the public key on the server 100 side, the encryption processing unit 370 is the payment means information and the server 100 encrypted with the secret key. The transaction data associated with the secret key encrypted with the public key is generated and provided to the communication processor 340 (2725), and the communication processor 340 provides the transaction data through a network component on a telephone network and / or a VoIP network. The server 100 transmits the data to the server 100 in operation 2730.

28 is a diagram illustrating a method of decrypting the payment means information encrypted and received by the server 100 according to an embodiment of the present invention by an electronic envelope method.

In more detail, FIG. 28 shows the transaction data in the server 100 as shown in FIG. 18 that receives the transaction data including the encrypted payment means information from the call terminal 300 having the encryption function as shown in FIG. As an embodiment of the present invention, a method of decrypting by an envelope method, and having ordinary skill in the art to which the present invention pertains, will be described with reference to FIG. 28 and / or modified in the call terminal 300 on the telephone network and / or the VoIP network. Various implementation methods for decrypting the transaction data encrypted by the electronic envelope method may be inferred by the same electronic envelope method, but the present invention includes all of the inferred implementation methods and is limited to the implementation method shown in FIG. Not.

In this figure 28 according to the embodiment of the present invention, the private key of the server 100 for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate provided in the server 100. The certificate is preferably stored in a predetermined database (not shown) that cooperates with the server 100, whereby the present invention is not limited.

Referring to FIG. 28, the information receiver 125 of the server 100 receives predetermined transaction data including payment means information encrypted through the telephone network and / or the VoIP network, and transmits the predetermined transaction data to the decryption unit 155. In operation 2800, the transaction data is preferably received through a communication protocol stack defined in the telephone network and / or the VoIP network.

Thereafter, the decryption unit 155 extracts the private key of the server 100 for decrypting the encrypted secret key included in the transaction data from the public certificate provided in the server 100 (2805). By decrypting the secret key encrypted by the server 100 side public key in the call terminal 300 through the extracted server 100 side private key (2810), a predetermined secret key for decrypting the payment means information is obtained. By extracting 2815 and decrypting the payment means information using the extracted secret key 2820, the payment means information encrypted by the secret key is extracted from the call terminal 300 (2825).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), the private key encrypted with the server 100 private key k2 and the public key encrypted with the server 100 C (Ciphertext) And a secret key decrypted with the private key of the server 100 is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 155 is " Dk2 = r, or Dk2 (Ek1). It can be expressed by an expression such as (r)) = r ".

According to the exemplary embodiment of the present invention, the decryption unit 155 decrypts the secret key encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100, the RSA. (Ron Rivest, Adi Shamir, Len Adleman), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although various types of decryption algorithms may be used, the decryption algorithm is matched with an encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the decryption unit 155 is called D (Decryption), the secret key is r (random secret key), the payment means information encrypted with the secret key (C (Ciphertext)), and the decrypted When the payment means information is called P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 155 may be expressed by an expression such as "Dr = P, or Dr (Er (P)) = P". Can be.

According to an embodiment of the present invention, the decryption unit 155 decrypts the encrypted payment means information using the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International). It is preferable to include at least one or more of the Data Encryption Algorithm, and in addition to the decryption algorithm of various forms may be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 300 However, the present invention is not limited to the specific decoding algorithm.

When the payment means information is decrypted as described above, the decoder 155 provides the decrypted payment means information to the full text generation unit 130 (2830), the full text generation unit 130 is the payment means information Perform the full text generation procedure defined in the server 100 using.

29A and 29B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a call terminal 300 according to an embodiment of the present invention.

More specifically, Figure 29a and Figure 29b is an embodiment of the method for encrypting and transmitting the payment means information by the key exchange method in the call terminal 300 with the encryption function as shown in Figure 20, the invention In the art, various embodiments of the present invention can be inferred by referring to and / or modifying the drawing 29 to encrypt the payment means information in a key exchange method in the call terminal 300 on the telephone network and / or the VoIP network. As will be appreciated, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 29 according to the embodiment of the present invention, the terminal-side private key and the server 100-side public key are preferably read from the public certificate provided in the call terminal 300, and the public certificate is the call. Stored in a predetermined memory unit 350 provided in the terminal 300, and / or stored in an ID-000 type IC chip (or IC card) mounted or detached from the call terminal 300, and / Or the predetermined number of IC card reader is provided in the call terminal 300 can be stored in the IC card to be inserted into the IC card reader, it is not limited by the present invention.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate to the call terminal 300. Thereby, this invention is not limited.

Referring to FIGS. 29A and 29B, when the information reading unit 360 of the call terminal 300 reads predetermined payment means information, the information is provided to the encryption processing unit 370 (2900). If is provided, the encryption processing unit 370 is a message digest containing a predetermined one-way hash function (for example, a hash code of a predetermined length regardless of the length of the payment means information) Message Digest (Message Digest) ) And a one-way hash function that cannot identify (or infer) the original message via the hash code (or message digest.) The call terminal 300 and the server 100 have the same hash function. Generate a predetermined message digest (2905), and digitally sign the message digest by encrypting the message digest using the terminal-side private key (2910).

Herein, the encryption function of the encryption processing unit 370 is called E (Encryption), the terminal-side private key is t1 (30erminal side key), the message digest is m (message digest), and the terminal-side private key is encrypted. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 370 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the message digest through the terminal-side private key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the digital signature function of the encryption processing unit 370 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 370 generates a predetermined random secret key for encrypting the payment means information in a secret key (symmetric key) method (2915), and the payment means information and The message digest encrypted with the terminal-side private key and a copy of a certificate (for example, a certificate including a terminal-side public key) provided in the public certificate are linked to each other and encrypted through the generated secret key (2920).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the secret key is r (random secret key), the payment means information and the copy of the certificate P (Plaintext), and the encrypted payment with the secret key If the means information and the copy of the certificate are referred to as C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by an equation such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 370 extracts (2925) a predetermined server 100 side public key from the authorized certificate in order to encrypt the secret key that encrypted the payment means information (2925), the server 100 side public A secret key encrypting the payment means information is encrypted using a key (2930).

Here, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the server 100 public key is s1 (server side key), the secret key is r (random secret key), and the server ( If the secret key encrypted with the public key of side 100 is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the secret key through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature). Algorithm, DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithms may be used, but in a specific encryption algorithm The present invention is not limited by this.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Es1 (r) = re mod n ".

The message digest encrypted with the payment means information and the terminal-side private key and a copy of the certificate including the terminal-side public key are linked to each other and encrypted through the generated secret key, and the secret key is encrypted on the server 100 side. When encrypted with a public key, the encryption processing unit 370 is configured to copy a certificate including the message digest encrypted with the private key and the message digest encrypted with the terminal-side private key and the terminal-side public key. Generates predetermined transaction data in association with the private key encrypted with the public key on the side 100, and provides the generated transaction data to the communication processing unit 340 (2935), and the communication processing unit 340 transmits the transaction data. Is transmitted to the server 100 through a network component on the telephone network and / or VoIP network (2940).

30A and 30B illustrate a method of decrypting payment means information encrypted and received by the server 100 by a key exchange method according to an embodiment of the present invention.

In more detail, FIGS. 30A and 30B show the transaction data including the encrypted payment means information from the call terminal 300 having the encryption function as shown in FIG. 20. The present invention relates to a method of decrypting transaction data by a key exchange method, and if the present invention belongs to a general knowledge, a call terminal on the telephone network and / or a VoIP network by referring to and / or modifying the drawing of FIG. Although it is possible to infer various implementation methods for decrypting the transaction data encrypted by the key exchange scheme in the same key exchange scheme at 300, the present invention includes all the inferred implementation methods, and is illustrated in FIG. 30. It is not limited to implementation method.

In FIG. 30 according to an embodiment of the present invention, the server 100 side private key and the terminal side public key for decrypting the transaction data in a key exchange method are read out from the public certificate provided in the server 100. Preferably, the public certificate is preferably stored in a predetermined database (not shown) interworking with the server 100, whereby the present invention is not limited.

30A and 30B, the receiving unit of the server 100 receives the transaction data including the payment means information encrypted through the telephone network and / or the VoIP network (3000), and decrypts the transaction data. It is provided to the unit 155 (3005), the transaction data is preferably received via a communication protocol defined in the telephone network and / or VoIP network, and / or the payment means information and the terminal encrypted with the secret key And a copy of the certificate including the message digest encrypted with the side private key and the terminal side public key, and the secret key encrypted with the server 100 side public key.

Thereafter, the decryption unit 155 extracts the server 100 side private key from the public certificate provided in the server 100 to decrypt the secret key encrypted with the server 100 side public key (3010). And decrypting the private key through the server 100 side private key (3015), thereby decrypting a copy of the certificate including the message digest encrypted with the payment means information and the terminal side private key and the terminal side public key. The secret key for the extraction (3020).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), and the private key encrypted with the server side key (s2) and the public key encrypted with the server 100 side C ( Ciphertext) and a secret key decrypted by the server 100 side private key are r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 155 is "Ds2 = r, or Ds2. It can be expressed by an expression such as (Es1 (r)) = r ".

According to the exemplary embodiment of the present invention, the decryption unit 155 decrypts the secret key encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100, the RSA. (Ron Rivest, Adi Shamir, Len Adleman), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although various types of decryption algorithms may be used, the decryption algorithm is matched with an encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoder 155 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the decryption unit 155 copies the certificate including the message digest and the terminal side public key encrypted with the payment means information and the terminal side private key using the extracted secret key. By decrypting (3025), a copy of the certificate including the payment means information encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key are extracted.

Here, the decryption function of the decryption unit 155 is called D (Decryption), and the secret key is r (random secret key), the payment means information encrypted with the secret key, and the message digest encrypted with the terminal-side private key; C (Ciphertext) is a copy of the certificate containing the terminal-side public key, and P (Plaintext) is a copy of the certificate including the message digest encrypted with the decrypted payment means information and the terminal-side private key and the terminal-side public key. , The decrypting unit 155 decrypts the copy of the certificate including the encrypted payment means information, the message digest encrypted with the terminal-side private key, and the terminal-side public key, "Dr = P, or Dr." It can be expressed by an expression such as (Er (P)) = P ".

According to an embodiment of the present invention, the decryption unit 155 decrypts a copy of the certificate including the message digest encrypted with the encrypted payment means information and the terminal-side private key and the terminal-side public key through the secret key. Preferably, the algorithm includes at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA). In addition, various types of decryption algorithms may be used. The decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 300, the invention is not limited by a specific decryption algorithm.

In addition, the decryption unit 155 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (3030), and generates and transmits the message from the payment means information in the call terminal 300. The digest is extracted (3035).

Here, the decryption function of the decryption unit 155 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. If the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the decryption unit 155 is " Dt2 = m, or Dt2 (Es1 (r)) = m " The same formula can be used.

According to an embodiment of the present invention, the decryption unit 155 decrypts the message digest encrypted with the terminal-side private key in the call terminal 300 through the terminal-side public key, RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it can be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 300, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dt2 = Cd mod n ".

Subsequently, the decoder 155 generates a predetermined message digest through the same one-way hash function from the received payment means information (3040), and then generates the generated message digest and the decoded message. By comparing the message digest (3045), the validity of the received payment instrument information is verified.

If the generated message digest and the decrypted message digest match (3050), the decryption unit 155 provides the payment means information to the full text generation unit 130 (3055), the full text generation unit ( 130 performs the full text generation procedure defined in the server 100 using the payment means information.

Figure 31 illustrates a product ordering and purchasing process for payment processing using the call terminal 300 according to another embodiment of the present invention.

In more detail, in FIG. 31, the call terminal 300 shown in FIG. 20 connects to the server 100 shown in FIG. 18 through at least one or more telephone networks and / or VoIP networks to order and purchase certain goods. Regarding a process in which payment processing using the call terminal 300 according to the present invention is started through the process, a person having ordinary knowledge in the art to which the present invention belongs, will be referred to and / or modified with reference to FIG. A predetermined call terminal 300 connects a call channel for ordering and purchasing a product with a predetermined server 100 through at least one telephone network and / or a VoIP network, and orders and supplies at least one product through the call channel. By purchasing, various implementation methods for initiating payment processing using the call terminal 300 according to the present invention may be inferred, but the present invention includes all the inferred implementation methods. And it shall not be limited to the exemplary method shown in the figure 31.

Hereinafter, in FIG. 31, the call terminal 300 having the card reader shown in FIG. 20 is referred to as "terminal" for convenience.

Referring to FIG. 31, a terminal complying with the functional configuration shown in FIG. 20 may include at least one telephone network (e.g., a general telephone switching network (or intelligent network), and / or a mobile communication network) and / or a VoIP network (e.g., TCP / Connect a predetermined communication channel with the server 100 through an IP (and / or UDP / IP) based wired communication network and an IEEE 802.16x based portable Internet (3100), and at the server 100 through the communication channel A procedure of selecting, ordering, and purchasing at least one or more purchased products is performed according to the provided product ordering procedure (3105).

If the person skilled in the art to which the present invention pertains, the terminal connects a predetermined communication channel with the server 100, and a predetermined product ordering procedure (for example, ARS and / or counselor through the communication channel). As you will be familiar with the key beep based product ordering process through connection, the detailed procedure for this will be omitted for convenience.

During the product order process as described above, the server 100 checks whether or not payment processing for the purchased product (3110), if the payment processing for the purchased product is confirmed (3115), the server ( 100 adds (or allocates) a data channel corresponding to the telephone network and / or a VoIP network to a call channel connected to the terminal, or assigns the voice call-based communication channel to a data channel corresponding to the telephone network and / or a VoIP network. Switch to 3120.

If a data channel corresponding to the telephone network and / or VoIP network is added (or assigned) to the call channel as described above, or if the voice call-based communication channel is switched to a data channel corresponding to the telephone network and / or VoIP network, The server 100 requests to read the predetermined payment means information from the customer-owned card through the card reader provided in the terminal through the data channel (3125).

32 is a flowchart illustrating a payment means information reading process for payment processing using the call terminal 300 according to another exemplary embodiment of the present invention.

