KR20080024183A - Method for payment by using phone - Google Patents

Abstract

A method for processing payment with a phone is provided to enable a member shop to process the payment without any operation error by reading payment tool information through a card reader embedded in the phone, providing the payment tool information to a VAN(Value Added Network) company, and enabling a member shop server to process payment information received from the VAN company. A server receives card information from a phone embedded with a card reader. The server receives payment information corresponding to a goods or service order request from a member shop terminal connecting a call with the phone(1600). The server approves payment by making a payment approval request message from the received card and payment information, transmitting the message to a payment server, and receiving a payment approval message from the payment server(1645). The server transmits a payment approval result to the member shop terminal and the phone(1655).

Description

How to pay using a phone {Method for Payment by Using Phone}

1 is a diagram illustrating a payment system configuration using a call terminal according to an embodiment of the present invention.

2 is a diagram showing a specialized structure for payment processing using a call terminal according to an embodiment of the present invention.

3 is a diagram illustrating a functional configuration of a call terminal according to an embodiment of the present invention.

4 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

5 is a diagram illustrating an IC card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

6 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in a call terminal according to an exemplary embodiment of the present invention.

FIG. 7 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server by a symmetric key (or secret key) method according to an embodiment of the present invention.

8 is a diagram illustrating a method of encrypting and transmitting payment means information in a public key based structure method in a call terminal according to an exemplary embodiment of the present invention.

9 is a diagram illustrating a method of decrypting payment means information encrypted and received by a server according to an exemplary embodiment of the present invention using a public key infrastructure.

FIG. 10 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal according to an exemplary embodiment of the present invention.

FIG. 11 is a diagram illustrating a method of decrypting payment means information encrypted and received by a server according to an exemplary embodiment of the present invention by an electronic envelope method.

12A and 12B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a communication terminal according to an embodiment of the present invention.

13A and 13B illustrate a method of decrypting payment means information encrypted and received at a server by a key exchange method according to an exemplary embodiment of the present invention.

14 illustrates a product ordering and purchasing process for payment processing using a call terminal according to an exemplary embodiment of the present invention.

15 is a flowchart illustrating a payment means information reading process for payment processing using a call terminal according to an embodiment of the present invention.

16 illustrates a process of generating a payment approval request full text for payment processing using a call terminal according to an embodiment of the present invention.

17 is a flowchart illustrating a payment approval process for payment processing using a call terminal according to an embodiment of the present invention.

18 is a diagram showing the configuration of a payment system using a call terminal according to another embodiment of the present invention.

19 is a diagram showing the functional configuration of a call terminal according to another embodiment of the present invention.

20 is a diagram illustrating an MS card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

21 is a view showing an IC card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

22 is a diagram showing a specialized structure for payment processing using a call terminal according to another embodiment of the present invention.

FIG. 23 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in a call terminal according to another exemplary embodiment of the present invention.

FIG. 24 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server by a symmetric key (or secret key) method according to another embodiment of the present invention.

FIG. 25 is a diagram illustrating a method of encrypting and transmitting payment means information in a public key infrastructure structure in a call terminal according to another exemplary embodiment of the present invention.

FIG. 26 illustrates a method for decrypting payment means information encrypted and received by a server according to another embodiment of the present invention using a public key infrastructure.

FIG. 27 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal according to another exemplary embodiment of the present invention.

FIG. 28 is a diagram illustrating a method of decrypting payment means information encrypted and received by a server according to another embodiment of the present invention by an electronic envelope method.

29A and 29B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a call terminal according to another exemplary embodiment of the present invention.

30A and 30B illustrate a method of decrypting payment means information encrypted and received at a server by a key exchange method according to another exemplary embodiment of the present invention.

31 is a flowchart illustrating a product order and purchase process for payment processing using a call terminal according to another exemplary embodiment of the present invention.

32 is a flowchart illustrating a payment means information reading process for payment processing using a call terminal according to another embodiment of the present invention.

33 is a flowchart illustrating an information processing process for payment processing using a call terminal according to another embodiment of the present invention.

34 is a flowchart illustrating a payment approval process for payment processing using a call terminal according to another embodiment of the present invention.

35 is a diagram illustrating a payment system configuration using a call terminal according to another embodiment of the present invention.

36 is a view showing the functional configuration of a call terminal according to another embodiment of the present invention.

37 is a diagram illustrating an MS card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

38 illustrates an IC card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

39 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in a call terminal according to another exemplary embodiment of the present invention.

40 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server by a symmetric key (or secret key) method according to another embodiment of the present invention.

FIG. 41 is a diagram for a method of encrypting and transmitting payment means information in a public key infrastructure structure in a call terminal according to another embodiment of the present invention.

FIG. 42 illustrates a method of decrypting payment means information encrypted and received by a server according to another embodiment of the present invention using a public key infrastructure.

43 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal according to another exemplary embodiment of the present invention.

44 is a diagram illustrating a method for decrypting payment means information encrypted and received by a server according to another embodiment of the present invention by an electronic envelope method.

45A and 45B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a call terminal according to another exemplary embodiment of the present invention.

46A and 46B illustrate a method of decrypting payment means information encrypted and received at a server by a key exchange method according to another exemplary embodiment of the present invention.

47 is a flowchart illustrating a product order and purchase process for payment processing using a call terminal according to another embodiment of the present invention.

48 is a flowchart illustrating a payment means information reading process for payment processing using a call terminal according to another embodiment of the present invention.

49 is a flowchart illustrating an information processing process for payment processing using a call terminal according to another embodiment of the present invention.

<Description of main parts of drawing>

100: server 125: information receiving unit

145: professional generation unit 150: professional transmission and reception unit

165: payment server 300: call terminal

325: card reader 340: communication processing unit

360: information reading unit 375: information transmitting unit

The present invention comprises the steps of receiving card information from a phone equipped with a card (IC card or MS card) reader at a server, and payment corresponding to a product or service order request from a merchant terminal (or server) connected to the call at the server. Receiving information; performing a predetermined payment approval process using the received card information and payment information at a server; and transmitting the payment approval processing result from the server to the affiliated store terminal (or server) and the telephone. It relates to a payment processing method comprising the step of.

Conventional payment method after the telephone order using a telephone (telephone), and / or home shopping payment method using a telephone, the payment means information by voice after the telephone connection with the counselor through the telephone, and / or ARS through the telephone (Automatic Response Service) A method of inputting payment method information through a key button as a customer after connecting a voice call channel with a server has been mainly used. The payment method using the above-described phone is not only inconvenient to use, but also payment method information. Because the customer has to enter it manually, it contains a problem that a payment error may occur due to an incorrect operation.

Recently, the wired telephone network has evolved from the conventional inverter switching method to the electronic switching method, and in the form of an intelligent network capable of voice communication and data communication, and a VoIP service that adds a voice communication function to the data communication function also appeared. It was. In addition, the wireless telephone network (mobile communication network) is capable of both voice calls and data communication based on the Code Division Multiple Access (CDMA) stack.

The present invention was derived to solve the above problems, an object of the present invention is to receive the card information from the phone equipped with a card (IC card or MS card) reader in the server, and the server and the call in the server Receiving payment information corresponding to a product or service order request from a connected merchant terminal (or server); performing a predetermined payment approval process using the received card information and payment information at a server; and at the server, It provides a payment processing method comprising the step of transmitting a payment approval processing result to the merchant terminal (or server) and the phone.

The present invention relates to a payment processing method using a phone, comprising the steps of: receiving card information from a phone equipped with a card (IC card or MS card) reader at a server, and a merchant terminal (or server) connected to the phone at the server; Receiving payment information corresponding to a product or service order request from the server; performing a predetermined payment approval process using the received card information and payment information at a server; and performing a payment approval process result at the server at the affiliate store And transmitting to the terminal (or server) and the telephone.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

In addition, if a person of ordinary skill in the art to which the present invention belongs, the technical configuration of the present invention is not used only for payment processing using a call terminal, and if the server shown in the following embodiment is a phone banking server, the call terminal It will be clearly understood that it can be used for a phone banking system using.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a payment system configuration using a call terminal according to an embodiment of the present invention.

In more detail, Figure 1 shows a telephone order using a voice call through a call terminal equipped with a predetermined card reader, and reads predetermined payment means information from a predetermined customer-owned card through the card reader to respond to the telephone order. As a configuration of a system for processing a payment, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawing 1 to infer various payment system configurations using a call terminal. , The present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

That is, in the implementation method shown in FIG. 1, a predetermined customer connects a call channel with a server 100 (eg, an ARS (Automatic Response Service) server 100) provided at a predetermined affiliated store through a predetermined call terminal. After performing a predetermined telephone ordering procedure through the call channel, a predetermined payment means information is read from a customer-owned card equipped with a predetermined payment means through a card reader provided in the call terminal. When the server 100 transmits the data to the server 100 through the data channel, the server 100 generates a predetermined payment approval request text based on the payment means information, and a predetermined payment network (eg, a value-added communication network (Value). Added Network (VAN)) to the system configuration for transmitting the payment approval request full text to a predetermined payment server 165 to process the payment.

In addition, although the functional configuration unit for payment processing using the call terminal according to the present invention is shown in the predetermined server 100 through the embodiment shown in FIG. 1, this effectively explains the technical features of the present invention. However, the present invention is not limited thereto, and the payment processing system using the call terminal according to the present invention includes an implementation method in which the plurality of servers (or terminals) 100 are provided with the above functional configuration unit, and / or When a predetermined call center is provided at the affiliated store, an implementation method of providing the functional unit in the server (or terminal) 100 on the call center system, and / or the predetermined ARS server 100 is provided in the affiliated store. If the implementation method further comprises the functional configuration unit in the ARS server 100, and / or if the affiliated store is provided with a predetermined affiliated store terminal A may include any of the exemplary method comprising a further configuration the function.

The call terminal used by the customer may be a landline telephone (and / or a radio telephone communicating with the radio frequency (RF) with the landline telephone) connected to a public switched telephone network (PSTN), and / or code division multiple access (CDMA). A mobile phone (e.g., a Personal Communication System (PCS) and / or Global System for Mobile (GSM) terminal, etc.) connected to a stack-based mobile communication network, and / or Transmission Control Protocol / Internet Protocol (TCP / IP) and / or And at least one VoIP terminal connected to a UDP / IP (User Datagram Protocol / Internet Protocol) based wired communication network and / or a VoIP (Voice over IP) network operating based on an IEEE 802.16x based portable Internet network. It is done.

In addition, the call terminal may include at least one telephone network (eg, a general switched telephone network (PSTN), and / or a mobile communication network), and / or a VoIP network (eg, a TCP / IP and / or UDP / IP-based wired communication network, and / Alternatively, the server 100 provided to the affiliated store through an RTP / RTCP (communication network in which a Real-time Transport Protocol / RTP Control Protocol layer is defined) in a transport layer on a protocol stack based on the IEEE 802.16x-based portable Internet. And a predetermined call channel.

