KR20070108106A - Method for relaying payment by using phone - Google Patents

Abstract

A method is provided to relay a payment process without any payment error using a phone by enabling the phone to transmit payment tool information read through a card reader of the phone to a VAN(Value Added Network) server, and enabling the VAN server to generate/process a message including the payment tool information and payment information. An information receiver receives card information read through the card reader from the phone equipped with the card reader and receives the payment information from a member shop. A message generator generates a payment approval request message by using the received card/payment information and replacing a unique terminal number with unique terminal number information extracted from the member shop information(1530). A message processor transmits the generated message to a financial company corresponding to the card information, receives a payment approval message from the financial company, and transmits the received message to the member shop terminal.

Description

Method for relaying payment using a phone {Method for Relaying Payment by Using Phone}

1 is a diagram illustrating a payment system configuration using a call terminal according to an embodiment of the present invention.

2 is a diagram illustrating a functional configuration of a call terminal according to an embodiment of the present invention.

3 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

4 is a diagram illustrating an IC card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

5 is a diagram showing a specialized structure for payment processing using a call terminal according to an embodiment of the present invention.

6 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in a symmetric key (or secret key) manner in a call terminal according to an embodiment of the present invention.

7 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at a bansa server by a symmetric key (or secret key) method according to an embodiment of the present invention.

8 is a diagram illustrating a method for encrypting and transmitting a payment approval request message in a public key based structure in a call terminal according to an embodiment of the present invention.

9 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received at a bansa server according to an embodiment of the present invention using a public key infrastructure.

FIG. 10 is a diagram illustrating a method for encrypting and transmitting a payment approval request message in an electronic envelope method in a call terminal according to an embodiment of the present invention.

FIG. 11 is a diagram illustrating a method for decrypting a full payment approval request received encrypted by a Bansa server using an electronic envelope method according to an embodiment of the present invention.

12A and 12B illustrate a method of encrypting and transmitting a payment approval request message in a key exchange method in a communication terminal according to an embodiment of the present invention.

13A and 13B are diagrams illustrating a method of decrypting a full payment approval request message encrypted and received at a bansa server according to an embodiment of the present invention by a key exchange method.

14 illustrates a product ordering and purchasing process for payment processing using a call terminal according to an exemplary embodiment of the present invention.

15 is a flowchart illustrating a payment approval request full text generation process for payment processing using a call terminal according to an exemplary embodiment of the present invention.

16 is a flowchart illustrating a payment approval request specialized process for payment processing using a call terminal according to an embodiment of the present invention.

17 is a flowchart illustrating a payment approval process for payment processing using a call terminal according to an embodiment of the present invention.

18 is a diagram illustrating a payment system configuration using a call terminal according to another embodiment of the present invention.

19 is a diagram showing the functional configuration of a call terminal according to another embodiment of the present invention.

20 is a diagram illustrating an MS card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

21 is a view showing an IC card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

22 is a diagram showing a specialized structure for payment processing using a call terminal according to another embodiment of the present invention.

FIG. 23 is a diagram illustrating a method of encrypting and transmitting payment approval request information by a symmetric key (or secret key) method in a call terminal according to an embodiment of the present invention.

FIG. 24 is a diagram illustrating a method of decrypting payment approval request information encrypted and received by a server by a symmetric key (or secret key) method according to an embodiment of the present invention.

FIG. 25 is a diagram illustrating a method for encrypting and transmitting payment approval request information in a public key based structure according to an embodiment of the present invention.

FIG. 26 is a diagram illustrating a method of decrypting payment approval request information encrypted and received by a server according to an embodiment of the present invention using a public key infrastructure.

27 is a diagram illustrating a method of encrypting and transmitting payment approval request information in an electronic envelope method in a call terminal according to an embodiment of the present invention.

FIG. 28 is a diagram illustrating a method of decrypting payment approval request information encrypted and received by a server according to an embodiment of the present invention by an electronic envelope method.

29A and 29B illustrate a method of encrypting and transmitting payment approval request information in a key exchange method in a call terminal according to an embodiment of the present invention.

30A and 30B illustrate a method of decrypting payment approval request information encrypted and received by a server according to an embodiment of the present invention using a key exchange method.

31 is a flowchart illustrating a product order and purchase process for payment processing using a call terminal according to another exemplary embodiment of the present invention.

32 is a flowchart illustrating a payment approval request information generation process for payment processing using a call terminal according to another embodiment of the present invention.

33 is a flowchart illustrating a payment approval request specialized process for payment processing using a call terminal according to another embodiment of the present invention.

34 is a flowchart illustrating a payment approval process for payment processing using a call terminal according to another embodiment of the present invention.

<Description of main parts of drawing>

100: server 105: call channel processing unit

110: channel control unit 115: voice guide unit

120: sound signal processing unit 125: information receiving unit

130: information transmission unit 135: information extraction unit

140: order processing unit 145: professional receiving unit

150: storage medium 155: Bansa server

160: professional receiver 165: decoder

170: information confirmation unit 175: professional processing unit

180: professional relay

The present invention processes a payment corresponding to the telephone order by reading predetermined payment means information from a predetermined customer-owned card through the card reader after a telephone order using a voice call through a call terminal equipped with a predetermined card reader. It is about how to.

Conventional payment method after the telephone order using a telephone (telephone), and / or home shopping payment method using a telephone, the payment means information by voice after the telephone connection with the counselor through the telephone, and / or ARS through the telephone (Automatic Response Service) A method of inputting payment method information through a key button as a customer after connecting a voice call channel with a server has been mainly used. The payment method using the above-described phone is not only inconvenient to use, but also payment method information. Because the customer has to enter it manually, it contains a problem that a payment error may occur due to an incorrect operation.

Recently, the wired telephone network has evolved from the conventional inverter switching method to the electronic switching method, and in the form of an intelligent network capable of voice communication and data communication, and a VoIP service that adds a voice communication function to the data communication function also appeared. It was. In addition, the wireless telephone network (mobile communication network) is capable of both voice calls and data communication based on the Code Division Multiple Access (CDMA) stack.

An object of the present invention is to receive a card information read through the card reader and payment information provided by an affiliated store from a telephone having a card (IC card and / or MS card) reader in a predetermined information receiving means, The predetermined text generating means generates a predetermined payment approval request text using the received payment information and card information, and transmits the generated payment approval request text in a predetermined text processing means to a financial company server corresponding to the card information. And, after receiving the payment approval message from the financial company server, and provides a payment processing relay method using a terminal (or server) and / or a phone to be transmitted to the phone provided in the merchant.

In the payment processing relay method using a telephone according to the present invention, a card information read through a card reader and a payment information provided by a merchant from a phone having a card (IC card or MS card) reader at a predetermined information receiving end. An information receiving step of receiving a message, a message generating step of generating a predetermined payment approval request message using the received payment information and card information in a predetermined message generating means, and the generated payment approval request in a predetermined text processing means; Sending the full text to the financial company server corresponding to the card information, and after receiving the payment approval full text from the financial company server, and a professional processing step of transmitting it to the terminal (or server) and / or the phone provided in the merchant Characterized in that made.

According to the present invention, the full text generation step, checking the merchant information included in the payment information, extracting the terminal unique number information corresponding to the merchant information from a predetermined storage medium and the extracted terminal unique number information And generating a payment approval request message (or information) as a terminal unique number included in the payment approval request message (or information).

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

For example, in the following embodiment, the telephone is called a call terminal, the VAN company server (or relay server) is called a bansa server, and the terminal (or server) provided at the affiliated store is called a server.

In addition, if a person of ordinary skill in the art to which the present invention belongs, the technical configuration of the present invention is not used only for payment processing using a call terminal, and if the server shown in the following embodiment is a phone banking server, the call terminal It will be clearly understood that it can be used for a phone banking system using.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a payment system configuration using a call terminal according to an embodiment of the present invention.

In more detail, Figure 1 shows a telephone order using a voice call through a call terminal equipped with a predetermined card reader, and reads predetermined payment means information from a predetermined customer-owned card through the card reader to respond to the telephone order. As a configuration of a system for processing a payment, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawing 1 to infer various payment system configurations using a call terminal. , The present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

That is, in the method shown in FIG. 1, a predetermined customer connects a call channel with a server (for example, an Automatic Response Service (ARS) server) provided at a predetermined affiliated store through a predetermined call terminal, and connects the call channel. After performing a predetermined telephone order procedure through the server, the server extracts payment information including merchant information, product information, and payment amount information from a predetermined storage medium and transmits it to the call terminal. Read the predetermined payment means information from the customer-owned card equipped with the predetermined payment means through the reader, and generates a predetermined payment approval request text based on the payment means information and the payment information and transmits it to the bansa server 155. When the bansa server 155 processes the payment approval request text, the system configuration is processed through a predetermined payment server.

In addition, although the functional configuration unit for payment processing using the call terminal according to the present invention is shown in the predetermined server 100 through the embodiment shown in FIG. 1, this effectively explains the technical features of the present invention. However, the present invention is not limited thereto, and the payment processing system using the call terminal according to the present invention includes an implementation method including the function configuration unit in a plurality of servers (or terminals), and / or the affiliated store. In the case where a predetermined call center is provided, the server (or terminal) on the call center system implementation method comprising the function configuration unit, and / or if the affiliated store is provided with a predetermined ARS server, the function configuration in the ARS server An implementation method further comprising a unit, and / or the affiliated store terminal when the affiliated store has a predetermined affiliated store terminal function; Of the exemplary method comprising the further part may include of any of them.

The call terminal used by the customer may be a landline telephone (and / or a radio telephone communicating with the radio frequency (RF) with the landline telephone) connected to a public switched telephone network (PSTN), and / or code division multiple access (CDMA). A mobile phone (e.g., a Personal Communication System (PCS) and / or Global System for Mobile (GSM) terminal, etc.) connected to a stack-based mobile communication network, and / or Transmission Control Protocol / Internet Protocol (TCP / IP) and / or And at least one VoIP terminal connected to a UDP / IP (User Datagram Protocol / Internet Protocol) based wired communication network and / or a VoIP (Voice over IP) network operating based on an IEEE 802.16x based portable Internet network. It is done.

In addition, the call terminal may include at least one telephone network (eg, a general switched telephone network (PSTN), and / or a mobile communication network), and / or a VoIP network (eg, a TCP / IP and / or UDP / IP-based wired communication network, and / Alternatively, a server and a predetermined server may be provided through a wireless network in which a Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) layer is defined in a transport layer on a protocol stack based on the IEEE 802.16x-based portable Internet. It is characterized by connecting the call channel.

According to an embodiment of the present invention, the general switched telephone network is a recent intelligent network (for example, a communication network connecting a plurality of circuits using at least one or more exchangers) in a conventional intelligent network (for example, interspersed within a communication network). And at least one switch, a service control node, an in-network control database, and the like, which are organically integrated through a common line signal network or data network, and controlled through a computing technology), and / or the intelligent network. In this way, a landline telephone (and / or a radiotelephone in RF communication with the landline telephone) connected to the general telephone switching network (= intelligent network) basically provides a voice call service and also provides a predetermined data channel. Provides data communication (eg, message transmission and reception) services.

In addition, the mobile communication network provides both a CDMA stack-based circuit switched voice call channel and a data channel, whereby a mobile phone connected to the mobile communication network basically provides a voice call service and a predetermined data channel. Data communication (eg, wireless message transmission and / or wireless Internet access, etc.) services.

In addition, the VoIP network basically provides a predetermined RTP / RTCP (Real-) to provide a real-time voice call service to a higher layer of a UDP on a wired / wireless communication network supporting TCP / IP (and / or UDP / IP) supporting data communication. As a communication network defining a time transport protocol / RTP control protocol (Layer) layer, the VoIP network basically provides both a voice call channel and a data channel, whereby a VoIP terminal connected to the VoIP network basically provides a voice call service. Of course, it provides a data communication (eg, message transmission and reception) service through a predetermined data channel.

According to the present invention, the call terminal is a card reader for reading predetermined payment means information from an MS (Magnetic Stripe) card conforming to the ISO / IEC 7810 standard, and / or a contact IC conforming to the ISO / IEC 7816 standard. A card reader for reading predetermined payment means information from a card, and / or at least one card reader for reading predetermined payment means information from a contactless IC card conforming to the ISO / IEC 14443 standard. A preferred embodiment thereof will be described in detail with reference to FIG. 1.

Referring to FIG. 1, the server 100 provided in the affiliated store connects a call terminal and a call channel used by a customer through at least one or more telephone networks (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network. Voice channel processing unit 105, a voice guide unit 115 in connection with the communication channel processing unit 105 to provide a predetermined telephone order and voice guidance for payment processing according to the present invention, and the communication channel processing unit 105 In response to the voice guidance in response to the voice prompts, a signal tone processing unit 120 for extracting predetermined information by receiving a key tone generated in a call terminal and reading the key tone in a dual frequency multi-frequency (DTMF) scheme is provided. It is characterized by comprising.

The call channel processing unit 105 is assigned a predetermined telephone number for connecting at least one or more call terminals and a predetermined call channel, and a predetermined call corresponding to the telephone network and / or VoIP network based on the telephone number. By performing a processing procedure it is characterized in that at least one communication terminal and the communication channel.

Those skilled in the art will be familiar with certain call processing procedures corresponding to the telephone network and / or the VoIP network, and thus a detailed description thereof will be omitted.

The voice guide unit 115 is connected to at least one or more call terminals and the call channel through the call channel processing unit 105, the predetermined predetermined for customer authentication and / or product order processing to the call terminal through the call channel. Characterized in that it outputs a voice announcement, and further characterized in that it outputs a voice announcement for payment processing using the call terminal according to the present invention to the call terminal through the call channel.

According to an exemplary embodiment of the present invention, the voice guide unit 115 outputs to the call terminal through the call channel based on product information stored in a predetermined storage medium 150 and payment amount information corresponding to the product. After extracting a predetermined voice announcement to be (e.g., extracted from a predetermined voice announcement storage database (not shown)), and / or generating (e.g., generating a voice announcement by TTS (Text To Speech) method), Preferably, the voice announcement is output to the call terminal through the call channel.

According to another exemplary embodiment of the present invention, the voice guide unit 115 may output voice guidance of a counselor corresponding to a predetermined call center terminal (and / or merchant phone) to the call terminal through the call channel. The present invention is not limited thereto.

The tone signal processing unit 120 generates a DTMF tone signal from the call terminal in response to the voice guidance, and receives the key tone sound by the DTMF scheme in response to the voice guidance. "0-9", "*", "#", etc.) are identified and extracted.

In addition, the signal tone processing unit 120 preferably receives the purchase product information of the key tone type transmitted from the call terminal, the purchase product information is voice guidance provided to the call terminal through the voice guide unit 115 It is preferably made by including a purchase product selection number corresponding to the comment, and / or through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone), the purchase product selection information in the form of voice information is preferably included. Accordingly, product information (and / or payment amount information associated with the product information) corresponding to the purchased product information is extracted from the predetermined storage medium 150.

According to another exemplary embodiment of the present invention, the signal processing unit 120 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal, and thus the present invention is not limited thereto. .

In addition, the signal processing unit 120 may further receive predetermined discount information transmitted from the call terminal, wherein the discount information includes a coupon number corresponding to a predetermined discount coupon possessed by the customer. Preferably, the payment amount can be discounted.

In addition, the signal tone processing unit 120 may further receive a predetermined product delivery address information transmitted from the call terminal, the product delivery address information provided to the call terminal through the voice guide section 115 The product shipping destination selection number corresponding to the number (for example, "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement, and the detailed address (" Address / call number)), and / or voice information of a counselor corresponding to the call center terminal (and / or merchant phone) to provide delivery address information (eg, a customer's address) in the form of voice information. It is preferably made, including, thereby ensuring the address to which the purchased goods will be delivered.

The signal processing unit 120 may further receive predetermined payment means selection information transmitted from the call terminal, and the payment means selection information is provided to the call terminal through the voice guide unit 115. Selecting one of a credit card payment method, and / or a check card payment method, and / or a debit card payment method, and / or a prepaid card payment method, and / or a bank transfer payment method corresponding to the announcement. It is preferable to include the information, it is preferable to further comprise the card company (or financial company) information that issued the card corresponding to the payment means to the customer.

Those skilled in the art to which the present invention pertains will understand the method for generating the DTMF type key beep and the method for reading and confirming and extracting predetermined information by reading the key beep. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the information extracted based on the key tone of the DTMF method may be extracted through a predetermined data channel based on the call channel instead of the key tone. The present invention is not limited thereby.

According to the present invention, the server 100 provided in the affiliated store is predetermined for payment processing using the call terminal in the voice call channel in association with a telephone network and / or a VoIP network component to which the call terminal is connected during the voice call. Add (or assign) a data channel, and / or open a data channel to which the voice call channel is added (or assign) for payment processing using the call terminal, and / or the voice call And a channel controller 110 for switching a channel to a data channel for payment processing using the call terminal.

According to an embodiment of the present invention, when the telephone network and / or VoIP network connecting the call terminal and the server 100 support a voice call channel and a data channel at the same time, the channel controller 110 controls the call terminal and the server. A predetermined data channel for payment processing using the call terminal is added (or assigned) to the connected call channel for voice call between 100.

According to another exemplary embodiment of the present invention, a telephone network and / or a VoIP network connecting the call terminal and the server 100 simultaneously support a voice call channel and a data channel, and make a voice call between the call terminal and the server 100. When a predetermined data channel is added (or assigned) to a connected call channel for the, the channel controller 110 selects the data channel added to (or assigned) the call channel connected between the call terminal and the server. Characterized in that open for payment processing using the terminal.

According to another exemplary embodiment of the present invention, when the telephone network and / or the VoIP network connecting the call terminal and the server 100 do not support a voice call channel and a data channel at the same time, the channel control unit 110 performs the call. It is characterized in that the communication channel connected between the terminal and the server 100 for a voice call is switched to a predetermined data channel for payment processing using the call terminal.

According to the present invention, the server 100 provided in the affiliated store is an order transmitted from the call terminal through the data channel added (or assigned) and / or switched to the voice call channel by the channel control unit 110 And an information receiving unit 125 for receiving the processing information.

According to an exemplary embodiment of the present invention, the information receiver 125 may receive predetermined purchase product information from the call terminal through the data channel, and the purchase product information may be transmitted to the call terminal through the data channel. And purchase goods selection information corresponding to the provided at least one piece of product information, and / or when the call channel simultaneously supports a voice call channel and a data channel, the purchased goods information may be included in the voice guide unit. Voice information through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone) is made, including the purchase product selection number corresponding to the voice announcement provided to the call terminal through the 115; It is possible to include the purchase product selection information of the form, whereby a predetermined storage medium Product information (and / or payment amount information associated with the product information) corresponding to the purchased product information is extracted from 150.

According to another exemplary embodiment of the present invention, the information receiver 125 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal through the data channel. The invention is not limited.

The information receiver 125 may further receive predetermined discount information transmitted from the call terminal through the data channel, and the discount information may be a coupon corresponding to a predetermined discount coupon possessed by the customer. Information, and / or coupon information included in the customer-owned discount card, and the like, whereby the payment amount can be discounted.

In addition, the information receiving unit 125 may further receive predetermined goods delivery information transmitted from the call terminal through the data channel, and the goods delivery address information is an address stored in a memory provided in the call terminal. Information and / or subscriber address information stored in a database (eg, subscriber information D / B) on the telephone network and / or VoIP network to which the call terminal is connected, and / or the call channel is a voice call. When the channel and the data channel are supported at the same time, the goods delivery information is displayed on the goods delivery destination selection number corresponding to the voice announcements provided to the call terminal through the voice guidance unit 115 (eg, corresponding to the voice announcements). (Province) "," gu (gun) "," dong (myeon / eup / ri) ", including a detailed address (" address / arc ") number, etc., or And / or delivery information (eg, a customer's address) in the form of voice information through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), whereby the purchase product is to be delivered. The address is secured.

The information receiving unit 125 may further receive predetermined payment means selection information from the call terminal through the data channel, and the payment means selection information may be used by the customer to process a payment amount of the purchased product. Information for selecting any one of a credit card payment method, and / or a check card payment method, and / or a debit card payment method, and / or a prepaid card payment method, and / or a wire transfer payment method. It is preferable that the card company (or financial company) issuing the card corresponding to the payment means to the customer is preferably made.

According to the present invention, the server 100 provided in the affiliated store may include merchant information, at least one or more product information, and a payment amount necessary to generate a predetermined payment approval request message in the call terminal from a predetermined storage medium 150. And an information extracting unit 135 for extracting payment information including information, wherein the payment amount information includes product-specific payment amount information and / or total payment amount information (eg, total payment amount is omitted). Even if it is possible to calculate the total payment amount by adding the payment amount for each product in the call terminal).

According to one embodiment of the invention, the payment means information read from the customer owned card through the card reader provided in the call terminal is credit card payment means information, and / or check card payment means information, and / or debit card payment When the information corresponds to any one of means information and / or prepaid card payment means information, the information extraction unit 135 is a unique number assigned to an affiliate store number (eg, a merchant for processing a card payment) from the storage medium 150. Number and / or terminal number (e.g., at least one of a unique number provided to the merchant terminal (or payment terminal) provided in the merchant for processing the card payment) is preferably extracted.

According to another exemplary embodiment of the present invention, when the payment means information read from the customer-owned card through the card reader provided in the call terminal corresponds to the transfer payment means information, the information check unit 170 is stored It is desirable to verify merchant information including merchant account information (eg, the merchant's financial account number, and / or branch number, and / or account holder information) from the medium 150.

If the merchant is a franchise company and a server for payment processing using the call terminal is provided in the call center of the franchise company, the merchant information is merchant information corresponding to the franchise company, and / or the customer It may be affiliated store information corresponding to a franchise chain store that manufactures and packages a product corresponding to purchase product information and delivers it to the customer, whereby the present invention is not limited thereto.

In addition, the product information and payment amount information extracted by the information extraction unit 135 from the storage medium 150 is required to purchase the product and the product information corresponding to the purchase product selection information received from the call terminal It is preferable to include payment amount information.

If predetermined discount information is further received from the call terminal, the payment amount information preferably includes a discounted amount corresponding to the discount information.

According to the present invention, the server 100 provided in the affiliated store receives payment information including the affiliated store information, at least one or more product information, and payment amount information extracted by the information extraction unit 135 through the data channel. Characterized in that it comprises an information transmitting unit 130 for transmitting to the call terminal.

Thereafter, the call terminal reads predetermined payment means information included in the customer-owned card from a predetermined card reader, and is based on affiliated store information received from the server 100, at least one product information, and payment amount information. By using the payment means corresponding to the payment means information, characterized in that for generating a predetermined payment approval request full text for the payment processing amount corresponding to the payment amount.

According to the method of the present invention, the payment means information is credit card payment means information read from the MS card and / or contact IC card and / or contactless IC card through at least one card reader provided in the call terminal, And / or at least one check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information. The card payment method information (e.g., credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information) may be a predetermined card number and / or valid. It is preferable to include TRACK II information including a period and the like, wherein the bank transfer payment means information is a predetermined financial account number and / or It comprises a customer-owned financial account information, including the branch number and / or account gaeseolil are preferred.

According to an exemplary embodiment of the present invention, when the payment means information read out through the card reader corresponds to the credit card payment means information, the payment approval request text generated by the call terminal is a credit corresponding to the credit card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information read through the card reader corresponds to the check card payment means information, the payment approval request text generated by the call terminal may be a check card-based payment approval request text corresponding to the check card payment means. It is preferable to comprise.

Alternatively, when the payment means information read through the card reader corresponds to the debit card payment means information, the full payment approval request generated by the call terminal is a full debit card-based payment approval request corresponding to the debit card payment means It is preferable to comprise.

Alternatively, when the payment means information read through the card reader corresponds to the prepaid card payment means information, the full payment approval request generated by the call terminal is a prepaid card-based payment approval request message corresponding to the prepaid card payment means. It is preferable to comprise a.