More specifically, FIG. 32 shows the call terminal 300 shown in FIG. 20 through at least one telephone network and / or a VoIP network by performing the process shown in FIG. 31 on the server 100 shown in FIG. When requesting the predetermined payment means information, the call terminal 300 reads the predetermined payment means information from the customer-owned card through a predetermined card reader to provide to the server 100, Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 32 to read predetermined payment means information in a predetermined call terminal 300 to establish at least one telephone network and / or VoIP network. Various implementation methods provided to the predetermined server 100 may be inferred, but the present invention includes all the implementation methods inferred above, and the implementation method illustrated in FIG. It is not limited to this.

For example, in FIG. 32, the terminal performs an encryption procedure for predetermined payment means information read from the customer's own card. The encryption procedure is performed to satisfy a high degree of security of the payment means information. As performed, it may be omitted in accordance with the intention of those skilled in the art, whereby the present invention is not limited.

In the following Figure 32, the call terminal 300 with the card reader shown in Figure 20 is referred to as "terminal" for convenience.

Referring to FIG. 32, the terminal performs the predetermined payment through a data channel corresponding to at least one or more telephone networks and / or VoIP networks by the server 100 shown in FIG. 18 performing the process shown in FIG. In operation 3200, if the predetermined payment means information is requested from the server 100 (3205), the terminal switches the operation mode to the payment processing mode using the data channel (3210). Output through the screen output means provided in the terminal to read predetermined payment means information from the customer-owned card through the card reader provided in the terminal, and / or through the audio output means provided in the terminal. Output (3215).

After the predetermined payment means information reading is requested from the customer-owned card as described above, the terminal checks whether the predetermined payment means information is read from the customer-owned card through the card reader (3220). If predetermined payment means information is read from 3322, the terminal performs an encryption procedure for the read payment means information (3230).

Thereafter, when the payment means information is encrypted (3235), the terminal transmits the encrypted payment information to the server 100 through the data channel set in the telephone network and / or VoIP network (3240).

Figure 33 illustrates a payment approval request full text generation process for payment processing using the call terminal 300 according to another embodiment of the present invention.

33 shows the server 100 shown in FIG. 18 through at least one telephone network and / or a VoIP network by performing the process shown in FIG. 32 in the call terminal 300 shown in FIG. When the predetermined means for payment information is transmitted to the process for generating a predetermined payment approval request message including the payment means information in the server 100 to process the payment, the general knowledge in the technical field to which the present invention belongs If a person having the present invention with reference to Figure 33 and / or modified to infer various implementation methods for generating a predetermined payment approval request full text using the payment means information provided from the call terminal 300 in the predetermined server 100 It should be noted that the present invention encompasses all of the inferred implementation methods and is not limited to the implementation method shown in FIG.

For example, in FIG. 33, the terminal performs a decryption procedure on the payment means information provided from the call terminal 300. The decryption procedure is performed only when the payment means information is encrypted. It may be omitted depending on the intention, and thereby the present invention is not limited.

In addition, the full text of the payment approval request generated by the server 100 in FIG. 33 is a full credit card payment approval request including the credit card payment means information shown in FIG. 19, which is common in the art. If you have the knowledge, the full check card payment approval request, and / or debit card payment approval request in the server 100 in response to the payment means information provided from the call terminal 300, and / or prepaid card payment It will be possible to infer an implementation method for generating a full approval request, and / or a full account transfer payment approval request, and the like, and the present invention includes all the inferred implementation methods.

Hereinafter, in FIG. 33, the call terminal 300 having the card reader shown in FIG. 20 is referred to as "terminal" for convenience.

Referring to FIG. 33, the server 100 shown in FIG. 18 performs a predetermined payment means through a data channel corresponding to at least one or more telephone networks and / or VoIP networks by performing the process shown in FIG. 32 at the terminal. If the information is received (3300), if the predetermined payment means information is received from the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP network (3305), the server 100 receives the reception By checking whether the payment means information is encrypted, it is checked whether the payment means information is decrypted (3310).

If it is determined that the payment means information is decrypted (3315), the server 100 performs a decryption procedure on the encrypted payment means information, thereby possessing the customer through a predetermined card reader in the terminal. The payment method information read from the card is restored (3320).

On the other hand, if it is determined that the payment means information does not need to be decrypted (eg, when the payment means information is not encrypted) 3315, and / or the encrypted payment means information is decrypted, the server 100. After extracting payment information including the merchant information and the total payment amount information to be included in the payment approval request full text from the storage medium 140 (3325), and generates a document serial number to be included in the full payment approval request (3330) A predetermined payment approval request message including the payment means information received from the terminal, the merchant information, the total payment amount, and the document serial number (3335).

Thereafter, the server 100 transmits the full payment approval request message to the payment server 200 corresponding to the payment means information through a predetermined network (3340), and the payment server 200 completes the payment approval request message. Receives and reads and performs a payment processing procedure corresponding to the payment means information to generate a predetermined payment processing details (for example, payment processing approval details, or payment processing error details) (3345), and includes the payment processing details After generating a predetermined payment approval message (3350), the payment approval message is transmitted to the server 100 through the network (3355).

Those skilled in the art to which the present invention pertains, a method for transmitting the full text of the payment approval request from the server 100 to the payment server 200 through a predetermined network, and / or the payment server ( A method of performing a payment processing procedure by reading the full text of the payment approval request at 200), and / or generating a predetermined payment processing history after performing the payment processing procedure at the payment server 200 and generating the payment processing history. Since you will be familiar with how to generate a payment approval message including a transmission to the server 100 through the network, such a detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the payment server 200 may directly transmit the payment approval message (or payment processing details) to the terminal through the telephone network and / or the VoIP network (eg, a payment approval request). The terminal information providing the payment means information in a preamble), and the present invention is not limited thereto.

34 is a flowchart illustrating a payment approval process for payment processing using the call terminal 300 according to another exemplary embodiment of the present invention.

In more detail, in FIG. 34, the server 100 shown in FIG. 18 performs the process shown in FIG. 33 to generate a full payment approval request message corresponding to the payment means information. After performing the payment approval procedure through, when a payment approval message including the payment processing history is received, the process for processing the payment approval message in the server 100, the present invention generally belongs to Those skilled in the art will be able to infer various implementation methods for processing the payment approval full text in the predetermined server 100 by referring to and / or modifying the drawing 34, but the present invention provides the inference implementation method. It includes all, and is not limited to the embodiment shown in FIG.

Hereinafter, in FIG. 34, the call terminal 300 having the card reader shown in FIG. 20 is referred to as "terminal" for convenience.

Referring to FIG. 34, the server 100 shown in FIG. 18 performs a process shown in FIG. 33 by providing a payment approval message corresponding to the payment approval message from the payment server 200 through a predetermined network. If it is received (3400), if the payment approval message including the payment processing history corresponding to the payment approval request full text from the payment server 200 through the network (3405), the server 100 is By extracting and reading a predetermined payment processing history from the payment approval full text, it is checked whether payment processing through payment means information provided from the terminal has been approved (3410).

If payment processing through the payment means information provided from the terminal is not approved (3415), the server 100 completes the payment approval message to the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP network By transmitting and outputting (and / or payment processing error details) (3420), the payment processing process using the call terminal 300 according to the present invention is terminated.

On the other hand, if the payment processing through the payment means information provided from the terminal is approved (3415), the server 100 is the full payment approval to the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP network ( And / or payment processing approval details) and outputs the data (3425), and then performs the ordering process after the payment processing approval (3430), thereby completing the payment processing process using the call terminal 300 according to the present invention. .

35 is a diagram showing the configuration of a payment system using the call terminal 300 according to another embodiment of the present invention.

In more detail, Figure 35 shows an order for a telephone call using a voice call through a call terminal 300 equipped with a predetermined card reader, and reads predetermined payment means information from a predetermined customer-owned card through the card reader. As a configuration of a system for processing payment corresponding to an order, those skilled in the art to which the present invention pertains, various payment system configuration using the call terminal 300 by referring to and / or modified in this figure 35 It may be inferred, but the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

That is, in the implementation method illustrated in FIG. 35, a predetermined customer makes a call with a server 100 (eg, an Automatic Response Service (ARS) server 100) provided in a predetermined affiliated store through a predetermined call terminal 300. After connecting a channel, performing a predetermined telephone ordering procedure through the call channel, the server 100 extracts payment information including merchant information, product information, and payment amount information from a predetermined storage medium 140. When transmitting to the call terminal 300, through the card reader provided in the call terminal 300, the predetermined payment means information is read from the customer-owned card equipped with a predetermined payment means, the payment means information and the The present invention relates to a system configuration for generating a predetermined payment approval request text based on payment information and transmitting the payment to the payment server 200 to process a payment.

In addition, although the functional component for the payment processing using the call terminal 300 according to the present invention is shown in the predetermined server 100 through the embodiment shown in FIG. 35, this is a technical feature of the present invention. The present invention is not limited by this, but the present invention is not limited thereto. The payment processing system using the call terminal 300 according to the present invention includes a plurality of servers (or terminals) 100 having the above-described functional components. The implementation method, and / or the method (or terminal) 100 on the call center system if the predetermined call center is provided in the affiliated store, the implementation method comprising the functional configuration unit, and / or the predetermined ARS server in the affiliated store ( If 100 is already provided, an implementation method of additionally providing the functional configuration unit in the ARS server 100, and / or if a predetermined affiliated store terminal is provided in the affiliated store, In that the terminal can comprise any of the exemplary method comprising a further configuration the function.

The call terminal 300 used by the customer is a wired telephone (and / or a wireless telephone communicating with the radio frequency (RF) with the wired telephone) connected to a public switched telephone network (PSTN), and / or CDMA (Code) Division Multiple Access (Telephone) connected to a stack based mobile communication network (e.g., Personal Communication System (PCS) and / or Global System for Mobile (GSM) terminals), and / or Transmission Control Protocol / Internet Protocol (TCP / IP) And / or at least one VoIP terminal connected to a User Datagram Protocol / Internet Protocol (UDP / IP) based wired communication network and / or a Voice over IP (VoIP) network operating based on an IEEE 802.16x based portable Internet network. Characterized in that made.

In addition, the call terminal 300 may include at least one telephone network (eg, a general switched telephone network (PSTN), and / or a mobile communication network), and / or a VoIP network (eg, a TCP / IP and / or UDP / IP-based wired communication network). And / or a server provided at a merchant through a network in which a Real-time Transport Protocol / RTP Control Protocol (RTP) layer is defined in a transport layer on a protocol stack based on the IEEE 802.16x-based portable Internet. It is characterized in that the connection 100 and the predetermined call channel.

According to an embodiment of the present invention, the general switched telephone network is a recent intelligent network (for example, a communication network connecting a plurality of circuits using at least one or more exchangers) in a conventional intelligent network (for example, interspersed within a communication network). And at least one switch, a service control node, an in-network control database, and the like, which are organically integrated through a common line signal network or a data network, and controlled by a computing technology), and / or the intelligent network. In this way, a landline telephone (and / or a radiotelephone in RF communication with the landline telephone) connected to the general telephone switching network (= intelligent network) basically provides a voice call service and also provides a predetermined data channel. Provides data communication (eg, message transmission and reception) services.

In addition, the mobile communication network provides both a CDMA stack-based circuit switched voice call channel and a data channel, whereby a mobile phone connected to the mobile communication network basically provides a voice call service and a predetermined data channel. Data communication (eg, wireless message transmission and / or wireless Internet access, etc.) services.

In addition, the VoIP network basically provides a predetermined RTP / RTCP (Real-) to provide a real-time voice call service to a higher layer of a UDP on a wired / wireless communication network supporting TCP / IP (and / or UDP / IP) supporting data communication. As a communication network defining a time transport protocol / RTP control protocol (Layer) layer, the VoIP network basically provides both a voice call channel and a data channel, whereby a VoIP terminal connected to the VoIP network basically provides a voice call service. Of course, it provides a data communication (eg, message transmission and reception) service through a predetermined data channel.

According to the present invention, the call terminal 300 is a card reader for reading predetermined payment means information from a magnetic stripe (MS) card conforming to the ISO / IEC 7810 standard, and / or a contact type conforming to the ISO / IEC 7816 standard. At least one card reader for reading predetermined payment means information from an IC (Integrated Circuit) card and / or at least one card reader for reading predetermined payment means information from a contactless IC card conforming to ISO / IEC 14443 standard, It is characterized in that the preferred embodiment for this will be described in detail with reference to FIG.

Referring to FIG. 35, the server 100 provided in the affiliated store includes a call terminal 300 and a call channel used by a customer through at least one or more telephone networks (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network. A voice channel 115 for providing a voice call for a predetermined telephone order and payment processing according to the present invention; In response to the voice guidance in conjunction with the processing unit 105 receives a key signal generated in the call terminal 300, and extracts predetermined information by reading the key signal in a Dual Tone MultiFrequency (DTMF) scheme. It is characterized by comprising a signal processing unit 120.

The call channel processing unit 105 is assigned a predetermined telephone number for connecting a predetermined call channel with at least one call terminal 300, and corresponds to the telephone network and / or VoIP network based on the telephone number. By performing a predetermined call processing procedure it is characterized in that the at least one or more communication terminals 300 and the communication channel is connected.

Those skilled in the art will be familiar with certain call processing procedures corresponding to the telephone network and / or the VoIP network, and thus a detailed description thereof will be omitted.

The voice guide unit 115 is connected to at least one or more call terminals 300 through the call channel processing unit 105, the customer authentication and / or goods to the call terminal 300 through the call channel Characterized in that it outputs a predetermined voice guidance for order processing, and also outputs a voice guidance for payment processing using the call terminal 300 according to the present invention to the call terminal 300 through the call channel. Characterized in that.

According to an exemplary embodiment of the present invention, the voice guide unit 115 is connected to the call terminal 300 through the call channel based on product information stored in a predetermined storage medium 140 and payment amount information corresponding to the product. Extract a predetermined voice announcement (eg, extract from a predetermined voice announcement storage database (not shown)), and / or generate (for example, create a voice guide comment in a TTS (Text To Speech) method) After that, it is preferable to output the voice announcement to the call terminal 300 through the call channel.

According to another exemplary embodiment of the present invention, the voice guide unit 115 outputs voice guidance of a counselor corresponding to a predetermined call center terminal (and / or affiliated phone) to the call terminal 300 through the call channel. The present invention is not limited thereto.

The signal tone processor 120 reads the key tone using the DTMF scheme when a DTMF tone is generated from the call terminal 300 in response to the voice guidance and is received through the call channel. (Eg, “0 to 9”, “*”, “#”, etc.) are identified and extracted.