According to an embodiment of the present invention, the general switched telephone network is a recent intelligent network (for example, a communication network connecting a plurality of circuits using at least one or more exchangers) in a conventional intelligent network (for example, interspersed within a communication network). And at least one switch, a service control node, an in-network control database, and the like, which are organically integrated through a common line signal network or data network, and controlled through a computing technology), and / or the intelligent network. In this way, a landline telephone (and / or a radiotelephone in RF communication with the landline telephone) connected to the general telephone switching network (= intelligent network) basically provides a voice call service and also provides a predetermined data channel. Provides data communication (eg, message transmission and reception) services.

In addition, the mobile communication network provides both a CDMA stack-based circuit switched voice call channel and a data channel, whereby a mobile phone connected to the mobile communication network basically provides a voice call service and a predetermined data channel. Data communication (eg, wireless message transmission and / or wireless Internet access, etc.) services.

In addition, the VoIP network basically provides a predetermined RTP / RTCP (Real-) to provide a real-time voice call service to a higher layer of a UDP on a wired / wireless communication network supporting TCP / IP (and / or UDP / IP) supporting data communication. As a communication network defining a time transport protocol / RTP control protocol (Layer) layer, the VoIP network basically provides both a voice call channel and a data channel, whereby a VoIP terminal connected to the VoIP network basically provides a voice call service. Of course, it provides a data communication (eg, message transmission and reception) service through a predetermined data channel.

According to the present invention, the call terminal is a card reader for reading predetermined payment means information from an MS (Magnetic Stripe) card conforming to the ISO / IEC 7810 standard, and / or a contact IC conforming to the ISO / IEC 7816 standard. A card reader for reading predetermined payment means information from a card, and / or at least one card reader for reading predetermined payment means information from a contactless IC card conforming to the ISO / IEC 14443 standard. A preferred embodiment thereof will be described in detail with reference to FIG. 1.

Referring to FIG. 1, the server 100 provided in the affiliated store connects a call terminal and a call channel used by a customer through at least one or more telephone networks (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network. Voice channel processing unit 105, a voice guide unit 115 in connection with the communication channel processing unit 105 to provide a predetermined telephone order and voice guidance for payment processing according to the present invention, and the communication channel processing unit 105 In response to the voice guidance in response to the voice prompts, a signal tone processing unit 120 for extracting predetermined information by receiving a key tone generated in a call terminal and reading the key tone in a dual frequency multi-frequency (DTMF) scheme is provided. It is characterized by comprising.

The call channel processing unit 105 is assigned a predetermined telephone number for connecting at least one or more call terminals and a predetermined call channel, and a predetermined call corresponding to the telephone network and / or VoIP network based on the telephone number. By performing a processing procedure it is characterized in that at least one communication terminal and the communication channel.

Those skilled in the art will be familiar with certain call processing procedures corresponding to the telephone network and / or the VoIP network, and thus a detailed description thereof will be omitted.

The voice guide unit 115 is connected to at least one or more call terminals and the call channel through the call channel processing unit 105, the predetermined predetermined for customer authentication and / or product order processing to the call terminal through the call channel. Characterized in that it outputs a voice announcement, and further characterized in that it outputs a voice announcement for payment processing using the call terminal according to the present invention to the call terminal through the call channel.

According to an exemplary embodiment of the present invention, the voice guide unit 115 outputs to the call terminal through the call channel based on product information stored in a predetermined storage medium 140 and payment amount information corresponding to the product. After extracting a predetermined voice announcement to be (e.g., extracted from a predetermined voice announcement storage database (not shown)), and / or generating (e.g., generating a voice announcement by TTS (Text To Speech) method), Preferably, the voice announcement is output to the call terminal through the call channel.

According to another exemplary embodiment of the present invention, the voice guide unit 115 may output voice guidance of a counselor corresponding to a predetermined call center terminal (and / or merchant phone) to the call terminal through the call channel. The present invention is not limited thereto.

The tone signal processing unit 120 generates a DTMF tone signal from the call terminal in response to the voice guidance, and receives the key tone sound by the DTMF scheme in response to the voice guidance. "0-9", "*", "#", etc.) are identified and extracted.

In addition, the signal tone processing unit 120 preferably receives the purchase product information in the form of a key tone signal transmitted from the call terminal, the purchase product information is voice guidance provided to the call terminal through the voice guide unit 115 It is preferably made by including a purchase product selection number corresponding to the comment, and / or through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone), the purchase product selection information in the form of voice information is preferably included. In this way, product information (and / or payment amount information associated with the product information) corresponding to the purchased product information is extracted from the predetermined storage medium 140.

According to another exemplary embodiment of the present invention, the signal processing unit 120 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal, and thus the present invention is not limited thereto. .

In addition, the signal processing unit 120 may further receive predetermined discount information transmitted from the call terminal, wherein the discount information includes a coupon number corresponding to a predetermined discount coupon possessed by the customer. Preferably, the payment amount can be discounted.

In addition, the signal tone processing unit 120 may further receive a predetermined product delivery address information transmitted from the call terminal, the product delivery address information provided to the call terminal through the voice guide section 115 The product shipping destination selection number corresponding to the number (for example, "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement, and the detailed address (" Address / call number), etc.) and / or voice information of a counselor corresponding to the call center terminal (and / or affiliated phone) to provide delivery address information (eg, a customer's address) in the form of voice information. It is preferably made, including, thereby ensuring the address to which the purchased goods will be delivered.

Those skilled in the art to which the present invention pertains will understand the method for generating the DTMF type key beep and the method for reading and confirming and extracting predetermined information by reading the key beep. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the information extracted based on the key tone of the DTMF method may be extracted through a predetermined data channel based on the call channel instead of the key tone. The present invention is not limited thereby.

According to the present invention, the server 100 provided in the affiliated store is predetermined for payment processing using the call terminal in the voice call channel in association with a telephone network and / or a VoIP network component to which the call terminal is connected during the voice call. Add (or assign) a data channel, and / or open a data channel to which the voice call channel is added (or assign) for payment processing using the call terminal, and / or the voice call And a channel controller 110 for converting a channel into a data channel for payment processing using the call terminal.

According to an embodiment of the present invention, when the telephone network and / or VoIP network connecting the call terminal and the server 100 support a voice call channel and a data channel at the same time, the channel controller 110 controls the call terminal and the server. A predetermined data channel for payment processing using the call terminal is added (or assigned) to the connected call channel for voice call between 100.

According to another exemplary embodiment of the present invention, a telephone network and / or a VoIP network connecting the call terminal and the server 100 simultaneously support a voice call channel and a data channel, and make a voice call between the call terminal and the server 100. When a predetermined data channel is added (or assigned) to a connected call channel for the, the channel controller 110 adds (or assigns) the data added to the call channel connected between the call terminal and the server 100. The channel may be opened for payment processing using the call terminal.

According to another exemplary embodiment of the present invention, when the telephone network and / or the VoIP network connecting the call terminal and the server 100 do not support a voice call channel and a data channel at the same time, the channel control unit 110 performs the call. It is characterized in that the communication channel connected between the terminal and the server 100 for a voice call is switched to a predetermined data channel for payment processing using the call terminal.

According to the present invention, the server 100 provided in the affiliated store is the payment transmitted from the call terminal through the data channel added (or assigned) and / or switched to the voice call channel by the channel control unit 110 And an information receiver 125 for receiving the means information.

According to the method of the present invention, the payment means information is credit card payment means information read from the MS card and / or contact IC card and / or contactless IC card through at least one card reader provided in the call terminal, And / or at least one check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information. The card payment method information (e.g., credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information) may be a predetermined card number and / or valid. It is preferable to include TRACK II information including a period and the like, wherein the bank transfer payment means information is a predetermined financial account number and / or It comprises a customer-owned financial account information, including the branch number and / or account gaeseolil are preferred.

According to an exemplary embodiment of the present invention, the payment means information is arranged in a number arrangement (and / or number) in a predetermined information processing method in the call terminal in order to prevent exposure to the outside from eavesdropping and / or interception and / or hacking Structure), and may be transmitted through the data channel. In this case, the information receiver 125 may receive the processed information through the data channel to restore the original payment means information. Security of the payment means information may be provided.

According to another exemplary embodiment of the present invention, the payment means information is encrypted with a predetermined encryption method in the call terminal to prevent exposure to the outside from eavesdropping and / or interception and / or hacking, and then the data channel. In this case, the information receiving unit 125 may receive the encrypted information and decrypt the decryption method corresponding to the encryption method to restore the payment means information. High security can be provided.

In addition, in the case of payment means information transmitted and received through the data channel, a checksum may be further included in order to prevent a transmission and reception error, thereby preventing transmission and reception errors with respect to the payment means information.

In addition, the information receiver 125 may receive predetermined purchase product information from the call terminal through the data channel, and the purchase product information may be provided to at least one product information provided to the call terminal through the data channel. It is preferable to include the corresponding purchase product selection information, and / or when the call channel supports the voice call channel and the data channel at the same time, the purchase product information through the voice guide unit 115 through the call terminal It includes a purchase product selection number corresponding to the voice announcement provided by the information, and / or includes the purchase product selection information in the form of voice information through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone) It is possible to achieve this, thereby the purchase product from the predetermined storage medium 140 Product information (and / or payment amount information associated with the product information) corresponding to the beam is extracted.

According to another exemplary embodiment of the present invention, the information receiver 125 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal through the data channel. The invention is not limited.

The information receiver 125 may further receive predetermined discount information transmitted from the call terminal through the data channel, and the discount information may be a coupon corresponding to a predetermined discount coupon possessed by the customer. Information, and / or coupon information included in the customer-owned discount card, and the like, whereby the payment amount can be discounted.

In addition, the information receiving unit 125 may further receive predetermined goods delivery information transmitted from the call terminal through the data channel, and the goods delivery information is address information stored in a memory provided in the call terminal. And / or subscriber address information and the like stored in a database (eg, subscriber information D / B) on the telephone network and / or VoIP network to which the call terminal is connected, and / or the call channel is a voice call channel. In the case of supporting the data channel and the data channel at the same time, the goods delivery information is the goods delivery destination selection number corresponding to the voice announcements provided to the call terminal through the voice guidance unit 115 (for example, corresponding to the voice announcements " FIG.) "," Gu (gun) "," dong (myeon / eup / ri) ", and a detailed address (" address / arc ") number, etc.), or And / or delivery information (eg, a customer's address) in the form of voice information through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), whereby the purchase product is to be delivered. The address is secured.

According to the present invention, when the payment means information received through the information receiving unit 125 is encrypted in at least one encryption method, the server 100 provided in the affiliated store stores the encrypted payment means information in the encryption method. And a decoding unit 130 for decoding by at least one decoding method corresponding to the above.

