KR20070121618A - Payment agency server - Google Patents

Abstract

A payment agency server is provided to enable a user to conveniently process payment by processing the payment with a mobile number linked with a payment tool of the user and enable a seller to conveniently process the payment settlement by utilizing many payment tools in various media, such as a PC and a TV set connectable to the Internet. A database(320) links/stores personal information including the mobile number, and payment information including a bank name, an account number, a credit, debit, or check card type/number, or an electronic cash issuer name/ID. A main server(310) provides an electronic wallet screen including a mobile number input window to a user PC(100), receives the mobile number from the user PC, and sets all partial payment information by searching the payment information linked with the received mobile number from the database. The main server generates/transmits an encrypted partial payment information list to the user PC, receives selection from the user PC, extracts entire payment information by searching the selected partial payment information from the database, and requests a bank server(500) to process the payment by transmitting entire payment information and payment amount information to the bank server.

Description

Payment Agency Server {Payment Agency Server}

1 is a flow chart for explaining the online payment service of the mobile phone micropayment method according to the prior art.

2 is a flowchart illustrating a two-way financial settlement service method using a mobile phone number or a predetermined virtual number according to the present invention.

[Description of Symbols for Main Parts of Drawing]

10. User terminal 11. Personal computer

12. Mobile phone 20. Merchant mall server

30. Billing server 40. Carrier server

100. User terminal 110. Personal computer

120. Mobile phone 200. Merchant store server

300. Payment server 310. Main server

320. Database

330. Wireless Application Protocol Server

400. Certificate Authority (CA) Server 500. Financial Institution Server

The present invention provides the user's personal information (including name or social security number and mobile phone number) and the user's payment information (name of bank and its deposit account number, type of credit card and its card number, type of debit card and its card number, Provides a database to connect and store the check card type, its card number, electronic money issuer name and its identification number) and an electronic wallet screen including a mobile phone number input window to the user's computer, and inputs the user's mobile number from the user's computer. Partial payment information (bank name, card type, electronic money issuer name) that can be identified for all payment information by searching the database for payment information associated with the mobile phone number received from the user's computer. Partial encrypted and encrypted by attaching the digital signature value to the set partial payment information After generating a list of payment information and transmitting it to the user's computer, one of the partial payment information is selected from the partial payment information list from the user's computer, and the corresponding partial payment information is searched in the database for the corresponding partial payment information selected by the user. The present invention relates to a payment agent server including a main server that extracts information, transfers the extracted total payment information and payment amount information to a corresponding financial institution server, and requests payment processing.

In general, as the number of commercial transactions online as well as offline, such as e-commerce and m-commerce, increases, convenience of payment and protection of personal information are important for all payment related institutions, commerce service providers, and users. It is becoming a concern, and as a reflection of this, many payment service methods have been proposed to date. In addition, as mobile phones become a necessity of life, payment methods using mobile phones have been attempted in various commerce.

1 is a flowchart illustrating an online payment service of a mobile phone micropayment method according to the related art, which is a flowchart of a so-called "phone bill method".

As shown in FIG. 1, the mobile phone micropayment method according to the related art is largely comprised of a user's personal computer 11 (hereinafter, simply referred to as a “computer”) and a mobile phone 12, and a user's mobile phone information. The mobile communication company server 40 registered therein, the affiliated shopping mall server 20 for operating the e-commerce, and the payment agent server 30 for relaying the mobile phone micropayment processing are made to cooperate with each other online.

According to the related art configured as described above, after the user purchases the desired goods or services (hereinafter, collectively referred to as "goods") from the affiliated shopping mall server 20 using the computer 11, the mobile phone payment storage application (step S11). The entire payment process is started by the user. In this step S11, the user requests a mobile phone number to be requested for payment on the mobile phone payment application screen displayed on the monitor of the computer 11, the type of the mobile carrier and the resident registration number (hereinafter, collectively " Payment information ".

Subsequently, the payment information input by the user is transmitted to the affiliated shopping mall server 20, and the affiliated shopping mall server 20 transfers the payment information received in step S11 to the payment agency server 30 previously registered as the affiliated store and requests a payment. (Step S12).

Next, the payment agent server 30 transfers the payment information to the mobile communication company server 40 to request confirmation of the valid information (step S13), and the mobile communication service provider server 40 stores the user database stored in its own system. After checking to see if the user can make a payment and transfers the result to the payment agent server 30 (step S14).

When it is confirmed that the user can make a payment as described above, the payment agent server 30 generates an authorization number in its own system, and the SMS (Short Message Service) in which the authorization number is input to the mobile communication server 40. A short message is requested to be sent to the user's mobile phone 12 (step S15), and the mobile communication company server 40 sends an SMS in which the authorization number is input to the user's mobile phone 12 in response (step S16). do.