In addition, the signal tone processing unit 120 may receive the purchase product information in the form of a key tone signal transmitted from the call terminal 300, the purchase product information is the call terminal (115) through the voice guide unit (115) Purchase product selection information in the form of voice information through a voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), or / or the purchase product selection number corresponding to the voice announcement provided at 300). Preferably, it comprises a, whereby the product information corresponding to the purchase product information (and / or payment amount information associated with the product information) is extracted from the predetermined storage medium 140.

According to another exemplary embodiment of the present invention, the signal processing unit 120 may directly receive predetermined payment amount information (for example, payment amount) transmitted from the call terminal 300, whereby the present invention It is not limited.

In addition, the signal processing unit 120 may further receive a predetermined discount information transmitted from the call terminal 300, the discount information is a coupon number corresponding to a predetermined discount coupon possessed by the customer It is preferable to include, and thereby the payment amount can be discounted.

In addition, the signal processing unit 120 may further receive a predetermined product delivery address information transmitted from the call terminal 300, the product delivery information is the call terminal 300 through the voice guide unit 115 The product delivery destination selection number corresponding to the voice announcement (for example, a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement) And delivery address information (eg, in the form of voice information) through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), or / or a detailed address ("address / call") number, etc.). , Customer's address), thereby securing an address to which the purchased product will be delivered.

In addition, the signal processing unit 120 may further receive predetermined payment means selection information transmitted from the call terminal 300, the payment method selection information is the voice terminal 115 through the call terminal 115; Any one of a credit card payment means, and / or a check card payment means, and / or a debit card payment means, and / or a prepaid card payment means, and / or a wire transfer payment means corresponding to the voice announcement provided to 300. It is preferable to include information for selecting the payment means of, and preferably further comprises card company (or financial company) information that issued the card corresponding to the payment means to the customer.

Those skilled in the art to which the present invention pertains will understand the method for generating the DTMF type key beep and the method for reading and confirming and extracting predetermined information by reading the key beep. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the information extracted based on the key tone of the DTMF method may be extracted through a predetermined data channel based on the call channel instead of the key tone. The present invention is not limited thereby.

According to the present invention, the server 100 provided in the affiliated store connects the call terminal 300 to the voice call channel in association with a telephone network and / or a VoIP network component to which the call terminal 300 is connected during the voice call. Add (or assign) a predetermined data channel for payment processing, and / or open a data channel to which the voice call channel is added (or assign) for payment processing using the call terminal 300. And / or a channel controller 110 for converting the voice call channel into a data channel for payment processing using the call terminal 300.

According to an exemplary embodiment of the present invention, when the telephone network and / or VoIP network connecting the call terminal 300 and the server 100 simultaneously support a voice call channel and a data channel, the channel control unit 110 controls the call. A predetermined data channel for payment processing using the call terminal 300 is added (or assigned) to the connected call channel for voice call between the terminal 300 and the server 100.

According to another exemplary embodiment of the present invention, a telephone network and / or a VoIP network connecting the call terminal 300 and the server 100 simultaneously support a voice call channel and a data channel, and the call terminal 300 and the server ( When a predetermined data channel is added (or assigned) to a connected call channel for voice call between 100, the channel controller 110 is a call channel connected between the call terminal 300 and the server 100. The data channel added to (or assigned) to is characterized in that for opening the payment processing using the call terminal (300).

According to another exemplary embodiment of the present invention, when the telephone network and / or the VoIP network connecting the call terminal 300 and the server 100 do not simultaneously support a voice call channel and a data channel, the channel controller 110 Is characterized in that the communication channel is connected between the call terminal 300 and the server 100 for a voice call to a predetermined data channel for payment processing using the call terminal 300.

According to the present invention, the server 100 provided in the affiliated store is provided from the call terminal 300 through the data channel added (or assigned) and / or switched to the voice call channel by the channel controller 110. Characterized in that it comprises an information receiving unit 125 for receiving the transmitted order processing information.

According to an exemplary embodiment of the present invention, the information receiver 125 may receive predetermined purchase product information from the call terminal 300 through the data channel, and the purchase product information may be received through the data channel. It is preferable to include purchase product selection information corresponding to at least one or more product information provided to the call terminal 300, and / or when the call channel supports the voice call channel and the data channel at the same time, the purchase product information Is made by including a purchase product selection number corresponding to the voice guidance provided to the call terminal 300 through the voice guide 115, and / or corresponding to the call center terminal (and / or merchant phone) It is possible to include the purchase product selection information in the form of voice information through the voice guidance of the counselor, thereby The information storage media items (and / or payment information associated with the item information) corresponding to the purchased product information from the unit 140 is extracted.

According to another exemplary embodiment of the present invention, the information receiver 125 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal 300 through the data channel. Thereby, this invention is not limited.

In addition, the information receiver 125 may further receive predetermined discount information transmitted from the call terminal 300 through the data channel, and the discount information is stored in a predetermined discount coupon possessed by the customer. It is preferable to include corresponding coupon information, and / or coupon information provided in the customer-owned discount card, whereby the payment amount can be discounted.

In addition, the information receiving unit 125 may further receive predetermined product delivery address information transmitted from the call terminal 300 through the data channel, and the product delivery address information is provided in the call terminal 300. Address information stored in a memory, and / or subscriber address information stored in a database (eg, subscriber information D / B) on a telephone network and / or a VoIP network to which the call terminal 300 is connected, and / or the like. Alternatively, when the call channel supports the voice call channel and the data channel at the same time, the goods delivery address information may correspond to a goods delivery destination selection number corresponding to the voice announcement provided to the call terminal 300 through the voice guide 115. For example, a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to a voice announcement, a detailed address ("address / number") number, etc.) Including this It is preferable to include delivery address information (eg, a customer's address) in the form of voice information through voice guidance of an agent corresponding to the call center terminal and / or the call center terminal (and / or merchant phone). The address to which the goods are delivered is secured.

In addition, the information receiving unit 125 may further receive predetermined payment means selection information from the call terminal 300 through the data channel, the payment means selection information is the customer payment amount of the purchase product Credit card payment means, and / or check card payment means, and / or debit card payment means, and / or prepaid card payment means, and / or payment transfer means for selecting a payment method for payment processing It is preferable to include the information, it is preferable to further comprise the card company (or financial company) information that issued the card corresponding to the payment means to the customer.

According to the present invention, the server 100 provided in the affiliated store may include affiliated store information and at least one or more product information necessary for generating a predetermined payment approval request message in the call terminal 300 from a predetermined storage medium 140. And an information extracting unit 160 for extracting payment information including payment amount information, wherein the payment amount information includes payment amount information for each product, and / or total payment amount information (eg, total payment). Even if the amount is omitted, the total amount of payment can be calculated by adding up the amount of payment for each product in the call terminal 300).

According to one embodiment of the invention, the payment means information read from the customer owned card through the card reader provided in the call terminal 300 is credit card payment means information, and / or check card payment means information, and / or When the debit card payment means information, and / or prepaid card payment means information corresponding to any one, the information extraction unit 160 from the storage medium 140 to the merchant number (for example, merchants for processing the card payment) It is preferable to extract affiliate store information including at least one of an assigned unique number) and / or a terminal number (eg, a unique number provided to an affiliated store terminal (or a payment terminal) provided to an affiliated store for processing card payment). Do.

According to another exemplary embodiment of the present invention, when the payment means information read from the customer-owned card through the card reader provided in the call terminal 300 corresponds to the account transfer payment means information, the information checking unit 135 It is preferable to check the merchant information including merchant account information (eg, the merchant's financial account number, and / or branch number, and / or account holder information) from the storage medium 140.

If the affiliated store is a franchise company and a server 100 for payment processing using the call terminal 300 is provided in the call center of the franchise company, the affiliated store information is affiliated store information corresponding to the franchise company, and And / or affiliated store information corresponding to a franchise chain store that manufactures and packages a product corresponding to the purchased product information to the customer and delivers the product to the customer, and thus, the present invention is not limited thereto.

In addition, the product information extracted by the information extraction unit 160 from the storage medium 140 and the payment amount information is product information corresponding to the purchase product selection information received from the call terminal 300, and the purchase of the product It is desirable to include the amount of payment information necessary to make.

If predetermined discount information is further received from the call terminal 300, the payment amount information may include a discounted amount corresponding to the discount information.

According to the present invention, the server 100 provided in the affiliated store receives payment information including the affiliated store information, at least one or more product information, and payment amount information extracted by the information extraction unit 160 through the data channel. Characterized in that it comprises an information transmitting unit 155 for transmitting to the call terminal 300.

Thereafter, the call terminal 300 reads predetermined payment means information included in the customer-owned card from a predetermined card reader, and receives affiliated store information received from the server 100, at least one product information, and a payment amount. Based on the information, a predetermined payment approval request message for generating a payment processing amount corresponding to the payment amount is generated through a payment means corresponding to the payment means information.

According to the method of the present invention, the payment means information is credit card payment read from the MS card and / or contact IC card and / or contactless IC card through at least one card reader provided in the call terminal (300) And at least one or more means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information. Card payment method information (e.g., credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information) of the payment method information may be a predetermined card number and And / or TRACK II information including expiration date, etc., wherein the transfer payment means information includes a predetermined financial account number and And / or customer-owned financial account information including branch number and / or account opening date.

According to an exemplary embodiment of the present invention, when the payment means information read out through the card reader corresponds to the credit card payment means information, the full payment approval request generated by the call terminal 300 is transmitted to the credit card payment means. It is desirable to include a corresponding credit card-based payment authorization request in its entirety.

Alternatively, when the payment means information read through the card reader corresponds to the check card payment means information, the full payment approval request generated by the call terminal 300 is a check card based payment approval corresponding to the check card payment means. It is desirable to include the full request.

Alternatively, if the payment means information read through the card reader corresponds to the debit card payment means information, the full payment approval request generated by the call terminal 300 is debit card-based payment approval corresponding to the debit card payment means It is desirable to include the full request.

Alternatively, if the payment means information read through the card reader corresponds to the prepaid card payment means information, the full payment approval request generated by the call terminal 300 is prepaid card-based payment approval corresponding to the prepaid card payment means It is desirable to include the full request.

According to another exemplary embodiment of the present invention, when the payment means information read out through the card reader corresponds to the bank transfer payment means information, the full text of the payment approval request generated by the call terminal 300 is the financial account of the customer. It is preferable to include the full financial transaction request to withdraw the payment amount from the transfer to the financial account of the merchant.

In addition, the call terminal 300 is a payment server 200 corresponding to the payment means for the payment approval request telegram through the predetermined data channel defined in the telephone network and / or VoIP network for the generated payment approval request telegram Direct transmission to the payment server 200 corresponding to the payment means, and / or through the telephone network and / or the VoIP network. Characterized in that the payment approval message including the payment processing details corresponding to the payment approval request full text.

Here, when the payment means information corresponds to credit card payment means information, the payment server 200 comprises a credit card payment server 200 of the card company (or financial company) that issued the credit card to the customer. And / or when the payment means information corresponds to check card payment means information, including a check card payment server 200 of a card company (or financial company) that issued the check card to the customer, and / or Or when the payment means information corresponds to the debit card payment means information, and comprises a debit card payment server 200 of the card company (or financial company) that issued the debit card to the customer, and / or the payment means If the information corresponds to the prepaid card payment means information, the prepaid card payment server 200 of the card company (or financial company) that issued the prepaid card to the customer; And / or if the payment means information corresponds to the account transfer payment means information, includes a financial server (eg, ledger server) of the financial company (bank) that opened the financial account for the account transfer to the customer It is done by

According to the method of the present invention, the payment approval request is encrypted in a predetermined encryption method in the call terminal 300 in order to prevent exposure to the outside from eavesdropping and / or eavesdropping and / or hacking, The payment server 200 may be transmitted to the payment server 200 through a data channel. In this case, the payment server 200 may receive the encrypted information and decrypt the decryption method corresponding to the encryption method to restore the full payment approval request. This may provide a high level of security for the full payment approval request.

According to the present invention, the payment server 200 performs a payment processing procedure for the payment approval request text, and generates a predetermined payment approval text corresponding to the payment approval request text to the call terminal 300. And transmitting the payment approval message to the server 100 with reference to the affiliated store information included in the payment approval request message.

According to the present invention, the server 100 provided in the affiliated store includes a professional receiving unit 165 for receiving a payment approval text including a payment processing history corresponding to the payment approval request text from the payment server 200. Characterized in that made.

The specialized receiving unit 165 may receive the payment approval message corresponding to the full payment approval request message from the payment server 200 through the telephone network and / or the VoIP network.

In addition, the professional receiving unit 165 checks the payment processing details included in the payment approval message when the payment approval message corresponding to the payment approval request message is received through the telephone network and / or the VoIP network, the payment server The method may further include checking whether the payment processing using the payment means information provided from the call terminal 300 is normally performed or whether a payment error has occurred.

If a predetermined payment error occurs in the payment processing using the payment means information provided from the call terminal 300, the specialized receiver 165 to the call terminal 300 of the customer through the voice guide 115. After outputting the payment error information, the payment processing process using the call terminal 300 according to the present invention is terminated.

According to the present invention, the server 100 provided in the affiliated store is provided with an order processing unit 150 for performing an order processing for the processed product when the payment processing through the payment means information is normally performed. It is characterized by.

According to an embodiment of the present invention, when the information receiving unit 125 receives the order processing information including the purchase product information and product delivery information from the call terminal 300 of the customer, the order processing unit 150 is the Order processing terminal of the department for manufacturing and packaging the purchased goods in the affiliated store through the predetermined communication means 190, the order processing information including the payment processing details and the purchase product information and product delivery address information to the customer And / or when the affiliate is a franchise, manufacturing and packaging the purchased goods through predetermined communication means 190 with order processing information including the payment processing details, the purchased goods information, and the goods delivery information. It is preferable to provide to the order processing terminal of the chain stores to deliver to the customer.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal 300 in the payment processing using the call terminal 300, the order processing unit 150 Is further processed to receive the goods delivery address information from the call terminal 300 through the voice guide unit 115 (and / or call center terminal, and / or merchant phone) to include the purchase goods information and goods delivery destination information Secures information, manufactures and packages the purchased goods in the affiliated store through the predetermined communication means 190 and delivers the order processing information including the payment processing details, the purchased goods information, and the goods delivery address information to the customer. Provide to the order processing terminal of the department, and / or if the merchant is a franchise, the payment processing history, the purchase product information and product delivery designation The order processing information including through a predetermined communication means 190 to provide the purchased items to the order processing terminal chain of which the manufacture and packaging shipped to the customer are preferred.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal 300 in the payment processing using the call terminal 300, the order processing unit 150 ) Provides the payment processing details and the purchased product information to an order processing terminal of a department that manufactures, packages, and delivers the purchased product in the affiliated store through a predetermined communication means 190, and / or When the affiliated store is a franchise, a chain store that manufactures and packages the purchased product through a predetermined communication means 190 and delivers the order processing information including the payment processing history, the purchased product information, and the product delivery address information to the customer. After providing the order processing terminal of the, the call channel between the customer's call terminal 300 and the server 100 between the call terminal 300 and the order processing terminal By changing to the channelized, so that it is possible to further obtain the product shipping information from the order processing terminal and, in addition, it is possible to perform various types of processing procedures according to the order of those of ordinary skill in the art intended.