According to an embodiment of the present invention, when the payment means information is encrypted using a symmetric key (or secret key) method, the decryption unit 130 uses the decryption method corresponding to the symmetric key (or secret key) method. Preferably, the means information is decrypted, and / or when the payment means information is encrypted using a public key method, the decryption unit 130 decrypts the payment means information by a decryption method corresponding to the public key method. Preferably, and / or when the payment means information is encrypted by the electronic envelope method, the decryption unit 130 preferably decrypts the payment means information by a decryption method corresponding to the electronic envelope method, and / or When the payment means information is encrypted by the key exchange method, the decryption unit 130 is determined by the decryption method corresponding to the key exchange method. Preferably it means for decoding the information.

According to the present invention, when the predetermined payment means information is received through the information receiving unit 125, the server 100 provided in the affiliated store performs the payment processing through the payment means information from the predetermined storage medium 140. Characterized in that it comprises an information confirmation unit 135 for confirming the merchant information for.

According to one embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information. If applicable, the information checking unit 135 may be configured to store an affiliate store number (eg, a unique number assigned to an affiliate store for processing a card payment) and / or a terminal number (for example, processing a card payment) from the storage medium 140. It is preferable to check the merchant information including at least one or more of the unique number provided in the merchant terminal (or payment terminal) provided in the merchant for.

According to another exemplary embodiment of the present invention, when the payment means information corresponds to the account transfer payment means information, the information checking unit 135 from the storage medium 140 merchant account information (for example, the merchant's financial account) Number, and / or branch number, and / or account holder information, etc.).

If the affiliated store is a franchise company and the server 100 for payment processing using the call terminal is provided in the call center of the franchise company, the affiliated store information is affiliated store information corresponding to the franchise company, and / or the It may be affiliated store information corresponding to a franchise chain store that manufactures and packages a product corresponding to the purchased product information to a customer and delivers the product to the customer, whereby the present invention is not limited thereto.

According to the present invention, the server 100 provided in the affiliated store includes the payment means information received through the information receiving unit 125 and the affiliated store confirmed from the predetermined storage medium 140 by the information checking unit 135. Generating a predetermined payment approval request text for payment processing of an amount corresponding to the payment amount through a payment means corresponding to the payment means information based on the information and at least one item information and / or payment amount information; Sending the full text of the payment approval request to the payment server 165 corresponding to the payment means through a full text generation unit 145 and a predetermined payment network, and corresponding to the full text of the payment approval request from the payment server 165 Characterized in that it comprises a specialized transmission and reception unit 150 for receiving the payment approval message including the payment processing details.

According to the exemplary embodiment of the present invention, when the payment means information received through the information receiving unit 125 corresponds to credit card payment means information, the full text of the payment approval request generated by the full text generation unit 145 is the credit. It is preferable to include a full credit card-based payment approval request corresponding to the card payment means.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the check card payment means information, the full text of the payment approval request generated by the full text generation unit 145 is checked corresponding to the check card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the debit card payment means information, the full text of the payment approval request generated by the full text generation unit 145 is a debit corresponding to the debit card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information received through the information receiving unit 125 corresponds to the prepaid card payment means information, the full text of the payment approval request generated by the full text generation unit 145 is prepaid corresponding to the prepaid card payment means. It is desirable to include a full card-based payment approval request.

According to another exemplary embodiment of the present invention, when the payment means information received through the information receiver 125 corresponds to the transfer payment means information, the full text of the payment approval request generated by the full text generation unit 145 is It is preferable to include a full financial transaction request for withdrawing the payment amount from the customer's financial account and transfers it to the financial account of the merchant.

The specialized transmission / reception unit 150 transmits the payment approval request text generated by the text generation unit 145 to a payment server 165 corresponding to the payment means through a predetermined payment network. It is characterized in that for requesting the payment approval through, and if the payment approval message corresponding to the payment approval request full text from the payment server 165, characterized in that it is received through the payment network.

Here, when the payment means information corresponds to credit card payment means information, the payment server 165 comprises a credit card payment server 165 of the card company (or financial company) that issued the credit card to the customer. And / or when the payment means information corresponds to check card payment means information, the check card payment server 165 of the card company (or financial company) that issued the check card to the customer, and / or Or when the payment means information corresponds to the debit card payment means information, and comprises a debit card payment server 165 of the card company (or financial company) that issued the debit card to the customer, and / or the payment means If the information corresponds to the prepaid card payment means information, includes a prepaid card payment server 165 of the card company (or financial company) that issued the prepaid card to the customer. And / or if the payment means information corresponds to the account transfer payment means information, includes a financial server (eg, ledger server) of the financial company (bank) that opened the financial account for the account transfer to the customer It is done by

In addition, the professional transmission / reception unit 150 checks the payment processing details included in the payment approval message when the payment approval message corresponding to the payment approval request message is received through the payment network, the payment server 165. The method further comprises checking whether the payment processing using the payment means information provided from the call terminal is normally processed or whether a payment error has occurred.

If a predetermined payment error occurs in the payment processing using the payment means information provided from the call terminal, the specialized transmission / reception unit 150 outputs the payment error information to the call terminal of the customer through the voice guide unit 115. After that, the payment processing process using the call terminal according to the present invention is terminated.

According to the present invention, the server 100 provided in the affiliated store is provided with an order processing unit 155 for performing an order processing for the payment processed products when the payment processing through the payment means information is normally performed. It is characterized by.

According to an embodiment of the present invention, when the information receiving unit 125 receives the order processing information including the purchase product information and the goods delivery address information from the call terminal of the customer, the order processing unit 155 is the payment processing history And order processing information including the purchase product information and the product delivery address information, through the predetermined communication means 160, to manufacture and package the purchased product in the affiliated store and provide the order processing terminal of a department that delivers the customer to the customer; And / or when the affiliate store is a franchise, the customer may manufacture and package the purchased product through predetermined communication means 160 with order processing information including the payment processing history, the purchased product information, and the product delivery address information. It is desirable to provide to the order processing terminal of the chain store to deliver to.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchased product information from the customer's call terminal in the payment processing process using the call terminal, the order processing unit 155 may use the voice guide unit ( 115) (or / or call center terminal, and / or merchant phone) further receives the goods delivery information from the call terminal to secure order processing information including the purchase goods information and goods delivery information, the payment processing history And order processing information including the purchase product information and the product delivery address information, through the predetermined communication means 160, to manufacture and package the purchased product in the affiliated store and provide the order processing terminal of a department that delivers the customer to the customer; And / or when the affiliate is a franchise, the payment processing history, the purchase product information and the product delivery address information are included. To provide the order processing information to the order processing terminal chain of which to the purchased product manufacturing and packing delivered to the customer through a predetermined communication means (160) is preferred.

According to another exemplary embodiment of the present invention, when the information receiving unit 125 receives only the purchase product information from the customer's call terminal in the payment processing process using the call terminal, the order processing unit 155 is the payment processing history. And providing the purchased goods information to the order processing terminal of a department that manufactures and packages the purchased goods in the affiliated store through a predetermined communication means 160 and delivers them to the customer, and / or the affiliated store is a franchise. And order processing information including the payment processing details, the purchase product information, and the product delivery address information, are manufactured and packaged through a predetermined communication means 160 and provided to the order processing terminal of a chain store that delivers the purchased product to the customer. Then, the call channel between the customer's call terminal and the server 100 is changed to a call channel between the call terminal and the order processing terminal. Thereby, it is possible to more to obtain the product shipping information from the order processing terminal and, in addition, it is possible to perform various types of processing procedures according to the order of those of ordinary skill in the art intended.

2 is a diagram showing a specialized structure for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, FIG. 2 illustrates a case where the payment means information transmitted from the call terminal to the server on the payment system using the call terminal shown in FIG. 1 corresponds to credit card payment means information read from a customer-owned credit card. The credit card payment approval request generated on the basis of the credit card payment means information structure, if the person of ordinary skill in the art to which the present invention belongs, refer to and / or modified this figure 2 to the credit In addition to the card payment means information may be inferred a payment approval request specialized structure corresponding to other payment means information, the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

Referring to Figure 2, the payment approval request full-text structure is at least one or more specialized information defined between the predetermined start character (STX (Start of TeXt), 0X02) and the end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text is provided through a transaction classification item (eg, credit approval request, credit approval cancellation, etc.), a Terminal_ID item, a POS Entry Mode item, and a card reader provided in the call terminal. TRACK II Data items corresponding to payment method information obtained from a predetermined card (for example, a primary account number (PAN) area and additional data (AD) and / or DD (discretionary data) area of TRACK II of the MS card. Credit card information, or credit card information obtained from the credit card file of the IC card), and the installment months and total amount items corresponding to the credit card payment information after a predetermined FS (File Separator, 0X1C). It includes tax and service charge items, and also includes a working key index item, a password item, a product code item and a document serial number item. Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

* The Terminal_ID item of the information item of the payment approval request specialist corresponds to the affiliated store information, the total amount item corresponds to the total payment amount information corresponding to the purchase product information, and the document serial number is viewed on the server. Corresponds to the serial number assigned to manage the payment processing using the call terminal according to the invention.

In addition, the TRACK II Data item among the information items of the payment approval request specialist is readout information received from the predetermined card reader provided in the call terminal and received by the server. Corresponds to credit card information.

3 is a diagram showing the functional configuration of the call terminal 300 according to an embodiment of the present invention.

In more detail, Figure 3 relates to one embodiment of the call terminal 300 for payment processing using the call terminal 300 according to the present invention, if the person having ordinary knowledge in the art to which the present invention belongs, It will be able to infer the configuration of various call terminal 300 for payment processing using the call terminal 300 by referring to and / or modifying the Figure 3, but the present invention includes all the implementation method inferred, It is not limited to the implementation method shown in FIG.

Referring to FIG. 3, the call terminal 300 basically includes a control unit 305, a memory unit 350, a key input unit 310, a voice processing unit 315, a screen output unit 320, and a signal tone processing unit 335. And a power supply unit 330 for supplying power to the communication terminal 340 and the call terminal 300, the card reader unit 325 for payment processing using the call terminal 300 according to the present invention. And / or the security application module 345, etc., and may further include at least one or more functional components (not shown) according to the intention of those skilled in the art.

The control unit 305 basically controls the key input unit 310, the voice processing unit 315, the screen output unit 320, and the communication processing unit 340 so that a predetermined telephone input through the key input unit 310 is performed. Connect a voice call channel with at least one other call server (or terminal) 100 through a telephone network and / or a VoIP network connected to the communication processor 340 based on the number, and through the voice processor 315. It converts the input / output voice signal into an electrical signal (and / or digital signal) to operate and control the voice call function to transmit and receive through the voice call channel, so that the hardware of the call terminal 300 At least one processor and execution memory (eg, registers and / or Rs) including a central processing unit (CPU) / microprocessor unit (MPU) included in the call terminal 300 to realize a function. It comprises a AM (Random Access Memory) and a bus (BUS) for inputting and outputting predetermined data, and is provided in the call terminal 300 to realize the function of the call terminal 300 by software A program routine that is loaded from a recording medium into the execution memory and is processed by the processor may be a generic term.