Next, the user inputs the approval number received to the mobile phone 12 in the affiliated shopping mall server 20 (step S17), the merchant shopping mall server 20 requests the confirmation number confirmation to the payment agency server 30 (step S18).

If the payment agent server 30 matches the approval number sent after checking the approval number, the mobile service provider server 40 requests a payment approval (step S19), and the mobile service provider server 40 pays the result after the payment approval. Transfer to proxy server 30 (step S20).

Then, the payment agent server 30 transmits the received processing result to the affiliated store shopping mall server 20 (step S21), and then the affiliated store shopping mall server 20 transmits the processing result to the computer 11 (step S22). All payments are completed, and the payment is added to the mobile phone bill and charged to the user in postpay.

As described above, the mobile phone micropayment method is widely used in terms of payment convenience, but if a third party knows the user's mobile phone number and social security number and possesses a mobile phone, anyone can make a payment by entering only an authorization number. There is a problem that the possibility of damage of the user, payment agent and merchant shopping mall according to the present.

In fact, there have been safety problems, such as 267 cases in 2003 and 749 cases in 2004 related to small payments or overcharges for additional services, which have been added without the user's knowledge. Is in.

In addition, as described above, the mobile phone micropayment method has specified a monthly usage amount limit in the mobile communication company due to the payment risk, and is used only for micropayment only. The limit has been updated to show mass production of bad credit.

In addition, the merchandise provider takes a long time of at least 60 days to recover the payout since the merchandise sales price is charged through the settlement process of the mobile carrier and the payment agency after the post-pay bill is added to the user's mobile phone bill. have.

Next, in order to solve the security problems of the prior art as described above, "an instant login user authentication and payment method using a heterogeneous communication network and its system" was devised.

Korean Patent Publication No. 10-0412510 omits the procedure of inputting the approval number in the conventional mobile phone payment method described above, and the URL for accessing a callback SMS (specific wireless phone page) including an OTP (One Time Password) to the mobile phone. It describes a payment method that sends a two-way text message (Uniform Resource Locator) containing a universal password locator, and when the user presses a confirmation button on a mobile phone and inputs a preset password on a specific phone page.

However, the technology of the above-described method is also more secured than the prior art, and payment damage due to theft of the mobile phone is possible since the payment method or user password input is an option, and the payment method is the same as the prior art. It is a combined method that limits the amount of payment and the date of the payback.

Finally, the Payment Gateway (PG) method commonly used in e-commerce will be described.

 In the PG method, when the user selects one of the payment methods such as a deposit account, credit card, and mobile phone payment, a separate electronic wallet is driven, and the user enters payment information (account number, card number, or mobile number) into the electronic wallet. Enter a predetermined identity verification account (account password, card password or assured click / ISP password, authentication number or authentication certificate password, etc.) after the payment is completed.

On the other hand, in the PG method, the limitation of the upper limit of payment from the user's point of view, the illegal payment by a third party, and the long payback period for the product provider are alleviated. However, it is cumbersome for the user to enter the payment information directly for payment, and all of the user's important credit information (account information, card number or mobile number and various passwords) is relatively secure in the payment process. The security problem that there is a risk of hacking because it is exposed on the internet, which is a weak public network (although it is displayed as "****" on the user's monitor screen, the actual payment information is transmitted / received on the internet section). There is this.

The present invention has been made to solve the above-mentioned problems of the prior art, by connecting the user's mobile phone number and the payment means for the payment for the purchase of the product to proceed with the payment only by the user's mobile phone number input from the user's point of view The convenience of payment is enhanced, and from the point of view of the product provider, payment is possible with various payment methods from various media (for example, terminals on and offline with internet access functions such as computers and TVs). The purpose is to provide a server.

Another object of the present invention is that payment is reduced according to the purchase of the product is immediately processed (for example, the existing account transfer method, card payment method, etc.) in the connected payment means when the user enters the mobile phone number of the mobile phone theft In addition to preventing damages to users, payment agents and merchant shopping malls, as well as to overcome the limitations of the payment amount limitation or the payback date pointed out as a problem of the post-calculation method of mobile phone bills.

In addition, the technology according to the present invention is secured from the risk of hacking by transmitting only a part of the user's payment information associated with the mobile number in the payment process through the cyber section (section between the user terminal and the payment agent server), and also the final payment processing Prior to this, the purpose of the callback SMS is to ensure the security of the user's mobile phone and occupancy authentication.