According to another exemplary embodiment of the present invention, when the payment means information read out through the card reader corresponds to the transfer payment means information, the payment approval request text generated by the call terminal is the payment from the financial account of the customer. It is preferable to include a full financial transaction request for withdrawing money and transferring it to the financial account of the merchant.

In addition, the call terminal transmits the generated payment approval request full text through the predetermined payment network (eg, a value added network (VAN)) defined in the telephone network and / or the VoIP network. Characterized in that the transmission to the bansa server 155 corresponding to the payment means, the bansa server 155 after processing the payment approval request full text, the predetermined corresponding to the payment means information included in the payment approval request full text Relay transmission to the payment server.

Thereafter, the payment server generates a payment approval message including a payment processing history corresponding to the payment approval request message and transmits it to the bansa server 155, and the bansa server 155 transmits the payment approval message to the call. Send to the terminal.

Here, the payment server comprises a credit card payment server of the card company (or financial company) that issued the credit card to the customer, if the payment means information corresponds to credit card payment means information, and / or the If the payment method information corresponds to the check card payment method information, and comprises a check card payment server of the card company (or financial company) that issued the check card to the customer, and / or the payment method information is debit card payment In the case of means information, if the debit card payment server of the card company (or financial company) that issued the debit card to the customer is made, and / or if the payment means information corresponds to the prepaid card payment means information, It includes a prepaid card payment server of the card company (or financial company) that issued the prepaid card to the customer, / Or if the payment method information corresponding to the bank transfer payment method information comprise the financial server (eg, server Ledger) of financial institutions (banks) established a financial account for the money transfer to the customer.

According to the implementation method of the present invention, the full payment approval request is encrypted with a predetermined encryption method in the call terminal to prevent exposure to the outside from eavesdropping and / or eavesdropping and / or hacking, and then the telephone network and / Alternatively, the bansa server 155 may be transmitted to the bansa server 155 through a payment network corresponding to a VoIP network. In this case, the bansa server 155 receives the encrypted information and decrypts the decryption method corresponding to the encryption method. The full text of the approval request may be restored, thereby providing a high level of security for the full text of the payment approval request.

Those skilled in the art to which the present invention pertains, a method for defining a payment network (VAN) for the predetermined payment-related professional transmission and reception with the payment server in the telephone network and / or VoIP network (for example, the telephone network and And / or a method of transmitting the payment related message to the bansa through a VoIP network, and transmitting the payment related message to the payment server from the bansa, a detailed description thereof will be omitted for convenience.

According to the present invention, the payment server is characterized in that after performing the payment processing procedure for the payment approval request full text, generates a predetermined payment approval full text corresponding to the payment approval request full text and transmits it to the call terminal. And / or the payment approval message is transmitted to the server with reference to the affiliated store information included in the payment approval request message.

According to the present invention, the server 100 provided in the affiliated store is provided with a specialized receiving unit 145 for receiving a payment approval message including a payment processing history corresponding to the payment approval request full text from the payment server. It is done.

The specialized receiving unit 145 may receive the payment approval message corresponding to the payment approval request message from the payment server through the payment network (and / or a communication network).

In addition, the professional receiving unit 145 checks the payment processing details included in the payment approval message when the payment approval message corresponding to the payment approval request message is received through the payment network (and / or communication network). The payment server may further include checking whether payment processing using the payment means information provided from the call terminal is normally processed or whether a payment error occurs.

If a predetermined payment error occurs in the payment processing using the payment means information provided from the call terminal, the specialized receiver 145 outputs the payment error information to the call terminal of the customer through the voice guide 115. After that, the payment processing process using the call terminal according to the present invention ends.

According to the present invention, the server 100 provided in the affiliated store is provided with an order processing unit 140 for performing an order processing for the payment processed product when the payment processing through the payment means information is normally performed. It is characterized by.

According to an embodiment of the present invention, when the information receiving unit 125 receives the order processing information including the purchase product information and the product delivery address information from the call terminal of the customer, the order processing unit 140 is the payment processing history And order processing information including the purchase product information and the product delivery address information to an order processing terminal of a department that manufactures and packages the purchased product in the affiliate store through a predetermined communication means and delivers it to the customer, and / Or when the affiliated store is a franchise, an order of a chain store that manufactures and packages the purchased product through a predetermined communication means and delivers the order processing information including the payment processing history, the purchased product information, and the product delivery information to a customer; It is preferable to provide to a processing terminal.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal in the payment processing process using the call terminal, the order processing unit 140 is the voice guide unit ( 115) further receives goods delivery information from the call terminal through (and / or call center terminal, and / or merchant phone) to secure order processing information including the purchased goods information and goods delivery information, and the payment processing details And order processing information including the purchase product information and the product delivery address information to an order processing terminal of a department that manufactures and packages the purchased product in the affiliate store through a predetermined communication means and delivers it to the customer, and / Or, if the affiliated store is a franchise, a state including the payment processing history, the purchased product information, and the product delivery address information; It is preferable to provide the door processing information to an order processing terminal of a chain store that manufactures and packages the purchased product through a predetermined communication means and delivers it to the customer.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal in the payment processing process using the call terminal, the order processing unit 140 performs the payment processing history. And providing the purchased goods information to an order processing terminal of a department that manufactures and packages the purchased goods in the affiliated store through a predetermined communication means and delivers them to the customer, and / or when the affiliated store is a franchise, Order processing information including processing details and purchase goods information and goods delivery address information is provided to an order processing terminal of a chain store that manufactures and packages the purchased goods and delivers them to the customer through a predetermined communication means, and then By changing the call channel between the call terminal and the server to the call channel between the call terminal and the order processing terminal, It is possible to further acquire the product delivery address information in the order processing terminal, and in addition, it is possible to perform various types of order processing procedures according to the intention of those skilled in the art.

Referring to FIG. 1, the bansa server 155 may include a text receiving unit 160 that receives a payment approval request text transmitted from the call terminal, and the encrypted payment approval when the received payment approval request text is encrypted. A decryption unit 165 that decrypts the full text of the request, reads the full text of the payment approval request, and confirms at least one or more information to be added (or inserted) and / or replaced in the full text of the payment approval request, and from the predetermined database. An information confirmation unit 170 for extracting the confirmed information, a specialized processing unit 175 for adding (or inserting) and / or replacing the extracted information in the payment approval request text, and the processed payment approval request Characterized in that it comprises a specialized relay unit 180 for relaying the full message to a predetermined payment server.

The specialized receiver 160 may receive the full text of the payment approval request generated by the call terminal through a predetermined payment network using a data channel defined in the telephone network and / or the VoIP network to which the call terminal is connected.

When the received payment approval request text received through the full text receiver 160 is encrypted, the decryption unit 165 corresponds to a predetermined encryption scheme corresponding to the encrypted payment approval request text to the payment approval request text. It is characterized by decoding by the decoding method.

The information confirming unit 170 may read at least one information for adding (or inserting) and / or replacing the payment approval request text by reading the full text of the payment approval request.

For example, the full payment approval request may include the affiliated store's phone number instead of affiliated store information, and / or may include merchant information that cannot be used in the payment approval process. The information verification unit 170 may settle the payment as described above. Information that does not include the standard data structure required in the approval process is identified as information to be added (or inserted) and / or replaced in the full text of the payment authorization request.

Alternatively, the payment approval request text may include a blank value in a merchant information item. In this case, the information checking unit 170 adds the information including the blank value to the full text of the payment approval request ( Or insert) and / or information to be replaced.

If at least one or more information to be added (or inserted) and / or replaced in the full payment approval request is confirmed, the information checking unit 170 extracts the checked information from a predetermined database. .

For example, when the payment approval request message includes the affiliated store telephone number instead of the affiliated store information, the affiliated store number and the affiliated store information are stored in a database referred to by the information checking unit 170 in association with each other. The information verification unit 170 extracts valid merchant information that can be used for the payment processing from the database through the affiliated store telephone number.

The specialized processing unit 175 is characterized in that the addition (or insert) and / or replace the information confirmed by the information confirming unit 170 to the full payment approval request.

According to an exemplary embodiment of the present invention, if the credit card payment means information included in the full payment approval request received through the full text receiver 160 (or decrypted through the decryption unit 165) corresponds to the full text, The payment approval request text processed by the processing unit 175 may include a credit card-based payment approval request text corresponding to the credit card payment means.

Alternatively, when the payment means information included in the payment approval request message received through the specialized receiver 160 (or decrypted through the decoder 165) corresponds to the check card payment means information, the specialized processing unit ( The payment approval request text generated by 175 may preferably include a check card-based payment approval request text corresponding to the check card payment means.

Alternatively, when the payment means information included in the payment approval request message received through the specialized receiver 160 (or decrypted through the decoder 165) corresponds to the debit card payment means information, the specialized processing unit ( The payment approval request text generated by 175 may preferably include a debit card-based payment approval request text corresponding to the debit card payment means.

Alternatively, when the payment means information included in the full text of the payment approval request received through the specialized receiving unit 160 (or decrypted through the decrypting unit 165) corresponds to the prepaid card payment means information, the specialized processing unit ( The payment approval request text generated by 175 may preferably include a prepaid card-based payment approval request text corresponding to the prepaid card payment means.

According to another exemplary embodiment of the present invention, the payment means information included in the full payment approval request received through the full-text receiver 160 (or decrypted through the decryption unit 165) corresponds to the direct transfer payment method information. In this case, the payment approval request text generated by the professional processing unit 175 may include a financial transaction request text that withdraws the payment amount from the customer's financial account and transfers it to the financial account of the affiliated store.

The special relay unit 180 relays the full payment approval request message processed by the special processing unit 175 to a payment server corresponding to the payment means through a predetermined payment network, thereby transmitting the full payment approval request message. It is characterized by requesting the payment approval.

In addition, the specialized relay unit 180 is characterized in that when the payment approval message corresponding to the full payment approval request message is transmitted from the payment server, receives it through the payment network and relays the transmission to the call terminal.

Here, the payment server includes a credit card payment server of a card company (or financial company) that issued the credit card to the customer when the payment means information included in the full payment approval request information corresponds to the credit card payment means information. If the payment means information that is made, and / or included in the full payment approval request correspond to the check card payment means information, including the check card payment server of the card company (or financial company) that issued the check card to the customer; If the payment means information that is made and / or included in the full payment approval request correspond to the debit card payment means information, including a debit card payment server of the card company (or financial company) that issued the debit card to the customer And / or the payment method information included in the full text of the payment approval request corresponds to the prepaid card payment method information. In this case, the prepaid card payment server of the card company (or financial company) that issued the prepaid card to the customer, and / or the payment means information included in the full payment approval request information corresponds to the direct transfer payment method information. In this case, the bank may include a financial server (eg, a ledger server) of a financial company (bank) that opens a financial account for the account transfer to the customer.

2 is a diagram showing the functional configuration of a call terminal according to an embodiment of the present invention.

In more detail, Figure 2 relates to an embodiment of a call terminal for payment processing using a call terminal according to the present invention, if the person skilled in the art to which the present invention pertains, see FIG. It is possible to infer various call terminal function configurations for payment processing using a call terminal by changing the present invention, but the present invention includes all the above-described inferred implementation methods, and is not limited to the implementation method shown in FIG.

Referring to FIG. 2, the call terminal basically communicates with the control unit 200, the memory unit 245, the key input unit 205, the voice processing unit 210, the screen output unit 215, and the tone processing unit 230. It comprises a processing unit 235 and a power supply unit 225 for supplying power to the call terminal, the card reader unit 220 and / or security application module 240 for payment processing using the call terminal according to the invention It is characterized in that it comprises a), and may further include at least one or more functional components (not shown) according to the intention of those skilled in the art.

The control unit 200 basically controls the key input unit 205, the voice processing unit 210, the screen output unit 215, and the communication processing unit 235 so that a predetermined telephone is input through the key input unit 205. Based on the number, the voice communication channel is connected to at least one or more other call terminals (or servers) through a telephone network and / or a VoIP network to which the communication processor 235 is connected, and voice input and output through the voice processor 210. Converting a signal into an electrical signal (and / or a digital signal) to operate and control a voice call function to transmit and receive through the voice call channel, and to achieve the function of the call terminal in hardware. At least one processor and execution memory (e.g., a register and / or RAM) including a Central Processing Unit (CPU) / Micro Processing Unit (MPU) provided in a call terminal ss Memory)) and a bus for inputting and outputting predetermined data, and loading into the execution memory from a recording medium provided in the communication terminal in order to realize the function of the communication terminal in software. Loading) and the program routine (Routine) and / or program data that is arithmetic processing by the processor is characterized in that the generic.

In addition, the controller 200 controls the communication processor 235 to access data channels defined in a telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network connected to the communication processor 235. Connecting a predetermined data channel for data communication with at least one terminal (or server) based thereon, and operating and controlling a function of transmitting and receiving at least one digital information (or digital data) through the data channel. To this end, at least one or more processors including a CPU / MPU, the execution memory and a bus (BUS) for inputting and outputting predetermined data to the call terminal for the data communication in hardware, characterized in that the software From the recording medium provided in the communication terminal to the execution memory. Is characterized in that the general term for the program routine, and / or program data processing operations by the processor.

In addition, the control unit 200 controls a predetermined card reader unit 220 provided in the call terminal for payment processing using the call terminal, so that a predetermined value from the customer-owned card through the card reader unit 220. And operating and controlling reading of payment means information, and for this, at least one processor and execution memory and a predetermined memory including a CPU / MPU in the call terminal for payment processing using the call terminal in hardware. And a bus for inputting and outputting data of the data, and is loaded into the execution memory from a recording medium provided in the call terminal for the payment processing using the call terminal and executed by the processor. The program routines and / or program data to be processed are collectively characterized.

In addition, the control unit 200 controls a predetermined security application module 240 provided in the call terminal for payment processing using the call terminal, through a card reader unit 220 from a customer-owned card It generates a predetermined message based on the payment means information, and operates and controls the transmission of the full message to a predetermined van server through the communication processing unit 235, for this purpose, the call terminal in hardware And at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data to the call terminal for payment processing using the call terminal. Loaded into the execution memory from the recording medium provided to the call terminal for payment processing to the processor The program routine and / or program data which are arithmetic-processed by these are generically named.

Accordingly, the control unit (b) may be a program routine which is loaded into the execution memory from the recording medium provided in the communication terminal and processed by the processor for payment processing using the communication terminal. A block diagram in FIG. 200 will be described.

The memory unit stores a predetermined program routine (or code) and / or program data (for example, information or data input and output when an operation by the program routine (or code) is performed) for controlling the overall operation of the call terminal. General term for non-volatile memory, including at least one or more storage means including a hardware EEPROM (Electrically Erasable and Programmable Read Only Memory) and / or Flash Memory (FM) and / or Hard Disk Drive (HDD) It is characterized in that the predetermined program routine and program data (for example, data input or output for the program routine to perform a predetermined function) required for the control unit 200 to perform a predetermined control function is stored. It is done.

According to an embodiment of the present invention, the memory unit 245 may store van server address information corresponding to a payment network to transmit a full text of a payment approval request generated in the call terminal for payment processing using the call terminal. If a predetermined payment approval request message is generated in the call terminal for payment processing using the call terminal, the predetermined van server to transmit the payment approval request message is confirmed.

In addition, the memory unit 245 preferably stores at least one encryption key for payment processing using the call terminal.

The key input unit 205 is provided with at least one key button including at least one number key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of the controller and from a predetermined key button provided in the key input device in a specific input mode and / or operation mode of the call terminal controlled by the controller 200. When predetermined information (or signal) is input, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 200.

When the current input mode and / or operation mode of the call terminal is a voice call mode, the controller 200 obtains predetermined key data corresponding to the key event and provides the predetermined key data to the beep processor 230, and the tones The processor 120 may generate a key tone corresponding to the key data according to a Dual Tone MultiFrequency (DTMF) scheme.

When the current input mode and / or operation mode of the call terminal is a data communication mode, the controller 200 acquires predetermined key data corresponding to the key event, and then performs an information processing procedure corresponding to the key data. And / or after acquiring a command to execute a predetermined function matched with the key event, and then performing a function corresponding to the command.

According to an embodiment of the present invention, the key input unit and the key input device having at least one key button interoperate with each other to perform a function of key input means provided in the call terminal.

According to an embodiment of the present invention, the key input device which is interlocked with the key input unit may include a keypad device having at least one numeric key, a character key ('*', '#') and a function key, and / or at least one At least one or more keyboard devices including the above-described numeric keys, character keys (eg, English character keys, and / or Korean character keys) and function keys are preferably included.

The voice processing unit converts a predetermined voice input from a predetermined voice input device (for example, a microphone) provided in the call terminal into a predetermined voice signal (or an electrical signal), and the telephone network and / or VoIP connected to the communication processing unit. Encoding is performed using a voice encoding scheme corresponding to a network to generate predetermined voice data, and the voice data is provided to the controller 200. To this end, the voice processor includes a predetermined vocoder and Codec is preferably provided.

Thereafter, the controller 200 transmits the generated voice data to the telephone network and / or the VoIP network through the communication processor.

According to an embodiment of the present invention, when the communication processing unit is connected to a general telephone switching network (or intelligent network), the voice processing unit may transmit the voice signal (or electrical signal) through the general telephone switching network (or intelligent network). It is preferable to generate the speech data by encoding by an encoding method.

According to another embodiment of the present invention, when the communication processing unit is connected to a mobile communication network, the voice processing unit is connected to a code division multiple access (CDMA) stack capable of transmitting the voice signal (or electrical signal) through the mobile communication network. It is preferable to generate the speech data by encoding with a corresponding encoding scheme.

According to another embodiment of the present invention, when the communication processor is connected to a VoIP network, the voice processor is an encoding scheme corresponding to a VoIP protocol stack capable of transmitting the voice signal (or electrical signal) through the VoIP network. It is preferable to generate the voice data by encoding the encoding method, wherein the encoding scheme corresponding to the VoIP network is H.323 protocol standard defined by the International Telecommunication Union (ITU) and / or SIP defined by the Internet Engineering Task Force (IETF). Session Initiation Protocol) It is preferable to include at least one or more of the protocol specifications.

According to the exemplary embodiment of the present invention, the voice processing unit 210 and the voice input device interoperate with each other to perform a function of voice input means for receiving a voice signal for voice call through the telephone network and / or the VoIP network.

When the voice data encoded by a predetermined encoding method is received through the communication processor 235, the controller 200 provides the voice data to the voice processor 210, at which time the voice processor 210 is provided. Decodes the voice data by a voice encoding scheme corresponding to a telephone network and / or a VoIP network to which the communication processor is connected to generate a predetermined voice signal (or an electrical signal), and generates the voice signal (or an electrical signal). It is characterized in that the output via a predetermined voice output device (for example, a speaker) provided in the call terminal, the voice processing unit 210 is preferably provided with a predetermined vocoder and codec.

When the communication processing unit 235 is connected to a general telephone switching network (or an intelligent network) according to an exemplary embodiment of the present invention, the voice processing unit 210 transmits the voice data received through the communication processing unit 235 to the general telephone. It is preferable to generate the speech signal (or electrical signal) by decoding by encoding scheme corresponding to the switching network (or intelligent network).

According to another embodiment of the present invention, when the communication processor 235 is connected to the mobile communication network, the voice processor 210 transmits the voice data received through the communication processor 235 to the CDMA corresponding to the mobile communication network. It is preferable to generate the speech signal (or electrical signal) by decoding by stack-based encoding.

According to another embodiment of the present invention, when the communication processing unit 235 accesses the VoIP network, the voice processing unit 210 corresponds to the VoIP network by receiving voice data received through the communication processing unit 235. It is preferable to generate the voice signal (or electrical signal) by decoding by encoding method, wherein the encoding method corresponding to the VoIP network is at least one of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable that the above specification is included.

According to an embodiment of the present invention, the voice processing unit 210 and the voice output device interoperate with each other to perform a function of voice output means for outputting a voice signal for voice call through the telephone network and / or the VoIP network.

The screen output unit 215 is a liquid crystal display (LCD) and / or CRT (by the control unit 200) in the process of the call terminal performs a voice call function and / or payment processing function using the call terminal. And at least one information or data that is predefined or defined in real time to be output to a predetermined output device including a Cathode Ray Tube) through a predefined interface screen, wherein the screen output unit 215 ) And the screen output device interoperate with each other to perform the function of the screen output means provided in the call terminal.

Predefined information or data to be output from the call terminal to the screen output device is stored or generated by key data input through the key input unit 205 and / or components provided in the call terminal. Information (or data), information (or data) transmitted and received through the communication processing unit 235, and / or (or data) corresponding to at least one or more of a predetermined calculation result performed by the call terminal.

According to a preferred embodiment of the present invention, the screen output unit preferably performs a function of a screen output means for outputting a payment processing screen according to each payment processing step to the screen output device for payment processing using the call terminal. .

The signal processing unit 120 is a predetermined number key ("0 ~ 9") and / or letter keys ('*', ') through the key input unit 205 in the state that the operation mode of the call terminal is the voice call mode # ') Is input, a key tone corresponding to the input key data is generated by a DTMF scheme, and the key tone is a voice corresponding to a telephone network and / or a VoIP network to which the communication processing unit is connected. It is characterized in that the encoding method provided to the communication processing unit 235.

According to an embodiment of the present invention, when the communication processing unit 235 is connected to a general telephone switching network (or intelligent network), the voice processing unit 210 may transmit the key tone through the general telephone switching network (or intelligent network). It is preferable to generate the speech data by encoding by a coding scheme.

According to another exemplary embodiment of the present invention, when the communication processor 235 accesses a mobile communication network, the voice processor corresponds to a code division multiple access (CDMA) stack capable of transmitting the key tone through the mobile communication network. It is preferable to generate the speech data by encoding by an encoding method.

According to another exemplary embodiment of the present invention, when the communication processor 235 accesses a VoIP network, the voice processor 210 encodes a key corresponding to a VoIP protocol stack capable of transmitting the key tone through the VoIP network. It is preferable to generate the voice data by encoding in a scheme, wherein the encoding scheme corresponding to the VoIP network includes at least one or more of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable.

The communication processing unit 235 connects the call terminal to a predetermined telephone network and / or VoIP network, and voices at least one or more other call terminals (or servers) according to a call processing procedure defined in the telephone network and / or VoIP network. It is characterized by connecting the call channel.

According to an embodiment of the present invention, the communication processing unit 235 connects the call terminal to a general telephone switching network (or an intelligent network) in a physical network configuration (e.g., connects the call terminal to a general telephone switching network (or an intelligent network). At least one or more other call terminals by performing a call processing procedure corresponding to a communication protocol standard defined in the general telephone switching network (or an intelligent network). It is desirable to connect the voice call channel with the server (or the server).

According to another exemplary embodiment of the present invention, the communication processing unit 235 may include a physical network configuration for connecting the call terminal to a mobile communication network (for example, a base station and a CDMA stack provided on the mobile communication network). Network configuration for connecting a wireless communication section), and performs a call processing procedure corresponding to a communication protocol standard defined in the mobile communication network to establish a voice call channel with at least one or more other call terminals (or servers). It is preferable to connect.

According to another exemplary embodiment of the present invention, the communication processing unit 235 may include a physical network configuration (eg, a VoIP gateway provided on the VoIP network and / or the VoIP terminal connected to the VoIP terminal). Or a network configuration connecting a wired communication section through a Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) protocol layer implemented on a VoIP gatekeeper and a UDP / IP protocol stack. In addition, it is preferable to connect a voice call channel with at least one or more other call terminals (or servers) by performing a call processing procedure corresponding to the communication protocol standard defined in the VoIP.

In addition, the communication processing unit 235 transmits and receives voice data encoded with at least one other communication terminal (or server) encoded in a coding scheme corresponding to the telephone network and / or VoIP network through the voice communication channel. do.