In addition, the controller 305 controls the communication processor 340 to access data channels defined in a telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network connected to the communication processor 340. Connecting a predetermined data channel for data communication with at least one server (or terminal) 100 based thereon, and operating and controlling a function of transmitting and receiving at least one digital information (or digital data) through the data channel. To this end, the communication terminal includes at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data to the call terminal 300 for the data communication in hardware. Characterized in that, the execution from the recording medium provided in the call terminal 300 for the data communication in software Is loaded into the memory is characterized in that the generic calculation processing routine program and / or program data by the processor.

In addition, the control unit 305 controls the predetermined card reader unit 325 provided in the call terminal 300 for the payment processing using the call terminal 300, through the card reader unit 325 It is characterized in that the operation and control to read the predetermined payment means information from the customer-owned card to the server, for this purpose, the call terminal 300 for payment processing by using the call terminal 300 in hardware At least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data, wherein the software is used for payment processing using the call terminal 300. Program routines and / or programs loaded into the execution memory from the recording medium included in the call terminal 300 and processed by the processor Characterized in that the data is generic.

Therefore, the call terminal 300 shown in FIG. 3 is loaded into the execution memory from the recording medium provided in the call terminal 300 for the payment processing using the call terminal 300 and operated by the processor. Program routines to be processed are described in block form in the controller 305 for convenience.

The memory unit 350 inputs and outputs when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the call terminal 300 is performed. General term of non-volatile memory for storing information or data), including at least hardware-based electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD). It includes one or more storage means, the control unit 305 is a predetermined program routine and program data required to perform a predetermined control function (for example, the program routine is input or output to perform a predetermined function) Data) is stored.

According to the method of the present invention, the memory unit 350 preferably stores a predetermined encryption key for encryption processing required in the payment processing using the call terminal 300.

The key input unit 310 is provided with at least one key button including at least one or more number keys and / or character keys and / or function keys. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or operation mode of the call terminal 300 controlled by the controller 305. When predetermined information (or signal) is input from the key button, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 305.

When the current input mode and / or operation mode of the call terminal 300 is a voice call mode, the controller 305 obtains predetermined key data corresponding to the key event and provides the same to the beep processor 335. The tone processing unit 335 may generate a key tone corresponding to the key data according to a dual tone multifrequency (DTMF) scheme.

When the current input mode and / or operation mode of the call terminal 300 is a data communication mode, the controller 305 acquires predetermined key data corresponding to the key event, and then information corresponding to the key data. And performing a processing procedure, and / or acquiring an instruction for executing a predetermined function matched with the key event, and then performing a function corresponding to the instruction.

According to the exemplary embodiment of the present invention, the key input unit 310 and the key input device having at least one or more key buttons interoperate with each other to perform a function of key input means provided in the call terminal 300.

According to an embodiment of the present invention, the key input device which is interlocked with the key input unit 310 may include a keypad device having at least one numeric key, a letter key ('*', '#') and a function key, and / Or at least one or more keyboard devices including at least one numeric key, character keys (eg, English character keys, and / or Korean character keys) and function keys.

The voice processing unit 315 converts a predetermined voice input from a predetermined voice input device (for example, a microphone) included in the call terminal 300 into a predetermined voice signal (or an electrical signal), and the communication processor 340. Is encoded using a voice encoding scheme corresponding to a telephone network and / or a VoIP network connected to the PDP network to generate predetermined voice data, and provides the voice data to the controller 305. The processing unit 315 is preferably provided with a predetermined vocoder and a codec.

Thereafter, the controller 305 transmits the generated voice data to the telephone network and / or the VoIP network through the communication processor 340.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the voice processing unit 315 transmits the voice signal (or electrical signal) to the general telephone switching network (or intelligent network). It is preferable to generate the voice data by encoding by using a coding scheme that can be transmitted through).

According to another exemplary embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the voice processor 315 may transmit the voice signal (or electrical signal) through the mobile communication network. Division Multiple Access) It is preferable to generate the speech data by encoding in a coding scheme corresponding to the stack.

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a VoIP network, the voice processor 315 may transmit the voice signal (or electrical signal) through the VoIP network. Preferably, the voice data is generated by encoding with a coding scheme corresponding to a stack, wherein the coding scheme corresponding to the VoIP network is an H.323 protocol standard and / or an Internet Engineering Task defined by the International Telecommunication Union (ITU). It is preferable to include at least one or more of the Session Initiation Protocol (SIP) protocol specifications defined by the Force.

According to an embodiment of the present invention, the voice processing unit 315 and the voice input device interoperate with each other to perform a function of voice input means for receiving a voice signal for voice call through the telephone network and / or the VoIP network.

When voice data encoded by a predetermined encoding method is received through the communication processor 340, the controller 305 provides the voice data to the voice processor 315, at which time the voice processor 315 is provided. Decodes the voice data by a voice coding scheme corresponding to a telephone network and / or a VoIP network connected to the communication processor 340 to generate a predetermined voice signal (or an electrical signal), and generates the voice signal (or Electrical signal) is output through a predetermined voice output device (for example, a speaker) provided in the call terminal 300. For this purpose, the voice processing unit 315 is provided with a predetermined vocoder and a codec. desirable.

When the communication processing unit 340 is connected to a general telephone switching network (or an intelligent network) according to an exemplary embodiment of the present invention, the voice processing unit 315 may convert the voice data received through the communication processing unit 340 into the general telephone. It is preferable to generate the speech signal (or electrical signal) by decoding by encoding scheme corresponding to the switching network (or intelligent network).

According to another exemplary embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the voice processing unit 315 may transmit voice data received through the communication processing unit 340 to correspond to the mobile communication network. It is preferable to generate the speech signal (or electrical signal) by decoding by stack-based encoding.

According to another embodiment of the present invention, when the communication processing unit 340 accesses the VoIP network, the voice processing unit 315 may convert the voice data received through the communication processing unit 340 into the VoIP network. It is preferable to generate the voice signal (or electrical signal) by decoding by encoding method, wherein the encoding method corresponding to the VoIP network is at least one of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable that the above specification is included.

According to the embodiment of the present invention, the voice processing unit 315 and the voice output device interoperate with each other to perform a function of voice output means for outputting a voice signal for voice call through the telephone network and / or the VoIP network.

The screen output unit 320 is a liquid crystal display (LCD) by the control unit 305 while the call terminal 300 performs a voice call function and / or a payment processing function using the call terminal 300. And / or at least one or more information or data which is predefined or defined in real time to be output to a predetermined display device including a Cathode Ray Tube (CRT) and / or a CRT (Cathode Ray Tube). The screen output unit 320 and the screen output device interoperate with each other to perform a function of a screen output means provided in the call terminal 300.

Predefined information or data to be output from the call terminal 300 to the screen output device includes key data input through the key input unit 310 and / or components provided in the call terminal 300. Information (or data) stored or generated by the information, information (or data) transmitted / received through the communication processing unit 340, and / or (or data) corresponding to a predetermined operation result performed by the call terminal 300. It comprises at least one.

According to a preferred embodiment of the present invention, the screen output unit 320 of the screen output means for outputting the payment processing screen according to each payment processing step to the screen output device for payment processing using the call terminal 300 It is desirable to perform the function.

The tone processing unit 335 is a predetermined number key ("0 ~ 9") and / or letter key ('*) through the key input unit 310 in the state that the operation mode of the call terminal 300 is the voice call mode ',' # 'Is input, generates a key tone corresponding to the input key data in a complex frequency code (DTMF) scheme, and the key tone is connected to the telephone network and / or to which the communication processor 340 is connected. Characterized in that the voice encoding method corresponding to the VoIP network characterized in that provided to the communication processor 340.

According to an embodiment of the present invention, when the communication processor 340 is connected to a general telephone switching network (or intelligent network), the voice processing unit 315 may transmit the key tone through the general telephone switching network (or intelligent network). It is preferable to generate the speech data by encoding by a coding scheme.

According to another embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the voice processing unit 315 may transmit a code division multiple access (CDMA) stack capable of transmitting the key tone through the mobile communication network. It is preferable to generate the speech data by encoding by a coding scheme corresponding to.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a VoIP network, the voice processing unit 315 encodes a key corresponding to a VoIP protocol stack capable of transmitting the key tone through the VoIP network. It is preferable to generate the voice data by encoding in a scheme, wherein the encoding scheme corresponding to the VoIP network includes at least one of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable to make.

The communication processor 340 connects the call terminal 300 to a predetermined telephone network and / or a VoIP network, and at least one or more other call servers (or terminals) according to a call processing procedure defined in the telephone network and / or the VoIP network. ) And the voice call channel.

According to one embodiment of the present invention, the communication processing unit 340 is a physical network configuration (eg, the call terminal 300 to connect the call terminal 300 to a general telephone switching network (or intelligent network) general telephone switching network) (Or a network configuration connecting the switch and the wired communication section provided on the intelligent network), by performing a call processing procedure corresponding to the communication protocol standard defined in the general telephone switching network (or intelligent network) It is preferable to connect a voice call channel with at least one other call server (or terminal) 100.

According to another embodiment of the present invention, the communication processing unit 340 is a physical network configuration for connecting the call terminal 300 to a mobile communication network (for example, the base station provided on the mobile communication network 300) And a network configuration connecting a wireless communication section corresponding to the CDMA stack, and performing at least one call processing procedure corresponding to a communication protocol standard defined in the mobile communication network. It is preferable to connect the voice communication channel with the terminal (100).

According to another exemplary embodiment of the present invention, the communication processing unit 340 is a physical network configuration (for example, VoIP provided with the call terminal 300 on the VoIP network) to connect the call terminal 300 to the VoIP network. Network configuration that connects wired communication segments through the Gateway and / or VoIP Gatekeeper and the Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) protocol layer implemented on top of the UDP / IP protocol stack. It is preferable to include a, it is preferable to connect the voice call channel with at least one or more other call server (or terminal) 100 by performing a call processing procedure corresponding to the communication protocol standard defined in the VoIP.

In addition, the communication processing unit 340 transmits and receives voice data encoded with at least one other call server (or terminal) 100 and an encoding method corresponding to the telephone network and / or VoIP network through the voice call channel. It features.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the communication processing unit 340 is encoded by an encoding scheme corresponding to the general telephone switching network (or intelligent network). It is preferable to transmit and receive at least one voice data.

According to another embodiment of the present invention, when the communication processor 340 is connected to a mobile communication network, the communication processor 340 transmits and receives at least one voice data encoded by a corresponding encoding scheme corresponding to the mobile communication network. It is desirable to.