36 is a diagram showing the functional configuration of the call terminal 300 according to another embodiment of the present invention.

More specifically, FIG. 36 illustrates one embodiment of a call terminal 300 for payment processing using the call terminal 300 according to the present invention, and a person having ordinary knowledge in the art to which the present invention belongs, While it will be possible to infer and configure various features of the call terminal 300 for payment processing using the call terminal 300 by referring to and / or modifying the drawing 36, the present invention includes all implementation methods inferred from the above. It is not limited to the implementation method shown in FIG.

Referring to FIG. 36, the call terminal 300 basically includes a control unit 305, a memory unit 350, a key input unit 310, a voice processing unit 315, a screen output unit 320, and a signal tone processing unit 335. And a power supply unit 330 for supplying power to the communication terminal 340 and the call terminal 300, the card reader unit 325 for payment processing using the call terminal 300 according to the present invention. And / or the security application module 345, etc., and may further include at least one or more functional components (not shown) according to the intention of those skilled in the art.

The control unit 305 basically controls the key input unit 310, the voice processing unit 315, the screen output unit 320, and the communication processing unit 340 so that a predetermined telephone input through the key input unit 310 is performed. Connect a voice call channel with at least one other call terminal (or server) 100 through a telephone network and / or a VoIP network connected to the communication processor 340 based on the number, and through the voice processor 315. It converts the input / output voice signal into an electrical signal (and / or digital signal) to operate and control the voice call function to transmit and receive through the voice call channel, so that the hardware of the call terminal 300 At least one processor and execution memory (eg, registers and / or CPUs) including a central processing unit (CPU) / microprocessor unit (MPU) included in the call terminal 300 to realize a function. RAM (Random Access Memory) and a bus (BUS) for inputting and outputting predetermined data, characterized in that it is provided in the call terminal 300 to realize the function of the call terminal 300 by software A program routine that is loaded from a recording medium into the execution memory and is processed by the processor may be a generic term.

In addition, the controller 305 controls the communication processor 340 to access data channels defined in a telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network connected to the communication processor 340. Connecting a predetermined data channel for data communication with at least one terminal (or server) 100 and operating and controlling a function of transmitting and receiving at least one digital information (or digital data) through the data channel. To this end, for this purpose, at least one or more processors including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data to the call terminal 300 for the data communication in hardware. And the execution from the recording medium provided in the call terminal 300 for the data communication by software. Is loaded into the memory is characterized in that the generic calculation processing routine program and / or program data by the processor.

In addition, the control unit 305 controls the predetermined card reader unit 325 provided in the call terminal 300 for the payment processing using the call terminal 300, through the card reader unit 325 It is characterized in that the operation and control to read the predetermined payment means information from the customer-owned card, for this purpose CPU / MPU to the call terminal 300 for payment processing by using the call terminal 300 in hardware And at least one processor including an at least one processor and an execution memory, and a bus for inputting and outputting predetermined data. The call terminal 300 for payment processing using the call terminal 300 by software. A program routine and / or program data which are loaded into the execution memory from the recording medium provided in the package) and arithmeticly processed by the processor. It is characterized by.

In addition, the controller 305 controls the predetermined security application module 345 provided in the call terminal 300 for the payment processing using the call terminal 300, through the card reader unit 325 Generate a predetermined text based on the predetermined payment means information from the customer-owned card, and operates and controls the transmission of the full text to the payment server 200 through the communication processing unit 340, In order to process the payment using the call terminal 300 in hardware, the call terminal 300 includes at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data; And a recording medium provided to the call terminal 300 to the execution memory for payment processing using the call terminal 300 by software. Guiding is characterized in that the general term for calculation processing program routine and / or the program data by the processor.

Accordingly, the call terminal 300 shown in FIG. 36 is loaded into the execution memory from the recording medium provided in the call terminal 300 for payment processing using the call terminal 300, and operated by the processor. Program routines to be processed are described in block form in the controller 305 for convenience.

The memory unit 350 inputs and outputs when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the call terminal 300 is performed. General term of non-volatile memory for storing information or data), including at least hardware-based electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD). It includes one or more storage means, the control unit 305 is a predetermined program routine and program data required to perform a predetermined control function (for example, the program routine is input or output to perform a predetermined function) Data) is stored.

According to the method of the present invention, the memory unit 350 is a payment means for at least one or more card issuers (eg, card company, financial company) for the payment processing using the call terminal 300, and for each card issuer The payment server 200 address information corresponding to the payment means is preferably stored in a cooperative process, whereby a predetermined payment approval request for payment processing using the call terminal 300 in the call terminal 300 When it is generated, the payment server 200 to transmit the full payment approval request is confirmed.

In addition, the memory unit 350 preferably stores at least one encryption key for payment processing using the call terminal 300.

The key input unit 310 is provided with at least one key button including at least one or more number keys and / or character keys and / or function keys. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or operation mode of the call terminal 300 controlled by the controller 305. When predetermined information (or signal) is input from the key button, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 305.

When the current input mode and / or operation mode of the call terminal 300 is a voice call mode, the controller 305 obtains predetermined key data corresponding to the key event and provides the same to the beep processor 335. The tone processing unit 335 may generate a key tone corresponding to the key data according to a dual tone multifrequency (DTMF) scheme.

When the current input mode and / or operation mode of the call terminal 300 is a data communication mode, the controller 305 acquires predetermined key data corresponding to the key event, and then information corresponding to the key data. And performing a processing procedure, and / or acquiring an instruction for executing a predetermined function matched with the key event, and then performing a function corresponding to the instruction.

According to the exemplary embodiment of the present invention, the key input unit 310 and the key input device having at least one or more key buttons interoperate with each other to perform a function of key input means provided in the call terminal 300.

According to an embodiment of the present invention, the key input device which is interlocked with the key input unit 310 may include a keypad device having at least one numeric key, a letter key ('*', '#') and a function key, and / Or at least one or more keyboard devices including at least one numeric key, character keys (eg, English character keys, and / or Korean character keys) and function keys.

The voice processing unit 315 converts a predetermined voice input from a predetermined voice input device (for example, a microphone) included in the call terminal 300 into a predetermined voice signal (or an electrical signal), and the communication processor 340. Is encoded using a voice encoding scheme corresponding to a telephone network and / or a VoIP network connected to the PDP network to generate predetermined voice data, and provides the voice data to the controller 305. The processing unit 315 is preferably provided with a predetermined vocoder and a codec.

Thereafter, the controller 305 transmits the generated voice data to the telephone network and / or the VoIP network through the communication processor 340.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the voice processing unit 315 transmits the voice signal (or electrical signal) to the general telephone switching network (or intelligent network). It is preferable to generate the voice data by encoding by using a coding scheme that can be transmitted through).

According to another exemplary embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the voice processor 315 may transmit the voice signal (or electrical signal) through the mobile communication network. Division Multiple Access) It is preferable to generate the speech data by encoding in a coding scheme corresponding to the stack.

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a VoIP network, the voice processor 315 may transmit the voice signal (or electrical signal) through the VoIP network. Preferably, the voice data is generated by encoding with a coding scheme corresponding to a stack, wherein the coding scheme corresponding to the VoIP network is an H.323 protocol standard and / or an Internet Engineering Task defined by the International Telecommunication Union (ITU). It is preferable to include at least one or more of the Session Initiation Protocol (SIP) protocol specifications defined by the Force.

According to an embodiment of the present invention, the voice processing unit 315 and the voice input device interoperate with each other to perform a function of voice input means for receiving a voice signal for voice call through the telephone network and / or the VoIP network.

When voice data encoded by a predetermined encoding method is received through the communication processor 340, the controller 305 provides the voice data to the voice processor 315, at which time the voice processor 315 is provided. Decodes the voice data by a voice coding scheme corresponding to a telephone network and / or a VoIP network connected to the communication processor 340 to generate a predetermined voice signal (or an electrical signal), and generates the voice signal (or Electrical signal) is output through a predetermined voice output device (for example, a speaker) provided in the call terminal 300. For this purpose, the voice processing unit 315 is provided with a predetermined vocoder and a codec. desirable.

When the communication processing unit 340 is connected to a general telephone switching network (or an intelligent network) according to an exemplary embodiment of the present invention, the voice processing unit 315 may convert the voice data received through the communication processing unit 340 into the general telephone. It is preferable to generate the speech signal (or electrical signal) by decoding by encoding scheme corresponding to the switching network (or intelligent network).

According to another exemplary embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the voice processing unit 315 may transmit voice data received through the communication processing unit 340 to correspond to the mobile communication network. It is preferable to generate the speech signal (or electrical signal) by decoding by stack-based encoding.

According to another embodiment of the present invention, when the communication processing unit 340 accesses the VoIP network, the voice processing unit 315 may convert the voice data received through the communication processing unit 340 into the VoIP network. It is preferable to generate the voice signal (or electrical signal) by decoding by encoding method, wherein the encoding method corresponding to the VoIP network is at least one of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable that the above specification is included.

According to the embodiment of the present invention, the voice processing unit 315 and the voice output device interoperate with each other to perform a function of voice output means for outputting a voice signal for voice call through the telephone network and / or the VoIP network.

The screen output unit 320 is a liquid crystal display (LCD) by the control unit 305 while the call terminal 300 performs a voice call function and / or a payment processing function using the call terminal 300. And / or at least one or more information or data which is predefined or defined in real time to be output to a predetermined display device including a Cathode Ray Tube (CRT) and / or a CRT (Cathode Ray Tube). The screen output unit 320 and the screen output device interoperate with each other to perform a function of a screen output means provided in the call terminal 300.

Predefined information or data to be output from the call terminal 300 to the screen output device includes key data input through the key input unit 310 and / or components provided in the call terminal 300. Information (or data) stored or generated by the information, information (or data) transmitted / received through the communication processing unit 340, and / or (or data) corresponding to a predetermined operation result performed by the call terminal 300. It comprises at least one.

According to a preferred embodiment of the present invention, the screen output unit 320 of the screen output means for outputting the payment processing screen according to each payment processing step to the screen output device for payment processing using the call terminal 300 It is desirable to perform the function.

The signal processing unit 335 is a predetermined number key ("0 ~ 9") and / or letter key ('*) through the key input unit 310 in the state that the operation mode of the call terminal 300 is the voice call mode ',' # 'Is input, generates a key tone corresponding to the input key data in a complex frequency code (DTMF) scheme, and the key tone is connected to the telephone network and / or to which the communication processor 340 is connected. Characterized in that the voice encoding method corresponding to the VoIP network characterized in that provided to the communication processor 340.

According to an embodiment of the present invention, when the communication processor 340 is connected to a general telephone switching network (or intelligent network), the voice processing unit 315 may transmit the key tone through the general telephone switching network (or intelligent network). It is preferable to generate the speech data by encoding by a coding scheme.

According to another embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the voice processing unit 315 may transmit a code division multiple access (CDMA) stack capable of transmitting the key tone through the mobile communication network. It is preferable to generate the speech data by encoding by a coding scheme corresponding to.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a VoIP network, the voice processing unit 315 encodes a key corresponding to a VoIP protocol stack capable of transmitting the key tone through the VoIP network. It is preferable to generate the voice data by encoding in a scheme, wherein the encoding scheme corresponding to the VoIP network includes at least one of the H.323 protocol standard defined in the ITU and / or the SIP protocol standard defined in the IETF. It is preferable to make.

The communication processor 340 connects the call terminal 300 to a predetermined telephone network and / or VoIP network, and at least one or more other call terminals (or servers) according to a call processing procedure defined in the telephone network and / or VoIP network. ) And the voice call channel.

According to one embodiment of the present invention, the communication processing unit 340 is a physical network configuration (eg, the call terminal 300 to connect the call terminal 300 to a general telephone switching network (or intelligent network) general telephone switching network) (Or a network configuration connecting the switch and the wired communication section provided on the intelligent network), by performing a call processing procedure corresponding to the communication protocol standard defined in the general telephone switching network (or intelligent network) It is preferable to connect the voice call channel with at least one or more other call terminals (or servers) 100.

According to another embodiment of the present invention, the communication processing unit 340 is a physical network configuration for connecting the call terminal 300 to a mobile communication network (for example, the base station provided on the mobile communication network 300) And a network configuration connecting a wireless communication section corresponding to the CDMA stack, and performing at least one call processing procedure corresponding to a communication protocol standard defined in the mobile communication network. It is preferable to connect the voice communication channel with 100).

According to another exemplary embodiment of the present invention, the communication processing unit 340 is a physical network configuration (for example, VoIP provided with the call terminal 300 on the VoIP network) to connect the call terminal 300 to the VoIP network. Network configuration that connects wired communication segments through the Gateway and / or VoIP Gatekeeper and the Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) protocol layer implemented on top of the UDP / IP protocol stack. It is preferable to include a, it is preferable to connect the voice call channel with at least one or more other call terminal (or server) 100 by performing a call processing procedure corresponding to the communication protocol standard defined in the VoIP.

In addition, the communication processor 340 transmits and receives voice data encoded with at least one other call terminal (or server) 100 and an encoding scheme corresponding to the telephone network and / or VoIP network through the voice call channel. It features.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the communication processing unit 340 is encoded by an encoding scheme corresponding to the general telephone switching network (or intelligent network). It is preferable to transmit and receive at least one voice data.

According to another embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the communication processor 340 transmits and receives at least one voice data encoded by a corresponding encoding scheme corresponding to the mobile communication network. It is desirable to.