According to an embodiment of the present invention, when the communication processing unit 235 is connected to a general telephone switching network (or intelligent network), the communication processing unit 235 is encoded by an encoding scheme corresponding to the general telephone switching network (or intelligent network). It is preferable to transmit and receive at least one voice data.

According to another embodiment of the present invention, when the communication processing unit 235 accesses a mobile communication network, the communication processing unit 235 transmits and receives at least one voice data encoded by a corresponding encoding scheme corresponding to the mobile communication network. It is desirable to.

According to another embodiment of the present invention, when the communication processing unit 235 accesses a VoIP network, the communication processing unit 235 transmits and receives at least one voice data encoded by an encoding scheme corresponding to the VoIP network. It is preferable.

In addition, when it is possible to add (or assign) a predetermined data channel to the voice call channel, the communication processor 235 assigns a predetermined data channel to the voice call channel connected through a predetermined telephone network and / or a VoIP network. And add (or assign) and perform data communication with at least one other call terminal (or server) to which the call channel is connected through the added (or assigned) data channel.

According to an embodiment of the present invention, when the communication processing unit 235 is connected to a general telephone switching network (or intelligent network), the communication processing unit 235 uses a predetermined data channel defined in the general telephone switching network (or intelligent network). In addition to (or assigning) to the voice call channel, it is preferable to perform predetermined data communication in addition to the voice call with at least one or more other call terminals (or servers) to which the call channel is connected through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 235 accesses a mobile communication network, the communication processing unit 235 adds (or assigns) a predetermined data channel defined in the mobile communication network to the voice communication channel. In addition to the voice call, it is preferable to perform predetermined data communication with at least one other call terminal (or server) connected with the call channel through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 235 accesses the VoIP network, the communication processing unit 235 adds a predetermined data channel defined in the VoIP network to the voice call channel (or And a predetermined data communication in addition to the voice call with at least one or more other call terminals (or servers) to which the call channel is connected through the data channel.

In addition, the communication processor 235 connects at least one terminal (or server) and a predetermined data channel (or communication channel) through a predetermined telephone network and / or a VoIP network independently of the voice call channel. And, it characterized in that the predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

When the communication processing unit 235 is connected to a general telephone switching network (or an intelligent network) according to an embodiment of the present invention, the communication processing unit 235 is a predetermined data communication standard defined in the general telephone switching network (or intelligent network). According to the present invention, it is preferable to connect a predetermined data channel (or communication channel) with at least one terminal (or server), and predetermined data communication with at least one terminal (or server) through the data channel (or communication channel). Do this.

According to another embodiment of the present invention, when the communication processor 235 accesses a mobile communication network, the communication processor 235 may include at least one terminal according to a CDMA stack based data communication standard defined in the mobile communication network. Or a server) and a predetermined data channel (or communication channel), and perform a predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

According to another embodiment of the present invention, when the communication processing unit 235 accesses a VoIP network, the communication processing unit 235 may include at least one or more data according to a VoIP protocol stack based data communication standard defined in the VoIP network. It is preferable to connect a predetermined data channel (or communication channel) with a terminal (or server), and perform predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

According to the present invention, the call terminal is provided with a card reader unit 220 for reading predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal according to the present invention. It features.

That is, a customer who is provided with payment processing using the call terminal according to the present invention through the call terminal contacts the MS (Magnetic Stripe) card and / or the ISO / IEC 7816 standard based on the ISO / IEC 7810 standard. A card reader (or wireless IC chip), and / or a card containing (or owned) at least one contactless IC card (or wireless IC chip) based on the ISO / IEC 14443 standard, the card reader unit And an interface for reading at least one payment means information from the customer-owned card.

According to an embodiment of the present invention, the card reader unit 220 is an MS reader unit providing an interface between the MS card and the call terminal, and / or a contact providing an interface between the contact IC card and the call terminal. And a contactless IC reader section for providing an interface between the contactless IC card and the call terminal.

The MS reader unit is a card reader unit based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (for example, magnetized binary). When the MS card on which data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is loaded on the magnetic head. By using the interface, the predetermined payment means information is interfaced to at least one or more tracks (for example, track II area) provided in the MS of the MS card to the call terminal.

The contact IC reader is a card reader based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in a contact IC card. Supplying power to the IC chip of the IC card through the contact point, and transfers predetermined payment means information from the IC chip to the call terminal through the half duplex transaction using an APDU (Application Protocol Data Unit). Interfacing.

The contactless IC reader is a card reader based on ISO / IEC 14443. At least one antenna which makes contactless contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises a, and supplies power to the IC chip of the IC card through the antenna, interfacing the predetermined payment means information from the IC chip to the call terminal through the half-duplex transaction using the APDU Characterized in that.

According to an embodiment of the present invention, the card reader unit 220 may provide credit card payment means information, and / or check card payment means information, and / or debit card from the customer-owned card for payment processing using the call terminal. It is preferable to read at least one of payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information.

According to the present invention, in order to provide a payment processing function using a call terminal according to the present invention, the call network generates a predetermined payment approval request message including a predetermined payment means information from a predetermined customer card and the telephone network and / / Security Application Module (240) for managing the function to transmit to the van server via the VoIP network, and receives and processes the payment approval message corresponding to the payment approval request full text from the van server (Secure Application Module; SAM) It is characterized by comprising a.

The secure application module 240 (SAM) is a confidentiality and / or authentication and / or the like required in the process of performing the electronic payment and / or electronic payment by the call terminal using the card. Or security to carry out security requirements, including integrity and / or nonrepudiation, in a secure and reliable structure within the call terminal without using an authentication server (or payment server) on a payment network. An apparatus, comprising: encrypting or decrypting a predetermined message (information or data) processed in the course of the call terminal performing a predetermined security request function (e.g., electronic payment and / or electronic payment function), and forgery of the message ( Or add an authenticator to prevent tampering, or store important information in the process of performing the security request function. It characterized in that it performs.

In general, the security application module 240 is preferably composed of a predetermined security application module inserter and a security application module chip, the security application module chip is a chip containing at least 8-bit CPU or more 2 Million Instructions Per Second (MIPS) or more It is preferable to include an application specific integrated circuit (ASIC) chip (for example, a PLCC 44-pin chip) and / or an IC chip (for example, an IC card in the form of a subscriber identity module).

In addition, the security application module 240 is at least one or more security application data (eg, at least one or more identifier, version, expiration date, issue date, code value, etc.) required for the call terminal to perform a predetermined security request function and / Or a key (e.g., one master key and at least one application key) and / or a protocol (e.g., trading protocol, re-transaction protocol, last transaction cancellation protocol, collection protocol, SAM issuance protocol, (e-money company / card company) registration protocol , Privilege acquisition protocols, mode switch protocols, key download protocols, SAM revocation protocols) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switch / collection / delete / discard / initialization / reprocessing) / Cancel command).

2, the call terminal is a check result of the mode check unit 250 and the mode check unit 250 for confirming the operation mode of the call terminal for payment processing using the call terminal according to the present invention When the call terminal is in the payment mode using the call terminal according to the present invention, an information reading unit 260 for reading predetermined payment means information from a predetermined customer-owned card through the card reader unit 220, and An information receiver 255 for receiving payment information including merchant information, at least one product information, and payment amount information from the server through a communication processor 235, and a predetermined payment including the payment means information and payment information. Specialized generation unit 265 for generating the approval request text, the specialized transmission unit 275 for transmitting the payment approval full text to the van server, and the payment approval request through the communication processing unit 235 Receiving a payment authorization specialized corresponding to the door, and wherein formed by having a specialized processor 280 to perform the information processing procedure corresponding to the payment authorization professional.

In addition, the call terminal is characterized in that it further comprises a cryptographic processing unit 270 for encrypting in a predetermined encryption method in order to prevent the wiretap and / or interception and / or hacking of the full payment approval request.

The mode checking unit 250 checks whether an operation mode of the call terminal is a voice call mode, a voice call / data communication mode, or a data communication mode.

In addition, when the operation mode of the call terminal is a voice call / data communication mode, the mode checking unit 250 determines whether the data channel added (or assigned) to the voice call channel is a data communication mode for general data communication, Or it is characterized in that the data communication mode for payment processing according to the present invention.

If the result of the check indicates that the operation mode of the call terminal is a data communication mode for payment processing according to the present invention, the mode checking unit 250 recognizes the customer-owned card through the screen output unit (and / or voice processing unit). By requesting interfacing through the card reader 220, the information reader 260 processes the card reader 220 to read predetermined payment means information from the customer-owned card.

In addition, if the operation result of the call terminal is a data communication mode for payment processing according to the present invention, the information receiver 255 is the server 100 through the data channel added (or assigned) to the call channel It is preferable to receive payment information including merchant information and at least one item information and payment amount information transmitted from).

In addition, when the operation mode of the call terminal is a data communication mode, the mode check unit 250 confirms whether the data communication mode is a simple data communication mode or a data communication mode for payment processing according to the present invention. It features.

If the result of the check indicates that the operation mode of the call terminal is a data communication mode for payment processing according to the present invention, the mode checking unit 250 receives the customer-owned card through the screen output unit (and / or voice processing unit). By requesting interfacing through the card reader 220, the information reader 260 processes the card reader 220 to read predetermined payment means information from the customer-owned card.

In addition, if it is determined that the operation mode of the call terminal is a data communication mode for payment processing according to the present invention, the information receiving unit 255 is at least one of affiliated store information transmitted from the server 100 through the data channel. It is preferable to receive payment information including the above product information and payment amount information.

The information receiving unit 255 may receive payment information including affiliate store information, at least one product information, and payment amount information through a data channel connected with the server 100. Further receiving at least one or more other payment information, such as a document serial number to be included in the full payment approval request generated by the generation unit 265 (can be omitted when the full document generation number is generated by the full text generation unit 265). It is possible, and the invention is not limited thereby.

According to the exemplary embodiment of the present invention, the information receiving unit 255 preferably outputs at least one product information and payment amount information included in the payment information through the screen output unit.

When the call terminal is a payment mode using the call terminal according to the present invention, the information reading unit 260 receives a predetermined customer-owned card through the card reader 220. Characterized in that it reads predetermined payment means information, the payment means information is credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment At least one or more of the means information and / or bank transfer payment means information is preferably made.

According to an embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information In the case of payment means information, the payment means information read out by the information reader 260 through the card reader 220 includes at least one or more number arrays, such as a 16-digit card number and / or expiration date. It is preferable to make it.

In addition, when the payment means information corresponds to the account transfer payment means information, the payment means information read out by the information reader 260 through the card reader 220 is a 16-digit account number and / or branch number It is preferable to include at least one or more number arrangements, such as.

The full text generation unit 265 may add the payment means information read through the information reader 260, the affiliated store information received through the information receiver 255, and the total payment amount information including at least one payment amount information. It characterized in that for generating a predetermined payment approval request full text corresponding to the payment means information.

When the payment means information read out through the information reader 260 corresponds to the credit card payment means information according to an embodiment of the present invention, the full text generation unit 265 is the credit card payment means information and merchant information And it is preferable to create a full credit card payment approval request including the total payment amount information.

In addition, when the payment means information read out through the information reader 260 corresponds to the check card payment means information, the full text generation unit 265 is the check card payment means information, merchant information and the total payment amount information It is desirable to create a full check card payment approval request including.

In addition, when the payment means information read through the information reading unit 260 corresponds to the debit card payment means information, the full text generation unit 265 is the debit card payment means information, merchant information and the total payment amount information It is desirable to create a full debit card payment authorization request including.

In addition, when the payment means information read out through the information reader 260 corresponds to the prepaid card payment means information, the full text generation unit 265 is the prepaid card payment means information, merchant information and the total payment amount information It is desirable to create a prepaid card payment authorization request containing the full text.

In addition, when the payment means information read through the information reader 260 corresponds to the account transfer payment means information, the full text generation unit 265 is the account transfer payment means information and merchant information (eg, merchant bank account) Information) and total payment amount information (eg, wire transfer amount information).

The specialized transmission unit 275 transmits the payment approval request telegram generated by the specialized generation unit 265 through the information reading unit 260 through the telephone network and / or the VoIP network through the communication processing unit 235. Characterized in that the van server corresponding to the payment means information read (or included in the payment approval request full text) to the van server, the van server transfers the payment approval request information to the payment means information included in the full payment approval request The payment server transmits a predetermined payment approval message including a payment processing history corresponding to the payment processing procedure after performing a predetermined payment processing procedure corresponding to the payment approval request text. It generates and transmits to the van server, and the van server transmits the payment approval message to the call terminal.

According to the embodiment of the present invention, in transmitting the full text of the payment approval request to the van server, the full text of the payment approval request may be exposed to eavesdropping and / or interception and / or hacking. (270) is characterized in that for encrypting the payment approval request full text in a predetermined encryption method, the encrypted payment means information is the van server (and / or payment server for the final approval of the payment approval request full text) Characterized in that it is decrypted by a predetermined decryption method corresponding to the encryption method.

According to an embodiment of the present invention, the encryption method may include at least one of a symmetric key (or secret key) encryption method, a public key encryption method, and / or an electronic envelope encryption method, and / or a key exchange encryption method. It is preferable to include the present invention, and other encryption methods other than the above encryption method may be used according to the intention of those skilled in the art, and the present invention is not limited thereby.

In addition, an encryption key for encrypting the full text of the payment approval request by the encryption processing unit 270 may be provided in the security application module 240 and / or stored on the memory unit 245. The present invention is not limited by this.

The specialized processing unit 280 receives a payment approval message including a payment processing history corresponding to the payment approval request message from the server (and / or payment server) through the communication processing unit 235, and the payment approval message is completed. Extracting the payment processing history from the output through the screen output unit 215 is characterized in that.

3 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

More specifically, Figure 3 is an embodiment of the MS card for storing the payment means information that is read from the customer-owned card through a card reader provided in a predetermined call terminal, for convenience the MS card shown in this figure 3 In the MS card having a Track I storage area, a Track II storage area, and a Track III storage area, the payment means information according to the present invention is stored in the Track II storage area. Those of ordinary skill in the art may refer to and / or modify this drawing to modify credit card payment means information, and / or check card payment means information, and / or debit card payment means in the Track II storage area of the MS card. Information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is provided in the Track I storage area and / or the Track III storage area. Although various embodiments of the present invention may be inferred, the present invention includes all the above-described inferred implementation methods, and is not limited to the implementation methods illustrated in FIG.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 3, payment means information providing a payment processing function using a call terminal according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area.

4 is a diagram illustrating an IC card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

In more detail, Figure 4 illustrates an embodiment of an IC card for storing payment means information read from a customer's own card through a card reader provided in a predetermined call terminal. FIG. 4 illustrates a case in which payment means information according to the present invention is stored in a memory of the present invention. Those skilled in the art to which the present invention pertains may refer to FIG. 4 and / or modify the memory card of the IC card. Infer various implementation methods for storing credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. As will be appreciated, the present invention includes all implementation methods inferred above, and is not limited to the implementation method illustrated in FIG.

With reference to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip's IC chip may include power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), and programming. I / O interfaces for communicating with the call terminals (e.g. command or data exchange) through contact points such as power supply (VPP) and / or input / output (I / O), central processing unit (CPU), micro process unit (MPU) And / or a processor unit including at least one computing element including a coprocessor, a read only memory (ROM), a random access memory (RAM), an electrically erasable and programmable read only memory (EEPROM), And a memory unit including at least one memory element including a flash memory (FM). In particular, at least one memory element (eg, a ROM) of the memory elements may include a chip operating system for managing and operating internal resources of the IC card. Chip Operating System (COS) is stored, and when a predetermined power is supplied from a call terminal through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory unit is loaded into a predetermined execution memory to provide overall control of the IC chip. Control the operation, and control information or data exchange between the IC chip and the call terminal through an APDU (Application Protocol Data Unit) based on a clock frequency (eg, 3.57 MHz or 4.9 MHz) of the clock signal CLK contact point. do.

According to the present invention, the memory unit of the IC chip terminates at least one or more programs among programs that are loaded in the card terminal and is already driven, and drives a specific program among a plurality of programs stored in the card terminal, or the card. And card storage information for executing a function of converting a screen configuration and / or a function set in the terminal into a specific screen configuration and / or a specific function. The card storage information is read and read by the terminal program. And / or is driven or executed by a data unit for storing a data set corresponding to predetermined information or data to be used, an arithmetic function of the processor unit and an instruction set provided by a COS, and used by the terminal program. Program routines (e.g., in the case of Javacard) JAVA Applet) is provided with a processing unit corresponding to an application including an instruction call code that interacts with the instruction set of the COS and execution code that is processed by the processor unit. Read a command provided from the terminal program via an input / output interface, and read or write at least one or more information or data stored in the data unit based on the read command, and as a result or read information or data It is characterized in that to provide to the terminal program via the input and output interface through the APDU.

According to a preferred embodiment of the present invention, the memory unit of the IC chip includes a security structure based on ISO / IEC 10202, and accordingly, the memory unit is a protection area in which secret information such as a chip serial number (CSN) is stored. And a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the like. The card storage information for the present invention includes the protection area and the COS control area. It is preferably stored in the excluded region.

In addition, according to the ISO / IEC 7816 and / or ISO / IEC 14443 ICC standard, the memory unit includes one master file (MF) corresponding to a root file, and at least one lower part of the master file. ATR (Answer To Reset) including function information about stored information, at least one dedicated file (DF) corresponding to each ICC stored information, and a smart card service disposed under the dedicated file. It includes a file structure consisting of an element file (EF) containing substantial information and / or data for, the card storage information for the present invention also comprises such a file structure.

Referring to FIG. 4 according to an embodiment of the present invention, the data unit of the card storage information stores at least one or more payment means information for payment processing using a call terminal according to the present invention. The information includes at least one of credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. It is done by

5 is a diagram illustrating a specialized structure for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, Figure 5 is a full payment approval request for reading and generating a predetermined credit card payment means information from a predetermined card reader in the call terminal shown in Figure 1, which is conventional in the art Those skilled in the art may refer to and / or modify this drawing 5 to infer a payment approval request specialized structure corresponding to other payment means information in addition to the credit card payment means information. It includes all, and is not limited to the embodiment shown in FIG.

Referring to Figure 5, the payment approval request full-text structure is at least one or more specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and the end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text is provided through a transaction classification item (eg, credit approval request, credit approval cancellation, etc.), a Terminal_ID item, a POS Entry Mode item, and a card reader provided in the call terminal. TRACK II Data items corresponding to payment method information obtained from a predetermined card (for example, a primary account number (PAN) area and additional data (AD) and / or DD (discretionary data) area of TRACK II of the MS card. Credit card information, or credit card information obtained from the credit card file of the IC card), and the installment months and total amount items corresponding to the credit card payment information after a predetermined FS (File Separator, 0X1C). It includes tax and service charge items, and also includes a working key index item, a password item, a product code item and a document serial number item. Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

The Terminal_ID item in the payment approval request specialist information item corresponds to the affiliated store information, the total amount item corresponds to total payment amount information corresponding to the purchase product information, and the document serial number is the present invention in the server. Corresponds to the serial number assigned to manage the payment processing using the call terminal according to.

Further, the TRACK II Data item of the information on the payment approval request specialist is readout information received from the predetermined card reader provided in the call terminal and received by the server. Corresponds to credit card information.

6 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in a symmetric key (or secret key) method in a call terminal according to an embodiment of the present invention.

In more detail, Figure 6 relates to a method for encrypting and transmitting the full payment approval request message in a symmetric key (or secret key) manner in a call terminal equipped with an encryption function as shown in FIG. If one of ordinary skill in the art, various implementations of encrypting the payment approval request text in a symmetric key (or secret key) manner in a call terminal on the telephone network and / or VoIP network by referring to and / or modifying the present invention. The method may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 6 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the call terminal, the public certificate is a predetermined memory unit provided in the call terminal And / or stored in an IC chip (or IC card) in the form of ID-000 mounted on or detached from the call terminal, and / or the IC is provided with a predetermined IC card reader. All of them can be stored in an IC card inserted in the card reader, and the present invention is not limited thereto.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit provided in the call terminal in addition to the public certificate, and / or included in the interface screen provided from the server to the call terminal, And / or can be embedded in a communication program that communicates with the bansa server 155 on the call terminal, whereby the invention is not limited thereto.

Referring to FIG. 6, when a predetermined payment approval request message is generated in the full text generation unit 265 of the call terminal, the predetermined text is provided to the cryptographic processing unit 270 (600). The encryption processing unit 270 reads a predetermined symmetric key (or secret key) for encrypting the full text of the payment approval request from the official certificate provided in the call terminal (605), and reads the read symmetric key (or secret key). The payment approval request is encrypted through the full text (610).

Herein, the encryption function of the encryption processing unit 270 is referred to as E (Encryption), the symmetric key (or secret key) is k (key), the payment approval request full text P (Plaintext), and the symmetric key (or If the full payment approval request encrypted with a secret key) is C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by a formula such as "Ek (P) = C".

According to the embodiment of the present invention, the encryption processing unit 270 encrypts the payment approval request message through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack It is preferable to include at least one or more of an International Data Encryption Algorithm (IDEA), and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the payment approval request expert is encrypted through the symmetric key (or the secret key) as described above, the communication processing unit 235 transmits the encrypted payment approval request message through the communication protocol defined on the telephone network and / or the VoIP network. The transfer to the bansa server 155 (615).

7 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a bansa server 155 according to an embodiment of the present invention using a symmetric key (or secret key) method.

In more detail, Figure 7 is a symmetric key (or a secret key) method in the bansa server 155, such as the Figure 1, the payment approval request message received encrypted from the call terminal equipped with the encryption function as shown in Figure 2 As to a method for decrypting, the present invention has ordinary knowledge in the art to which the present invention pertains. With reference to and / or modification of the drawing, the encrypted payment request is requested at a call terminal on the telephone network and / or a VoIP network. Various implementation methods for decrypting the full text in a symmetric key (or secret key) manner may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 7 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the bansa server 155, the public certificate is the bansa server 155 and It is preferable to be stored in a predetermined database (not shown) to cooperate, and the present invention is not limited thereby.

Referring to FIG. 7, the information receiving unit 125 of the bansa server 155 receives the encrypted payment authorization request message through the telephone network and / or the VoIP network and provides the encrypted payment authorization request message to the decryption unit 165 (700). The payment approval request message may be received through a communication protocol stack defined in the telephone network and / or the VoIP network.

Thereafter, the decryption unit 165 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment authorization request full text from the public certificate provided in the bansa server 155 (705), and extracts the symmetric key (or secret key). The encrypted payment approval request message is decrypted using the symmetric key (or secret key) (710).

Here, the decryption function of the decryption unit 165 is referred to as D (Decryption), and the full text of the payment approval request encrypted with the symmetric key (or secret key) with k (key) and the symmetric key (or secret key) is C. (Ciphertext) and the decrypted payment approval request full text P (Plaintext), the function of decrypting the encrypted payment approval request full text by the decryption unit 165 is "Dk = P, or Dk (Ek (P )) = P ".

According to the exemplary embodiment of the present invention, the algorithm for decrypting the encrypted payment authorization request message through the symmetric key (or secret key) may include SEED, DES (Data Encryption Standard), Triple-DES. At least one of a skipjack and an International Data Encryption Algorithm (IDEA) may be included. In addition, various types of decryption algorithms may be used, but the decryption algorithm may be matched with an encryption algorithm used in the call terminal. The present invention is not limited by the specific decoding algorithm.

When the payment approval request expert decrypted through the symmetric key (or secret key) as described above, the decryption unit 165 transmits the decrypted payment approval request full text information verification unit 170 provided in the bansa server 155. (715), the information check unit 170 provided in the bansa server 155 reads (or inserts) the payment approval information contained in the full payment approval request message and adds (or inserts) and And / or confirm at least one or more information to be replaced, and when the verification result is added (or inserted) and / or replaced, the professional processing unit 175 provided in the bansa server 155 is approved for payment. Add (or insert) and / or replace at least one or more of the pieces of information identified above in the request.