According to another exemplary embodiment of the present invention, when the communication processor 340 accesses a VoIP network, the communication processor 340 transmits and receives at least one voice data encoded by an encoding scheme corresponding to the VoIP network. It is preferable.

In addition, when it is possible to add (or assign) a predetermined data channel to the voice call channel, the communication processor 340 assigns a predetermined data channel to the voice call channel connected through a predetermined telephone network and / or a VoIP network. Add (or assign) and perform data communication with at least one other call server (or terminal) 100 to which the call channel is connected through the added (or assigned) data channel.

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or an intelligent network), the communication processing unit 340 uses a predetermined data channel defined in the general telephone switching network (or an intelligent network). In addition to (or assigning) to the voice call channel, it is preferable to perform predetermined data communication with the at least one other call server (or terminal) 100 to which the call channel is connected through the data channel, in addition to the voice call. Do.

According to another embodiment of the present invention, when the communication processing unit 340 is connected to a mobile communication network, the communication processing unit 340 adds (or assigns) a predetermined data channel defined in the mobile communication network to the voice call channel. In addition to the voice call, it is preferable to perform predetermined data communication with at least one other call server (or terminal) 100 connected with the call channel through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses the VoIP network, the communication processing unit 340 adds a predetermined data channel defined in the VoIP network to the voice call channel (or And a predetermined data communication in addition to the voice call with at least one other call server (or terminal) 100 to which the call channel is connected through the data channel.

In addition, the communication processor 340 connects at least one server (or terminal) 100 and a predetermined data channel (or communication channel) through a predetermined telephone network and / or a VoIP network independently of the voice call channel. The data channel may be configured to perform predetermined data communication with at least one server (or terminal) 100 through the data channel (or communication channel).

According to an embodiment of the present invention, when the communication processing unit 340 is connected to a general telephone switching network (or intelligent network), the communication processing unit 340 is a predetermined data communication standard defined in the general telephone switching network (or intelligent network). According to at least one server (or terminal) 100 is preferably connected to a predetermined data channel (or communication channel), at least one server (or terminal) through the data channel (or communication channel) 100 ) Performs a predetermined data communication.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a mobile communication network, the communication processing unit 340 may include at least one server (according to the CDMA stack based data communication standard defined in the mobile communication network). Or a terminal) 100 and a predetermined data channel (or communication channel). The predetermined data communication with at least one server (or terminal) 100 is performed through the data channel (or communication channel). To perform.

According to another exemplary embodiment of the present invention, when the communication processing unit 340 accesses a VoIP network, the communication processing unit 340 may include at least one or more data according to a VoIP protocol stack based data communication standard defined in the VoIP network. It is preferable to connect a server (or terminal) 100 and a predetermined data channel (or communication channel), and at least one server (or terminal) 100 and predetermined data through the data channel (or communication channel). Perform communication.

According to the present invention, the call terminal 300 is a card reader unit 325 for reading predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 300 according to the present invention. It is characterized by comprising a).

That is, the customer receiving payment processing using the call terminal 300 according to the present invention through the call terminal 300, based on the ISO / IEC 7810 standard MS (Magnetic Stripe) card, and / or ISO / IEC Have (or own) a contact IC card (or wireless IC chip) based on the 7816 standard and / or at least one contactless IC card (or wireless IC chip) based on the ISO / IEC 14443 standard. The card reader 325 may provide an interface for reading at least one or more payment means information from the customer-owned card.

According to the method of the present invention, the card reader unit 325 is an MS reader unit for providing an interface between the MS card and the call terminal 300, and / or the contact IC card and the call terminal 300. And a contact IC reader unit for providing an interface, and / or a contactless IC reader unit for providing an interface between the contactless IC card and the call terminal 300.

The MS reader unit is a card reader unit 325 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. It is characterized by interfacing the predetermined payment means information to the call terminal 300 from at least one track (for example, track II area) provided in the MS of the MS card by using the loading.

The contact IC reader unit is a card reader unit 325 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies the power to the IC chip of the IC card through the contact point, and the predetermined payment means information from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) It is characterized in that the interface to the call terminal (300).

The contactless IC reader unit is a card reader unit 325 based on ISO / IEC 14443. The contactless IC reader unit uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, the predetermined payment means information from the IC chip through the half-duplex transaction using the APDU It is characterized in that the interface to the call terminal (300).

According to the method of the present invention, the card reader unit 325 is credit card payment means information, and / or check card payment means information from the customer-owned card for payment processing using the call terminal 300, and / Or it is preferable to read at least one or more of the debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information.

According to the present invention, the call terminal 300 performs a payment processing procedure by reading predetermined payment means information from a predetermined customer card to provide a payment processing function using the call terminal 300 according to the present invention. It is characterized by comprising a security application module (345) for managing the (Secure Application Module (SAM)).

The Secure Application Module (345) is a confidentiality and / or authentication required by the call terminal 300 in the process of performing the electronic payment and / or electronic payment using the card. Security requirements, including integrity and / or nonrepudiation, etc., within the call terminal 300 without using an authentication server (or payment server 165) on a payment network. As a safety device for performing a reliable and reliable structure, a predetermined message (information or data) processed by the call terminal 300 in the course of performing a predetermined security request function (for example, electronic payment and / or electronic payment function). ) Encrypts or decrypts, adds an authenticator that prevents forgery (or tampering) of the message, or provides important information in the process of performing the security request function. It is characterized by performing a function of storing.

In general, the security application module 345 is preferably composed of a predetermined security application module 345 inserter and security application module 345 chip, the security application module 345 chip is a chip containing at least 8-bit CPU Application Specific Integrated Circuit (ASIC) chips (eg, PLCC 44-pin chips) and / or IC chips (eg, IC cards in the form of subscriber identity modules (SIMs)) with performance of 2 MIPS (Million Instructions Per Second) or more. It is preferable to comprise a.

In addition, the security application module 345 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value, etc.) required for the call terminal 300 to perform a predetermined security request function. ) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, previous transaction cancellation protocols, collection protocols, SAM issuance protocols, (e-money company / card company) Registration protocol, privilege acquisition protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / delete / discard / initialization / Reprocessing / cancellation command).

Referring to FIG. 3, the call terminal 300 includes a mode checking unit 355 for checking an operation mode of the call terminal 300 for payment processing using the call terminal 300 according to the present invention. When the call terminal 300 is in the payment mode using the call terminal 300 according to the present invention as a result of the check by the mode confirming unit 355, a predetermined payment is made from a predetermined customer-owned card through the card reader unit 325. An information transmitter 375 for reading the means information, and an information transmitter 375 for transmitting the payment means information to the server through a data channel corresponding to a communication channel connected to the server through the communication processor 340. It is characterized by comprising a).

In addition, the call terminal 300 further includes an information processing unit 365 for processing a number arrangement (and / or number structure) to prevent the payment means information is intercepted and / or intercepted and / or hacked Characterized in that made.

In addition, the call terminal 300 is characterized by further comprising an encryption processing unit 370 for encrypting in a predetermined encryption method in order to prevent the payment means information is intercepted and / or intercepted and / or hacked. .

The mode checking unit 355 checks whether an operation mode of the call terminal 300 is a voice call mode, a voice call / data communication mode, or a data communication mode.

In addition, when the operation mode of the call terminal 300 is a voice call / data communication mode, the mode checking unit 355 may include data channels added (or assigned) to the voice call channel for general data communication. Mode or a data communication mode for payment processing according to the present invention.

If the check result is that the operation mode of the call terminal 300 is a data communication mode for payment processing according to the present invention, the mode checking unit 355 is the screen output unit 320 (and / or voice processing unit 315) By requesting to interface a customer-owned card through the card reader unit 325 through)), the information reader 360 receives predetermined payment means information from the customer-owned card through the card reader unit 325. Process to read.

In addition, when the operation mode of the call terminal 300 is a data communication mode, the mode checking unit 355 determines whether the data communication mode is a simple data communication mode or a data communication mode for payment processing according to the present invention. It is characterized by checking.

* If the check result is that the operation mode of the call terminal 300 is a data communication mode for payment processing according to the present invention, the mode check unit 355 is the screen output unit 320 (and / or voice processing unit ( 315)) through the card reader unit 325 to interface the customer-owned card through the card reader unit 325, so that the information reader 360 through the card reader 325, predetermined payment means information from the customer-owned card Process to read

As a result of the check by the mode checking unit 355, when the call terminal 300 is in the payment mode using the call terminal 300 according to the present invention, the information reading unit 360 uses the card reader unit 325. And reading predetermined payment means information from a predetermined customer-owned card, wherein the payment means information includes credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and And / or at least one of prepaid card payment means information, and / or bank transfer payment means information.

According to an embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information In the case of payment means information, the payment means information read out by the information reader 360 through the card reader 325 includes at least one or more number arrays such as a 16-digit card number and / or an expiration date. It is preferable to make it.

In addition, when the payment means information corresponds to the account transfer payment means information, the payment means information read out by the information reader 360 through the card reader 325 is a 16-digit account number and / or branch number It is preferable to include at least one or more number arrangements, such as.

The information transmission unit 375 processes the payment means information read by the information reader 360 into a predetermined data structure standard promised with the server, and transmits payment means information corresponding to the data structure standard. The processor 340 processes the data to be transmitted to the server through the data channel.

According to the exemplary embodiment of the present invention, the information transmitter 375 may further include a predetermined checksum for preventing a transmission / reception error of payment means information transmitted through the data channel. It is possible to prevent a transmission and reception error for the payment method information.

However, the payment means information as described above may be exposed to eavesdropping and / or eavesdropping and / or hacking, and to prevent this, the processing unit is a combination of the numbers included in the payment means information in the original payment means in the server And processing the data into a data structure capable of restoring the information, wherein the processed payment means information is restored to the original payment means information in the server.

Alternatively, in order to prevent the payment means information from being exposed to eavesdropping and / or interception and / or hacking, the encryption processing unit 370 may encrypt the payment means information by a predetermined encryption method. The encrypted payment means information is characterized in that the server is decrypted by a predetermined decryption method corresponding to the encryption method.

4 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

More specifically, Figure 4 is an embodiment of the MS card for storing the payment means information read from the customer-owned card through the card reader provided in the predetermined call terminal 300, shown in Figure 4 for convenience The MS card shows a case in which an MS card having a Track I storage area, a Track II storage area, and a Track III storage area stores payment means information according to the present invention in the Track II storage area. Those of ordinary skill in the art may refer to and / or modify this drawing 4 to provide credit card payment means information, and / or check card payment means information, and / or debit in the Track II storage area of the MS card. Card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is provided in the Track I storage area and / or Track III storage area. It is possible to infer various implementation methods for storing the present invention, but the present invention includes all implementation methods inferred from the above, and is not limited to the implementation methods illustrated in FIG.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 4, the payment means information providing the payment processing function using the call terminal 300 according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area. do.