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a VoIP network, the communication processor 340 transmits and receives at least one voice data encoded by an encoding scheme corresponding to the VoIP network. It is preferable.

In addition, when it is possible to add (or assign) a predetermined data channel to the voice call channel, the communication processor 340 assigns a predetermined data channel to the voice call channel connected through a predetermined telephone network and / or a VoIP network. Add (or assign) and perform data communication with at least one other call terminal (or server) 100 to which the call channel is connected through the added (or assigned) data channel.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or an intelligent network), the communication processing unit 340 uses a predetermined data channel defined in the general telephone switching network (or an intelligent network). In addition to (or allocating) the voice call channel, it is preferable to perform predetermined data communication with the at least one other call terminal (or server) 100 connected with the call channel through the data channel, in addition to the voice call. .

According to another embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the communication processing unit 340 adds (or assigns) a predetermined data channel defined in the mobile communication network to the voice call channel. In addition to the voice call, it is preferable to perform predetermined data communication with at least one other call terminal (or server) 100 to which the call channel is connected through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses the VoIP network, the communication processing unit 340 adds a predetermined data channel defined in the VoIP network to the voice call channel (or And a predetermined data communication in addition to the voice call with at least one other call terminal (or server) 100 to which the call channel is connected through the data channel.

In addition, the communication processor 340 connects at least one terminal (or server) 100 and a predetermined data channel (or communication channel) through a predetermined telephone network and / or a VoIP network independently of the voice call channel. Characterized in that the predetermined data communication with at least one terminal (or server) 100 through the data channel (or communication channel).

When the communication processing unit 340 is connected to a general telephone switching network (or intelligent network) according to an embodiment of the present invention, the communication processing unit 340 is a predetermined data communication defined in the general telephone switching network (or intelligent network) It is preferable to connect at least one terminal (or server) 100 and a predetermined data channel (or communication channel) according to a standard, and at least one terminal (or server) through the data channel (or communication channel) ( Perform predetermined data communication with 100).

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a mobile communication network, the communication processor 340 may include at least one terminal according to a CDMA stack based data communication standard defined in the mobile communication network. Or a server) 100 and a predetermined data channel (or communication channel), and communicate data with at least one terminal (or server) 100 through the data channel (or communication channel). Perform.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a VoIP network, the communication processing unit 340 may include at least one or more data according to a VoIP protocol stack based data communication standard defined in the VoIP network. It is preferable to connect a terminal (or server) 100 and a predetermined data channel (or communication channel), and at least one terminal (or server) 100 and predetermined data through the data channel (or communication channel). Perform communication.

According to the present invention, the call terminal 300 is a card reader unit 325 for reading predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 300 according to the present invention. It is characterized by comprising a).

That is, the customer receiving payment processing using the call terminal 300 according to the present invention through the call terminal 300, based on the ISO / IEC 7810 standard MS (Magnetic Stripe) card, and / or ISO / IEC Have (or own) a contact IC card (or wireless IC chip) based on the 7816 standard and / or at least one contactless IC card (or wireless IC chip) based on the ISO / IEC 14443 standard. The card reader 325 may provide an interface for reading at least one or more payment means information from the customer-owned card.

According to the method of the present invention, the card reader unit 325 is an MS reader unit for providing an interface between the MS card and the call terminal 300, and / or the contact IC card and the call terminal 300. And a contact IC reader unit for providing an interface, and / or a contactless IC reader unit for providing an interface between the contactless IC card and the call terminal 300.

The MS reader unit is a card reader unit 325 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. It is characterized by interfacing the predetermined payment means information to the call terminal 300 from at least one track (for example, track II area) provided in the MS of the MS card by using the loading.

The contact IC reader unit is a card reader unit 325 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies the power to the IC chip of the IC card through the contact point, and the predetermined payment means information from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) It is characterized in that the interface to the call terminal (300).

The contactless IC reader unit is a card reader unit 325 based on ISO / IEC 14443. The contactless IC reader unit uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, and calls the predetermined payment means information from the IC chip through the half-duplex transaction using the APDU It is characterized in that the interface to the terminal 300.

According to the method of the present invention, the card reader unit 325 is credit card payment means information, and / or check card payment means information from the customer-owned card for payment processing using the call terminal 300, and And / or read at least one of the debit card payment method information, and / or the prepaid card payment method information, and / or the direct transfer payment method information.

According to the present invention, the call terminal 300 is a predetermined payment approval request text including predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 300 according to the present invention. Security for managing the function of generating and transmitting to the payment server 200 via the telephone network and / or VoIP network, and receives and processes the payment approval text corresponding to the payment approval request message from the payment server 200 It is characterized in that the application module 345 comprises a Secure Application Module (SAM).

The Secure Application Module (345) is a confidentiality and / or authentication required by the call terminal 300 in the process of performing the electronic payment and / or electronic payment using the card. And / or security requirements, including integrity and / or nonrepudiation, can be secured within the call terminal 300 without using an authentication server (or payment server 200) on the network. As a safety device for performing a reliable structure, a predetermined message (information or data) processed in the process of the call terminal 300 performing a predetermined security request function (for example, electronic payment and / or electronic payment function). Encrypt or decrypt, add an authenticator to prevent forgery (or tampering) of the message, or store important information in the process of performing the security request function. It is characterized in that it performs a function.

In general, the security application module 345 is preferably composed of a predetermined security application module 345 inserter and security application module 345 chip, the security application module 345 chip is a chip containing at least 8-bit CPU Application Specific Integrated Circuit (ASIC) chips (eg, PLCC 44-pin chips) and / or IC chips (eg, IC cards in the form of subscriber identity modules (SIMs)) with performance of 2 MIPS (Million Instructions Per Second) or more. It is preferable to comprise a.

In addition, the security application module 345 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value, etc.) required for the call terminal 300 to perform a predetermined security request function. ) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, previous transaction cancellation protocols, collection protocols, SAM issuance protocols, (e-money company / card company) Registration protocol, authorization protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / disposal / initialization) / Reprocessing / cancellation command).

Referring to FIG. 36, the call terminal 300 includes a mode checking unit 355 for checking an operation mode of the call terminal 300 for payment processing using the call terminal 300 according to the present invention. When the call terminal 300 is in the payment mode using the call terminal 300 according to the present invention as a result of the check by the mode confirming unit 355, a predetermined payment is made from a predetermined customer-owned card through the card reader unit 325. Information reading unit 360 for reading the means information and the information receiving unit for receiving payment information including the merchant information, at least one or more product information and payment amount information from the server 100 through the communication processing unit 340 380, a full text generation unit 385 for generating a predetermined payment approval request text including the payment means information and the payment information, and a full text transmission unit for transmitting the full text of the payment approval to the payment server 200; 390 and the communication processing unit 340 Receiving a payment authorization specialized corresponding to the payment approval request through a professional, and characterized in that formed by having a specialized processor 395 to perform the information processing procedure corresponding to the payment authorization professional.

In addition, the call terminal 300 is characterized in that it further comprises a cryptographic processing unit 370 for encrypting in a predetermined encryption method in order to prevent the wiretap and / or eavesdropping and / or hacking the full payment approval request. .

The mode checking unit 355 checks whether an operation mode of the call terminal 300 is a voice call mode, a voice call / data communication mode, or a data communication mode.

In addition, when the operation mode of the call terminal 300 is a voice call / data communication mode, the mode checking unit 355 may include data channels added (or assigned) to the voice call channel for general data communication. Mode or a data communication mode for payment processing according to the present invention.

If the check result is that the operation mode of the call terminal 300 is a data communication mode for payment processing according to the present invention, the mode checking unit 355 is the screen output unit 320 (and / or voice processing unit 315) By requesting to interface a customer-owned card through the card reader unit 325 through)), the information reader 360 receives predetermined payment means information from the customer-owned card through the card reader unit 325. Process to read.

In addition, if the check result of the operation mode of the call terminal 300 is a data communication mode for payment processing according to the present invention, the information receiving unit 380 is the data channel added to (or assigned to) the call channel through the It is preferable to receive payment information including merchant information and at least one item information and payment amount information transmitted from the server 100.

In addition, when the operation mode of the call terminal 300 is a data communication mode, the mode checking unit 355 is whether the data communication mode is a simple data communication mode or a data communication mode for payment processing according to the present invention. It is characterized by checking.

If the check result is that the operation mode of the call terminal 300 is a data communication mode for payment processing according to the present invention, the mode checking unit 355 is the screen output unit 320 (and / or voice processing unit 315) By requesting to interface a customer-owned card through the card reader unit 325 through)), the information reader 360 receives predetermined payment means information from the customer-owned card through the card reader unit 325. Process to read.

In addition, if the check result of the operation mode of the call terminal 300 is a data communication mode for payment processing according to the present invention, the information receiver 380 is affiliated store information transmitted from the server 100 through the data channel And payment information including at least one item information and payment amount information.

The information receiver 380 receives payment information including affiliate store information, at least one product information, and payment amount information through a data channel connected with the server 100. Further receiving at least one or more other payment information, such as a document serial number to be included in the payment approval request text generated by the generation unit 385 (can be omitted if the document serial number is generated by the full text generation unit 385). It is possible, and the invention is not limited thereby.

According to the method of the present invention, the information receiving unit 380 preferably outputs at least one or more product information and payment amount information included in the payment information through the screen output unit 320.

As a result of the check by the mode checking unit 355, when the call terminal 300 is in the payment mode using the call terminal 300 according to the present invention, the information reading unit 360 uses the card reader unit 325. And reading predetermined payment means information from a predetermined customer-owned card, wherein the payment means information includes credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and And / or at least one of prepaid card payment means information, and / or bank transfer payment means information.

According to an embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information In the case of payment means information, the payment means information read out by the information reader 360 through the card reader 325 includes at least one or more number arrays such as a 16-digit card number and / or an expiration date. It is preferable to make it.

In addition, when the payment means information corresponds to the account transfer payment means information, the payment means information read out by the information reader 360 through the card reader 325 is a 16-digit account number and / or branch number It is preferable to include at least one or more number arrangements, such as.

The full text generation unit 385 adds payment means information read through the information reader 360, merchant information received through the information receiver 380, and total payment amount information including at least one payment amount information. It characterized in that for generating a predetermined payment approval request full text corresponding to the payment means information.

When the payment means information read out through the information reader 360 corresponds to credit card payment means information according to an embodiment of the present invention, the full text generation unit 385 is the credit card payment means information and merchant information And it is preferable to create a full credit card payment approval request including the total payment amount information.

In addition, when the payment means information read out through the information reader 360 corresponds to the check card payment means information, the full text generation unit 385 is the check card payment means information, merchant information and the total payment amount information It is desirable to create a full check card payment approval request including.

In addition, when the payment means information read out through the information reader 360 corresponds to the debit card payment means information, the full text generation unit 385 is the debit card payment means information, merchant information and the total payment amount information It is desirable to create a full debit card payment authorization request including.

In addition, when the payment means information read out through the information reader 360 corresponds to the prepaid card payment means information, the full text generation unit 385 is the prepaid card payment means information, merchant information and the total payment amount information It is desirable to create a prepaid card payment authorization request containing the full text.

In addition, when the payment means information read through the information reading unit 360 corresponds to the account transfer payment means information, the full text generation unit 385 is the account transfer payment means information and merchant information (eg, merchant bank account) Information) and total payment amount information (eg, wire transfer amount information).

The specialized transmission unit 390 transmits the payment approval request telegram generated by the specialized generation unit 385 through the communication network 340 through the information reading unit 360 through the telephone network and / or the VoIP network. Characterized in that the read (or included in the payment approval request full text) payment means to transmit to the payment server 200, the payment server 200 is a predetermined payment corresponding to the full payment approval request message After performing a processing procedure, a predetermined payment approval text including a payment processing history corresponding to the payment processing procedure is generated and transmitted to the call terminal 300.

According to an embodiment of the present invention, in transmitting the full text of the payment approval request to the payment server 200, the full text of the payment approval request may be exposed to eavesdropping and / or interception and / or hacking. The encryption processing unit 370 encrypts the payment approval request text in a predetermined encryption method, and the encrypted payment means information is a predetermined decryption method corresponding to the encryption method in the payment server 200. It is characterized by being decoded.

According to an embodiment of the present invention, the encryption method may include at least one of a symmetric key (or secret key) encryption method, a public key encryption method, and / or an electronic envelope encryption method, and / or a key exchange encryption method. It is preferable to include the present invention, and other encryption methods other than the above encryption method may be used according to the intention of those skilled in the art, and the present invention is not limited thereby.

In addition, an encryption key for encrypting the full text of the payment approval request by the encryption processing unit 370 may be provided in the security application module 345 and / or stored on the memory unit 350. The present invention is not limited by this.

The specialized processing unit 395 receives the payment approval message including the payment processing details corresponding to the payment approval request message from the server 100 (and / or the payment server 200) through the communication processing unit 340. And, the payment processing history is extracted from the payment approval, characterized in that the output through the screen output unit 320.

37 illustrates an MS card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

More specifically, FIG. 37 illustrates an embodiment of an MS card for storing payment means information, which is read from a customer's own card, through a card reader provided in a predetermined call terminal 300, and is shown in FIG. 37 for convenience. The MS card shows a case in which an MS card having a Track I storage area, a Track II storage area, and a Track III storage area stores payment means information according to the present invention in the Track II storage area. Those skilled in the art may refer to and / or modify this drawing 37 to provide credit card payment method information, and / or check card payment method information, and / or debit in the Track II storage area of the MS card. Card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is stored in the Track I storage area and / or Track III storage area. Would be able to infer a variety of exemplary ways to store available), the invention includes all embodiments in which the inference method, not limited to the exemplary method illustrated in the figure 37.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 37, the payment means information providing the payment processing function using the call terminal 300 according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area. do.

38 is a view showing an IC card in which predetermined payment means information is stored according to another embodiment of the present invention.

More specifically, FIG. 38 illustrates an embodiment of an IC card for storing payment means information read from a customer's own card through a card reader provided in a predetermined call terminal 300. For convenience, the drawing 38 is a contact. A case where the payment means information according to the present invention is stored in a memory of a formula IC card, and a person having ordinary knowledge in the technical field to which the present invention pertains refers to the IC card by referring to and / or modifying the drawing of FIG. Various implementation methods for storing credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or wire transfer payment method information in a memory of It may be inferred that the present invention includes all the implementation methods inferred above, and is not limited to the implementation method illustrated in FIG.