8 is a diagram illustrating a method for encrypting and transmitting a payment approval request message in a public key based structure in a call terminal according to an embodiment of the present invention.

In more detail, FIG. 8 is an embodiment of a method for encrypting and transmitting the full payment approval request message in a public key infrastructure structure in a call terminal equipped with an encryption function as shown in FIG. With the knowledge of the present invention, various implementation methods for encrypting the full payment approval request message in a public key manner can be inferred from the call terminal on the telephone network and / or the VoIP network by referring to and / or modifying the present invention. The present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 8 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal, and the public certificate is stored in a predetermined memory unit provided in the call terminal. And / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the communication terminal, and / or the IC card reader when a predetermined IC card reader is provided in the communication terminal. Anything that can be stored in the IC card to be inserted is possible, whereby the present invention is not limited.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal, and the present invention is not limited thereto.

Referring to FIG. 8, when a predetermined payment approval request message is generated by the full text generation unit 265 of the call terminal, the predetermined text is provided to the cryptographic processing unit 270 (800). The encryption processing unit 270 extracts a predetermined server-side public key for encrypting the payment approval request text from the authorized certificate (805), and encrypts the payment approval request text through the extracted server-side public key ( 810).

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), the server-side public key is k1 (key), the payment approval request full text is P (Plaintext), and the server-side public key is encrypted. When the full text of the approval request is referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an expression such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the payment approval request message through the server-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm). ), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, in addition to various encryption algorithms may be used, but by a specific encryption algorithm The present invention is not limited.

For example, in the case of encrypting the full payment approval request message through the RSA encryption algorithm among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by the different prime factors of n is a. And b, if the published index (e.g., 3 or 216+) is e, and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a -1) (b-1) ", wherein the encryption function of the encryption processing unit 270 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment approval request expert is encrypted through the server-side public key as described above, the communication processing unit 235 transmits the encrypted payment approval request message to the bansa server 155 through a network component on the telephone network and / or the VoIP network. 815.

9 is a diagram illustrating a method for decrypting a full payment approval request message encrypted and received by a bansa server 155 according to an embodiment of the present invention using a public key infrastructure.

In more detail, FIG. 9 illustrates the decryption of the payment approval request message received from the call terminal having the encryption function as shown in FIG. 2 in a public key infrastructure scheme in the bansa server 155 as shown in FIG. As to a method of implementation, if one of ordinary skill in the art to which the present invention pertains, a payment encrypted by the server-side public key in a call terminal on the telephone network and / or VoIP network by referring to and / or modifying the drawing 9 Although various implementation methods for decrypting the entire request for approval may be inferred in the public key infrastructure structure, the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In FIG. 9 according to an embodiment of the present invention, the server-side private key for decrypting the payment approval request text encrypted with the server-side public key in a public key infrastructure structure is obtained from the public certificate provided in the bansa server 155. Preferably, the public certificate is stored in a predetermined database (not shown) interworking with the bansa server 155, whereby the present invention is not limited thereto.

Referring to FIG. 9, the information receiving unit 125 of the bansa server 155 receives the encrypted payment approval request message over the telephone network and / or the VoIP network and provides the encrypted payment authorization request message to the decryption unit 165 (900). The payment approval request text is preferably received through a communication protocol stack defined in the telephone network and / or the VoIP network.

Subsequently, the decryption unit 165 extracts a server side private key for decrypting the encrypted payment approval request message from the public certificate provided in the bansa server 155 (905), and the extracted server side. The encrypted payment authorization request full text is decrypted through the private key (910).

Here, the decryption function of the decryption unit 165 is referred to as D (Decryption), the server-side private key is k2 (key), and the full payment approval request encrypted with the server-side public key is C (Ciphertext) and the server. When the payment approval request text decrypted with the side private key is P (Plaintext), the function of decrypting the encrypted payment approval request text by the decryption unit 165 is "Dk2 = P, or Dk2 (Ek (P)) =". It can be expressed by an expression such as "P".

According to an embodiment of the present invention, the decryption unit 165 decrypts the payment approval request text encrypted with the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. The decryption algorithm may be matched with the encryption algorithm used in the communication terminal, and the present invention is not limited to the specific decryption algorithm.

For example, in the case of decrypting the full payment approval request message through an RSA decryption algorithm among the public key-based decryption algorithms, the public method (Modulus) used in the decryption process is not disclosed as n and different prime factors of n. If the prime numbers are a and b, the published exponents (e.g. 3 or 216+) are e and the undisclosed exponents are d, then n satisfies "n = a * b", and d is de 1 mod (a-1) (b-1) ", where the decoding function of the decoding unit 165 may be expressed as" P = Dk2 = Cd mod n ".

When the payment approval request expert encrypted with the server-side public key is decrypted in the call terminal through the server-side private key as described above, the decryption unit 165 may include the decrypted payment approval request full text in the bansa server 155. Provided to the information verification unit 170 (915), the information verification unit 170 provided in the bansa server 155 is added to the payment approval request by reading the payment means information included in the payment approval request full text (Or inserts) and / or confirms at least one or more information to be replaced, and if the information to be added (or inserted) and / or replaced is confirmed, the specialized processing unit 175 provided in the bansa server 155 ) Adds (or inserts) and / or replaces at least one of the identified information in the payment approval request text.

FIG. 10 is a diagram illustrating a method of encrypting and transmitting a transmission approval request text in an electronic envelope method in a call terminal according to an embodiment of the present invention.

In more detail, Figure 10 is an embodiment of the method for encrypting and transmitting the payment approval request full text in an electronic envelope in a call terminal equipped with an encryption function as shown in Figure 2, which is conventional in the art With knowledge, it will be possible to infer various implementation methods for encrypting the full text of the payment approval request in an electronic envelope method in a call terminal on the telephone network and / or VoIP network by referring to and / or modifying the drawing 10. The present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In the figure 10 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal, and the public certificate is stored in a predetermined memory unit provided in the call terminal. And / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the communication terminal, and / or the IC card reader when a predetermined IC card reader is provided in the communication terminal. All of them can be stored in the inserted IC card, and the present invention is not limited thereby.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal, and the present invention is not limited thereto.

Referring to FIG. 10, when a predetermined payment approval request message is generated by the full text generation unit 265 of the call terminal, the predetermined text is provided to the cryptographic processing unit 270 (1000). The encryption processing unit 270 generates a predetermined random secret key for encrypting the payment approval request text in a secret key (symmetric key) manner (1005), and uses the generated secret key. By encrypting the full payment approval request (1010).

Herein, the encryption function of the encryption processing unit 270 is referred to as E (Encryption), the secret key is r (random secret key), the payment approval request is P (Plaintext), and the payment approval request encrypted with the secret key. When the full text is referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an expression such as "Er (P) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the payment approval request message through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data). It is preferable to include at least one or more of the Encryption Algorithm, and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

Thereafter, the encryption processing unit 270 encrypts the secret key (random secret key) used to encrypt the full payment approval request message. For this purpose, the encryption processing unit 270 obtains a predetermined server-side public key from the public certificate. The private key is extracted (1015) and the private key is encrypted using the server-side public key (1020).

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), the server-side public key is k1 (key), the secret key is r (random Secret key), and the secret encrypted with the server-side public key. If the key is C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the secret key through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 270 may be expressed as" C = Ek1 (r) = re mod n ".

When the payment approval request expert is encrypted with the secret key, and the secret key is encrypted through the server-side public key, the encryption processing unit 270 encrypts the payment approval request message and the server-side public key encrypted with the secret key. A transaction data associated with a key is generated and provided to the communication processor 235 (1025), and the communication processor 235 transmits the transaction data to the bansa server 155 through a network component on a telephone network and / or a VoIP network. In step 1030.

FIG. 11 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a bansa server 155 according to an embodiment of the present invention by an electronic envelope method.

In more detail, in FIG. 11, the transaction data is encapsulated by the bansa server 155 as in FIG. 1 that receives the transaction data including the encrypted payment approval request message from the call terminal having the encryption function as shown in FIG. 2. The method of decoding by the method, and if the skilled in the art to which the present invention belongs, with reference to and / or modified in Figure 11 the electronic envelope method in the call terminal on the telephone network and / or VoIP network It will be able to infer various implementation methods for decrypting the encrypted transaction data in the same electronic envelope method, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 11 according to the embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate provided in the bansa server 155, the public certificate It is preferably stored in a predetermined database (not shown) that cooperates with the bansa server 155, whereby the present invention is not limited.

Referring to FIG. 11, the information receiving unit 125 of the bansa server 155 receives the predetermined transaction data including the full payment authorization request message encrypted through the telephone network and / or the VoIP network, and the decryption unit 165. (1100), the transaction data is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 165 extracts a server-side private key for decrypting the encrypted secret key included in the transaction data from the public certificate provided in the bansa server 155 (1105), and the extracted server. By decrypting the secret key encrypted with the server-side public key in the call terminal through the side private key (1110), a predetermined secret key for decrypting the full payment approval request message is extracted (1115), and the extracted secret key. By using (1120) to decrypt the payment approval request full text, the call terminal extracts the full text of the payment approval request encrypted with the secret key (1125).

Here, the decryption function of the decryption unit 165 is called D (Decryption), the server-side private key is k2 (key), the secret key encrypted with the server-side public key is C (Ciphertext), and the server-side individual. When a secret key decrypted with a key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 165 is "Dk2 = r, or Dk2 (Ek1 (r)) = r". It can be expressed as an expression.

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman) (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the following. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", wherein the decoding function of the decoding unit 165 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the decryption unit 165 is referred to as D (Decryption), the secret key is r (random secret key), the full text of the payment approval request encrypted with the secret key (Ciphertext), and the decryption. When the payment approval request message is P (Plaintext), the decrypting unit 165 decrypts the encrypted payment approval request message, such as "Dr = P, or Dr (Er (P)) = P". It can be expressed as an expression.

According to an embodiment of the present invention, the decryption unit 165 decrypts the encrypted payment authorization request full text through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( International Data Encryption Algorithm) preferably comprises at least one or more, and various forms of decryption algorithms may be used, but the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal, The present invention is not limited by the decoding algorithm.

When the payment approval request expert is decrypted as described above, the decryption unit 165 provides the decrypted payment approval request message to the information verification unit 170 provided in the bansa server 155 (1130). The information confirmation unit 170 provided at 155 reads the payment approval information included in the full payment approval request message to confirm at least one or more information to be added (or inserted) and / or replaced. When the information to be added (or inserted) and / or replaced is confirmed, the professional processing unit 175 included in the bansa server 155 may transmit the at least one or more pieces of information confirmed to the payment approval request text. Add (or insert) and / or replace.

12A and 12B illustrate a method of encrypting and transmitting a payment approval request message in a key exchange method at a communication terminal according to an embodiment of the present invention.

12A and 12B illustrate a method of encrypting and transmitting the full payment approval request message in a key exchange method in a call terminal equipped with an encryption function as shown in FIG. With the knowledge of the present invention, various implementation methods for encrypting the full payment approval request message in a key exchange method may be inferred by referring to and / or modifying the drawing 12 in the telephone network and / or the VoIP network. The present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 12 according to the embodiment of the present invention, the terminal-side private key and the server-side public key are preferably read from the public certificate provided in the call terminal, and the public certificate is provided in the call terminal. Stored in a memory unit of the communication terminal and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the communication terminal, and / or provided with a predetermined IC card reader in the communication terminal. In this case, it is possible to store all of the IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate to the call terminal, thereby limiting the present invention. Not.

12A and 12B, when a predetermined payment approval request message is generated by the full text generation unit 265 of the call terminal, the predetermined text is provided to the cryptographic processing unit 270 (1200), and the payment approval request expert is provided. When the encryption processing unit 270 receives the payment approval request message, a predetermined one-way hash function (eg, a message digest including a hash code of a predetermined length regardless of the length of the payment approval request message) is included. ), And a one-way hash function that cannot identify (or infer) the original message via the hash code (or message digest) The call terminal and bansa server 155 use the same hash function. A message digest is generated (1205), and the message digest is digitally signed by encrypting the message digest using the terminal-side private key (1210).

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), the terminal-side private key is t1 (13erminal side key), the message digest is m (message digest), and the terminal-side private key is encrypted. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 270 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the message digest through the terminal-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the digital signature function of the encryption processing unit 270 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 270 generates a predetermined random secret key for encrypting the payment approval request text in a secret key (symmetric key) manner (1215), and the payment approval request The message digest encrypted with the full message and the terminal-side private key and a copy of a certificate (eg, a certificate including the terminal-side public key) included in the public certificate are linked to each other and encrypted through the generated secret key (1220).

Herein, the encryption function of the encryption processing unit 270 is referred to as E (Encryption), the secret key is r (random secret key), the payment approval request and the copy of the certificate P (Plaintext), and encrypted payment with the secret key When the full text of the approval request and the copy of the certificate are referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an expression such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 270 encrypts the payment approval request text and the copy of the certificate through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 270 extracts a predetermined server-side public key from the authorized certificate in order to encrypt the secret key that encrypts the payment approval request message (1225), and uses the server-side public key. The secret key encrypting the full payment approval request is encrypted (1230).

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), and the server side public key is encrypted with s1 (server side key), the secret key with r (random secret key), and the server side public key. When the secret key is referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the secret key through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 270 may be expressed as" C = Es1 (r) = re mod n ".

A copy of the certificate including the message digest encrypted with the full payment approval request message and the terminal-side private key and the terminal-side public key are linked and encrypted with the generated secret key, and the secret key is encrypted with the server-side public key. When encrypted, the encryption processing unit 270 encrypts a copy of a certificate including the message digest encrypted with the private key and the terminal side public key encrypted with the secret key with the server side public key. Generate predetermined transaction data in association with the secret key, and provide the generated transaction data to the communication processing unit 235 (1235), and the communication processing unit 235 transmits the transaction data to a telephone network and / or a VoIP network. It transmits to the bansa server 155 through the network component on the network (1240).

13A and 13B illustrate a method of decrypting a full payment approval request message encrypted and received by a bansa server 155 according to an embodiment of the present invention by a key exchange method.

In more detail, FIGS. 13A and 13B illustrate the transaction in a bansa server 155 as shown in FIG. 1, which receives transaction data including an encrypted payment approval request message from a call terminal equipped with an encryption function as shown in FIG. The present invention relates to a method of decrypting data by a key exchange method, and the present invention is known to those skilled in the art to which the present invention pertains. Although various implementation methods for decrypting the transaction data encrypted by the key exchange scheme may be inferred by the same key exchange scheme, the present invention includes all the inferred implementation methods and is limited to the implementation method illustrated in FIG. Not.

In FIG. 13 according to the embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method are preferably read from the public certificate provided in the bansa server 155. In addition, the public certificate is preferably stored in a predetermined database (not shown) interworking with the bansa server 155, whereby the present invention is not limited.

Referring to FIGS. 13A and 13B, the receiving unit of the bansa server 155 receives transaction data including the full payment authorization request message encrypted through the telephone network and / or the VoIP network (1300), and receives the transaction data. Provided to the decryption unit 165 (1305), the transaction data is preferably received through a communication protocol defined in the telephone network and / or VoIP network, and / or the payment approval request encrypted with the secret key And a copy of the certificate including the message digest encrypted with the full text and the terminal-side private key and the terminal-side public key, and the secret key encrypted with the server-side public key.

Thereafter, the decryption unit 165 extracts the server-side private key from the public certificate provided in the bansa server 155 to decrypt the secret key encrypted with the server-side public key (1310), and the server-side individual. By decrypting the secret key through a key (1315), the secret key for decrypting a copy of the certificate including the message digest encrypted with the full payment approval request message and the terminal-side private key and the terminal-side public key is extracted ( 1320).

Here, the decryption function of the decryption unit 165 is called D (Decryption), the server side private key is s2 (server side key), the secret key encrypted with the server side public key is C (Ciphertext), and the server. When the secret key decrypted with the side private key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 165 is "Ds2 = r, or Ds2 (Es1 (r)) = r". It can be expressed as

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman) ), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 165 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the decryption unit 165 copies the certificate including the message digest and the terminal-side public key encrypted with the payment approval request message and the terminal-side private key using the extracted secret key. By decrypting (1325), a certificate copy including the full message of the payment approval request encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key are extracted.

Here, the decryption function of the decryption unit 165 is referred to as D (Decryption), and the secret key is r (random secret key), and the message digest encrypted with the secret key encrypted with the secret key and the terminal private key; C (Ciphertext) the certificate copy containing the terminal-side public key, and P (Plaintext) the certificate copy including the message digest encrypted with the decrypted full payment authorization request message and the terminal-side private key and the terminal-side public key. In this case, the decryption unit 165 decrypts a copy of the certificate including the encrypted payment approval request message and the message digest encrypted with the terminal-side private key and the terminal-side public key, "Dr = P or Dr." It can be expressed by an expression such as (Er (P)) = P ".

According to an embodiment of the present invention, the decryption unit 165 decrypts a copy of a certificate including the message digest encrypted with the encrypted payment approval request message and the terminal-side private key through the secret key, and the terminal-side public key. Preferably, the algorithm includes at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA). In addition, various types of decryption algorithms may be used. The decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal, the invention is not limited by a specific decryption algorithm.

In addition, the decryption unit 165 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (1330), thereby generating a message digest generated and transmitted from the payment approval request message in the call terminal. Extraction (1335).

Here, the decryption function of the decryption unit 165 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. If the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the decryption unit 165 is " Dt2 = m, or Dt2 (Es1 (r)) = m " The same formula can be used.

According to an embodiment of the present invention, an algorithm for decrypting the message digest encrypted by the terminal side private key by the decryption unit 165 through the terminal side public key may be RSA (Ron Rivest, Adi Shamir, Len Adleman). ), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 165 may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the decryption unit 165 generates a predetermined message digest through the same one-way hash function of the received payment approval request message (1340), and then generates the generated message digest and the decrypted message digest. By comparing 1345, the validity of the received payment approval request text is confirmed.

If the generated message digest and the decrypted message digest coincide with each other (1350), the decryption unit 165 provides the full text of the payment approval request to the information confirming unit 170 provided in the bansa server 155. In operation 1355, the information checking unit 170 provided in the bansa server 155 reads the payment means information included in the payment approval request text and adds (or inserts) and / or replaces the payment approval information. When at least one or more information is confirmed, and the information to be added (or inserted) and / or replaced is confirmed, the professional processing unit 175 provided in the bansa server 155 is provided to the full text of the payment approval request. Add (or insert) and / or replace at least one or more pieces of information identified above.

14 illustrates a product ordering and purchasing process for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, FIG. 14 illustrates the present invention through a process in which a call terminal shown in FIG. 2 is connected to a server shown in FIG. 1 through at least one telephone network and / or a VoIP network to order and purchase a predetermined product. The payment process using the call terminal according to the present invention, the person of ordinary skill in the art to which the present invention belongs, the predetermined call terminal is at least one or more telephone network by referring to and / or modified And / or connect a predetermined server and a call channel for product order and purchase through a VoIP network, and order and purchase at least one product through the call channel to initiate a payment process using the call terminal according to the present invention. Various embodiments of the present invention may be inferred, but the present invention includes all of the inferred embodiments, and is shown in FIG. It is not limited to the exemplary method.

In the following Figure 14, the call terminal with the card reader shown in Figure 2 is referred to as "terminal" for convenience.

Referring to FIG. 14, a terminal conforming to the functional configuration shown in FIG. 2 may include at least one telephone network (e.g., a general telephone switching network (or intelligent network), and / or a mobile communication network) and / or a VoIP network (e.g., TCP / IP (And / or UDP / IP) based wired communication network, IEEE 802.16x based portable Internet) to connect a predetermined communication channel with the server (1400), and according to the product ordering procedure provided by the server through the communication channel A procedure of selecting, ordering, and purchasing at least one or more purchased products is performed (1405).

Those skilled in the art to which the present invention pertains, the terminal connects the predetermined communication channel with the server, and through the communication channel through a predetermined product order procedure (eg, ARS and / or counselor connection) As you will be familiar with key tones-based product ordering procedures, the detailed process is omitted for convenience.

During the product order process as described above, the server checks whether the payment process for the purchased product (1410), if the payment process for the purchased product is confirmed (1415), the server and the terminal Adding (or allocating) a data channel corresponding to the telephone network and / or VoIP network to a connected call channel, or converting the voice call-based communication channel into a data channel corresponding to the telephone network and / or VoIP network (1420). .

If a data channel corresponding to the telephone network and / or VoIP network is added (or assigned) to the call channel as described above, or if the voice call-based communication channel is switched to a data channel corresponding to the telephone network and / or VoIP network, The server extracts predetermined payment information from a predetermined storage medium 150 (1425), and transmits the extracted payment information to the terminal through the data channel (1430).

According to an embodiment of the present invention, the payment information may include the affiliated store information, and / or the product information and the payment amount information for the purchased product. At least one or more pieces of information may be omitted, and the present invention is not limited thereto.

According to the method of the present invention, information not included in the payment information provided by the server to the terminal is added (or inserted) in the bansa server 155 that receives the full payment approval request generated by the terminal. And / or information that is not validly included in the full text of the payment approval request is replaced by information valid in the bansa server 155.

Figure 15 illustrates a payment approval request full text generation process for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, FIG. 15 shows the predetermined payment information from the server shown in FIG. 1 to the call terminal shown in FIG. 2 through at least one telephone network and / or a VoIP network by performing the process shown in FIG. When transmitting, the call terminal reads predetermined payment means information from the customer-owned card through a predetermined card reader, generates a predetermined payment approval request message including payment information provided from the server, and generates at least one telephone network and / or Alternatively, a process of providing the bansa server 155 corresponding to the payment means information through the VoIP network, and those skilled in the art to which the present invention pertains may refer to and / or modify the present invention. Generate a predetermined payment approval request text in a predetermined call terminal and transmit the predetermined payment through at least one telephone network and / or VoIP network. Four would be able to infer a variety of exemplary ways to provide to the server 155, the present invention includes all the embodiments in which the inference method, not limited to the exemplary method shown in the figure 15.

For example, in FIG. 15, the terminal performs an encryption procedure for a predetermined payment approval request text read from the customer-owned card. The encryption procedure satisfies the high security of the payment approval request text. In order to carry out, the invention may be omitted according to the intention of those skilled in the art, and the present invention is not limited thereto.

In the following Figure 15, the call terminal with the card reader shown in Figure 2 is referred to as "terminal" for convenience.

Referring to FIG. 15, the terminal determines whether predetermined payment information is received through a data channel corresponding to at least one or more telephone networks and / or VoIP networks by the server of FIG. 1 performing the process of FIG. 14. When the payment information is received from the server (1505), the terminal switches the operation mode to the payment processing mode using the data channel (1510), and the card reader provided in the terminal. Through the screen output means provided in the terminal to read predetermined payment means information from the customer-owned card through, and / or output through the voice output means provided in the terminal (1515).

After the predetermined payment means information reading is requested from the customer-owned card as described above, the terminal checks whether the predetermined payment means information is read from the customer-owned card through the card reader (1520). When the predetermined payment means information is read from the user (1525), the terminal generates a predetermined payment approval request full text including the read payment means information and payment information received from the server (1530).

According to an embodiment of the present invention, when the server generates a predetermined document serial number and transmits it in the payment information, the document serial number included in the full payment approval request is a document serial number included in the payment information. If the payment information does not include a predetermined serial number, the terminal generates a predetermined serial number to be included in the full payment approval request.

Thereafter, the terminal performs an encryption procedure for the full payment approval request message including the payment means information and the payment information (1535).

If the full payment approval request is encrypted (1540), the terminal extracts a predetermined Bansa server 155 network address from the memory unit and corresponds to at least one telephone network and / or VoIP network based on the network address. The Bansa server 155 connects the communication channel for transmitting and receiving the payment approval message through the payment network (1545), and transmits the encrypted payment approval request message to the bansa server 155 through the communication channel. (1550).