4 is a diagram illustrating an MS card in which predetermined payment means information is stored according to an exemplary embodiment of the present invention.

In more detail, Figure 4 is an embodiment of the MS card for storing the payment means information read from the customer-owned card through a card reader provided in a predetermined call terminal, for convenience the MS card shown in this figure 4 In the MS card having a Track I storage area, a Track II storage area, and a Track III storage area, the payment means information according to the present invention is stored in the Track II storage area. Those of ordinary skill in the art can refer to and / or modify this drawing to modify credit card payment means information, and / or check card payment means information, and / or debit card payment means in the Track II storage area of the MS card. Information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is provided in the Track I storage area and / or the Track III storage area. Although various embodiments of the present invention may be inferred, the present invention includes all the above-described inferred implementation methods, and is not limited to the implementation methods illustrated in FIG.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 4, payment means information providing a payment processing function using a call terminal according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area.

5 is a view showing an IC card in which predetermined payment means information is stored according to one embodiment of the present invention.

In more detail, Figure 5 illustrates an embodiment of an IC card for storing payment means information read from a customer's own card through a card reader provided in a predetermined call terminal, for convenience, the figure 5 is a contact type IC card FIG. 1 illustrates a case in which payment means information according to the present invention is stored in a memory of the present invention. Those skilled in the art to which the present invention pertains may refer to FIG. 5 and / or modify the memory device of the IC card. Infer various implementation methods for storing credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. As will be appreciated, the present invention includes all implementation methods inferred above and is not limited to the implementation method illustrated in FIG.

With reference to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip's IC chip may include power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), and programming. I / O interfaces for communicating with the call terminals (e.g. command or data exchange) through contact points such as power supply (VPP) and / or input / output (I / O), central processing unit (CPU), micro process unit (MPU) And / or a processor unit including at least one computing element including a coprocessor, a read only memory (ROM), a random access memory (RAM), an electrically erasable and programmable read only memory (EEPROM), And a memory unit including at least one memory element including a flash memory (FM). In particular, at least one memory element (eg, a ROM) of the memory elements may include a chip operating system for managing and operating internal resources of the IC card. Chip Operating System (COS) is stored, and when a predetermined power is supplied from a call terminal through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory unit is loaded into a predetermined execution memory to provide overall control of the IC chip. Control the operation, and control information or data exchange between the IC chip and the call terminal through an APDU (Application Protocol Data Unit) based on a clock frequency (eg, 3.57 MHz or 4.9 MHz) of the clock signal CLK contact point. do.

According to the present invention, the memory unit of the IC chip terminates at least one or more programs among programs that are loaded in the card terminal and is already driven, and drives a specific program among a plurality of programs stored in the card terminal, or the card. And card storage information for executing a function of converting a screen configuration and / or a function set in the terminal into a specific screen configuration and / or a specific function. The card storage information is read and read by the terminal program. And / or is driven or executed by a data unit for storing a data set corresponding to predetermined information or data to be used, an arithmetic function of the processor unit and an instruction set provided by a COS, and used by the terminal program. Program routines (e.g., in the case of Javacard) JAVA Applet) is provided with a processing unit corresponding to an application including an instruction call code that interacts with the instruction set of the COS and execution code that is processed by the processor unit. Read a command provided from the terminal program via an input / output interface, and read or write at least one or more information or data stored in the data unit based on the read command, and as a result or read information or data It is characterized in that to provide to the terminal program via the input and output interface through the APDU.

According to a preferred embodiment of the present invention, the memory unit of the IC chip includes a security structure based on ISO / IEC 10202, and accordingly, the memory unit is a protection area in which secret information such as a chip serial number (CSN) is stored. And a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the like. The card storage information for the present invention includes the protection area and the COS control area. It is preferably stored in the excluded region.

In addition, according to the ISO / IEC 7816 and / or ISO / IEC 14443 ICC standard, the memory unit includes one master file (MF) corresponding to a root file, and at least one lower part of the master file. ATR (Answer To Reset) including function information about stored information, at least one dedicated file (DF) corresponding to each ICC stored information, and a smart card service disposed under the dedicated file. It includes a file structure consisting of an element file (EF) containing substantial information and / or data for, the card storage information for the present invention also comprises such a file structure.

Referring to FIG. 5 according to an embodiment of the present invention, the data unit of the card storage information stores at least one or more payment means information for payment processing using a call terminal according to the present invention. The information includes at least one of credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. It is done by

6 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in a call terminal according to an embodiment of the present invention.

In more detail, Figure 6 relates to an implementation method for encrypting and transmitting the payment means information by a symmetric key (or secret key) method in a communication terminal equipped with an encryption function as shown in Figure 3, In accordance with one of ordinary skill in the art, various implementation methods for encrypting the payment means information in a symmetric key (or secret key) method in a call terminal on the telephone network and / or VoIP network by referring to and / or modifying the drawing of FIG. It may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 6 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the call terminal, the public certificate is a predetermined memory unit provided in the call terminal And / or stored in an IC chip (or IC card) in the form of ID-000 mounted on or detached from the call terminal, and / or the IC is provided with a predetermined IC card reader. All of them can be stored in an IC card inserted in the card reader, and the present invention is not limited thereto.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit provided in the call terminal in addition to the public certificate, and / or included in the interface screen provided from the server to the call terminal, And / or embedded in a communication program communicating with the server on the call terminal, by which the invention is not limited.

Referring to FIG. 6, when predetermined payment means information is read by the information reading unit 360 of the call terminal, the predetermined payment means information is provided to the encryption processing unit 370 (600). The processor 370 reads a predetermined symmetric key (or secret key) for encrypting payment means information from an authorized certificate provided in the call terminal (605), and through the read symmetric key (or secret key). The payment means information is encrypted (610).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the symmetric key (or secret key) is k (key), the payment means information P (Plaintext), and the symmetric key (or secret). If the payment means information encrypted with the key) is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Ek (P) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, It is preferable to include at least one or more of the International Data Encryption Algorithm (IDEA), and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When payment means information is encrypted through a symmetric key (or secret key) as described above, the communication processor 340 transmits the encrypted payment means information to the server through a communication protocol defined on the telephone network and / or VoIP network. In step 615, the transmission is performed.

FIG. 7 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server by a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, Figure 7 is a method for decrypting the payment means information received encrypted from the call terminal with the encryption function as shown in Figure 3 by a symmetric key (or secret key) method in the server as shown in Figure 1 As is known in the art to which the present invention pertains, refer to and / or modify this figure 7 to convert the encrypted payment means information in a call terminal on the telephone network and / or VoIP network to a symmetric key (or It is possible to infer various implementation methods for decrypting using a secret key) method, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 7 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the server, the public certificate is a predetermined database (not shown) in conjunction with the server ), And the present invention is not limited thereto.

Referring to FIG. 7, the information receiving unit 125 of the server receives the encrypted payment means information through the telephone network and / or the VoIP network and provides the encrypted payment means information to the decryption unit 130 (700). Is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 130 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment means information from the public certificate provided in the server (705), and extracts the extracted symmetric key (or The encrypted payment means information is decrypted through a secret key (710).

Here, the decryption function of the decryption unit 130 is referred to as D (Decryption), and the payment means information encrypted with the symmetric key (or secret key) k (key) and the symmetric key (or secret key) is C ( Ciphertext), and when the decrypted payment means information is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 130 is " Dk = P, or Dk (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, the decryption unit 130 decrypts the encrypted payment means information through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, At least one of Skipjack and International Data Encryption Algorithm (IDEA) is preferably included. Various types of decryption algorithms may be used, but the decryption algorithm is matched with the encryption algorithm used in the call terminal. The present invention is not limited to the specific decoding algorithm.

When the payment means information encrypted through the symmetric key (or secret key) as described above, the decryption unit 130 provides the decrypted payment means information to the full text generation unit 145 (715), the The full text generation unit 145 performs the full text creation procedure defined in the server using the payment means information.

8 is a diagram illustrating a method of encrypting and transmitting payment means information in a public key infrastructure structure in a call terminal according to an embodiment of the present invention.

More specifically, FIG. 8 is an embodiment of a method for encrypting and transmitting the payment means information in a public key infrastructure structure in a call terminal equipped with an encryption function as shown in FIG. 3, which is common in the art. With knowledge, it will be possible to infer various implementation methods for encrypting the payment means information in a public key manner in the call terminals on the telephone network and / or VoIP network by referring to and / or modifying the present invention. Includes all of the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

In this figure 8 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal, and the public certificate is stored in a predetermined memory unit provided in the call terminal. And / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the communication terminal, and / or the IC card reader when a predetermined IC card reader is provided in the communication terminal. All of them can be stored in the inserted IC card, and the present invention is not limited thereby.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal, and the present invention is not limited thereto.

Referring to FIG. 8, when the information reading unit 360 of the call terminal reads predetermined payment means information, the information is provided to the encryption processing unit 370 (800). When the payment means information is provided, the encryption is performed. The processor 370 extracts a predetermined server-side public key for encrypting the payment means information from the authorized certificate (805), and encrypts the payment means information through the extracted server-side public key (810).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the server means public key k1 (key), the payment means information P (Plaintext), and the payment means encrypted with the server-side public key When the information is referred to as C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Ek1 (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the server-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm) , DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above. Preferably, various types of encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the payment means information through the RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by different prime factors of n and a b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment means information is encrypted through the server-side public key as described above, the communication processor 340 transmits the encrypted payment means information to the server through a network component on the telephone network and / or the VoIP network (815). ).

9 is a diagram illustrating a method for decrypting payment means information encrypted and received by a server in a public key based structure according to an embodiment of the present invention.

In more detail, FIG. 9 illustrates an embodiment of a method of decrypting the payment means information encrypted and received from a call terminal having an encryption function as shown in FIG. In the art to which the present invention pertains, the public key-based payment means information encrypted with the server-side public key in the call terminal on the telephone network and / or the VoIP network by referring to and / or modifying the drawing of FIG. Various implementation methods for decoding in a structured manner may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In the figure 9 according to the embodiment of the present invention, the server-side private key for decrypting the payment means information encrypted with the server-side public key in a public key infrastructure scheme is preferably read from the public certificate provided in the server. , The public certificate is preferably stored in a predetermined database (not shown) in conjunction with the server, by which the present invention is not limited.

Referring to FIG. 9, the information receiving unit 125 of the server receives encrypted payment means information through the telephone network and / or VoIP network and provides the decryption means 130 to the decryption unit 130 (900). It is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 130 extracts a server-side private key for decrypting the encrypted payment means information from the public certificate provided in the server (905), and encrypts the encrypted server through the extracted server-side private key. The payment means information is decrypted (910).