With reference to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip's IC chip may include power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), and programming. I / O interfaces for communicating with (eg, exchanging commands or data) the call terminal 300 through contact points such as power supply (VPP) and / or input / output (I / O), CPU (Central Process Unit), MPU ( A processor unit including at least one computing element including a micro process unit, and / or a coprocessor, a read only memory (ROM), a random access memory (RAM), an electrically erasable and programmable read only (EEPROM) And a memory unit 350 including at least one memory element including a memory, a flash memory, and the like. In particular, at least one of the memory elements (eg, a ROM) manages internal resources of the IC card. And operating chip A chip operating system (COS) is stored, and when a predetermined power is supplied from the call terminal 300 through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory unit 350 is executed. Loaded into memory to control the overall operation of the IC chip, and communicates with the IC chip through an APDU (Application Protocol Data Unit) based on the clock frequency (eg, 3.57 MHz or 4.9 MHz) of the clock signal (CLK) contact point. Controls information or data exchange between the terminals 300.

According to the present invention, the memory unit 350 of the IC chip terminates at least one or more programs loaded in the card terminal and is already driven, and drives a specific program among a plurality of programs stored in the card terminal, Or card storage information for executing a function of converting a screen configuration and / or a function set in the card terminal into a specific screen configuration and / or a specific function, wherein the card storage information is stored by the terminal program. A data unit for storing a data set corresponding to predetermined information or data to be read and read and / or used, and operated or executed by an arithmetic function of the processor unit and an instruction set provided by a COS. Program routines used by the programmer (eg Javacard) An applet (JAVA Applet) is provided with a processing unit corresponding to an application including an instruction call code that interacts with the instruction set of the COS and an execution code that is processed by a processor unit. Read a command provided from the terminal program via an input / output interface, and read or write at least one or more information or data stored in the data unit based on the read command, and as a result or read information or data It is characterized in that to provide to the terminal program via the input and output interface through the APDU.

According to a preferred embodiment of the present invention, the memory unit 350 of the IC chip includes a security structure based on ISO / IEC 10202. Accordingly, the memory unit 350 may include a CSN (Chip Serial Number) and the like. It consists of a protected area where the same secret information is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the like. Is preferably stored in an area excluding the protection area and the COS control area.

In addition, according to ISO / IEC 7816 and / or ISO / IEC 14443 ICC standard, the memory unit 350 includes one master file (MF) corresponding to a root file and a lower subordinate to the master file. An ATR (Aswer To Reset) including function information on at least one stored information, at least one dedicated file corresponding to each ICC stored information, and a dedicated file (DF) corresponding to each ICC stored information, and disposed below the dedicated file. Includes a file structure consisting of an element file (EF) containing the actual information and / or data for the smart card service, the card storage information for the present invention also includes the file structure as described above.

Referring to FIG. 38 according to an embodiment of the present invention, the data unit of the card storage information may store at least one or more payment means information for payment processing using the call terminal 300 according to the present invention. The payment method information may be at least one of credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. It is made, including.

39 is a diagram showing a specialized structure for payment processing using the call terminal 300 according to another embodiment of the present invention.

More specifically, FIG. 39 is for the entire payment approval request for reading and generating predetermined credit card payment means information from a predetermined card reader in the call terminal 300 shown in FIG. 36. If one of ordinary skill in the art, by referring to and / or modified this figure 39 can infer the payment approval request specialized structure corresponding to other payment means information in addition to the credit card payment means information, the present invention is inferred It includes all the implementation methods, and is not limited to the implementation method shown in FIG.

Referring to FIG. 39, the payment approval request full-text structure may include at least one or more specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and an end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text may include a transaction classification item (eg, a credit approval request, a credit approval cancellation, etc.), a Terminal_ID item, a POS Entry Mode item, and a card reader provided in the call terminal 300. TRACK II Data items corresponding to the payment means information obtained from a predetermined card through (for example, from the Primary Account Number (PAN) and Additional Data (AD) and / or Discretionary Data (DD) areas of TRACK II of the MS card. Credit card information obtained from the credit card file of the IC card or the credit card information obtained), and the total number of installment months corresponding to the credit card payment information after the predetermined FS (File Separator, 0X1C) It includes an amount item and a service fee item, and also includes a working key index item, a password item, a product code item and a document serial number item. Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

The Terminal_ID item in the payment approval request specialist information item corresponds to the affiliated store information, the total amount item corresponds to total payment amount information corresponding to the purchase product information, and the document serial number is the server 100. Corresponds to a serial number assigned to manage the payment processing using the call terminal 300 according to the present invention.

In addition, the TRACK II Data item of the information on the payment approval request specialist is readout information from a predetermined card reader provided in the call terminal 300 and received by the server 100 as shown in FIG. 5. According to the payment means information corresponds to credit card information.

40 is a diagram illustrating a method for encrypting and transmitting a transmission approval request text in a symmetric key (or secret key) method in a call terminal 300 according to an embodiment of the present invention.

More specifically, FIG. 40 illustrates an embodiment of the present invention for encrypting and transmitting the payment approval request message in a symmetric key (or secret key) manner in a call terminal 300 having an encryption function as shown in FIG. 36. If there is a general knowledge in the technical field to which it belongs, refer to and / or modify this figure 40 to the symmetric key (or secret key) the full text of the payment approval request in the call terminal 300 on the telephone network and / or VoIP network It will be possible to infer various implementation methods of encryption in a manner, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 40 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read out from the public certificate provided in the call terminal 300, the public certificate 300 to the call terminal 300 Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or in the call terminal When a predetermined IC card reader is provided at 300, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit 350 provided in the call terminal 300 in addition to the public certificate, and / or the call terminal from the server 100 It may be included in the interface screen provided to 300, and / or embedded in the communication program to communicate with the payment server 200 on the call terminal 300, thereby the anti-invention is not limited. .

Referring to FIG. 40, when a predetermined payment approval request message is generated in the text generation unit 130 of the call terminal 300, the predetermined payment approval request text is provided to the cryptographic processing unit 370 (4000), and the payment approval request expert is provided. When the encryption processing unit 370 reads a predetermined symmetric key (or secret key) for encrypting the payment approval request text from the official certificate provided in the call terminal 300 (4005), the read symmetric key (Or a secret key) encrypts the full text of the payment approval request (4010).

Here, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the symmetric key (or secret key) is k (key), the payment approval request full text P (Plaintext), and the symmetric key (or If the full payment approval request encrypted with a secret key) is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by a formula such as "Ek (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment approval request message through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack It is preferable to include at least one or more of an International Data Encryption Algorithm (IDEA), and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the payment approval request expert is encrypted through the symmetric key (or the secret key) as described above, the communication processing unit 340 transmits the encrypted payment approval request message through the communication protocol defined on the telephone network and / or the VoIP network. The payment server 200 transmits (4015).

FIG. 41 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at a payment server 200 by a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, Figure 41 is a symmetric key (or secret key) in the payment server 200 as shown in Figure 35, the entire payment approval request received encrypted from the call terminal 300 with the encryption function as shown in Figure 36 Method for decrypting in the above) method, and if the skilled in the art to which the present invention pertains, with reference to the Figure 41 and / or modified in the call terminal 300 on the telephone network and / or VoIP network Various implementation methods for decrypting the encrypted payment approval request full text in a symmetric key (or secret key) method may be inferred, but the present invention includes all the inferred implementation methods, and is shown in FIG. 41. It is not limited to this.

In this figure 41 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the payment server 200, the public certificate is the payment server 200 and It is preferable to be stored in a predetermined database (not shown) to cooperate, and the present invention is not limited thereby.

Referring to FIG. 41, the information receiving unit 125 of the payment server 200 receives the encrypted payment approval request message through the telephone network and / or the VoIP network and provides the encrypted payment approval request message to the decryption unit 155 (4100). The payment approval request message may be received through a communication protocol stack defined in the telephone network and / or the VoIP network.

Thereafter, the decryption unit 155 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment approval request text from the authorized certificate provided in the payment server 200 (4105), and the extraction. The encrypted payment approval request message is decrypted through the symmetric key (or secret key) (4110).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), the full text of the payment approval request encrypted with the symmetric key (or secret key) k (key) and the symmetric key (or secret key). (Ciphertext) and the decrypted payment approval request full text is P (Plaintext), the function of decrypting the encrypted payment approval request full text by the decryption unit 155 is "Dk = P, or Dk (Ek (P )) = P ".

According to the exemplary embodiment of the present invention, the decryption unit 155 decrypts the encrypted payment authorization request full message through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES. Preferably, at least one of Skipjack, International Data Encryption Algorithm (IDEA), and various forms of decryption algorithms may be used, but the decryption algorithm is the encryption algorithm used in the call terminal (300). And the present invention is not limited by a specific decoding algorithm.

When the payment approval request expert decrypted through the symmetric key (or secret key) as described above, the decryption unit 155 transfers the decrypted payment approval request message to the predetermined payment approval unit provided in the payment server 200. Providing (4115), the payment approval unit provided in the payment server 200 performs the payment approval procedure defined in the payment server 200 by using the full payment approval request.

42 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in a public key based structure in a call terminal 300 according to an embodiment of the present invention.

More specifically, FIG. 42 is an embodiment of a method for encrypting and transmitting the full payment approval request message in a public key infrastructure structure in a call terminal 300 having an encryption function as shown in FIG. 36. If there is a general knowledge in the field, various implementation methods for encrypting the full text of the payment approval request in the call terminal 300 on the telephone network and / or VoIP network by referring to and / or modifying the present Figure 42 It may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In the figure 42 according to the embodiment of the present invention, the public key of the server 100 is preferably read from the public certificate provided in the call terminal 300, and the public certificate is the call terminal 300. Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or the call. When a predetermined IC card reader is provided in the terminal 300, the terminal 300 may be stored in an IC card inserted into the IC card reader, and thus the present invention is not limited thereto.

Alternatively, the server 100 side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the public certificate to the call terminal 300, whereby the present invention It is not limited.

Referring to FIG. 42, when a predetermined payment approval request message is generated in the text generation unit 130 of the call terminal 300, the predetermined text is provided to the cryptographic processing unit 370 (4200), and the payment approval request expert is provided. When the encryption processing unit 370 extracts a predetermined server 100 side public key for encrypting the full payment approval request message from the authorized certificate (4205), and through the extracted server 100 side public key. The payment approval request text is encrypted (4210).

Herein, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the public key of the server 100 is k1 (key), the payment approval request full text P (Plaintext), and the server 100 If the full text of the payment approval request encrypted with the public key is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the payment approval request full text through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA ( Digital Signature Algorithm (DH), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithms may be used, but specific encryption The present invention is not limited by the algorithm.

For example, in the case of encrypting the full payment approval request message through the RSA encryption algorithm among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by the different prime factors of n is a. And b, if the published index (e.g., 3 or 216+) is e, and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a -1) (b-1) ", wherein the encryption function of the encryption processing unit 370 can be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment approval request expert is encrypted through the public key of the server 100 as described above, the communication processing unit 340 transmits the encrypted payment approval request message to the payment server through the network component on the telephone network and / or the VoIP network. And transmits to 200 (4215).

43 is a diagram illustrating a method for decrypting a full payment approval request message encrypted and received by a payment server 200 according to an embodiment of the present invention using a public key infrastructure.

In more detail, FIG. 43 shows the full text of the payment approval request received from the call terminal 300 having the encryption function as shown in FIG. 36 in the public key infrastructure structure in the payment server 200 as shown in FIG. As a method of decrypting, the present invention is known to those skilled in the art, referring to and / or modified with reference to Figure 43 of the call terminal 300 on the telephone network and / or VoIP network in the server ( 100 may be inferred various implementation methods for decrypting the full payment approval request encrypted with the public key in the public key infrastructure scheme, but the present invention includes all the inferred implementation methods, the embodiment shown in FIG. It is not limited to the method.

In this figure 43 according to an embodiment of the present invention, the private key of the server 100 for decrypting the full payment approval request encrypted with the public key of the server 100 in a public key infrastructure structure is transmitted to the payment server 200. It is preferable that the public certificate is read from the provided certificate, and the public certificate is preferably stored in a predetermined database (not shown) interworking with the payment server 200, and the present invention is not limited thereto.

Referring to FIG. 43, the information receiving unit 125 of the payment server 200 receives the encrypted payment approval request message over the telephone network and / or the VoIP network and provides the encrypted payment approval request message to the decryption unit 155 (4300). The payment approval request text is preferably received through a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 155 extracts a private key of the server 100 for decrypting the encrypted payment approval request text from the authorized certificate provided in the payment server 200 (4305), and the extracted server. The encrypted payment approval request full text is decrypted through the private key (4100) (4310).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), and the full text of the payment approval request encrypted with the public key on the server 100 at k2 (key) and the public key at the server 100 at C ( Ciphertext) and the payment approval request text decrypted with the private key of the server 100 are P (Plaintext), the function of decrypting the encrypted payment approval request text by the decryption unit 155 is " Dk2 = P, " Or Dk2 (Ek (P)) = P ".

According to an embodiment of the present invention, the decryption unit 155 decrypts the full payment authorization request message encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100. , At least one of RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, and ECDH. In addition to the above, various types of decryption algorithms may be used, but the decryption algorithm is matched with the encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, in the case of decrypting the full payment approval request message through the RSA decryption algorithm, the public method (Modulus) used in the decryption process is not disclosed with n and different prime factors of n. If the prime is a and b, the published exponent (e.g. 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dk2 = Cd mod n ".

When the payment approval request expert encrypted with the public key of the server 100 in the call terminal 300 is decrypted through the server 100 side private key as described above, the decryption unit 155 reads the decrypted payment approval request full text. The payment approval unit provided to the predetermined payment approval unit provided in the payment server 200 (4315), the payment approval unit provided in the payment server 200 using the full payment approval request full payment defined in the payment server 200 Perform the approval process.

44 is a diagram illustrating a method of encrypting and transmitting a transmission approval request text in an electronic envelope method in a call terminal 300 according to an embodiment of the present invention.