16 is a flowchart illustrating a payment approval request specialized process for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, FIG. 16 shows the full payment approval request generated by performing the process shown in FIG. 15 in the call terminal shown in FIG. 2 through at least one telephone network and / or a VoIP network. When the transmission to the bansa server 155, the process of the payment processing using the full payment approval request in the bansa server 155, if the person having ordinary knowledge in the technical field to which the present invention belongs, While referring to and / or 16, the bansa server 155 corresponding to the payment means information may infer various implementation methods for payment processing using the payment approval request text provided from the call terminal. It includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

For example, in FIG. 16, the terminal performs a decryption procedure for the payment approval request message provided from the call terminal. The decryption procedure is performed only when the payment approval request message is encrypted. It may be omitted depending on, and the present invention is not limited thereby.

In addition, the full text of the payment approval request received from the terminal in FIG. 16 is a full credit card payment approval request including the credit card payment means information shown in FIG. 2, and has a general knowledge in the technical field to which the present invention belongs. If the grower, the full payment approval request received from the terminal corresponding to the payment means information read through the card reader provided in the call terminal is the full check card payment approval request, and / or debit card payment approval request, and / Or full text of a prepaid card payment authorization request and / or full bank transfer payment authorization request.

In the following Figure 16, the call terminal with the card reader shown in Figure 2 is referred to as "terminal" for convenience.

Referring to FIG. 16, the bansa server 155 shown in FIG. 1 performs a predetermined payment through a communication channel corresponding to at least one or more telephone networks and / or VoIP networks by performing the process shown in FIG. In operation 1600, if a predetermined approval request message is received from the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP networks, the Bansa server 155 ) Checks whether the received payment approval request text is encrypted, thereby confirming whether the payment approval request text is decrypted (1610).

If it is confirmed that the payment approval request full text is decrypted (1615), the bansa server 155 performs a decryption procedure for the encrypted payment approval request full text, through the predetermined card reader in the terminal. In operation 1620, the payment approval request text read from the customer-owned card is restored.

On the other hand, if the verification result does not need to decrypt the payment approval request text (eg, if the payment approval request text is not encrypted) (1615), and / or the encrypted payment approval request text is decrypted, the bansa The server 155 reads the full text of the payment approval request to identify at least one or more information to be added (or inserted) and / or replaced (1625).

If there is at least one information to be added (or inserted) and / or replaced in the payment approval request message (1630), the bansa server 155 adds (or inserts) the payment approval request message from a predetermined database. Insert) and / or extract one or more pieces of information to be replaced, and add (or insert) and / or replace (1635) the extracted information to the full text of the payment authorization request.

If at least one or more information to be added (or inserted) and / or replaced in the full text of the payment approval request is not present (1630), and / or adds (or inserts) the confirmed information to the full text of the payment approval request. And / or after the replacement, the bansa server 155 relays the payment approval request text to the payment server corresponding to the payment means information included in the payment approval request text (1640).

Thereafter, the payment server receives and reads the full payment approval request message from the bansa server 155 to perform a payment processing procedure corresponding to the payment means information (eg, payment processing approval history, or Generate a payment processing error history (1645), generate a predetermined payment approval text including the payment processing history (1650), and transmit the payment approval text to the bansa server 155 through the payment network. In operation 1655, the bansa server 155 transmits the payment approval message to the terminal through a payment network corresponding to the telephone network and / or the VoIP network (1660).

Those skilled in the art to which the present invention pertains may read the full text of the payment approval request in the bansa server 155 to perform a payment processing procedure, and / or the payment in the bansa server 155. After performing a processing procedure, a predetermined payment processing history is generated, a payment approval message including the payment processing history is generated, and the method for transmitting to the bansa server 155 through the communication channel, etc. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the payment server may directly transmit the payment approval text (or payment processing history) to the server through a predetermined network (for example, affiliated store information included in the payment approval request text). The present invention is not limited thereto.

17 illustrates a payment approval process for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, FIG. 17 illustrates a payment approval message including the payment processing details after performing the payment approval process through the payment server by performing the process shown in FIG. 16 at the server shown in FIG. If received, the process of processing the full payment approval in the terminal, if the person having ordinary knowledge in the technical field to which the present invention belongs, by referring to and / or modified this figure 17, the predetermined payment approval in a predetermined terminal Various implementation methods for processing the full text may be inferred, but the present invention includes all the implementation methods inferred above and is not limited to the implementation method shown in FIG.

Hereinafter, in FIG. 17, the call terminal with the card reader shown in FIG. 2 is referred to as "terminal" for convenience.

Referring to FIG. 17, the payment server shown in FIG. 1 performs a process shown in FIG. 16 by performing a process shown in FIG. 16 to correspond to the payment approval message through a communication channel corresponding to at least one telephone network and / or VoIP network. In operation 1700, if the approval message is received from the payment server, the payment approval message including the payment processing history corresponding to the payment approval request message is received (1705). By extracting and reading the payment processing history, it is checked whether the payment processing through the payment approval request text is approved (1710).

If payment processing through the payment approval request message is not approved (1715), the terminal transmits the payment approval message (and / or payment) to the server through a data channel corresponding to at least one or more telephone networks and / or VoIP networks. By transmitting the processing error history (1720), the payment processing process using the call terminal according to the present invention is terminated.

On the other hand, when the payment processing through the payment approval request message is approved (1715), the terminal transmits the payment approval message (and / or payment processing) to the server through a data channel corresponding to at least one or more telephone networks and / or VoIP networks. After the transmission of the approval details (1725), by performing the order procedure after the payment processing approval (1730), the payment processing process using the call terminal according to the present invention is completed.

18 is a diagram showing the configuration of a payment system using a call terminal according to another embodiment of the present invention.

In more detail, Fig. 18 is a telephone order using a voice call through a call terminal equipped with a predetermined card reader, and then reads predetermined payment means information from a predetermined customer-owned card through the card reader to respond to the telephone order. As a configuration of a system for processing a payment, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 18 to infer various payment system configurations using a call terminal. The present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

That is, in the embodiment shown in FIG. 18, a predetermined customer connects a call channel with a server (for example, an Automatic Response Service (ARS) server) provided at a predetermined affiliated store through a predetermined call terminal, and connects the call channel. After performing a predetermined telephone order procedure through the server, the server extracts payment information including merchant information, product information, and payment amount information from a predetermined storage medium 150 and transmits the information to the call terminal. When the predetermined payment means information is read from the customer-owned card equipped with the predetermined payment means through the provided card reader, and the payment means information and the payment information are transmitted to the bansa server 155, the bansa server 155 The present invention relates to a system configuration for generating a predetermined payment approval request text based on the payment means information and payment information and processing payment through a predetermined payment server.

In addition, although the functional configuration unit for payment processing using the call terminal according to the present invention is shown in a predetermined server through the embodiment shown in FIG. 18, this is for effectively explaining the technical features of the present invention. However, the present invention is not limited thereto, and the payment processing system using the call terminal according to the present invention includes an implementation method in which the plurality of servers (or terminals) have the function configuration unit, and / or a predetermined call center in the affiliate store. Is provided, the server (or terminal) on the call center system implementation method comprising the function configuration unit, and / or if the ARS server is already provided with a predetermined ARS server in the ARS server further comprises the function configuration unit The method and / or configure the function in the affiliated store terminal when the affiliated store has a predetermined affiliated store terminal. It may include any one of the implementation method further comprising a part.

The call terminal used by the customer may be a landline telephone (and / or a radio telephone communicating with the radio frequency (RF) with the landline telephone) connected to a public switched telephone network (PSTN), and / or code division multiple access (CDMA). A mobile phone (e.g., a Personal Communication System (PCS) and / or Global System for Mobile (GSM) terminal, etc.) connected to a stack-based mobile communication network, and / or Transmission Control Protocol / Internet Protocol (TCP / IP) and / or And at least one VoIP terminal connected to a UDP / IP (User Datagram Protocol / Internet Protocol) based wired communication network and / or a VoIP (Voice over IP) network operating based on an IEEE 802.16x based portable Internet network. It is done.

In addition, the call terminal may include at least one telephone network (eg, a general switched telephone network (PSTN), and / or a mobile communication network), and / or a VoIP network (eg, a TCP / IP and / or UDP / IP-based wired communication network, and / Alternatively, a server and a predetermined server may be provided through a wireless network in which a Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) layer is defined in a transport layer on a protocol stack based on the IEEE 802.16x-based portable Internet. It is characterized by connecting the call channel.

According to an embodiment of the present invention, the general telephone switching network is a recent intelligent network (for example, in a communication network) in a conventional circuit-switched switching network (e.g., a communication network connecting a plurality of lines using at least one switch). At least one interchanging switch, a service control node, an in-network control database, or the like, through a common line signal network or data network, and integrating and controlling them through a computing technology); and / or It has evolved into an intelligent network structure, whereby a wired telephone (and / or a wireless telephone in RF communication with the wired telephone) connected to the general telephone switching network (= intelligent network) basically provides a voice call service, as well as a predetermined data channel. Provides data communication (eg, message transmission and reception) services through the.

In addition, the mobile communication network provides both a CDMA stack-based circuit switched voice call channel and a data channel, whereby a mobile phone connected to the mobile communication network basically provides a voice call service and a predetermined data channel. Data communication (eg, wireless message transmission and / or wireless Internet access, etc.) services.

In addition, the VoIP network basically provides a predetermined RTP / RTCP (Real-) to provide a real-time voice call service to a higher layer of a UDP on a wired / wireless communication network supporting TCP / IP (and / or UDP / IP) supporting data communication. As a communication network defining a time transport protocol / RTP control protocol (Layer) layer, the VoIP network basically provides both a voice call channel and a data channel, whereby a VoIP terminal connected to the VoIP network basically provides a voice call service. Of course, it provides a data communication (eg, message transmission and reception) service through a predetermined data channel.

According to the present invention, the call terminal is a card reader for reading predetermined payment means information from an MS (Magnetic Stripe) card conforming to the ISO / IEC 7810 standard, and / or a contact IC conforming to the ISO / IEC 7816 standard. A card reader for reading predetermined payment means information from a card, and / or at least one card reader for reading predetermined payment means information from a contactless IC card conforming to the ISO / IEC 14443 standard. A preferred embodiment thereof will be described in detail with reference to FIG.

Referring to FIG. 18, a server provided in the affiliated store may include a call channel processing unit for connecting a call terminal and a call channel used by a customer through at least one telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network. 105, a voice guide unit 115 for providing a predetermined telephone order and voice guidance for payment processing according to the present invention in association with the call channel processing unit 105, and a connection with the call channel processing unit 105. And a signal tone processor 120 for receiving a key tone generated by a call terminal in response to the voice guidance, reading the key tone using a dual frequency multi-frequency (DTMF) scheme, and extracting predetermined information. It is characterized by.

The call channel processing unit 105 is assigned a predetermined telephone number for connecting at least one or more call terminals and a predetermined call channel, and a predetermined call corresponding to the telephone network and / or VoIP network based on the telephone number. By performing a processing procedure it is characterized in that at least one communication terminal and the communication channel.

Those skilled in the art will be familiar with certain call processing procedures corresponding to the telephone network and / or the VoIP network, and thus a detailed description thereof will be omitted.

The voice guide unit 115 is connected to at least one or more call terminals and the call channel through the call channel processing unit 105, the predetermined predetermined for customer authentication and / or product order processing to the call terminal through the call channel. Characterized in that it outputs a voice announcement, and further characterized in that it outputs a voice announcement for payment processing using the call terminal according to the present invention to the call terminal through the call channel.

According to an exemplary embodiment of the present invention, the voice guide unit 115 outputs to the call terminal through the call channel based on product information stored in a predetermined storage medium 150 and payment amount information corresponding to the product. After extracting a predetermined voice announcement to be (e.g., extracted from a predetermined voice announcement storage database (not shown)), and / or generating (e.g., generating a voice announcement by TTS (Text To Speech) method), Preferably, the voice announcement is output to the call terminal through the call channel.

According to another exemplary embodiment of the present invention, the voice guide unit 115 may output voice guidance of a counselor corresponding to a predetermined call center terminal (and / or merchant phone) to the call terminal through the call channel. The present invention is not limited thereto.

The tone signal processing unit 120 generates a DTMF tone signal from the call terminal in response to the voice guidance, and receives the key tone sound by the DTMF scheme in response to the voice guidance. "0-9", "*", "#", etc.) are identified and extracted.

In addition, the signal tone processing unit 120 preferably receives the purchase product information in the form of a key tone signal transmitted from the call terminal, the purchase product information is voice guidance provided to the call terminal through the voice guide unit 115 It is preferably made by including a purchase product selection number corresponding to the comment, and / or through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone), the purchase product selection information in the form of voice information is preferably included. In this way, product information (and / or payment amount information associated with the product information) corresponding to the purchased product information is extracted from the predetermined storage medium 150.

According to another exemplary embodiment of the present invention, the signal processing unit 120 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal, and thus the present invention is not limited thereto. .

In addition, the signal processing unit 120 may further receive predetermined discount information transmitted from the call terminal, wherein the discount information includes a coupon number corresponding to a predetermined discount coupon possessed by the customer. Preferably, the payment amount can be discounted.

In addition, the signal tone processing unit 120 may further receive a predetermined product delivery address information transmitted from the call terminal, the product delivery address information provided to the call terminal through the voice guide section 115 The product shipping destination selection number corresponding to the number (for example, "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement, and the detailed address (" Address / call number)), and / or voice information of a counselor corresponding to the call center terminal (and / or merchant phone) to provide delivery address information (eg, a customer's address) in the form of voice information. It is preferably made, including, thereby ensuring the address to which the purchased goods will be delivered.

The signal processing unit 120 may further receive predetermined payment means selection information transmitted from the call terminal, and the payment means selection information is provided to the call terminal through the voice guide unit 115. Selecting one of a credit card payment method, and / or a check card payment method, and / or a debit card payment method, and / or a prepaid card payment method, and / or a bank transfer payment method corresponding to the announcement. It is preferable to include the information, it is preferable to further comprise the card company (or financial company) information that issued the card corresponding to the payment means to the customer.

Those skilled in the art to which the present invention pertains will understand the method for generating the DTMF type key beep and the method for reading and confirming and extracting predetermined information by reading the key beep. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the information extracted based on the key tone of the DTMF method may be extracted through a predetermined data channel based on the call channel instead of the key tone. The present invention is not limited thereby.

According to the present invention, the server provided in the merchant stores a predetermined data channel for payment processing using the call terminal in the voice call channel in association with a telephone network and / or a VoIP network component to which the call terminal is connected during the voice call. Add (or assign) and / or open a data channel to which the voice call channel is added (or assign) for payment processing using the call terminal, and / or recall the voice call channel. And a channel control unit 200 for switching to a data channel for payment processing using a call terminal.

According to an embodiment of the present invention, when the telephone network and / or the VoIP network connecting the call terminal and the server simultaneously support a voice call channel and a data channel, the channel controller 200 performs a voice connection between the call terminal and the server. And adding (or allocating) a predetermined data channel for payment processing using the call terminal to a connected call channel for a call.

According to another exemplary embodiment of the present invention, a telephone network and / or a VoIP network connecting the call terminal and the server simultaneously support a voice call channel and a data channel, and connect to a connected call channel for voice call between the call terminal and the server. When a predetermined data channel is added (or assigned), the channel controller 200 performs payment processing using the call terminal for the data channel added (or assigned) to the call channel connected between the call terminal and the server. It is characterized by opening for.

According to another exemplary embodiment of the present invention, when the telephone network and / or the VoIP network connecting the call terminal and the server do not support a voice call channel and a data channel at the same time, the channel control unit 200 controls the call terminal and the server. It is characterized in that the connected communication channel for the voice call between the predetermined data channel for payment processing using the call terminal.

According to the present invention, the server provided in the merchant stores the order processing information transmitted from the call terminal through the data channel added (or assigned) and / or switched to the voice call channel by the channel controller 200. Characterized in that it comprises an information receiving unit 125 for receiving.

According to an exemplary embodiment of the present invention, the information receiver 125 may receive predetermined purchase product information from the call terminal through the data channel, and the purchase product information may be transmitted to the call terminal through the data channel. It is preferable that the purchase product selection information corresponding to the provided at least one product information is included, and / or when the call channel supports the voice call channel and the data channel at the same time, the purchased product information is the voice guide unit ( Voice information form through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone), and / or the purchase product selection number corresponding to the voice announcement provided to the call terminal through 115) It is possible to include the purchase information of the selected product, thereby the predetermined storage medium Product information (and / or payment amount information associated with the product information) corresponding to the purchased product information is extracted from 150.

According to another exemplary embodiment of the present invention, the information receiver 125 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal through the data channel. The invention is not limited.

The information receiver 125 may further receive predetermined discount information transmitted from the call terminal through the data channel, and the discount information may be a coupon corresponding to a predetermined discount coupon possessed by the customer. Information, and / or coupon information included in the customer-owned discount card, and the like, whereby the payment amount can be discounted.

In addition, the information receiving unit 125 may further receive predetermined goods delivery information transmitted from the call terminal through the data channel, wherein the goods delivery information is address information stored in a memory provided in the call terminal, And / or subscriber address information and the like stored in a database (eg, subscriber information D / B) on the telephone network and / or VoIP network to which the call terminal is connected, and / or the call channel is connected to a voice call channel. When the data channel is simultaneously supported, the goods delivery information is selected by a goods delivery destination number corresponding to the voice content provided to the call terminal through the voice guidance unit 115 (for example, "time" corresponding to the voice announcements). FIG.) "," Gu (gun) "," dong (myeon / eup / ri) ", and a detailed address (" address / arc ") number, etc.), or And / or delivery information (eg, a customer's address) in the form of voice information through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), whereby the purchase product is to be delivered. The address is secured.

The information receiving unit 125 may further receive predetermined payment means selection information from the call terminal through the data channel, and the payment means selection information may be used by the customer to process a payment amount of the purchased product. Information for selecting any one of a credit card payment method, and / or a check card payment method, and / or a debit card payment method, and / or a prepaid card payment method, and / or a wire transfer payment method. It is preferable that the card company (or financial company) information issued to the customer a card corresponding to the payment means is preferably made.

According to the present invention, the server provided in the affiliated store includes an information extraction unit 135 for extracting affiliated store information, payment information including at least one or more product information and payment amount information from a predetermined storage medium 150; Wherein the payment amount information is the payment amount information for each product, and / or the total payment amount information (for example, even if the total payment amount is omitted, the total payment amount can be calculated by adding the payment amount per product in the currency terminal) It is preferable to comprise at least one or more.

According to one embodiment of the invention, the payment means information read from the customer owned card through the card reader provided in the call terminal is credit card payment means information, and / or check card payment means information, and / or debit card payment When the information corresponds to any one of means information and / or prepaid card payment means information, the information extraction unit 135 is a unique number assigned to an affiliate store number (eg, a merchant for processing a card payment) from the storage medium 150. Number and / or terminal number (e.g., at least one of a unique number provided to the merchant terminal (or payment terminal) provided in the merchant for processing the card payment) is preferably extracted.

According to another exemplary embodiment of the present invention, when the payment means information read from the customer-owned card through the card reader provided in the call terminal corresponds to the transfer payment means information, the information check unit 170 is stored It is desirable to verify merchant information including merchant account information (eg, the merchant's financial account number, and / or branch number, and / or account holder information) from the medium 150.

If the merchant is a franchise company and a server for payment processing using the call terminal is provided in the call center of the franchise company, the merchant information is merchant information corresponding to the franchise company, and / or the customer It may be affiliated store information corresponding to a franchise chain store that manufactures and packages a product corresponding to purchase product information and delivers it to the customer, whereby the present invention is not limited thereto.

In addition, the product information and payment amount information extracted by the information extraction unit 135 from the storage medium 150 is required to purchase the product and the product information corresponding to the purchase product selection information received from the call terminal It is preferable to include payment amount information.

If predetermined discount information is further received from the call terminal, the payment amount information preferably includes a discounted amount corresponding to the discount information.

According to the present invention, the server provided in the affiliated store includes payment information including the affiliated store information, at least one or more product information, and payment amount information extracted by the information extraction unit 135 through the data channel. Characterized in that it comprises an information transmitting unit 130 to transmit to.

Thereafter, the call terminal reads predetermined payment means information included in the customer-owned card from a predetermined card reader, and transmits the payment information and the payment means information received from the server to a predetermined bansa server 155. It is characterized by.

According to the method of the present invention, the payment means information is credit card payment means information read from the MS card and / or contact IC card and / or contactless IC card through at least one card reader provided in the call terminal, And / or at least one check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information. The card payment method information (e.g., credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information) may be a predetermined card number and / or valid. It is preferable to include TRACK II information including a period and the like, wherein the bank transfer payment means information is a predetermined financial account number and / or It comprises a customer-owned financial account information, including the branch number and / or account gaeseolil are preferred.

According to the method of the present invention, the payment means information and payment information is encrypted in a predetermined encryption method in the call terminal to prevent exposure to the outside from eavesdropping and / or eavesdropping and / or hacking, the telephone network And / or to the bansa server 155 through a payment network corresponding to a VoIP network, in which case the bansa server 155 receives the encrypted information and decrypts the decryption method corresponding to the encryption method. Thus, the payment means information and payment information can be restored, thereby providing high security for the payment means information and payment information.

Hereinafter, for convenience, the payment means information and payment information transmitted from the call terminal to the bansa server 155 will be referred to as "payment approval request information."

In addition, the bansa server 155 receiving the payment approval request information from the call terminal generates a predetermined payment approval request message including the payment approval request information, and to a predetermined payment server corresponding to the payment means information. Send the full payment approval request.

According to the exemplary embodiment of the present invention, when the payment means information corresponds to credit card payment means information, the full payment approval request generated by the bansa server 155 may be a credit card based payment corresponding to the credit card payment means. It is desirable to include the full request for approval.

Alternatively, when the read payment means information corresponds to check card payment means information, the full payment approval request generated by the bansa server 155 includes a check card-based payment approval request full text corresponding to the check card payment means. It is desirable that it be done.

Alternatively, when the read payment means information corresponds to the debit card payment means information, the full payment approval request generated by the bansa server 155 includes a full debit card-based payment approval request corresponding to the debit card payment means. It is preferable to make it.

Alternatively, when the read payment means information corresponds to the prepaid card payment means information, the payment approval request text generated by the bansa server 155 includes a prepaid card-based payment approval request text corresponding to the prepaid card payment means. It is preferable to make it.

According to another exemplary embodiment of the present invention, when the payment means information corresponds to bank transfer payment means information, the payment approval request text generated by the bansa server 155 may withdraw the payment amount from the financial account of the customer. It is preferable to include a full financial transaction request to transfer to the merchant's financial account.

Thereafter, the payment server generates a payment approval message including a payment processing history corresponding to the payment approval request message and transmits it to the bansa server 155, and the bansa server 155 transmits the payment approval message to the call. Send to the terminal.

Here, the payment server comprises a credit card payment server of the card company (or financial company) that issued the credit card to the customer, if the payment means information corresponds to credit card payment means information, and / or the If the payment method information corresponds to the check card payment method information, and comprises a check card payment server of the card company (or financial company) that issued the check card to the customer, and / or the payment method information is debit card payment In the case of means information, if the debit card payment server of the card company (or financial company) that issued the debit card to the customer is made, and / or if the payment means information corresponds to the prepaid card payment means information, It includes a prepaid card payment server of the card company (or financial company) that issued the prepaid card to the customer, / Or if the payment method information corresponding to the bank transfer payment method information comprise the financial server (eg, server Ledger) of financial institutions (banks) established a financial account for the money transfer to the customer.