Here, the decryption function of the decryption unit 130 is referred to as D (Decryption), the server-side private key is k2 (key), and the payment means information encrypted with the server-side public key is C (Ciphertext) and the server side. When the payment means information decrypted with the private key is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 130 is "Dk2 = P, or Dk2 (Ek (P)) = P". It can be expressed as

According to an embodiment of the present invention, the decryption unit 130 decrypts the payment means information encrypted with the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len). Adleman, Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, and at least one or more of the various types of decoding algorithms may be used. The decryption algorithm may be matched with an encryption algorithm used in the communication terminal, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the payment means information through the RSA decryption algorithm of the public key based decryption algorithm, n is a public method (Modulus) used in the decryption process, n, a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e, the undisclosed index is d, the n satisfies "n = a * b", d is "de = 1 mod (a-1) (b-1) ", wherein the decoding function of the decoding unit 130 may be expressed as" P = Dk2 = Cd mod n ".

When the payment means information encrypted with the server-side public key in the call terminal through the server-side private key as described above, the decryption unit 130 provides the decrypted payment means information to the full text generation unit 145. In operation 915, the full text generation unit 145 performs a full text creation procedure defined in the server using the payment means information.

10 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal according to an embodiment of the present invention.

In more detail, Figure 10 is an embodiment of the method for encrypting and transmitting the payment means information in an electronic envelope method in a communication terminal equipped with an encryption function as shown in Figure 3, and the general knowledge in the technical field to which the present invention belongs With reference to FIG. 10 and / or modified with reference to FIG. 10, various implementation methods of encrypting the payment means information in an electronic envelope method in a call terminal on the telephone network and / or VoIP network may be inferred. It includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In the figure 10 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal, and the public certificate is stored in a predetermined memory unit provided in the call terminal. And / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the communication terminal, and / or the IC card reader when a predetermined IC card reader is provided in the communication terminal. Anything that can be stored in the IC card to be inserted is possible, whereby the present invention is not limited.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal, and the present invention is not limited thereto.

Referring to FIG. 10, when the information reading unit 360 of the call terminal reads predetermined payment means information, the information is provided to the encryption processing unit 370 (1000). The processor 370 generates a predetermined random secret key for encrypting the payment means information using a secret key (symmetric key) method (1005), and uses the generated secret key. The payment means information is encrypted (1010).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the secret key is r (random secret key), the payment means information P (Plaintext), and the payment means information encrypted with the secret key Suppose C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by a formula such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption) It is preferable to include at least one of the algorithm (Algorithm), and various forms of encryption algorithm may be used, but the present invention is not limited by a specific encryption algorithm.

Thereafter, the encryption processing unit 370 encrypts the secret key (random secret key) used to encrypt the payment means information. To this end, the encryption processing unit 370 extracts a predetermined server-side public key from the public certificate. In operation 1015, the private key is encrypted using the server-side public key (1020).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the server-side public key is k1 (key), the secret key is r (random Secret key), and the secret encrypted with the server-side public key. If the key is C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Ek1 (r) = C".

According to the exemplary embodiment of the present invention, the encryption processing unit 370 encrypts the secret key through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Ek1 (r) = re mod n ".

If the payment means information is encrypted with the secret key, and the secret key is encrypted with the server-side public key, the encryption processing unit 370 is a secret encrypted with the secret means and the server-side public key encrypted with the secret key. A transaction data associated with a key is generated and provided to the communication processor 340 (1025), and the communication processor 340 transmits the transaction data to the server through a network component on a telephone network and / or a VoIP network ( 1030).

11 is a diagram illustrating a method of decrypting payment means information encrypted and received by a server according to an exemplary embodiment of the present invention by an electronic envelope method.

In more detail, in FIG. 11, the server decrypts the transaction data in an electronic envelope method in the same server as in FIG. 1, which receives the transaction data including the encrypted payment means information from the call terminal having the encryption function as shown in FIG. As to a method of implementation, if one of ordinary skill in the art to which the present invention pertains, a transaction encrypted by the electronic envelope method in a call terminal on the telephone network and / or a VoIP network by referring to and / or modifying this drawing 11 Various implementation methods for decoding data by the same electronic envelope method may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 11 according to an embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate provided in the server, and the public certificate is linked with the server. It is preferably stored in a predetermined database (not shown), and the present invention is not limited thereby.

Referring to FIG. 11, the information receiving unit 125 of the server receives predetermined transaction data including the payment means information encrypted through the telephone network and / or the VoIP network and provides it to the decryption unit 130 ( 1100), preferably, the transaction data is received through a communication protocol stack defined in the telephone network and / or the VoIP network.

Thereafter, the decryption unit 130 extracts a server-side private key for decrypting the encrypted secret key included in the transaction data from the public certificate provided in the server (1105), and extracts the extracted server-side private key. By decrypting the secret key encrypted with the server-side public key at the call terminal (1110), a predetermined secret key for decrypting the payment means information is extracted (1115), and the payment is made using the extracted secret key. By decrypting the means information (1120), the payment means information extracted with the secret key in the call terminal (1125).

Here, the decryption function of the decryption unit 130 is called D (Decryption), the server-side private key is k2 (key), and the secret key encrypted with the server-side public key is C (Ciphertext) and the server-side individual. When the secret key decrypted with the key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 130 is "Dk2 = r, or Dk2 (Ek1 (r)) = r". It can be expressed as an expression.

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman) (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the following. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoder 130 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the decryption unit 130 is called D (Decryption), the secret key is r (random secret key), the payment means information encrypted with the secret key (C (Ciphertext)), and the decrypted When the payment means information is called P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 130 may be expressed by a formula such as "Dr = P, or Dr (Er (P)) = P". Can be.

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment means information by the decryption unit 130 through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International) It is preferable to include at least one or more of Data Encryption Algorithm, and in addition to this, various types of decryption algorithms may be used, but the decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal, The present invention is not limited by the decoding algorithm.

When the payment means information is decrypted as described above, the decryption unit 130 provides the decrypted payment means information to the full text generation unit 145 (1130), the full text generation unit 145 is the payment means information Perform the full text creation procedure defined on the server using.

12A and 12B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a communication terminal according to an embodiment of the present invention.

12A and 12B illustrate a method of encrypting and transmitting the payment means information in a key exchange method in a communication terminal equipped with an encryption function as shown in FIG. 3, which is common in the art. With knowledge, it will be possible to infer various implementation methods for encrypting the payment means information in a key exchange method at the call terminals on the telephone network and / or the VoIP network by referring to and / or modifying this drawing 12. Includes all of the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

In this figure 12 according to the embodiment of the present invention, the terminal-side private key and the server-side public key are preferably read from the public certificate provided in the call terminal, and the public certificate is provided in the call terminal. Stored in a memory unit and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the communication terminal, and / or provided with a predetermined IC card reader in the communication terminal. All of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate to the call terminal, thereby limiting the present invention. Not.

12A and 12B, when the information reading unit 360 of the call terminal reads predetermined payment means information, the information is provided to the encryption processing unit 370 (1200). The encryption processing unit 370 generates a message digest including a predetermined one-way hash function (eg, a hash code of a predetermined length regardless of the length of the payment means information). And a one-way hash function that cannot identify (or infer) the original message through the hash code (or message digest), wherein the call terminal and the server use the same hash function). And digitally sign the message digest by encrypting the message digest through the terminal-side private key (1210).

Herein, the encryption function of the encryption processing unit 370 is referred to as E (Encryption), the terminal-side private key is t1 (13erminal side key), the message digest is m (message digest), and the terminal-side private key is encrypted. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 370 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the encryption processing unit 370 encrypts the message digest through the terminal-side private key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the digital signature function of the encryption processing unit 370 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 370 generates a predetermined random secret key for encrypting the payment means information by a secret key (symmetric key) method (1215), and the payment means information and The message digest encrypted with the terminal-side private key and a copy of a certificate (eg, a certificate including a terminal-side public key) included in the public certificate are linked to each other and encrypted through the generated secret key (1220).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the secret key is r (random secret key), the payment means information and the copy of the certificate P (Plaintext), and the encrypted payment with the secret key If the means information and the copy of the certificate are referred to as C (Ciphertext), the encryption function of the encryption processing unit 370 can be expressed by an equation such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 370 encrypts the payment means information and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 370 extracts a predetermined server-side public key from the authorized certificate to encrypt the secret key that encrypts the payment means information (1225), and uses the server-side public key to make the payment. The secret key encrypting the means information is encrypted (1230).

Here, the encryption function of the encryption processing unit 370 is called E (Encryption), the server side public key is encrypted with s1 (server side key), the secret key is r (random secret key), and the server side public key. When the secret key is referred to as C (Ciphertext), the encryption function of the encryption processing unit 370 may be expressed by an expression such as "Es1 (r) = C".

According to the exemplary embodiment of the present invention, the encryption processing unit 370 encrypts the secret key through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 370 may be expressed as" C = Es1 (r) = re mod n ".

The payment means information, the message digest encrypted with the terminal-side private key, and a copy of the certificate including the terminal-side public key are linked to each other and encrypted through the generated secret key, and the secret key is passed through the server-side public key. When encrypted, the encryption processing unit 370 encrypts a copy of the certificate including the message digest and the terminal-side public key encrypted with the payment means information encrypted with the secret key and the terminal-side private key with the server-side public key. Generate predetermined transaction data in association with the secret key, and provide the generated transaction data to the communication processor 340 (1235), and the communication processor 340 transmits the transaction data to a telephone network and / or a VoIP network. The server transmits the data through the network component on the server (1240).

13A and 13B illustrate a method of decrypting payment means information encrypted and received at a server by a key exchange method according to an exemplary embodiment of the present invention.

In more detail, FIGS. 13A and 13B are key exchange schemes of the transaction data in a server as shown in FIG. 1 that receives transaction data including encrypted payment means information from a call terminal equipped with an encryption function as shown in FIG. The present invention relates to an embodiment of the present invention, which has a general knowledge in the technical field to which the present invention pertains, referring to FIG. 13 and / or modified to the key exchange method in a call terminal on the telephone network and / or the VoIP network. Various implementation methods for decrypting encrypted transaction data by the same key exchange method may be inferred, but the present invention includes all of the inferred implementation methods and is not limited to the implementation method shown in FIG.

In FIG. 13 according to an embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method are preferably read from the public certificate provided in the server. Is preferably stored in a predetermined database (not shown) that cooperates with the server, whereby the present invention is not limited.

Referring to FIGS. 13A and 13B, the receiving unit of the server receives transaction data including the payment means information encrypted through the telephone network and / or the VoIP network (1300), and decrypts the transaction data into the decrypting unit 130. Preferably, the transaction data is received through a communication protocol defined in the telephone network and / or the VoIP network, and / or the payment means information and the terminal-side private key encrypted with the secret key. And a copy of the certificate containing the encrypted message digest and the terminal-side public key, and the secret key encrypted with the server-side public key.