More specifically, Figure 44 is an embodiment of the method for encrypting and transmitting the payment approval request full text in an electronic envelope method in the call terminal 300 with the encryption function as shown in Figure 36, in the technical field to which the present invention belongs Those skilled in the art may refer to and / or modify this drawing 44 to infer various implementation methods for encrypting the full text of the payment approval request in an electronic envelope method in the call terminal 300 on the telephone network and / or the VoIP network. As will be appreciated, the invention includes all such inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

In this figure 44 according to the embodiment of the present invention, the public key of the server 100 is preferably read from the public certificate provided in the call terminal 300, and the public certificate is provided to the call terminal 300. Stored in a predetermined memory unit 350, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 300, and / or in the call terminal When a predetermined IC card reader is provided at 300, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server 100 side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the public certificate to the call terminal 300, whereby the present invention It is not limited.

Referring to FIG. 44, when a predetermined payment approval request message is generated in the text generation unit 130 of the call terminal 300, the predetermined text is provided to the cryptographic processing unit 370 (4400), and the payment approval request expert is provided. The encryption processing unit 370 generates a random secret key for encrypting the payment approval request text in a secret key (symmetric key) manner (4405), and generates the generated secret. The full text of the payment approval request is encrypted using a key (4410).

Here, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the secret key is r (random secret key), the payment approval request full text P (Plaintext), and the payment approval request encrypted with the secret key When the full text is referred to as C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment approval request full text through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data). It is preferable to include at least one or more of the Encryption Algorithm, and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

Thereafter, the encryption processing unit 370 encrypts the secret key (random secret key) used to encrypt the full payment approval request message. For this purpose, the encryption processing unit 370 is a predetermined server 100 side from the public certificate. The public key is extracted (4415), and the private key is encrypted using the public key on the server 100 (4420).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the public key on the server 100 side is k1 (key), the secret key is r (random secret key), and the server 100 If the secret key encrypted with the public key is C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by a formula such as "Ek1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the secret key through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature). Algorithm, DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithms may be used, but in a specific encryption algorithm The present invention is not limited by this.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Ek1 (r) = re mod n ".

When the payment approval request expert is encrypted with the secret key, and the secret key is encrypted through the server 100 side public key, the encryption processing unit 370 encrypts the payment approval request message and the server 100 with the secret key. The transaction data associated with the secret key encrypted with the public key is generated and provided to the communication processor 340 (4425). The communication processor 340 provides the transaction data through a network component on a telephone network and / or a VoIP network. The payment server 200 transmits (4430).

45 is a diagram illustrating a method for decrypting the full payment approval request received encrypted by the payment server 200 in an electronic envelope method according to an embodiment of the present invention.

More specifically, FIG. 45 shows the transaction data in the payment server 200 as shown in FIG. 35, which receives the transaction data including the encrypted payment approval request message from the call terminal 300 having the encryption function as shown in FIG. As an embodiment of the present invention for decoding the electronic envelope method, if the person skilled in the art to which the present invention pertains, the call terminal on the telephone network and / or VoIP network by referring to and / or modified in the present Figure 45 In various embodiments of the present invention, it is possible to infer various implementation methods for decrypting the transaction data encrypted by the electronic envelope method using the same electronic envelope method. It is not limited to this.

In this figure 45 according to an embodiment of the present invention, the private key of the server 100 for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate provided in the payment server 200. The public certificate is preferably stored in a predetermined database (not shown) interworking with the payment server 200, whereby the present invention is not limited.

Referring to FIG. 45, the information receiving unit 125 of the payment server 200 receives the predetermined transaction data including the full payment authorization request message encrypted through the telephone network and / or the VoIP network, and then decrypts the decryption unit 155. (4500), the transaction data is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 155 extracts the private key of the server 100 for decrypting the encrypted secret key included in the transaction data from the authorized certificate provided in the payment server 200 (4505). By decrypting the private key encrypted by the server 100 side public key in the call terminal 300 through the extracted server 100 side private key (4510), a predetermined secret key for decrypting the full text of the payment approval request. Extract (4515) and decrypt the payment approval request text using the extracted secret key (4520), and extract the payment approval request text encrypted with the secret key from the call terminal 300 (4525). .

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), the private key encrypted with the server 100 private key k2 and the public key encrypted with the server 100 C (Ciphertext) And a secret key decrypted with the private key of the server 100 is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 155 is " Dk2 = r, or Dk2 (Ek1). It can be expressed by an expression such as (r)) = r ".

According to the exemplary embodiment of the present invention, the decryption unit 155 decrypts the secret key encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100, the RSA. (Ron Rivest, Adi Shamir, Len Adleman), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although various types of decryption algorithms may be used, the decryption algorithm is matched with an encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), the secret key is r (random secret key), the full text of the payment authorization request encrypted with the secret key (Ciphertext), and the decryption When the payment approval request message is P (Plaintext), the function of decrypting the encrypted payment approval request message by the decryption unit 155 is "Dr = P, or Dr (Er (P)) = P". It can be expressed as an expression.

According to an embodiment of the present invention, the decryption unit 155 decrypts the encrypted payment authorization request full text through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( International Data Encryption Algorithm) preferably comprises at least one or more, and various forms of decryption algorithms may be used, but the decryption algorithm is matched with the encryption algorithm used in the call terminal (300). The present invention is not limited to the specific decoding algorithm.

When the payment approval request expert is decrypted as described above, the decryption unit 155 provides the decrypted payment approval request message to a predetermined payment approval unit provided in the payment server 200 (4530), the payment server 200 The payment approval unit provided in the) performs the payment approval procedure defined in the payment server 200 using the full payment approval request.

46A and 46B illustrate a method of encrypting and transmitting a payment approval request message in a key exchange method in a call terminal 300 according to an embodiment of the present invention.

More specifically, Figure 46a and Figure 46b is an embodiment of the method for encrypting and transmitting the full payment approval request in a key exchange method in the call terminal 300 with the encryption function as shown in Figure 36, the present invention If there is a general knowledge in the field, various implementation methods for encrypting the full text of the payment approval request in the call terminal 300 on the telephone network and / or VoIP network by referring to and / or modifying the present invention 46 It may be inferred, but the present invention encompasses all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 46 according to the embodiment of the present invention, the terminal-side private key and the server 100-side public key are preferably read from the public certificate provided in the call terminal 300, and the public certificate is the call. Stored in a predetermined memory unit 350 provided in the terminal 300, and / or stored in an ID-000 type IC chip (or IC card) mounted or detached from the call terminal 300, and / Or the predetermined number of IC card reader is provided in the call terminal 300 can be stored in the IC card to be inserted into the IC card reader, it is not limited by the present invention.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate to the call terminal 300. Thereby, this invention is not limited.

46A and 46B, when the full text generation request unit 130 of the call terminal 300 generates a predetermined payment approval request text, it is provided to the encryption processing unit 370 (4600). When the requesting expert is provided, the encryption processing unit 370 may include a message digest including a predetermined one-way hash function (eg, a hash code of a predetermined length regardless of the length of the door before the payment approval request). A one-way hash function that generates (Message Digest) and cannot identify (or infer) the original message through the hash code (or message digest) .The call terminal 300 and the payment server 200 Generates a predetermined message digest using the same hash function (4605), and digitally signs the message digest by encrypting the message digest with the terminal-side private key (4610).

Herein, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), and the terminal-side private key is encrypted with t1 (47erminal side key), the message digest is m (message digest), and the terminal-side private key. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 370 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the message digest through the terminal-side private key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm, among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the undisclosed prime numbers with different prime factors of n are a and a. b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the digital signature function of the encryption processing unit 370 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 370 generates a predetermined random secret key for encrypting the payment approval request text in a secret key (symmetric key) manner (4615), and the payment approval request The message digest encrypted with the full message and the terminal-side private key and a copy of a certificate (eg, a certificate including the terminal-side public key) included in the public certificate are linked and encrypted through the generated secret key (4620).

Herein, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the secret key is r (random secret key), the payment approval request and the copy of the certificate P (Plaintext), and the encrypted payment with the secret key When the full text of the approval request and the copy of the certificate are referred to as C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment approval request full text and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 370 extracts a predetermined public key on the server 100 side from the authorized certificate in order to encrypt the secret key encrypting the full payment approval request message (4625), and the server 100 side. The private key is encrypted using the public key (4630).

Here, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the server 100 public key is s1 (server side key), the secret key is r (random secret key), and the server ( If the secret key encrypted with the public key of side 100 is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the secret key through the server 100 side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature). Algorithm, DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithms may be used, but in a specific encryption algorithm The present invention is not limited by this.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Es1 (r) = re mod n ".

A copy of a certificate including the message digest encrypted with the full payment approval request message and the terminal-side private key and the terminal-side public key is linked and encrypted through the generated secret key, and the secret key is disclosed to the server 100. When encrypted with a key, the encryption processing unit 370 may include a copy of a certificate including the message digest and the terminal-side public key encrypted with the payment approval request message encrypted with the secret key and the terminal-side private key. 100 generates predetermined transaction data in association with the secret key encrypted with the public key, and provides the generated transaction data to the communication processing unit 340 (4635), and the communication processing unit 340 transmits the transaction data. The transmission is transmitted to the payment server 200 through a network component on a telephone network and / or a VoIP network (4640).

47A and 47B illustrate a method of decrypting a full payment approval request message encrypted and received by a payment server 200 according to an embodiment of the present invention by a key exchange method.

More specifically, Figure 47a and Figure 47b is a payment server 200 as shown in Figure 35 that receives the transaction data including the encrypted payment authorization request full text from the call terminal 300 with the encryption function as shown in Figure 36 The present invention relates to a method of decrypting the transaction data by a key exchange method, and if the present invention belongs to one of ordinary skill in the art, referring to and / or modifying the drawing 47 will be described on the telephone network and / or VoIP network. Although various implementation methods for decrypting the transaction data encrypted by the key exchange scheme in the same key exchange scheme may be inferred from the call terminal 300, the present invention includes all the inferred implementation methods, and as shown in FIG. It is not limited to the implementation method shown.

In this figure 47 according to an embodiment of the present invention, the server 100 side private key and the terminal side public key for decrypting the transaction data in a key exchange method are read from the public certificate provided in the payment server 200. Preferably, the public certificate is preferably stored in a predetermined database (not shown) interworking with the payment server 200, whereby the present invention is not limited.

Referring to FIGS. 47A and 47B, the receiving unit of the payment server 200 receives transaction data including the full payment authorization request message encrypted through the telephone network and / or the VoIP network (4700), and transmits the transaction data. The transaction data is provided to the decryption unit 155 (4705), and the transaction data is preferably received through a communication protocol defined in the telephone network and / or the VoIP network, and / or the full text of the payment approval request encrypted with the secret key. And a copy of the certificate including the message digest encrypted with the terminal-side private key and the terminal-side public key, and the secret key encrypted with the server-side public key.

Thereafter, the decryption unit 155 extracts the private key from the server 100 from the public certificate provided in the payment server 200 to decrypt the secret key encrypted with the public key from the server 100 (4710). By decrypting the private key through the private key of the server 100 (4715), a copy of the certificate including the message digest encrypted with the full payment approval request message and the terminal-side private key and the terminal-side public key are decrypted. The secret key for extraction is extracted (4720).

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), and the private key encrypted with the server side key (s2) and the public key encrypted with the server 100 side C ( Ciphertext) and a secret key decrypted by the server 100 side private key are r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 155 is "Ds2 = r, or Ds2. It can be expressed by an expression such as (Es1 (r)) = r ".

According to the exemplary embodiment of the present invention, the decryption unit 155 decrypts the secret key encrypted with the public key of the server 100 in the call terminal 300 through the private key of the server 100, the RSA. (Ron Rivest, Adi Shamir, Len Adleman), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although various types of decryption algorithms may be used, the decryption algorithm is matched with an encryption algorithm used in the call terminal 300, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the decryption unit 155 copies the certificate including the message digest encrypted with the payment approval request message and the terminal-side private key using the extracted secret key, and the terminal-side public key. By decrypting (4725), a copy of the certificate including the full message of the payment approval request encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key are extracted.

Here, the decryption function of the decryption unit 155 is referred to as D (Decryption), the secret key is r (random secret key), and the message digest encrypted with the secret key encrypted with the secret key and the terminal private key and C (Ciphertext) the certificate copy containing the terminal-side public key, and P (Plaintext) the certificate copy including the message digest encrypted with the decrypted full payment authorization request message and the terminal-side private key and the terminal-side public key. In this case, the function of decrypting the copy of the certificate including the message digest encrypted with the encrypted payment authorization request message and the terminal-side private key and the terminal-side public key is "Dr = P, or Dr." It can be expressed by an expression such as (Er (P)) = P ".

According to an embodiment of the present invention, the decryption unit 155 decrypts a copy of a certificate including the message digest encrypted with the encrypted payment approval request message and the terminal-side private key through the secret key, and the terminal-side public key. Preferably, the algorithm includes at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA). In addition, various types of decryption algorithms may be used. The decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 300, the invention is not limited by a specific decryption algorithm.

In addition, the decryption unit 155 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (4730), and generates and transmits the message from the payment approval request message in the call terminal 300. Extract the message digest (4735).

Here, the decryption function of the decryption unit 155 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. If the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the decryption unit 155 is " Dt2 = m, or Dt2 (Es1 (r)) = m " The same formula can be used.

According to an embodiment of the present invention, the decryption unit 155 decrypts the message digest encrypted with the terminal-side private key in the call terminal 300 through the terminal-side public key, RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it can be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 300, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published exponent (e.g. 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 155 may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the decryption unit 155 generates a predetermined message digest through the same one-way hash function of the received payment approval request message (4740), and then generates the generated message digest and the decryption. By comparing the received message digest (4745), the validity of the received payment approval request text is verified.

If the generated message digest and the decrypted message digest match (4750), the decryption unit 155 provides the full payment approval request message to a predetermined payment approval unit provided in the payment server 200 (4755). ), The payment approval unit provided in the payment server 200 performs the payment approval procedure defined in the payment server 200 by using the full payment approval request.

48 illustrates a product order and purchase process for payment processing using the call terminal 300 according to another exemplary embodiment of the present invention.

In more detail, FIG. 48 shows that the call terminal 300 shown in FIG. 36 connects to the server 100 shown in FIG. 35 through at least one or more telephone and / or VoIP networks, and orders and purchases certain items. Regarding a process in which payment processing using the call terminal 300 according to the present invention is started through the process, a person having ordinary skill in the art to which the present invention pertains may refer to and / or modify the present invention. The predetermined call terminal 300 connects a call channel for ordering and purchasing a product with a predetermined server 100 through at least one telephone network and / or a VoIP network, and orders at least one product through the call channel. And by purchasing, it will be possible to infer various implementation methods for initiating payment processing using the call terminal 300 according to the present invention, the present invention includes all the inferred implementation method And it shall not be limited to the exemplary method shown in the figure 48.