Those skilled in the art to which the present invention pertains, a method for defining a payment network (VAN) for the predetermined payment-related professional transmission and reception with the payment server in the telephone network and / or VoIP network (for example, the telephone network and And / or a method of transmitting the payment related message to the bansa through a VoIP network, and transmitting the payment related message to the payment server from the bansa, a detailed description thereof will be omitted for convenience.

According to the present invention, the payment server is characterized in that after performing the payment processing procedure for the payment approval request full text, generates a predetermined payment approval full text corresponding to the payment approval request full text and transmits it to the call terminal. And / or the payment approval message is transmitted to the server with reference to the affiliated store information included in the payment approval request message.

According to the present invention, the server provided in the affiliated shop is characterized in that it comprises a specialized receiving unit 145 for receiving a payment approval message including a payment processing history corresponding to the payment approval request full text from the payment server.

The specialized receiving unit 145 may receive the payment approval message corresponding to the payment approval request message from the payment server through the payment network (and / or communication network).

In addition, the professional receiving unit 145 checks the payment processing details included in the payment approval message when the payment approval message corresponding to the payment approval request message is received through the payment network (and / or communication network). The payment server may further include checking whether payment processing using the payment means information provided from the call terminal is normally processed or whether a payment error occurs.

If a predetermined payment error occurs in the payment processing using the payment means information provided from the call terminal, the specialized receiver 145 outputs the payment error information to the call terminal of the customer through the voice guide 115. After that, the payment processing process using the call terminal according to the present invention ends.

According to the present invention, the server provided in the affiliated store is characterized in that it comprises an order processing unit 140 for performing an order processing for the payment processed products when the payment processing through the payment means information is normally performed. do.

According to an embodiment of the present invention, when the information receiving unit 125 receives the order processing information including the purchase product information and the goods delivery address information from the call terminal of the customer, the order processing unit 140 is the payment processing history And order processing information including the purchase product information and the product delivery address information to an order processing terminal of a department that manufactures and packages the purchased product in the affiliate store through a predetermined communication means and delivers it to the customer, and / Or when the affiliated store is a franchise, an order of a chain store that manufactures and packages the purchased product through a predetermined communication means and delivers the order processing information including the payment processing history, the purchased product information, and the product delivery information to a customer; It is preferable to provide to a processing terminal.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal in the payment processing process using the call terminal, the order processing unit 140 is the voice guide unit ( 115) further receives goods delivery information from the call terminal through (and / or call center terminal, and / or merchant phone) to secure order processing information including the purchased goods information and goods delivery information, and the payment processing details And order processing information including the purchase product information and the product delivery address information to an order processing terminal of a department that manufactures and packages the purchased product in the affiliate store through a predetermined communication means and delivers it to the customer, and / Or, if the affiliated store is a franchise, a state including the payment processing history, the purchased product information, and the product delivery address information; It is preferable to provide the door processing information to an order processing terminal of a chain store that manufactures and packages the purchased product through a predetermined communication means and delivers it to the customer.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal in the payment processing process using the call terminal, the order processing unit 140 performs the payment processing history. And providing the purchased goods information to an order processing terminal of a department that manufactures and packages the purchased goods in the affiliated store through a predetermined communication means and delivers them to the customer, and / or when the affiliated store is a franchise, Order processing information including processing details and purchase goods information and goods delivery address information is provided to an order processing terminal of a chain store that manufactures and packages the purchased goods and delivers them to the customer through a predetermined communication means, and then By changing the call channel between the call terminal and the server to the call channel between the call terminal and the order processing terminal, It is possible to further acquire the product delivery address information in the order processing terminal, and in addition, it is possible to perform various types of order processing procedures according to the intention of those skilled in the art.

Referring to FIG. 18, the bansa server 155 may include an information receiver 125 for receiving payment approval request information including payment means information and payment information transmitted from the call terminal, and the received payment approval request information. Decryption unit 165 for decrypting the encrypted payment approval request information, if encrypted, and at least one to add (or insert) and / or replace a predetermined payment approval request message to be generated including the payment approval request information. An information confirmation unit 170 for checking the above additional information and extracting the identified additional information from a predetermined database, and a full text generation unit for generating a payment approval request full text including the payment approval request information and / or additional information. 265 and a specialized relay unit 180 for relaying the generated payment approval request message to a predetermined payment server.

The information receiving unit 125 includes payment approval request information including payment means information and payment information transmitted from the call terminal through a predetermined payment network using a data channel defined in the telephone network and / or VoIP network to which the call terminal is connected. Characterized in that it receives.

When the received payment approval request information received through the information receiving unit 125 is encrypted, the decrypting unit 165 corresponds to a predetermined encryption scheme corresponding to the encrypted payment approval request information applied to the payment approval request information. It is characterized by decoding by the decoding method.

The information checking unit 170 reads the payment approval request information and adds (or inserts) at least one additional information to the full payment approval request to be generated including payment means information and payment information included in the payment approval request information. It is characterized by checking the information.

For example, the payment information included in the payment approval request information may include the merchant phone number instead of the merchant information, and / or may include merchant information that cannot be used in the payment approval process. As described above, the information not including the standard data structure required in the payment approval process is identified as additional information to be added (or inserted) and / or replaced in the full payment approval request.

Alternatively, the payment information included in the payment approval request information may include a blank value in an affiliate store information item. In this case, the information checking unit 170 receives the information including the blank value as described above. Identify additional information to be added (or inserted) and / or replaced in the full request.

If at least one or more information to be added (or inserted) and / or replaced in the payment approval request full text is confirmed, the information checking unit 170 extracts the identified additional information from a predetermined database. do.

For example, when the payment information included in the payment approval request information includes the affiliated store telephone number instead of the affiliated store information, the affiliated store telephone number and the affiliated store information are stored in association with the database referenced by the information checking unit 170. In this case, the information verification unit 170 extracts valid merchant information that can be used for the payment processing from the database through the affiliated store telephone number.

The full text generation unit 265 generates a predetermined payment approval request full text including payment means information and payment information included in the payment approval request information and / or additional information confirmed by the information checking unit 170. It is characterized by.

According to the exemplary embodiment of the present invention, the payment means information included in the payment approval request information received through the information receiving unit 125 (or decrypted through the decoding unit 165) corresponds to credit card payment means information. In this case, the payment approval request full text processed by the information generating unit preferably includes a credit card-based payment approval request full text corresponding to the credit card payment means.

Alternatively, when the payment means information included in the payment approval request information received through the information receiving unit 125 (or decrypted through the decoding unit 165) corresponds to the check card payment means information, the information generating unit generates the information generating unit. The payment approval request message is preferably made including a check card-based payment approval request text corresponding to the check card payment means.

Alternatively, when the payment means information included in the payment approval request information received through the information receiving unit 125 (or decrypted through the decoding unit 165) corresponds to the debit card payment means information, the information generating unit generates the information generating unit. The payment approval request message is preferably made including a debit card-based payment approval request text corresponding to the debit card payment means.

Alternatively, when the payment means information included in the payment approval request information received through the information receiving unit 125 (or decrypted through the decoding unit 165) corresponds to the prepaid card payment means information, the information generating unit generates the information generation unit. The payment approval request is to be made to include a prepaid card-based payment approval request full text corresponding to the prepaid card payment means.

According to another exemplary embodiment of the present invention, the payment means information included in the payment approval request information received through the information receiving unit 125 (or decrypted through the decoding unit 165) corresponds to the wire transfer payment means information. In this case, the payment approval request full text generated by the information generating unit may include a full text of the financial transaction request for withdrawing the payment amount from the customer's financial account and transferring it to the financial account of the affiliated store.

The specialized relay unit 180 transmits the payment approval request text generated by the information generator to the payment server corresponding to the payment means through a predetermined payment network, thereby transmitting the payment approval through the full text of the payment approval request. Characterized by request.

In addition, the specialized relay unit 180, when a predetermined payment approval message corresponding to the full payment approval request message is transmitted from the payment server, it is received through the payment network and relayed to the call terminal, characterized in that for transmission .

Here, the payment server includes a credit card payment server of a card company (or financial company) that issued the credit card to the customer when the payment means information included in the full payment approval request information corresponds to the credit card payment means information. If the payment means information that is made, and / or included in the full payment approval request correspond to the check card payment means information, including the check card payment server of the card company (or financial company) that issued the check card to the customer; If the payment means information that is made and / or included in the full payment approval request correspond to the debit card payment means information, including a debit card payment server of the card company (or financial company) that issued the debit card to the customer And / or the payment method information included in the full text of the payment approval request corresponds to the prepaid card payment method information. In this case, the prepaid card payment server of the card company (or financial company) that issued the prepaid card to the customer, and / or the payment means information included in the full payment approval request information corresponds to the direct transfer payment method information. In this case, the bank may include a financial server (eg, a ledger server) of a financial company (bank) that opens a financial account for the account transfer to the customer.

19 is a diagram showing the functional configuration of a call terminal according to another embodiment of the present invention.

In more detail, Figure 19 relates to an embodiment of a call terminal for payment processing using a call terminal according to the present invention, if the person skilled in the art to which the present invention pertains, refer to this figure 19 And / or modified to infer various call terminal function configurations for payment processing using the call terminal, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG. .

Referring to FIG. 19, the call terminal is basically a control unit 200, a memory unit 245, a key input unit, a voice processing unit, a screen output unit, a signal tone processing unit 120, a communication processing unit 235, and the call terminal. It comprises a power supply for supplying power, characterized in that it comprises a card reader 220 and / or security application module for payment processing using the call terminal according to the invention, to the intention of the skilled person At least one or more functional components (not shown) may be further included.

The control unit 200 basically controls the key input unit, the voice processing unit, the screen output unit, and the communication processing unit 235 so that the communication processing unit 235 is connected based on a predetermined telephone number input through the key input unit. Connect a voice call channel with at least one or more other call terminals (or servers) through one telephone network and / or a VoIP network, and convert the voice signal input and output through the voice processor into an electrical signal (and / or digital signal). And operating and controlling a voice call function transmitted and received through a voice call channel, and for this purpose, a CPU (Central Processing Unit) / MPU (Micro Processing Unit) provided in the call terminal to realize the function of the call terminal in hardware. At least one processor and execution memory (e.g., registers and / or random access memory (RAM)) and any And a bus (BUS) for inputting and outputting data, and loaded into the execution memory from a recording medium provided in the call terminal in order to realize the function of the call terminal in software. It is characterized in that the program routine (Routine) and / or program data that is arithmetic processing is generic.

In addition, the controller 200 controls the communication processor 235 to access data channels defined in a telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network connected to the communication processor 235. Connecting a predetermined data channel for data communication with at least one terminal (or server) based thereon, and operating and controlling a function of transmitting and receiving at least one digital information (or digital data) through the data channel. To this end, at least one or more processors including a CPU / MPU, the execution memory and a bus (BUS) for inputting and outputting predetermined data to the call terminal for the data communication in hardware, characterized in that the software From the recording medium provided to the communication terminal to the execution memory. Is characterized in that the general term for the program routine, and / or program data processing operations by the processor.

In addition, the control unit 200 controls a predetermined card reader unit 220 provided in the call terminal for payment processing using the call terminal, so that a predetermined value from the customer-owned card through the card reader unit 220. It is characterized in that the operation and control to read the payment means information and transmit to the bansa server 155, for this purpose to include a CPU / MPU in the call terminal for payment processing by using the call terminal in hardware And at least one processor, an execution memory, and a bus for inputting and outputting predetermined data, wherein the execution is performed from a recording medium provided in the communication terminal for payment processing using the communication terminal in software. A total of program routines and / or program data loaded into memory and computed by the processor. It is characterized by calling.

Therefore, the control unit (b) may be a program routine which is loaded into the execution memory from the recording medium included in the communication terminal and processed by the processor for payment processing using the communication terminal. A block diagram in FIG. 200 will be described.

The memory unit 245 may be input or output information when an operation by a predetermined program routine (or code) and / or program data (for example, a program routine (or code)) for controlling the overall operation of the communication terminal or General term for non-volatile memory for storing data, and at least one storage including electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD) in hardware. Means, and the predetermined program routine and program data (for example, data input or outputted by the program routine to perform a predetermined function) required by the controller 200 to perform a predetermined control function Characterized in that it is stored.

According to an embodiment of the present invention, the memory unit 245 preferably stores a predetermined encryption key for payment processing using the call terminal.

The key input unit includes a predetermined key input including at least one key button including at least one number key and / or a character key and / or a function key. Detects information (or signal) input from a device, and predetermined information from a predetermined key button provided in the key input device in a specific input mode and / or operation mode of the call terminal controlled by the control unit 200. When (or a signal) is input, a key event corresponding to the input information (or signal) is generated and the generated key event is provided to the controller 200.

When the current input mode and / or operation mode of the call terminal is a voice call mode, the control unit 200 obtains predetermined key data corresponding to the key event and provides the predetermined key data to the signal tone processing unit 120. The processor 120 may generate a key tone corresponding to the key data according to a Dual Tone MultiFrequency (DTMF) scheme.

When the current input mode and / or operation mode of the call terminal is a data communication mode, the controller 200 acquires predetermined key data corresponding to the key event, and then performs an information processing procedure corresponding to the key data. And / or after acquiring a command to execute a predetermined function matched with the key event, and then performing a function corresponding to the command.

According to an embodiment of the present invention, the key input unit and the key input device having at least one key button interoperate with each other to perform a function of key input means provided in the call terminal.

According to an embodiment of the present invention, the key input device which is interlocked with the key input unit may include a keypad device having at least one numeric key, a character key ('*', '#') and a function key, and / or at least one It is preferable to include at least one or more keyboard devices including the above-described numeric keys, character keys (eg, English character keys, and / or Korean character keys) and function keys.

The voice processing unit converts a predetermined voice input from a predetermined voice input device (for example, a microphone) provided in the call terminal into a predetermined voice signal (or an electrical signal), and the telephone network connected to the communication processing unit 235; And / or encode a voice encoding scheme corresponding to a VoIP network to generate predetermined voice data, and provide the voice data to the controller 200. To this end, the voice processor may include a predetermined vocoder ( Vocoder) and codec are preferably provided.

Thereafter, the controller 200 transmits the generated voice data to the telephone network and / or the VoIP network through the communication processor 235.

According to an embodiment of the present invention, when the communication processing unit 235 is connected to a general telephone switching network (or intelligent network), the voice processing unit transmits the voice signal (or electrical signal) through the general telephone switching network (or intelligent network). It is preferable to generate the voice data by encoding by a coding scheme that can be transmitted.

According to another exemplary embodiment of the present invention, when the communication processing unit 235 is connected to a mobile communication network, the voice processing unit may transmit a code division multiple access (CDMA) capable of transmitting the voice signal (or electrical signal) through the mobile communication network. It is preferable to generate the speech data by encoding the encoding scheme corresponding to the stack.

According to another embodiment of the present invention, when the communication processor 235 accesses a VoIP network, the voice processor corresponds to a VoIP protocol stack capable of transmitting the voice signal (or electrical signal) through the VoIP network. It is preferable to generate the voice data by encoding with an encoding scheme, wherein the encoding scheme corresponding to the VoIP network is based on the H.323 protocol standard and / or the Internet Engineering Task Force (IETF) defined by the International Telecommunication Union (ITU). It is preferable to include at least one or more of the Session Initiation Protocol (SIP) protocol specifications defined.

According to an embodiment of the present invention, the voice processing unit and the voice input device interoperate with each other to perform a function of voice input means for receiving a voice signal for voice call through the telephone network and / or the VoIP network.

When voice data encoded by a predetermined encoding method is received through the communication processor 235, the controller 200 provides the voice data to the voice processor, wherein the voice processor is configured to provide the voice data to the voice processor. The communication processor 235 decodes a voice encoding method corresponding to a telephone network and / or a VoIP network to which the communication processor 235 is connected to generate a predetermined voice signal (or an electrical signal), and converts the voice signal (or an electrical signal) into the call. It is characterized in that the output through a predetermined voice output device (for example, a speaker) provided in the terminal, for this purpose, it is preferable that a predetermined vocoder and a codec are provided in the voice processing unit.

According to an embodiment of the present invention, when the communication processing unit 235 is connected to a general telephone switching network (or an intelligent network), the voice processing unit transmits the voice data received through the communication processing unit 235 to the general telephone switching network ( Alternatively, it is preferable to generate the voice signal (or an electrical signal) by decoding by an encoding method corresponding to an intelligent network).

When the communication processing unit 235 accesses a mobile communication network according to another embodiment of the present invention, the voice processing unit encodes voice data received through the communication processing unit 235 based on the CDMA stack-based encoding corresponding to the mobile communication network. It is preferable to generate the voice signal (or electrical signal) by decoding in a manner.

According to another embodiment of the present invention, when the communication processing unit 235 accesses the VoIP network, the voice processing unit converts the voice data received through the communication processing unit 235 into a coding scheme corresponding to the VoIP network. Preferably, the voice signal (or electrical signal) is decoded to generate the voice signal. The encoding scheme corresponding to the VoIP network may include at least one of H.323 protocol standards defined by ITU and / or SIP protocol standards defined by IETF. It is preferable to comprise.

According to an embodiment of the present invention, the voice processing unit and the voice output device interoperate with each other to perform a function of voice output means for outputting a voice signal for voice call through the telephone network and / or the VoIP network.

The screen output unit may be a liquid crystal display (LCD) and / or a cathode ray tube (CRT) by the control unit 200 while the call terminal performs a voice call function and / or a payment processing function using the call terminal. And output at least one information or data that is predefined or defined in real time to be output to a predetermined display output device including a through a predefined interface screen, wherein the screen output unit and the screen output device are mutually It performs the function of the screen output means provided in the call terminal.

The predefined information or data to be output from the call terminal to the screen output device may include key data input through the key input unit and / or information stored or generated by a component included in the call terminal. Data), information (or data) transmitted and received through the communication processor 235, and / or at least one or more data corresponding to a predetermined operation result performed by the call terminal.

According to a preferred embodiment of the present invention, the screen output unit preferably performs a function of a screen output means for outputting a payment processing screen according to each payment processing step to the screen output device for payment processing using the call terminal. .

The signal processing unit 120 is a predetermined number key ("0 ~ 9") and / or character keys ('*', '#') through the key input unit while the operation mode of the call terminal is the voice call mode ) Is generated, a key tone corresponding to the input key data is generated by a complex frequency code (DTMF) scheme, and the key tone corresponds to a telephone network and / or VoIP network to which the communication processing unit 235 is connected. It is characterized in that the encoding by the speech encoding method provided to the communication processor 235.

According to an embodiment of the present invention, when the communication processing unit 235 is connected to a general telephone switching network (or an intelligent network), the voice processing unit may encode the key tone through the general telephone switching network (or an intelligent network). It is preferable to generate the voice data by encoding with.

According to another exemplary embodiment of the present invention, when the communication processor 235 accesses a mobile communication network, the voice processor corresponds to a code division multiple access (CDMA) stack capable of transmitting the key tone through the mobile communication network. It is preferable to generate the speech data by encoding by an encoding method.

According to another exemplary embodiment of the present invention, when the communication processor 235 accesses a VoIP network, the voice processor encodes the key signal using an encoding scheme corresponding to a VoIP protocol stack capable of transmitting the key tone through the VoIP network. Preferably, the voice data is generated, wherein the encoding scheme corresponding to the VoIP network includes at least one or more of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. .

The communication processing unit 235 connects the call terminal to a predetermined telephone network and / or VoIP network, and voices at least one or more other call terminals (or servers) according to a call processing procedure defined in the telephone network and / or VoIP network. It is characterized by connecting the call channel.

According to an embodiment of the present invention, the communication processing unit 235 connects the call terminal to a general telephone switching network (or an intelligent network) in a physical network configuration (e.g., connects the call terminal to a general telephone switching network (or an intelligent network). At least one or more other call terminals by performing a call processing procedure corresponding to a communication protocol standard defined in the general telephone switching network (or an intelligent network). It is desirable to connect the voice call channel with the server (or the server).

According to another exemplary embodiment of the present invention, the communication processing unit 235 may include a physical network configuration for connecting the call terminal to a mobile communication network (for example, a base station and a CDMA stack provided on the mobile communication network). Network configuration for connecting a wireless communication section), and performs a call processing procedure corresponding to a communication protocol standard defined in the mobile communication network to establish a voice call channel with at least one other call terminal (or server). It is preferable to connect.

According to another exemplary embodiment of the present invention, the communication processing unit 235 may include a physical network configuration (eg, a VoIP gateway provided on the VoIP network and / or the VoIP terminal connected to the VoIP terminal). Or a network configuration connecting a wired communication section through a Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) protocol layer implemented on a VoIP gatekeeper and a UDP / IP protocol stack. In addition, it is preferable to connect a voice call channel with at least one or more other call terminals (or servers) by performing a call processing procedure corresponding to the communication protocol standard defined in the VoIP.

In addition, the communication processing unit 235 transmits and receives voice data encoded with at least one or more other communication terminals (or servers) and encoding schemes corresponding to the telephone network and / or VoIP network through the voice communication channel. .

According to an embodiment of the present invention, when the communication processing unit 235 is connected to a general telephone switching network (or intelligent network), the communication processing unit 235 is encoded by an encoding scheme corresponding to the general telephone switching network (or intelligent network). It is preferable to transmit and receive at least one voice data.

According to another embodiment of the present invention, when the communication processing unit 235 accesses a mobile communication network, the communication processing unit 235 transmits and receives at least one voice data encoded by a corresponding encoding scheme corresponding to the mobile communication network. It is desirable to.

According to another embodiment of the present invention, when the communication processing unit 235 accesses a VoIP network, the communication processing unit 235 transmits and receives at least one voice data encoded by an encoding scheme corresponding to the VoIP network. It is preferable.

In addition, when it is possible to add (or assign) a predetermined data channel to the voice call channel, the communication processor 235 assigns a predetermined data channel to the voice call channel connected through a predetermined telephone network and / or a VoIP network. Add (or assign) and perform data communication with at least one other call terminal (or server) to which the call channel is connected through the added (or assigned) data channel.

According to an embodiment of the present invention, when the communication processing unit 235 is connected to a general telephone switching network (or intelligent network), the communication processing unit 235 uses a predetermined data channel defined in the general telephone switching network (or intelligent network). In addition to (or assigning) to the voice call channel, it is preferable to perform predetermined data communication in addition to the voice call with at least one or more other call terminals (or servers) to which the call channel is connected through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 235 accesses a mobile communication network, the communication processing unit 235 adds (or assigns) a predetermined data channel defined in the mobile communication network to the voice communication channel. In addition to the voice call, it is preferable to perform predetermined data communication with at least one other call terminal (or server) connected with the call channel through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 235 accesses the VoIP network, the communication processing unit 235 adds a predetermined data channel defined in the VoIP network to the voice call channel (or And a predetermined data communication in addition to the voice call with at least one or more other call terminals (or servers) to which the call channel is connected through the data channel.

In addition, the communication processor 235 connects at least one terminal (or server) and a predetermined data channel (or communication channel) through a predetermined telephone network and / or a VoIP network independently of the voice call channel. And, it characterized in that the predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

When the communication processing unit 235 is connected to a general telephone switching network (or an intelligent network) according to an embodiment of the present invention, the communication processing unit 235 is a predetermined data communication standard defined in the general telephone switching network (or intelligent network). According to the present invention, it is preferable to connect a predetermined data channel (or communication channel) with at least one terminal (or server), and predetermined data communication with at least one terminal (or server) through the data channel (or communication channel). Do this.

According to another embodiment of the present invention, when the communication processor 235 accesses a mobile communication network, the communication processor 235 may include at least one terminal according to a CDMA stack based data communication standard defined in the mobile communication network. Or a server) and a predetermined data channel (or communication channel), and perform a predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

According to another embodiment of the present invention, when the communication processing unit 235 accesses a VoIP network, the communication processing unit 235 may include at least one or more data according to a VoIP protocol stack based data communication standard defined in the VoIP network. It is preferable to connect a predetermined data channel (or communication channel) with a terminal (or server), and perform predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

According to the present invention, the call terminal is provided with a card reader unit 220 for reading predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal according to the present invention. It features.