The configuration of the present invention configured to achieve the above object is as follows. In other words, the payment agent server according to the present invention, the user's personal information (including name or social security number and mobile phone number) and the user's payment information (trade bank name and its bank account number, the type of credit card and its card number, debit card The electronic wallet screen including the cell phone number input window to the user computer and the database that connects and stores the type and its card number, the type of the check card and its card number, the name of the electronic money issuer, and its identification number). Partial payment information (bank name, card type, electronic money issuer name) can be identified by inputting the user's mobile number from the user's computer and searching the database for the payment information associated with the mobile number received from the user's computer. Set only partial payment information), and set the digital signature value to the set partial payment information. After generating the encrypted partial payment information list attached and transmitting it to the user's computer, select one of the partial payment information to be used for payment from the partial payment information list from the user computer, and query the partial payment information selected by the user in the database. It is characterized in that it comprises a main server for extracting the corresponding full payment information, and transfers the extracted full payment information and payment amount information to the corresponding financial institution server to request the payment processing.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of a two-way financial settlement service method using a mobile phone number according to the present invention.

2 is a flowchart illustrating a two-way financial settlement service method using a mobile phone number according to the present invention.

 As shown in FIG. 2, a financial settlement service method using a mobile phone number of the present invention provides a user terminal 100, a product including a personal computer 110 (hereinafter referred to as a “computer”), a mobile phone 120, and the like. Merchant store shopping mall server 200, the user's mobile phone number and the payment information associated with the payment by storing the payment information server 300, relaying the automatic input of the payment information, the user's own identity, occupancy authentication and payment processing The certification authority server 400 performing the authorized authentication for the shopping mall and the financial institution server 500 performing the payment in the user's payment means may be performed in cooperation with each other. In this case, as a payment method that can be commonly used may include a bank account, credit card, debit card or various cards such as check card, similar cash such as phone bill or electronic money.

In the configuration as described above, the payment agent server 300 is again processed between the user computer 110, the merchant shopping mall server 200 and the financial institution server 500, the processing of various web documents required during the payment process, encryption and decryption, WAP server responsible for authorization processing of the user's payment history and authentication of the user's mobile phone between the main server 310 responsible for extracting and generating payment information and relaying payment processing, and the user's mobile phone 120 ( 330) and a database 320 for storing various personal information or payment information for the registered user and various information for the affiliated shopping mall, and the payment agent server 300 is a general purpose with the user computer 110. Is connected via a communication network, for example, the Internet, while the financial institution server 500 is connected through a dedicated communication network.

On the other hand, the personal information of the user may include a name, social security number, mobile phone number, etc., the payment information, such as the bank or its bank account number, the type of credit card or its card number, the type of debit card or its card number, There may be a check card type, its card number, electronic money type or its identification number.

The financial settlement service method of the present invention is performed under the system having the above-described network configuration. First, the user accesses the affiliated shopping mall server 200 through the computer 110 and selects a desired product, and then requests payment (step S100). The payment process starts.

As described above, the user requests payment and at the same time, a separate module for payment is driven in the affiliated shopping mall server 200 to directly connect the user computer 110 and the payment agency server 300 (step S102). In this state, the main server 310 provides the electronic wallet screen including the mobile phone number and the official certificate password input window to the user computer 110 (step S104), the user computer 110 to the electronic wallet screen The user's mobile phone number and the official certificate password is input to the main server 310 (step S106).

Of course, in order to maximize safety in this process, the validity of the corresponding certificate is verified in a Certificate Revocation List (CRL) stored in the user's computer 110. The number may be transmitted to the main server 310.

Next, the main server 310 queries the payment information associated with the mobile number received from the user computer 110 in the database 320 to identify some information that can be identified for all payment information (hereinafter, simply referred to as "partial payment information"). Only the settings are made (step S108), and the partial payment information set in this way is made up of the corresponding payment bank or card or electronic money issuing institution name information when the settlement bank, card or electronic money issuing institution is all different. If there is more than one payment bank, card or electronic money issuer, it may consist of up to identifiable digits among account number, card number or electronic money identification number.

That is, when there is one deposit account for XX and YY banks in the settlement information, only the name of XX or YY bank can be set as partial payment information. For example, for the XX bank, for example, "123456789" If the account number and the deposit account number of "123567348" exist, the partial payment information of "1234" of the bank XX and "1235" of the bank of XX are set as partial payment information.

As described above, after the partial payment information is set, the main server 310 generates the encrypted partial payment information list by attaching the electronic signature value to the partial payment information thus set and transmits it to the user computer 110 (step S110). Then, the user computer 110, after receiving any one partial payment information to be used for payment from the list of partial payment information from the user enters the first payment confirmation (security information requested by the payment means provider, such as account password or card password) And the first authentication operation for payment processing in the service flow chart.) Then, the user computer 110 encrypts and digitally signs the partial payment information and the security information thus selected and verified. Transfer to the merchant shopping mall server 200 (step S112).