Hereinafter, in FIG. 48, the call terminal 300 having the card reader shown in FIG. 36 is referred to as " terminal "

Referring to FIG. 48, a terminal conforming to the functional configuration shown in FIG. 36 may include at least one or more telephone networks (e.g., general switched telephone network (or intelligent network), and / or mobile communication network) and / or VoIP network (e.g., TCP / IP). (And / or UDP / IP) based wired communication network, IEEE 802.16x based portable Internet) connects a predetermined call channel with the server 100 (4800), and provides the server 100 through the call channel. A procedure of selecting, ordering, and purchasing at least one or more purchased products is performed according to a product ordering procedure (4805).

If the person skilled in the art to which the present invention pertains, the terminal connects a predetermined communication channel with the server 100, and a predetermined product ordering procedure (for example, ARS and / or counselor through the communication channel). As you will be familiar with the key beep based product ordering process through connection, the detailed procedure for this will be omitted for convenience.

During the product order process as described above, the server 100 checks whether the payment process for the purchased product (4810), if the payment process for the purchased product is confirmed (4815), the server ( 100 adds (or allocates) a data channel corresponding to the telephone network and / or a VoIP network to a call channel connected to the terminal, or assigns the voice call-based communication channel to a data channel corresponding to the telephone network and / or a VoIP network. Switch to 4820.

If a data channel corresponding to the telephone network and / or VoIP network is added (or assigned) to the call channel as described above, or if the voice call-based communication channel is switched to a data channel corresponding to the telephone network and / or VoIP network, The server 100 extracts predetermined payment information including the affiliated store information, at least one or more product information, and payment amount information from a predetermined storage medium 140 (4825), and extracts the extracted payment information from the data channel. Through the transmission to the terminal through (4830).

Figure 49 illustrates a payment approval request full text generation process for payment processing using the call terminal 300 according to another embodiment of the present invention.

In more detail, FIG. 49 shows the call terminal 300 shown in FIG. 36 through at least one telephone network and / or a VoIP network by performing the process illustrated in FIG. 48 in the server 100 shown in FIG. When the predetermined payment information is transmitted to the mobile terminal 300, the call terminal 300 reads predetermined payment means information from the customer-owned card through a predetermined card reader and includes predetermined payment information provided from the server 100. A process for generating a request for approval and providing it to a payment server 200 corresponding to the payment means information through at least one telephone network and / or a VoIP network, and has a general knowledge in the technical field to which the present invention belongs. At least one telephone network and / or VoI may be generated by generating a predetermined payment approval request text in a predetermined call terminal 300 by referring to and / or modifying the drawing 49. Various implementation methods provided by the predetermined payment server 200 may be inferred through the P network, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

For example, in FIG. 49, the terminal performs an encryption procedure for a predetermined payment approval request text read from the customer-owned card. The encryption procedure satisfies the high security of the payment approval request text. In order to carry out, the invention may be omitted according to the intention of those skilled in the art, and the present invention is not limited thereto.

Hereinafter, in FIG. 49, the call terminal 300 having the card reader shown in FIG. 36 is referred to as " terminal "

Referring to FIG. 49, the terminal performs the process shown in FIG. 48 by the server 100 shown in FIG. 35, and performs the affiliated store information through the data channel corresponding to at least one or more telephone networks and / or VoIP networks. Check whether payment information including at least one item information and payment amount information is received (4900). If predetermined payment information is received from the server 100 (4905), the terminal determines the operation mode as the data. Switch to a payment processing mode using a channel (4910), output through a screen output means provided in the terminal to read predetermined payment means information from the customer-owned card through a card reader provided in the terminal, and / Or it outputs through the voice output means provided in the terminal (4915).

After the predetermined payment means information reading is requested from the customer-owned card as described above, the terminal checks whether the predetermined payment means information is read from the customer-owned card through the card reader (4920). When the predetermined payment means information is read from 4948, the terminal generates a predetermined payment approval request message including the read payment means information and payment information received from the server 100 (4930).

According to the embodiment of the present invention, when the server 100 generates a predetermined document serial number and transmits it in the payment information, the document serial number included in the full payment approval request is a document included in the payment information. If the serial number is replaced, and the payment information does not include the predetermined document serial number, the terminal generates the predetermined document serial number and includes it in the full text of the payment approval request.

Thereafter, the terminal performs an encryption procedure for the full payment approval request message including the payment means information and the payment information (4935).

If the full text of the payment approval request is encrypted (4940), the terminal extracts a predetermined payment server 200 network address corresponding to the payment means information from the memory unit 350, and at least based on the network address. The communication server for transmitting and receiving the payment approval message and the payment server 200 corresponding to the payment means information through at least one telephone network and / or VoIP network (4945), and the encrypted payment approval request through the communication channel The full text is transmitted to the payment server 200 (4950).

50 is a flowchart illustrating a payment approval request specialized process for payment processing using the call terminal 300 according to another exemplary embodiment of the present invention.

In more detail, the drawing 50 shows the entire payment approval request generated by performing the process shown in the drawing 49 in the call terminal 300 shown in the drawing 36 through at least one telephone network and / or the VoIP network. When transmitted to the payment server 200 shown in the, the payment server 200 as a process for payment processing using the full payment approval request, if the person having ordinary knowledge in the technical field to which the present invention belongs, By referring to and / or modifying the drawing 50, the payment server 200 corresponding to the payment means information can infer various implementation methods for payment processing using the payment approval request text provided from the call terminal 300. However, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

For example, in FIG. 50, the terminal performs a decryption procedure for the payment approval request text provided from the call terminal 300. The decryption procedure is performed only when the payment approval request message is encrypted. It may be omitted in accordance with the intention of those skilled in the art, whereby the present invention is not limited.

In addition, the full text of the payment approval request received from the terminal in FIG. 50 is a full credit card payment approval request including the credit card payment means information shown in FIG. 36, and has a general knowledge in the technical field to which the present invention belongs. If you grow up, the full payment approval request received from the terminal corresponding to the payment means information read through the card reader provided in the call terminal 300 is a full check card payment approval request, and / or debit card payment approval request It will be clearly understood that the disclosure may include any one of a preamble, a prepaid card payment authorization request, and / or a full account transfer payment authorization request.

Hereinafter, in the drawing 50, the call terminal 300 having the card reader shown in drawing 36 is referred to as " terminal "

Referring to FIG. 50, the payment server 200 shown in FIG. 35 performs a process shown in FIG. 49 at the terminal so that the payment server 200 receives a predetermined process through a communication channel corresponding to at least one or more telephone networks and / or VoIP networks. When the payment approval request is received (5000), if a predetermined payment approval request is received from the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP networks (5005), the payment server ( 200 checks whether the received payment approval request text is encrypted, thereby checking whether or not the payment approval request text is decrypted (5010).

If it is confirmed that the payment approval request full text is decrypted (5015), the payment server 200 performs a decryption procedure for the encrypted payment approval request full text, through a predetermined card reader in the terminal. The payment approval request text read from the customer-owned card is restored (5020).

On the other hand, if the verification result does not need to decrypt the payment approval request text (eg, when the payment approval request text is not encrypted) 5015, and / or the encrypted payment approval request text is decrypted, the payment The server 200 generates a predetermined payment processing history (for example, payment processing approval history or payment processing error history) by reading the full text of the payment approval request and performing a payment processing procedure corresponding to the payment means information (5025). After generating a predetermined payment approval message including the payment processing details (5030), the payment approval message is transmitted to the terminal through a communication channel corresponding to the telephone network and / or the VoIP network (5035).

Those skilled in the art to which the present invention pertains, the method for performing a payment processing procedure by reading the full payment approval request from the payment server 200, and / or the payment server 200 After performing a payment processing procedure, a predetermined payment processing history is generated, a payment approval message including the payment processing history is generated, and the method for transmitting to the terminal through the communication channel, etc. will be understood. Detailed description is omitted for convenience.

According to another exemplary embodiment of the present invention, the payment server 200 may directly transmit the payment approval text (or payment processing history) to the server 100 through a predetermined network (eg, a payment approval request text). Reference to the merchant information contained in the), whereby the present invention is not limited.

51 illustrates a payment approval process for payment processing using the call terminal 300 according to another exemplary embodiment of the present invention.

In more detail, FIG. 51 performs the payment approval process through the payment server 200 by performing the process shown in FIG. 50 in the server 100 shown in FIG. When the payment approval message is included, the process of processing the payment approval message in the terminal, the person having ordinary knowledge in the technical field to which the present invention belongs, reference to and / or modified this figure 51 It will be able to infer various implementation methods for processing the payment approval full text in the terminal of the present invention, the invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

Hereinafter, in FIG. 51, the call terminal 300 having the card reader shown in FIG. 36 is referred to as " terminal "

Referring to FIG. 51, the payment server 200 shown in FIG. 35 performs the procedure shown in FIG. 50 to transmit the payment approval message through a communication channel corresponding to at least one director's telephone network and / or VoIP network. The terminal determines whether a corresponding payment approval text is received (5100). If a payment approval text including a payment processing history corresponding to the payment approval request text is received from the payment server 200 (5105), the terminal receives the text. By extracting and reading a predetermined payment processing history from the payment approval text, it is checked whether the payment processing through the payment approval request text is approved (5110).

If the payment processing through the payment approval request message is not approved (5115), the terminal transmits the payment approval message to the server 100 via a data channel corresponding to at least one or more telephone networks and / or VoIP networks. And / or payment processing error details) (5120), thereby completing the payment processing process using the call terminal 300 according to the present invention.

On the other hand, when the payment processing through the payment approval request message is approved (5115), the terminal transmits the payment approval message to the server 100 through a data channel corresponding to at least one or more telephone networks and / or VoIP networks. And / or payment processing approval details) (5125), by performing an order procedure after the payment processing approval (5130), completes the payment processing process using the call terminal 300 according to the present invention.

According to the present invention, a card reader (eg, MS card reader, IC card reader, etc.) is provided in a call terminal connected to a telephone network and / or a VoIP network, and the call terminal and a predetermined merchant side voice call-based server (or terminal) are provided. And a voice call channel connected, and after reading predetermined payment means information from the call terminal through the card reader, and providing the payment means information to the voice call-based server (or terminal) on the merchant side, the affiliated store In the voice call-based server (or terminal), a predetermined payment approval request text is generated and processed through the payment means information, so that payment is conveniently processed without a payment error due to an incorrect operation in the payment processing using the call terminal. There is an advantage.

Claims (7)

It is equipped with a card (IC card and / or MS card) reader, connects to a merchant terminal (or server), requests a predetermined product or service order, and reads the card information read through the card reader to the merchant terminal (or server) A telephone to transmit; And After the call connection with the phone, the product or service order request and payment processing guide information is transmitted to the phone, the product or service order request information and card information is received from the phone, the received card information and the product or service A merchant terminal (or server) generating a predetermined payment approval request text using payment information corresponding to the order request information, and transmitting the generated payment approval request text to a financial company server corresponding to the card information; Payment processing system, characterized in that made. When a call is connected to a phone having a card (IC card and / or MS card) reader, a predetermined product or service order request and payment processing guide information are transmitted to the phone, and the product or service order request information and card are transmitted from the phone. Information transmitting and receiving means for receiving information; Full-text generating means for generating a predetermined payment approval request message using the received card information and payment information corresponding to the product or service order request information; And And a specialized processing means for transmitting the generated payment approval request text to a financial company server corresponding to the card information and receiving the payment approval text from the financial company server. It is equipped with a card (IC card and / or MS card) reader, connects to a merchant payment agent server (or call center server), requests a predetermined product or service order, and the card information read through the card reader payment to the merchant A telephone for transmitting to the proxy server (or call center server); And After the call connection with the phone, the product or service order request and payment processing guide information is transmitted to the phone, the product or service order request information and card information is received from the phone, the received card information and the product or service When generating a predetermined payment approval request text using the order request information, the payment approval request text is generated using the terminal unique number of the affiliate store corresponding to the order request information, and the generated payment approval request text is stored in the card information. A merchant payment agent server (or call center server) for transmitting to a financial company server corresponding to the bank, and receiving a payment approval result from the financial company server, and then transmitting the result to a terminal (or server) and / or a phone provided at the merchant. Payment processing system comprising a. When a call is connected to a telephone having a card (IC card and / or MS card) reader, a predetermined product or service order request and payment processing guide information are transmitted to the telephone, and the product or service order request information and Information transmitting and receiving means for receiving card information; When generating a predetermined payment approval request full text using the received card information and the product or service order request information, generating a full text for generating a payment approval request full text using the terminal unique number of the merchant corresponding to the order request information Way; And The generated payment approval request message is transmitted to the financial company server corresponding to the card information, and after receiving the payment approval message from the financial company server, the received message is provided with the terminal (or server) and / or provided in the affiliated store. Professional processing means for transmitting to the telephone; payment processing system comprising a. After a call connection with a telephone equipped with a card (IC card and / or MS card) reader in a predetermined information transmitting / receiving means, a predetermined product or service order request and payment processing guide information are transmitted to the telephone, and the product or An information transmission / reception step of receiving service order request information and card information; A full text generation step of generating a full text of a payment approval request by using a predetermined text generation means by using the received card information and payment information corresponding to the product or service order request information; And A specialized processing step of transmitting the generated payment approval request full text in a predetermined professional processing means to a financial company server corresponding to the card information, and receiving a payment approval full text from the financial company server; Way. After a call connection with a telephone equipped with a card (IC card and / or MS card) reader in a predetermined information transmission / reception means, a predetermined product or service order request and payment processing guide information are transmitted to the telephone, and the product or An information transmission / reception step of receiving service order request information and card information; When generating a predetermined payment approval request text using the received card information and the product or service order request information by a predetermined text generation means, the payment approval request is performed using a terminal unique number of the affiliate store corresponding to the order request information. A full text generation step of generating a full text; And After the predetermined payment processing means transmits the generated payment approval request text to the financial company server corresponding to the card information, receives the payment approval text from the financial company server, and stores the received text in the affiliated store ( Or a server) and / or a specialized processing step for transmitting to the telephone. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 5 and 6.

Images