That is, a customer who is provided with payment processing using the call terminal according to the present invention through the call terminal contacts the MS (Magnetic Stripe) card and / or the ISO / IEC 7816 standard based on the ISO / IEC 7810 standard. A card reader (or wireless IC chip) and / or a card including at least one contactless IC card (or wireless IC chip) based on an ISO / IEC 14443 standard, wherein the card reader unit 220 is characterized in that to provide an interface for reading at least one or more payment means information from the customer-owned card.

According to an embodiment of the present invention, the card reader unit 220 is an MS reader unit providing an interface between the MS card and the call terminal, and / or a contact providing an interface between the contact IC card and the call terminal. And a contactless IC reader section for providing an interface between the contactless IC card and the call terminal.

The MS reader unit is a card reader unit 220 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. By using the loading is characterized in that the predetermined payment means information from at least one or more tracks (for example, track II area) provided in the MS of the MS card to interface to the call terminal.

The contact IC reader unit is a card reader unit 220 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies the power to the IC chip of the IC card through the contact point, and the predetermined payment means information from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) Characterized in that the interface to the call terminal.

The contactless IC reader part is a card reader part 220 based on ISO / IEC 14443. The contactless IC reader part may be at least in electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, the predetermined payment means information from the IC chip through the half-duplex transaction using the APDU Characterized in that the interface to the call terminal.

According to an embodiment of the present invention, the card reader unit 220 may provide credit card payment means information, and / or check card payment means information, and / or debit card from the customer-owned card for payment processing using the call terminal. It is preferable to read at least one of payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information.

According to the present invention, in order to provide a payment processing function using a call terminal according to the present invention, the call terminal reads a predetermined payment means information from a predetermined customer card through a telephone network and / or a VoIP network through a bansa server ( 155 and a security application module (SAM) for managing a function of receiving and processing a payment approval text corresponding to the payment approval request text from the bansa server 155. It is done.

The Secure Application Module (SAM) is a confidentiality and / or authentication and / or integrity (required in the process of performing the electronic payment and / or electronic payment by the call terminal using the card) As a safety device for performing security requirements including Integrity and / or Nonrepudiation in a secure and reliable structure within the call terminal without using an authentication server (or payment server) on a payment network, Encrypts or decrypts a predetermined message (information or data) processed in the course of the call terminal performing a predetermined security request function (e.g., electronic payment and / or electronic payment function), and forgery (or tampering) of the message Add an authenticator that prevents the data from being stored, or store important information in the process of performing the security request function. Characterized in that for performing.

In general, the security application module is preferably composed of a predetermined security application module inserter and a security application module chip, the security application module chip is a chip containing at least 8 bits or more CPU has a performance of 2 MIPS (Million Instructions Per Second) or more It is preferable to include an Application Specific Integrated Circuit (ASIC) chip (eg, a PLCC 44-pin chip) and / or an IC chip (eg, an IC card in the form of a subscriber identity module (SIM)).

Further, the security application module may be configured to include at least one or more security application data (eg, at least one or more identifiers, versions, expiration dates, issue dates, code values, etc.) and / or keys required for the call terminal to perform a predetermined security request function. For example, one master key and at least one application key) and / or protocols (e.g., transaction protocol, re-transaction protocol, last transaction cancellation protocol, collection protocol, SAM issuance protocol, (e-money company / card company) registration protocol, authorization Acquisition protocol, mode switch protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switch / gather / delete / discard / initialize / reprocess / retract) Command) is preferably provided.

Referring to Figure 19, the call terminal is a check result of the mode check unit 250 and the mode check unit 250 for confirming the operation mode of the call terminal for payment processing using the call terminal according to the present invention When the call terminal is in the payment mode using the call terminal according to the present invention, an information reading unit 260 for reading predetermined payment means information from a predetermined customer-owned card through the card reader unit 220, and The data receiver 125 receives predetermined payment information from the call terminal (or server) through a communication processor 235, and connects a data channel with the bansa server 155 through the communication processor 235. And an information transmitter 130 for transmitting the payment means information and the payment information to the bansa server 155 through the data channel.

In addition, the call terminal is characterized in that it further comprises an information processing unit for processing the number arrangement (and / or number structure) to prevent the payment means information is intercepted and / or intercepted and / or hacked.

In addition, the call terminal is characterized in that it further comprises an encryption processing unit 270 for encrypting by a predetermined encryption method in order to prevent the payment means information is intercepted and / or intercepted and / or hacked.

The mode checking unit 250 checks whether an operation mode of the call terminal is a voice call mode, a voice call / data communication mode, or a data communication mode.

In addition, when the operation mode of the call terminal is a voice call / data communication mode, the mode checking unit 250 determines whether the data channel added (or assigned) to the voice call channel is a data communication mode for general data communication, Or it is characterized in that the data communication mode for payment processing according to the present invention.

If the result of the check indicates that the operation mode of the call terminal is a data communication mode for payment processing according to the present invention, the mode checking unit 250 receives the customer-owned card through the screen output unit (and / or voice processing unit). By requesting interfacing through the card reader 220, the information reader 260 processes the card reader 220 to read predetermined payment means information from the customer-owned card.

In addition, when the operation mode of the call terminal is a data communication mode, the mode check unit 250 confirms whether the data communication mode is a simple data communication mode or a data communication mode for payment processing according to the present invention. It features.

If the result of the check indicates that the operation mode of the call terminal is a data communication mode for payment processing according to the present invention, the mode checking unit 250 receives the customer-owned card through the screen output unit (and / or voice processing unit). By requesting interfacing through the card reader 220, the information reader 260 processes the card reader 220 to read predetermined payment means information from the customer-owned card.

When the call terminal is a payment mode using the call terminal according to the present invention, the information reading unit 260 receives a predetermined customer-owned card through the card reader 220. Characterized in that it reads predetermined payment means information, said payment means information is credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means Information, and / or account transfer payment means information is preferably included.

According to an embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information In the case of payment means information, the payment means information read out by the information reader 260 through the card reader 220 includes at least one or more number arrays, such as a 16-digit card number and / or expiration date. It is preferable to make it.

In addition, when the payment means information corresponds to the account transfer payment means information, the payment means information read out by the information reader 260 through the card reader 220 is a 16-digit account number and / or branch number It is preferable to include at least one or more number arrangements, such as.

The information receiving unit 125 receives payment information including merchant information, at least one product information, and payment amount information from the call terminal (or server) through the communication processing unit 235. Provided payment information to the information transmission unit 130.

The information transmission unit 130 is a predetermined data structure standard promised with the bansa server 155 for the payment means information read by the information reader 260 and the payment information received through the information receiver 125. And the payment means information and the payment information corresponding to the data structure standard are transmitted from the communication processor 235 to the bansa server 155 through the data channel.

For example, if the payment means information read by the information reader 260 is credit card payment means information, the information transmitter 130 may have a data structure such as "1234123412341234 * 0407". Where "1234123412341234" corresponds to a 16-digit card number, "0407" corresponds to an expiration date corresponding to "month / year" of 2 digits each, and "*" denotes the card number and the expiration date. The credit card payment means information is transmitted from the communication processor 235 to the bansa server 155 through the data channel.

Hereinafter, the payment means information and payment information is referred to as "payment approval request information" for convenience.

According to an exemplary embodiment of the present invention, the information transmitter 130 may further include a predetermined checksum for preventing a transmission / reception error for payment approval request information transmitted through the data channel. It is possible to prevent a transmission and reception error for the payment approval request information.

However, the payment approval request information as described above may be exposed to eavesdropping and / or interception and / or hacking. In order to prevent this, the processing processor may include a combination of numbers included in the payment approval request information in the bansa server. And processing the data into a data structure capable of restoring the original payment approval request information at 155, wherein the processed payment approval request information is restored to the original payment approval request information at the bansa server 155. It is characterized by.

Alternatively, in order to prevent the payment approval request information from being exposed to eavesdropping and / or interception and / or hacking, the encryption processing unit 270 may encrypt the payment approval request information by a predetermined encryption method. The encrypted payment approval request information may be decrypted by the bansa server 155 by a predetermined decryption method corresponding to the encryption method.

20 is a diagram illustrating an MS card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

More specifically, FIG. 20 illustrates an embodiment of an MS card for storing payment means information, which is read from a customer's own card, through a card reader provided in a predetermined call terminal. The MS card shown in FIG. In the MS card having a Track I storage area, a Track II storage area, and a Track III storage area, the payment means information according to the present invention is stored in the Track II storage area. Those of ordinary skill in the art can refer to and / or modify this drawing 20 to display credit card payment means information, and / or check card payment means information, and / or debit card payment means in the Track II storage area of the MS card. Information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is provided in the Track I storage area and / or the Track III storage area. Would be able to infer the various exemplary method of storing function), the present invention includes all embodiments in which the inference method, not limited to the exemplary method illustrated in the figure 20.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 20, payment means information providing a payment processing function using a call terminal according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area.

21 is a view showing an IC card in which predetermined payment means information is stored according to another embodiment of the present invention.

More specifically, FIG. 21 illustrates an embodiment of an IC card for storing payment means information read from a customer's own card through a card reader provided at a predetermined call terminal. For convenience, this figure 21 is a contact IC card. FIG. 1 illustrates a case in which payment means information according to the present invention is stored in a memory of the present invention. Those skilled in the art to which the present invention pertains may refer to and / or modify the memory of the IC card. Infer various implementation methods for storing credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. As will be appreciated, the invention includes all implementations inferred above, and are not limited to the implementation illustrated in FIG.

With reference to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip's IC chip may include power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), and programming. I / O interfaces for communicating with the call terminals (e.g. command or data exchange) through contact points such as power supply (VPP) and / or input / output (I / O), central processing unit (CPU), micro process unit (MPU) And / or a processor unit including at least one computing element including a coprocessor, a read only memory (ROM), a random access memory (RAM), an electrically erasable and programmable read only memory (EEPROM), It consists of a memory unit 245 consisting of at least one or more memory elements, including FM (Flash Memory), in particular, at least one of the memory elements (eg, ROM) to manage and operate the internal resources of the IC card Chip operating system (Chip Operating System; COS) is stored, the COS stored in the memory unit 245 is loaded into a predetermined execution memory when a predetermined power is supplied from the call terminal through the power supply (VCC) contact point of the input and output interface Control the overall operation of the IC chip, and the information between the IC chip and the call terminal through an APDU (Application Protocol Data Unit) based on the clock frequency (for example, 3.57MHz or 4.9MHz) of the clock signal (CLK) contact point Or control data exchange.

According to the present invention, the memory unit 245 of the IC chip terminates at least one or more programs among programs that are loaded in the card terminal and is already driven, and drives a specific program among a plurality of programs stored in the card terminal, Or card storage information for executing a function of converting a screen configuration and / or a function set in the card terminal into a specific screen configuration and / or a specific function, wherein the card storage information is stored by the terminal program. A data unit for storing a data set corresponding to predetermined information or data to be read and read and / or used, and operated or executed by an arithmetic function of the processor unit and an instruction set provided by a COS. Program routines used by the programmer (eg Javacard) An applet (JAVA Applet) is provided with a processing unit corresponding to an application including an instruction call code that interacts with the instruction set of the COS and execution code that is processed by a processor unit. Read a command provided from the terminal program via an input / output interface, and read or write at least one or more information or data stored in the data unit based on the read command, and as a result or read information or data It is characterized in that to provide to the terminal program via the input and output interface through the APDU.

According to a preferred embodiment of the present invention, the memory unit 245 of the IC chip includes a security structure based on ISO / IEC 10202. Accordingly, the memory unit 245 may include a chip serial number (CSN) It consists of a protected area where the same secret information is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the like. It is preferably stored in an area excluding the protection area and the COS control area.

In addition, according to ISO / IEC 7816 and / or ISO / IEC 14443 ICC standards, the memory unit 245 may include one master file (MF) corresponding to a root file, and a lower subordinate to the master file. At least one Dedicated File (DF) corresponding to each ICC stored information, at least one Dedicated File (DF) corresponding to each ICC stored information, and disposed below the dedicated file; It includes a file structure consisting of an element file (EF) containing the actual information and / or data for the smart card service, the card storage information for the present invention also includes the file structure as described above.

Referring to FIG. 21 according to an embodiment of the present invention, the data unit of the card storage information stores at least one payment means information for payment processing using a call terminal according to the present invention. The information includes at least one of credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. Is done.

22 is a diagram showing a specialized structure for payment processing using a call terminal according to another embodiment of the present invention.

More specifically, FIG. 22 is for a payment approval request text that is generated by reading predetermined credit card payment means information from a predetermined card reader in the bansa server 155 shown in FIG. 18. If one of ordinary skill in the art, by referring to and / or modified in this figure 22 it is possible to infer the payment approval request specialized structure corresponding to other payment means information in addition to the credit card payment means information, the present invention is inferred It includes all the implementation methods, and is not limited to the implementation method shown in FIG.

Referring to FIG. 22, the payment approval request full-text structure may include at least one specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and an end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text is predetermined through a transaction classification item (eg, credit approval request, credit approval cancellation, etc.), a terminal_ID item, a POS entry mode item, and a card reader provided in the call terminal. TRACK II Data items corresponding to the payment method information obtained from the card of the card (e.g., credit obtained from the Primary Account Number (PAN) area and additional data (AD) and / or Discretionary Data (DD) area of TRACK II of the MS card. Credit card information obtained from the credit card file of the IC card or the credit card file), and after the predetermined file separator (File Separator, 0X1C), the installment months and total amount items corresponding to the credit card payment information And a service fee item, and also includes a working key index item, a password item, a product code item, and a document serial number item. Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Detailed description will be omitted.

The terminal_ID item of the information on the payment approval request specialist corresponds to the affiliated store information. If the affiliated store information is not valid in the payment information provided from the call terminal, the terminal_ID item is added to (or inserted into) the valid merchant information. ) And / or replaced.

In addition, the TRACK II Data item of the information item of the payment approval request specialist is readout information received from the predetermined card reader provided in the call terminal and received by the server. Corresponds to credit card information.

23 is a diagram illustrating a method of encrypting and transmitting payment approval request information in a symmetric key (or secret key) method in a call terminal according to an embodiment of the present invention.

More specifically, FIG. 23 is an embodiment in which the payment approval request information (for example, payment means information and payment information) is encrypted and transmitted by a symmetric key (or secret key) method in a call terminal equipped with an encryption function as shown in FIG. As to a method, if one of ordinary skill in the art to which the present invention pertains, refer to and / or modify this figure 23 to replace the payment approval request information in a call terminal on the telephone network and / or VoIP network. Or it may be inferred a variety of implementation methods for encryption by a secret key) method, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 23 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the call terminal, the public certificate is a predetermined memory unit provided in the call terminal Stored in 245, and / or stored in an IC chip (or IC card) in the form of an ID-000 mounted or detached from the call terminal, and / or provided with a predetermined IC card reader in the call terminal. In this case, it is possible to store all of the IC card inserted into the IC card reader, and the present invention is not limited thereto.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit 245 provided in the call terminal in addition to the public certificate, and / or on the interface screen provided from the server to the call terminal. It can be included and / or embedded on a communication program communicating with the server on the call terminal, by which the invention is not limited.

Referring to FIG. 23, when predetermined payment approval request information is generated in the full text generation unit 265 of the call terminal, the predetermined payment approval request information is provided to the cryptographic processing unit 270 (2300), and the payment approval request information is provided. The encryption processing unit 270 reads a predetermined symmetric key (or secret key) for encrypting payment approval request information from an authorized certificate provided in the call terminal (2305), and reads the read symmetric key (or secret key). In operation 2310, the payment approval request information is encrypted.

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), the symmetric key (or secret key) is k (key), the payment approval request information is P (Plaintext), and the symmetric key (or If the payment approval request information encrypted with a secret key) is referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by a formula such as "Ek (P) = C".

According to the embodiment of the present invention, the encryption processing unit 270 encrypts the payment approval request information through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack It is preferable to include at least one or more of an International Data Encryption Algorithm (IDEA), and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When payment approval request information is encrypted through a symmetric key (or secret key) as described above, the communication processing unit 235 transmits the encrypted payment approval request information through a communication protocol defined on the telephone network and / or VoIP network. And transmits to the server (2315).

24 is a diagram illustrating a method of decrypting payment approval request information encrypted and received at a server by a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, FIG. 24 shows the payment approval request information (eg, payment means information and payment information) encrypted and received from a call terminal equipped with an encryption function as shown in FIG. Or a secret key) method, and a method of decrypting by a secret key method may be applied to a call terminal on the telephone network and / or a VoIP network by referring to and / or modifying the drawing of FIG. Various implementation methods for decrypting the encrypted payment approval request information by a symmetric key (or secret key) method may be inferred, but the present invention includes all the inferred implementation methods, and the implementation method illustrated in FIG. It is not limited to this.

In this figure 24 according to an embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the server, and the public certificate is a predetermined database (not shown) interworking with the server. ), And the present invention is not limited thereto.

Referring to FIG. 24, the information receiving unit 125 of the server receives the encrypted payment approval request information through the telephone network and / or the VoIP network and provides the encrypted payment approval request information to the decryption unit 165 (2400). The request information is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 165 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment approval request information from the public certificate provided in the server (2405), and extracts the extracted symmetric key ( Or secret key) to decrypt the encrypted payment approval request information (2410).

Here, the decryption function of the decryption unit 165 is called D (Decryption), and the payment approval request information encrypted with the symmetric key (or secret key) with k (key) and the symmetric key (or secret key) is C. (Ciphertext) and when the decrypted payment approval request information is P (Plaintext), the function of decrypting the encrypted payment approval request information by the decryption unit 165 is "Dk = P, or Dk (Ek (P )) = P ".

According to the exemplary embodiment of the present invention, an algorithm for decrypting the encrypted payment approval request information through the symmetric key (or secret key) by the decryption unit 165 may include SEED, DES (Data Encryption Standard), Triple-DES. It is preferable to include at least one or more of, Skipjack, International Data Encryption Algorithm (IDEA), and various forms of decryption algorithm may be used, but the decryption algorithm is matched with the encryption algorithm used in the call terminal. The present invention is not limited by the specific decoding algorithm.

When the payment approval request information encrypted through the symmetric key (or the secret key) is decrypted as described above, the decryption unit 165 provides the decrypted payment approval request information to the full text generation unit 185 (2415). The full text generation unit 185 performs a full text creation procedure for the payment processing by using the payment approval request information.

FIG. 25 is a diagram illustrating a method for encrypting and transmitting payment approval request information in a public key based structure in a call terminal according to an embodiment of the present invention.

25 illustrates a method for encrypting and transmitting the payment approval request information (for example, payment means information and payment information) in a public key based structure in a call terminal equipped with an encryption function as shown in FIG. As those skilled in the art to which the present invention pertains, the present invention may refer to and / or modify this drawing 25 to encrypt the payment approval request information in a public key manner at a call terminal on the telephone network and / or a VoIP network. Various implementation methods may be inferred, but the present invention includes all the implementation methods inferred above and is not limited to the implementation method shown in FIG.

In this figure 25 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal, and the public certificate is a predetermined memory unit 245 provided in the call terminal. And / or stored in an IC chip (or IC card) in the form of ID-000 mounted on or detached from the call terminal, and / or the IC is provided with a predetermined IC card reader. All of them can be stored in an IC card inserted in the card reader, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal, and the present invention is not limited thereto.

Referring to FIG. 25, when the predetermined payment approval request information is generated in the full text generation unit 265 of the call terminal, the predetermined payment approval request information is provided to the cryptographic processing unit 270 (2500). When the payment approval request information is provided, The encryption processing unit 270 extracts a predetermined server-side public key for encrypting the payment approval request information from the authorized certificate (2505), and encrypts the payment approval request information through the extracted server-side public key. (2510).

Herein, the encryption function of the encryption processing unit 270 is called E (Encryption), the server-side public key is k1 (key), the payment approval request information is P (Plaintext), and the server-side public key is encrypted. When the authorization request information is referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by a formula such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the payment approval request information through the server-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm). ), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, in addition to various encryption algorithms may be used, but by a specific encryption algorithm The present invention is not limited.

For example, in the case of encrypting the payment approval request information through an RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by different prime factors of n is a. And b, if the published index (e.g., 3 or 216+) is e, and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a -1) (b-1) ", wherein the encryption function of the encryption processing unit 270 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment approval request information is encrypted through the server-side public key as described above, the communication processing unit 235 transmits the encrypted payment approval request information to the server through a network component on the telephone network and / or the VoIP network. (2515).

FIG. 26 illustrates a method for decrypting payment approval request information encrypted and received by a server according to an embodiment of the present invention using a public key infrastructure.

In more detail, FIG. 26 shows the payment approval request information (eg, payment means information and payment information) encrypted and received from a call terminal equipped with an encryption function as shown in FIG. As an embodiment of the present invention, a method of decoding in a structured manner may be applied to a server having a general knowledge in the technical field to which the present invention pertains. Various implementation methods for decrypting payment approval request information encrypted with a public key in a public key infrastructure scheme may be inferred, but the present invention includes all the inferred implementation methods and is limited to the implementation method shown in FIG. Not.

In this figure 26 according to an embodiment of the present invention, the server-side private key for decrypting the payment approval request information encrypted with the server-side public key in a public key infrastructure is preferably read from the public certificate provided in the server. And, the public certificate is preferably stored in a predetermined database (not shown) in conjunction with the server, whereby the present invention is not limited.

* Referring to FIG. 26, the information receiving unit 125 of the server receives encrypted payment approval request information through the telephone network and / or VoIP network and provides it to the decryption unit 165 (2600). The request information is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 165 extracts a server-side private key for decrypting the encrypted payment approval request information from the authorized certificate provided at the server (2605), and encrypts the encrypted server through the extracted server-side private key. Decoded payment approval request information (2610).

Here, the decryption function of the decryption unit 165 is called D (Decryption), the server-side private key is k2 (key), and the payment approval request information encrypted with the server-side public key is C (Ciphertext) and the server. When payment approval request information decrypted with the side private key is P (Plaintext), the function of decrypting the encrypted payment approval request information by the decryption unit 165 is "Dk2 = P, or Dk2 (Ek (P)) =" It can be expressed by an expression such as "P".

According to an embodiment of the present invention, the decryption unit 165 decrypts the payment approval request information encrypted with the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it can be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal, the invention is not limited by a specific decryption algorithm.

For example, when the payment approval request information is decoded through an RSA decryption algorithm among the public key based decryption algorithms, a public method (Modulus) used in the decryption process is not disclosed with n and different prime factors of n. If the prime is a and b, the published exponent (e.g. 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", wherein the decoding function of the decoding unit 165 may be expressed as" P = Dk2 = Cd mod n ".

As described above, when the payment approval request information encrypted by the server-side public key is decrypted by the server-side private key, the decryption unit 165 transfers the decrypted payment approval request information to the full text generation unit 265. In operation 2615, the full text generation unit 265 performs a full text creation procedure for the payment processing by using the payment approval request information.

27 is a diagram illustrating a method of encrypting and transmitting payment approval request information in an electronic envelope method in a call terminal according to an embodiment of the present invention.

More specifically, FIG. 27 is an embodiment of the present invention for encrypting and transmitting the payment approval request information (for example, payment means information and payment information) in a call terminal equipped with an encryption function as shown in FIG. 19. According to the present invention, various embodiments of the present invention may be referred to and / or modified with reference to FIG. 27 to encrypt the payment approval request information in an electronic envelope method at a call terminal on the telephone network and / or a VoIP network. The method may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 27 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the communication terminal, and the public certificate is a predetermined memory unit 245 provided in the communication terminal. And / or stored in an IC chip (or IC card) in the form of ID-000 mounted on or detached from the call terminal, and / or the IC is provided with a predetermined IC card reader. All of them can be stored in an IC card inserted in the card reader, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal, and the present invention is not limited thereto.