Next, the merchant shopping mall server 200 attaches the order information and the payment amount information to the encrypted partial payment information and the security information received in step S112, and performs the electronic signature with the affiliate shopping mall server certificate, and then the main server. In step S114, the main server 310 receives the server certificate e-signature value and the user certificate electronic signature value of the merchant shopping mall server 200 through the certification authority server 400 (step S114). Step S116).

When all the electronic signature values match as the above-described confirmation result, the main server 310 decodes the partial payment information selected by the user and then retrieves the corresponding total payment information by querying the database 320 (step S118). Then, the extracted total payment information and payment amount information is transmitted to the corresponding financial institution server 500 to request a payment process (step S120), and the financial institution server 500 performs the payment process in response thereto and then the result is displayed. Delivery to the main server 310 (step S122).

Next, the main server 310 receiving the payment processing result is a callback including the unique factor values for the order history, payment history, and the identification and possession of the mobile number for the normal processing result in the WAP server 330 Instructing the SMS transmission (step S124), the WAP server 330 generates and stores a unique factor value for authentication in response, and the order history, payment history and self-generated authentication factor received from the main server 310 The callback SMS including the value is transmitted to the user's mobile phone 120 through the mobile communication network (step S126).

On the other hand, the user who has received the callback SMS as described above, the second payment confirmation (step S128: user confirmation is the user history and payment history within a predetermined time (which can be determined in the range of tens of seconds to minutes)) Is performed by simply pressing the call button, which corresponds to the second authentication process for payment processing in the service flow chart.) As soon as this confirmation, the user is automatically connected to the wireless page by following the URL included in the Callback SMS, and WAP The server checks whether the user owns the mobile phone and compares the unique parameter value automatically transmitted when the user accesses the wireless page with the previously transmitted and stored factor values. The payment confirmation is transmitted (step S130).

Next, when the authentication result received from the WAP server 330 is normal, the main server 310 transmits the final payment processing result to the affiliated shopping mall server 200 (step S132), whereas the WAP server 330 If the received authentication result is a payment rejection or there is no response within a certain time, it is regarded as the user's cancellation of payment and requests the financial institution server 500 to cancel the payment and transmits the cancellation result to the merchant shopping mall server 200. do.

The merchant shopping mall server 200 finally delivers the final payment processing result to the user computer 110 (step S134), thereby completing all payment processing.

The two-way financial settlement service method using the mobile phone number of the present invention is not limited to the above-described embodiment, and may be modified in various ways within the scope of the technical idea of the present invention. For example, the above-described user computer may be implemented as a wired / wireless computer or other communication means having an internet access function, for example, a TV having an internet access function. Further, the process of processing the user's public certificate, the server certificate of the merchant shopping mall and the public certificate of the payment agent server may be appropriately omitted.

Using the payment agent server according to the present invention as described above by connecting the user's mobile number and the payment method for the payment for the purchase of goods to proceed with the payment only by the input of the user's mobile number to the user convenience of payment This enhances the product provider's point of view, so that payments can be made by various payment methods from various media (eg, terminals on and offline with Internet access functions such as computers and TVs).

In addition, the technology according to the present invention is immediately processed in the payment method associated with the mobile phone number when the user pays the billing risk is reduced to prevent damage to the user, payment agent and merchant shopping mall due to mobile phone theft, as well as mobile phone charges There is an effect of overcoming the limitation of payment amount and the deadline for payback due to the problem of post-combination method.

In addition, the technology according to the present invention is secured from the risk of hacking by transmitting only a part of the user payment information associated with the mobile phone number in the payment process through the cyber section (section between the user terminal and the payment agent server), and also the final payment processing Prior to the callback SMS through the user's mobile phone and occupancy authentication has the effect that can be secured.

Claims (1)

User's personal information (including name, social security number and mobile phone number) and user's payment information (name of bank and its deposit account number, type of credit card and its card number, type of debit card and its card number, check card Type and its card number, electronic money issuer name and its identification number); And Provides the electronic wallet screen including the mobile phone number input window to the user computer, receives the user's mobile phone number from the user computer, and checks the payment information associated with the mobile phone number received from the user computer in the database to identify all the payment information. Set only partial payment information (partial payment information including one or more bank name, card type, electronic money issuer name) and attach the digital signature value to the set partial payment information to generate an encrypted partial payment information list. After the transfer to the user computer, any partial payment information to be used for payment is selected from the partial payment information list from the user computer, the partial payment information selected by the user is retrieved from the database to extract the corresponding total payment information, and extracted Full payment information and payment amount information And a main server which transmits to the financial institution server and requests payment processing.

Images