Referring to FIG. 27, when the predetermined payment approval request information is generated in the full text generation unit 265 of the call terminal, the predetermined payment approval request information is provided to the encryption processing unit 270 (2700). When the payment approval request information is provided, The encryption processing unit 270 generates a predetermined random secret key for encrypting the payment approval request information using a secret key (symmetric key) method (2705), and generates the generated secret key. In operation 2710, the payment approval request information is encrypted.

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), the secret key is r (random secret key), the payment approval request information P (Plaintext), and the payment approval request encrypted with the secret key When the information is referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an expression such as "Er (P) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the payment approval request information through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data). It is preferable to include at least one or more of the Encryption Algorithm, and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

Thereafter, the encryption processing unit 270 encrypts the secret key (random secret key) used to encrypt the payment approval request information. To this end, the encryption processing unit 270 obtains a predetermined server-side public key from the public certificate. It extracts (2715) and encrypts the secret key using the server-side public key (2720).

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), the server-side public key is k1 (key), the secret key is r (random Secret key), and the secret encrypted with the server-side public key. If the key is C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the secret key through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 270 may be expressed as" C = Ek1 (r) = re mod n ".

If the payment approval request information is encrypted with the secret key, and the secret key is encrypted with the server-side public key, the encryption processing unit 270 encrypts the payment approval request information with the secret key and the server-side public key. Generate and provide transaction data associated with the secret key to the communication processor 235 (2725), and the communication processor 235 transmits the transaction data to the server through a network component on a telephone network and / or a VoIP network. (2730).

28 is a diagram illustrating a method of decrypting payment approval request information encrypted and received by a server according to an embodiment of the present invention by an electronic envelope method.

In more detail, FIG. 28 is a server as in FIG. 18 that receives transaction data including encrypted payment authorization request information (eg, payment means information and payment information) from a call terminal equipped with an encryption function as shown in FIG. The present invention relates to a method for decrypting the transaction data by an electronic envelope method. If the present invention has a general knowledge, a call on the telephone network and / or a VoIP network will be described with reference to FIG. 28 and / or modified. Although various implementation methods for decrypting the transaction data encrypted by the electronic envelope method in the same electronic envelope method may be inferred from the terminal, the present invention includes all the inferred implementation methods, and is shown in FIG. 28. It is not limited to this.

In this figure 28 according to an embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate provided in the server, and the public certificate is linked with the server. It is preferably stored in a predetermined database (not shown), and the present invention is not limited thereby.

Referring to FIG. 28, the information receiving unit 125 of the server receives predetermined transaction data including the payment approval request information encrypted through the telephone network and / or the VoIP network and provides the predetermined transaction data to the decryption unit 165. 2800, the transaction data is preferably received through a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 165 extracts a server-side private key for decrypting the encrypted secret key included in the transaction data from the public certificate provided in the server (2805), and extracts the extracted server-side individual. By decrypting the secret key encrypted with the server-side public key at the call terminal through a key (2810), a predetermined secret key for decrypting the payment approval request information is extracted (2815), and the extracted secret key is used. By decrypting the payment approval request information (2820), the payment terminal to extract the payment approval request information encrypted with the secret key (2825).

Here, the decryption function of the decryption unit 165 is called D (Decryption), the server-side private key is k2 (key), the secret key encrypted with the server-side public key is C (Ciphertext), and the server-side individual. When a secret key decrypted with a key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 165 is "Dk2 = r, or Dk2 (Ek1 (r)) = r". It can be expressed as an expression.

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman) (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the following. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 165 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the decryption unit 165 is referred to as D (Decryption), the secret key is r (random secret key), the payment approval request information encrypted with the secret key (C (Ciphertext)), and the decryption. When the payment approval request information is P (Plaintext), the function of decrypting the encrypted payment approval request information by the decryption unit 165 is "Dr = P, or Dr (Er (P)) = P". It can be expressed as an expression.

According to the embodiment of the present invention, the decryption unit 165 decrypts the encrypted payment approval request information through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( International Data Encryption Algorithm) preferably comprises at least one or more, and various forms of decryption algorithms may be used, but the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal, The present invention is not limited by the specific decoding algorithm.

When the payment approval request information is decoded as described above, the decoding unit 165 provides the decoded payment approval request information to the full text generation unit 265 (2830), and the full text generation unit 265 performs the payment. The full text generation procedure for the payment processing is performed using the approval request information.

29A and 29B illustrate a method of encrypting and transmitting payment approval request information by a key exchange method in a call terminal according to an embodiment of the present invention.

In more detail, FIGS. 29A and 29B illustrate a method for encrypting and transmitting the payment approval request information (eg, payment means information and payment information) in a call terminal equipped with an encryption function as shown in FIG. As is known in the art, the present invention, if known to those skilled in the art, refer to and / or modify this drawing 29 to encrypt the payment authorization request information in a call terminal on the telephone network and / or VoIP network by a key exchange method. Various implementation methods may be inferred, but the present invention includes all of the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 29 according to the embodiment of the present invention, the terminal-side private key and the server-side public key are preferably read from the public certificate provided in the call terminal, and the public certificate is provided in the predetermined call terminal. Stored in the memory unit 245, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the communication terminal, and / or a predetermined IC card reader is installed in the communication terminal. If provided, it is possible to be stored in the IC card to be inserted into the IC card reader all, by which the present invention is not limited.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate to the call terminal, thereby limiting the present invention. Not.

Referring to FIGS. 29A and 29B, when a predetermined payment approval request information is generated by the full text generation unit 265 of the call terminal, the predetermined payment approval request information is provided to the encryption processing unit 270 (2900). If provided, the encryption processing unit 270 may send the payment approval request information to a predetermined one-way hash function (eg, a hash code of a predetermined length regardless of the length of the payment approval request information). Digest) and a one-way hash function that cannot identify (or infer) the original message via the hashcode (or message digest), where the call terminal and server use the same hash function). A predetermined message digest is generated (2905) and the digital signature is digitally signed (2910) by encrypting the message digest with the terminal-side private key.

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), the terminal-side private key is encrypted with t1 (30erminal side key), the message digest is m (message digest), and the terminal-side private key. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 270 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the message digest through the terminal-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the digital signature function of the encryption processing unit 270 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 270 generates a predetermined random secret key for encrypting the payment approval request information by a secret key (symmetric key) method (2915), and the payment approval request The message digest encrypted with the terminal-side private key and a copy of a certificate (eg, a certificate including the terminal-side public key) included in the public certificate are linked to each other and encrypted through the generated secret key (2920).

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), the secret key is r (random secret key), the payment approval request information and the copy of the certificate is encrypted with P (Plaintext), and the secret key When the payment approval request information and the certificate copy are referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an equation such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 270 encrypts the payment approval request information and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA It is preferable to include at least one or more of the International Data Encryption Algorithm, and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 270 extracts a predetermined server-side public key from the authorized certificate to encrypt the secret key that encrypts the payment approval request information (2925), and uses the server-side public key. The secret key encrypting the payment approval request information is encrypted (2930).

Here, the encryption function of the encryption processing unit 270 is called E (Encryption), and the server side public key is encrypted with s1 (server side key), the secret key with r (random secret key), and the server side public key. When the secret key is referred to as C (Ciphertext), the encryption function of the encryption processing unit 270 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 270 encrypts the secret key through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 270 may be expressed as" C = Es1 (r) = re mod n ".

The payment approval request information, the message digest encrypted with the terminal-side private key, and a copy of a certificate including the terminal-side public key are linked to each other and encrypted through the generated secret key, and the secret key is used to store the server-side public key. When encrypted, the encryption processing unit 270 publishes the server side public copy of a certificate including the payment approval request information encrypted with the secret key, the message digest encrypted with the terminal-side private key, and the terminal-side public key. Generate predetermined transaction data in association with a secret key encrypted with a key, provide the generated transaction data to the communication processing unit 235 (2935), and the communication processing unit 235 transmits the transaction data to a telephone network and / or It transmits to the server through the network component on the VoIP network (2940).

30A and 30B illustrate a method of decrypting payment approval request information encrypted and received by a server according to an embodiment of the present invention by a key exchange method.

In more detail, FIGS. 30A and 30B are diagrams 18 of receiving transaction data including encrypted payment approval request information (eg, payment means information and payment information) from a call terminal equipped with an encryption function as shown in FIG. The present invention relates to a method of decrypting the transaction data in a key exchange method, and if the present invention belongs to one of ordinary skill in the art, refer to and / or modify this drawing 30 to change the telephone network and / or VoIP. It is possible to infer various implementation methods for decrypting the transaction data encrypted by the key exchange method in the same key exchange method in a call terminal on the network, but the present invention includes all the inferred implementation methods, and is shown in FIG. It is not limited to the implemented method.

In this figure 30 according to an embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method are preferably read from the public certificate provided in the server. Is preferably stored in a predetermined database (not shown) that cooperates with the server, whereby the present invention is not limited.

30A and 30B, the information receiving unit 160 of the server receives the transaction data including the payment approval request information encrypted through the telephone network and / or the VoIP network (3000), and transmits the transaction data. Provided to the decryption unit 165 (3005), the transaction data is preferably received through a communication protocol defined in the telephone network and / or VoIP network, and / or the payment approval request encrypted with the secret key And a copy of a certificate comprising information and the message digest encrypted with the terminal-side private key and the terminal-side public key, and the secret key encrypted with the server-side public key.

Thereafter, the decryption unit 165 extracts the server-side private key from the public certificate provided in the server (3010) to decrypt the secret key encrypted with the server-side public key (3010), and through the server-side private key. By decrypting the private key (3015), the private key for decrypting a copy of the certificate including the message digest encrypted with the payment approval request information and the terminal-side private key and the terminal-side public key is extracted (3020).

Here, the decryption function of the decryption unit 165 is called D (Decryption), the server side private key is s2 (server side key), the secret key encrypted with the server side public key is C (Ciphertext), and the server. When the secret key decrypted with the side private key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 165 is "Ds2 = r, or Ds2 (Es1 (r)) = r". It can be expressed as

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman) ), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 165 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the decryption unit 165 includes a certificate including the message digest encrypted with the payment approval request information and the terminal-side private key using the extracted secret key, and the terminal-side public key. By decrypting the copy (3025), a copy of the certificate including the payment authorization request information encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key are extracted.

Here, the decryption function of the decryption unit 165 is referred to as D (Decryption), the secret key is r (random secret key), the message authentication request encrypted with the secret key and the terminal private key encrypted with the message digest And a copy of the certificate including the terminal-side public key C (Ciphertext), and a copy of the certificate including the message digest encrypted with the decrypted payment authorization request information and the terminal-side private key and the terminal-side public key P ( Plaintext), the decryption unit 165 decrypts a copy of the certificate including the encrypted payment approval request information, the message digest encrypted with the terminal-side private key, and the terminal-side public key. , Or Dr (Er (P)) = P ".

According to an exemplary embodiment of the present invention, the decryption unit 165 copies a certificate including the encrypted message payment request information and the terminal digest key encrypted with the terminal private key through the secret key. The decryption algorithm may include at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA), and various types of decryption algorithms may be used. The decryption algorithm is matched with the encryption algorithm used in the call terminal, and the present invention is not limited to the specific decryption algorithm.

In addition, the decryption unit 165 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (3030), thereby generating a message digest generated and transmitted from the payment approval request information in the call terminal. Extract (3035).

Here, the decryption function of the decryption unit 165 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. If the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the decryption unit 165 is " Dt2 = m, or Dt2 (Es1 (r)) = m " The same formula can be used.

According to an embodiment of the present invention, an algorithm for decrypting the message digest encrypted by the terminal side private key by the decryption unit 165 through the terminal side public key may be RSA (Ron Rivest, Adi Shamir, Len Adleman). ), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 165 may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the decryption unit 165 generates a predetermined message digest from the received payment approval request information through the same one-way hash function (3040), and then generates the generated message digest and the decrypted message digest. By comparing (3045), the validity of the received payment approval request information is checked.

If the generated message digest and the decrypted message digest match (3050), the decryption unit 165 provides the payment approval request information to the full text generation unit 185 (3055), and the full text generation unit. 185 performs a full text generation procedure for the payment processing by using the payment approval request information.

Figure 31 illustrates a product ordering and purchasing process for payment processing using a call terminal according to another embodiment of the present invention.

In more detail, the present invention relates to the present invention through the process of ordering and purchasing a predetermined product by accessing the server shown in FIG. 18 through at least one telephone network and / or VoIP network. The payment process using the call terminal according to the present invention, the person of ordinary skill in the art to which the present invention belongs, by referring to and / or modified in this drawing 31 a predetermined call terminal at least one or more telephone network And / or connect a predetermined server and a call channel for product order and purchase through a VoIP network, and order and purchase at least one product through the call channel to initiate a payment process using the call terminal according to the present invention. Various implementation methods may be inferred, but the present invention includes all the implementation methods inferred, as shown in FIG. Not limited by the embodiment method.

In the following Figure 31, the call terminal with the card reader shown in Figure 19 is referred to as "terminal" for convenience.

Referring to FIG. 31, a terminal conforming to the functional configuration shown in FIG. 19 may include at least one or more telephone networks (e.g., general switched telephone network (or intelligent network), and / or mobile communication network) and / or VoIP network (e.g., TCP / IP (And / or UDP / IP) based wired communication network (IEEE 802.16x based portable Internet) to connect a predetermined communication channel with the server (3100), and according to the product ordering procedure provided by the server through the communication channel A procedure of selecting, ordering, and purchasing at least one or more purchased products is performed (3105).

Those skilled in the art to which the present invention pertains, the terminal connects the predetermined communication channel with the server, and through the communication channel through a predetermined product order procedure (eg, ARS and / or counselor connection) As you will be familiar with key tones-based product ordering procedures, the detailed process is omitted for convenience.

During the product order process as described above, the server checks whether or not payment processing for the purchased product (3110), if the payment processing for the purchased product is confirmed (3115), the server and the terminal Adding (or allocating) a data channel corresponding to the telephone network and / or a VoIP network to a connected call channel, or converting the voice call-based communication channel into a data channel corresponding to the telephone network and / or the VoIP network (3120). .

If a data channel corresponding to the telephone network and / or VoIP network is added (or assigned) to the call channel as described above, or if the voice call-based communication channel is switched to a data channel corresponding to the telephone network and / or VoIP network, The server extracts predetermined payment information including the affiliated store information, at least one product information, and payment amount information from a predetermined storage medium 150 (3125), and extracts the extracted payment information through the data channel. Transmission to the terminal (3130).

32 is a flowchart illustrating a payment approval request information generation process for payment processing using a call terminal according to another embodiment of the present invention.

More specifically, FIG. 32 shows predetermined payment information to the call terminal shown in FIG. 19 through at least one telephone network and / or VoIP network by performing the process shown in FIG. 31 on the server shown in FIG. When transmitting, the call terminal reads predetermined payment means information from the customer-owned card through a predetermined card reader, and transmits payment approval request information including the payment means information and payment information to at least one telephone network and / or VoIP. The process of providing to the bansa server 155 corresponding to the payment means information through the network, if the person of ordinary skill in the art to which the present invention pertains, refer to and / or modified this figure 32 The terminal generates predetermined payment approval request information and transmits the predetermined payment approval request information to the predetermined bansa server 155 through at least one or more telephone networks and / or VoIP networks. The disclosure may infer various implementation methods, but the present invention includes all the implementation methods inferred above and is not limited to the implementation method shown in FIG.

For example, in FIG. 32, the terminal performs an encryption procedure for predetermined payment approval request information (eg, payment means information and payment information) read from the customer's own card. The encryption procedure is the payment approval. It is performed to satisfy the high security of the requested information, and may be omitted according to the intention of those skilled in the art, and thus the present invention is not limited thereto.

In the following Figure 32, the call terminal with the card reader shown in Figure 19 is referred to as "terminal" for convenience.

Referring to FIG. 32, the terminal performs at least one merchant information and at least one through a data channel corresponding to at least one telephone network and / or a VoIP network by the server shown in FIG. 18 performing the process shown in FIG. When the payment information including the product information and the payment amount information is received (3200), if predetermined payment information is received from the server (3205), the terminal sets the operation mode to the payment processing mode using the data channel. And output through the screen output means provided in the terminal to read predetermined payment means information from the customer-owned card through the card reader provided in the terminal (3210), and / or It outputs through the audio output means (3215).

After the predetermined payment means information reading is requested from the customer-owned card as described above, the terminal checks whether the predetermined payment means information is read from the customer-owned card through the card reader (3220). When the predetermined payment means information is read from 3322, the terminal generates predetermined payment approval request information including the read payment means information and payment information received from the server (3230).

Thereafter, the terminal performs an encryption procedure for the payment approval request information generated including the payment means information and the payment information (3235).

If the payment approval request information is encrypted (3240), the terminal extracts a predetermined Bansa server 155 network address from the memory unit 245, at least one or more telephone networks and / or VoIP based on the network address The bansa server 155 connects the communication channel for transmitting and receiving the payment approval message through a payment network corresponding to a network (3245), and transmits the encrypted payment approval request information to the bansa server 155 through the communication channel. The transmission is performed at 3250.

33 is a flowchart illustrating a payment approval request specialized process for payment processing using a call terminal according to another embodiment of the present invention.

In more detail, FIG. 33 shows the payment approval request information generated by performing the process shown in FIG. 32 in the call terminal shown in FIG. 19 through at least one telephone network and / or a VoIP network. When the transmission to the bansa server 155, the bansa server 155 is a process for generating a payment approval request corresponding to the payment approval request information for payment processing, the general knowledge in the technical field to which the present invention belongs If you have, you can infer various implementation methods for generating a payment approval request text corresponding to the payment approval request information provided from the call terminal in the bansa server 155 by referring to and / or modified in this drawing 33. It will be appreciated that the present invention encompasses all of the inferred practice methods and is not limited to the practice method shown in FIG.

For example, in FIG. 33, the terminal performs a decryption procedure for the payment approval request information provided from the call terminal. The decryption procedure is performed only when the payment approval request information is encrypted. It may be omitted depending on, and the present invention is not limited thereby.

In addition, the full text of the payment approval request generated by the bansa server 155 in FIG. 33 is a full credit card payment approval request including the credit card payment means information shown in FIG. 22, which is usually used in the art. If you have the knowledge of, the full payment approval request received from the terminal corresponding to the payment means information read through the card reader provided in the call terminal is a full check card payment approval request, and / or debit card payment approval request It will be clearly understood that it includes any of the full text, and / or the full text of the prepaid card payment authorization request, and / or the full text transfer payment authorization request.

In the following Figure 33, the call terminal with the card reader shown in Figure 19 is referred to as "terminal" for convenience.

Referring to FIG. 33, the bansa server 155 shown in FIG. 18 performs a predetermined payment through a communication channel corresponding to at least one or more telephone networks and / or VoIP networks by performing the process shown in FIG. Check whether the approval request information is received (3300), if the predetermined payment approval request information is received from the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP network (3305), the bansa server 155 ) Checks whether the received payment approval request information is encrypted, thereby determining whether to decrypt the payment approval request information (3310).

If the verification result confirms that the payment approval request information is decrypted (3315), the bansa server 155 performs a decryption procedure for the encrypted payment approval request information, so that the terminal through a predetermined card reader The payment approval request information read from the customer-owned card is restored (3320).

On the other hand, if it is determined that the payment approval request information does not need to be decrypted (eg, when the payment approval request information is not encrypted) 3315, and / or the encrypted payment approval request information is decrypted, the bansa The server 155 may generate the full payment approval request message corresponding to the payment approval request information (for example, the payment approval request information and the payment information included in the payment approval request information) to generate the full payment approval request message. And transmit (3325).

Thereafter, the payment server receives and reads the full payment approval request message from the bansa server 155 to perform a payment processing procedure corresponding to the payment means information (eg, payment processing approval history, or Generate a payment processing error history (3330), generate a predetermined payment approval text including the payment processing history (3335), and transmit the payment approval text to the bansa server 155 through the payment network. In operation 3340, the bansa server 155 transmits the payment approval message to the terminal through a payment network corresponding to the telephone network and / or the VoIP network (3345).

Those skilled in the art to which the present invention pertains may read the full text of the payment approval request in the bansa server 155 to perform a payment processing procedure, and / or the payment in the bansa server 155. After performing a processing procedure, a predetermined payment processing history is generated, a payment approval message including the payment processing history is generated, and the method for transmitting to the bansa server 155 through the communication channel, etc. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the payment server may directly transmit the payment approval text (or payment processing history) to the server through a predetermined network (eg, affiliate store information included in the payment approval request text). The present invention is not limited thereto.

34 is a flowchart illustrating a payment approval process for payment processing using a call terminal according to another embodiment of the present invention.

More specifically, FIG. 34 shows a payment approval message including the payment processing details after performing the payment approval process through the payment server by performing the process shown in FIG. 33 in the server shown in FIG. When received, the process of processing the full payment approval in the terminal, if the person of ordinary skill in the art to which the present invention belongs, reference to and / or modified this figure 34, the payment approval in a predetermined terminal Various implementation methods for processing the full text may be inferred, but the present invention includes all the implementation methods inferred above and is not limited to the implementation method shown in FIG.

Hereinafter, in FIG. 34, the call terminal with the card reader shown in FIG. 19 is referred to as "terminal" for convenience.

Referring to FIG. 34, the payment server shown in FIG. 18 performs the process shown in FIG. 33 by performing the process shown in FIG. 33 and corresponding to the payment approval message through a communication channel corresponding to at least one telephone network and / or VoIP network. In operation 3400, if the approval message is received (3400), if the payment approval message including the payment processing details corresponding to the payment approval request message is received from the payment server (3405), the terminal receives a predetermined message from the payment approval message. By extracting and reading the payment processing details, it is checked whether the payment processing through the payment approval request text is approved (3410).

If payment processing through the payment approval request message is not approved (3415), the terminal transmits the payment approval message (and / or payment) to the server through a data channel corresponding to at least one or more telephone networks and / or VoIP networks. By transmitting the processing error history (3420), the payment processing process using the call terminal according to the present invention is terminated.

On the other hand, if payment processing through the payment approval request message is approved (3415), the terminal transmits the payment approval message (and / or payment processing) to the server through a data channel corresponding to at least one or more telephone networks and / or VoIP networks. (3425), by performing the order after the payment processing approval (3430), and completes the payment processing process using the call terminal according to the present invention.

According to the present invention, a card reader (eg, MS card reader, IC card reader, etc.) is provided in a call terminal connected to a telephone network and / or a VoIP network, and the call terminal and a predetermined merchant side voice call-based server (or terminal) are provided. And a voice call channel are connected, receiving predetermined payment information from the voice call based server (or terminal) at the merchant side, reading the predetermined payment means information through the card reader at the call terminal, and then performing the payment. When the means information and payment information is transmitted to the bansa server, the bansa server generates a predetermined message including the payment means information and the payment information and processes the payment, thereby making payment due to an incorrect operation in the payment processing process using the call terminal. There is an advantage of convenient payment processing without errors.

Claims (2)

An information receiving step of receiving card information read through the card reader and payment information provided by an affiliated store from a telephone having a card (IC card or MS card) reader in a predetermined information receiving means; A full text generation step of generating a full text of a payment approval request by using the received payment information and card information in a predetermined text generation means; And The predetermined payment processing unit transmits the generated payment approval request message to the financial company server corresponding to the card information, receives the payment approval message from the financial company server, and then the terminal (or server) provided in the affiliated store and And / or a specialized processing step for transmitting to the telephone. According to claim 1, The full text generation step, Checking affiliate store information included in the payment information and extracting terminal unique number information corresponding to the affiliate store information from a predetermined storage medium; And Generating a payment approval request message (or information) using the extracted terminal unique number information as a terminal unique number included in the payment approval request message (or information); payment processing using a telephone, characterized in that it comprises a Relay method.

Images