Thereafter, the decryption unit 130 extracts the server-side private key from the public certificate provided in the server to decrypt the secret key encrypted with the server-side public key (1310), and through the server-side private key. By decrypting the secret key (1315), the secret key for decrypting a copy of the certificate including the message digest encrypted with the payment means information and the terminal-side private key and the terminal-side public key is extracted (1320).

Here, the decryption function of the decryption unit 130 is called D (Decryption), the server side private key is s2 (server side key), the secret key encrypted with the server side public key is C (Ciphertext), and the server When the secret key decrypted with the side private key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 130 is "Ds2 = r, or Ds2 (Es1 (r)) = r". It can be expressed as

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman) (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the following. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoder 130 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the decryption unit 130 copies the certificate including the message digest and the terminal side public key encrypted with the payment means information and the terminal side private key using the extracted secret key. By decrypting (1325), a copy of the certificate including the payment means information encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key is extracted.

Here, the decryption function of the decryption unit 130 is referred to as D (Decryption), and the secret key is r (random secret key), the payment means information encrypted with the secret key and the message digest encrypted with the terminal side private key; C (Ciphertext) is a copy of the certificate containing the terminal-side public key, and P (Plaintext) is a copy of the certificate including the message digest encrypted with the decrypted payment means information and the terminal-side private key and the terminal-side public key. In this case, the function of decrypting the copy of the certificate including the message digest encrypted with the encrypted payment means information and the terminal-side private key and the terminal-side public key is "Dr = P, or Dr." It can be expressed by an expression such as (Er (P)) = P ".

According to an embodiment of the present invention, the decryption unit 130 decrypts a copy of a certificate including the message digest encrypted with the encrypted payment means information and the terminal-side private key and the terminal-side public key through the secret key. Preferably, the algorithm includes at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA). In addition, various types of decryption algorithms may be used. The decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal, the invention is not limited by a specific decryption algorithm.

In addition, the decryption unit 130 extracts the message digest generated and transmitted from the payment means information in the call terminal by decrypting the message digest encrypted with the terminal-side private key through the terminal-side public key (1330). (1335)

Here, the decryption function of the decryption unit 130 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. If the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the decryption unit 130 is "Dt2 = m, or Dt2 (Es1 (r)) = m" and The same formula can be used.

According to an embodiment of the present invention, an algorithm for decrypting the message digest encrypted by the terminal-side private key in the call terminal through the terminal-side public key may be RSA (Ron Rivest, Adi Shamir, Len Adleman). ), DSA (Digie Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH or at least one or more of the various forms of decoding algorithms may be used. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the communication terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published exponent (e.g. 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoder 130 may be expressed as" P = Dt2 = Cd mod n ".

Subsequently, the decryption unit 130 generates a predetermined message digest using the same one-way hash function with the received payment means information (1340), and then generates the generated message digest and the decrypted message digest. By comparing (1345), the validity of the received payment means information is confirmed.

If the generated message digest and the decrypted message digest match (1350), the decryption unit 130 provides the payment means information to the full text generation unit 145 (1355). 145 performs a full text generation procedure defined in the server using the payment means information.

Figure 14 illustrates a product ordering and purchasing process for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, FIG. 14 illustrates the present invention through a process in which a call terminal shown in FIG. 3 is connected to a server shown in FIG. 1 through at least one telephone network and / or a VoIP network to order and purchase a predetermined product. The payment process using the call terminal according to the present invention, the person of ordinary skill in the art to which the present invention belongs, the predetermined call terminal is at least one or more telephone network by referring to and / or modified And / or connect a predetermined server and a call channel for product order and purchase through a VoIP network, and order and purchase at least one product through the call channel to initiate a payment process using the call terminal according to the present invention. Various embodiments of the present invention may be inferred, but the present invention includes all of the inferred embodiments, and is shown in FIG. It is not limited to the implemented method.

In the following Figure 14, the call terminal with the card reader shown in Figure 3 is referred to as "terminal" for convenience.

Referring to FIG. 14, a terminal complying with the functional configuration shown in FIG. 3 may include at least one telephone network (e.g., a general telephone switching network (or intelligent network), and / or a mobile communication network) and / or a VoIP network (e.g., TCP / IP (And / or UDP / IP) based wired communication network, IEEE 802.16x based portable Internet) to connect a predetermined communication channel with the server (1400), and according to the product ordering procedure provided by the server through the communication channel A procedure of selecting, ordering, and purchasing at least one or more purchased products is performed (1405).

If the person skilled in the art to which the present invention pertains, the terminal connects a predetermined communication channel with the server, and performs a predetermined product ordering procedure (eg, ARS and / or agent connection through the communication channel). Key tones based on the product ordering procedure), so the detailed process for this will be omitted for convenience.

During the product order process as described above, the server checks whether the payment process for the purchased product (1410), if the payment process for the purchased product is confirmed (1415), the server and the terminal Adding (or allocating) a data channel corresponding to the telephone network and / or VoIP network to a connected call channel, or converting the voice call-based communication channel into a data channel corresponding to the telephone network and / or VoIP network (1420). .

If a data channel corresponding to the telephone network and / or VoIP network is added (or assigned) to the call channel as described above, or if the voice call-based communication channel is switched to a data channel corresponding to the telephone network and / or VoIP network, The server requests to read predetermined payment means information from the customer's own card through the card reader provided in the terminal through the data channel (1425).

15 is a flowchart illustrating a payment means information reading process for payment processing using a call terminal according to an embodiment of the present invention.

More specifically, Figure 15 shows the predetermined payment means information from the server shown in Figure 1 to the call terminal shown in Figure 3 via at least one telephone network and / or VoIP network by performing the procedure shown in Figure 14. When requesting, the call terminal to read the predetermined payment means information from the customer-owned card through a predetermined card reader to provide to the server, a person having ordinary knowledge in the technical field to which the present invention belongs In this case, various implementation methods may be inferred by referring to and / or modifying the drawing of FIG. 15 so as to read predetermined payment means information from a predetermined call terminal and provide it to a predetermined server through at least one or more telephone networks and / or VoIP networks. However, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

For example, in FIG. 15, the terminal performs an encryption procedure for predetermined payment means information read from the customer's own card. The encryption procedure is performed to satisfy the high security of the payment means information. As performed, it may be omitted in accordance with the intention of those skilled in the art, whereby the present invention is not limited.

In the following Figure 15, the call terminal with the card reader shown in Figure 3 is referred to as "terminal" for convenience.

Referring to FIG. 15, the terminal transmits the predetermined payment means information through a data channel corresponding to at least one or more telephone networks and / or VoIP networks by the server illustrated in FIG. 1 performing the process illustrated in FIG. In operation 1500, if the predetermined payment means information is requested from the server (1505), the terminal switches the operation mode to the payment processing mode using the data channel (1510). The card reader may be output through the screen output means provided in the terminal to read predetermined payment means information from the customer-owned card through the card reader, and / or through the audio output means provided in the terminal (1515).

After the predetermined payment means information reading is requested from the customer-owned card as described above, the terminal checks whether the predetermined payment means information is read from the customer-owned card through the card reader (1520). If predetermined payment means information is read from the user (1525), the terminal performs an encryption procedure for the read payment means information (1530).

Thereafter, when the payment means information is encrypted (1535), the terminal transmits the encrypted payment means information to the server through a data channel set in the telephone network and / or VoIP network (1540).

Figure 16 illustrates a process for generating a payment approval request full text for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, FIG. 16 shows the predetermined payment means information to the server shown in FIG. 1 through at least one telephone network and / or a VoIP network by performing the process shown in FIG. 15 in the call terminal shown in FIG. When transmitting, the process of generating a predetermined payment approval request message containing the payment means information in the server to process the payment, if the person having ordinary knowledge in the technical field to which the present invention belongs, Figure 16 While various implementation methods may be inferred by reference and / or modification to generate a predetermined payment approval request full text using payment means information provided from the call terminal in a predetermined server, the present invention may infer all the inferred implementation methods. It is not limited to the implementation method shown in FIG.

For example, in FIG. 16, the terminal performs a decryption procedure on payment means information provided from the call terminal. The decryption procedure is performed only when the payment means information is encrypted. Although it may be omitted, the present invention is not limited thereto.

In addition, the full text of the payment approval request generated by the server in FIG. 16 is a full credit card payment approval request including the credit card payment means information shown in FIG. 2, and has a general knowledge in the technical field to which the present invention belongs. The full payment card payment authorization request, and / or the full debit card payment approval request, and / or the prepaid card payment approval request in the server in response to the payment means information provided from the call terminal. It will be possible to infer an implementation method for generating a transfer payment approval request text and the like, and the present invention includes all the inferred implementation method.

In the following Figure 16, the call terminal with the card reader shown in Figure 3 is referred to as "terminal" for convenience.

Referring to FIG. 16, the server shown in FIG. 1 receives a predetermined payment means information through a data channel corresponding to at least one or more telephone networks and / or VoIP networks by performing the process shown in FIG. 15 at the terminal. (1600), if the predetermined payment means information is received from the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP networks (1605), the server encrypts the received payment means information. In operation 1610, it is checked whether the payment means information is decrypted by checking whether the payment is made.

If it is determined that the payment means information is decrypted (1615), the server performs a decryption procedure on the encrypted payment means information, thereby reading from the customer-owned card through a predetermined card reader in the terminal. The paid payment method information is restored (1620).

On the other hand, if it is determined that the payment means information does not need to be decrypted (eg, when the payment means information is not encrypted) 1615 or / or the encrypted payment means information is decrypted, the server stores the storage. After extracting payment information including merchant information and total payment amount information to be included in the payment approval request message from the medium (1625), generating a document serial number to be included in the payment approval request message (1630), and receiving it from the terminal. A predetermined payment approval request message including the payment means information, the merchant information, the total payment amount and the document serial number is generated (1635).

Thereafter, the server transmits the full text of the payment approval request to the payment server 165 corresponding to the payment means information through a predetermined payment network (VAN) (1640), and the payment server 165 transmits the payment approval request. By receiving and reading the full text and performing a payment processing procedure corresponding to the payment means information, a predetermined payment processing history (for example, payment processing approval history or payment processing error history) is generated (1645), and the payment processing history is recorded. After generating a predetermined payment approval text including 1650, the payment approval text is transmitted to the server through the payment network (1655).

Those skilled in the art to which the present invention pertains, a method for transmitting the full text of the payment approval request from the server to the payment server 165 through a predetermined payment network, and / or the payment server 165 Reads the payment approval request message in full and performs a payment processing procedure, and / or generates a predetermined payment processing history after performing the payment processing procedure in the payment server 165 and includes the payment processing history. Since it will be familiar with how to generate a payment approval message to transmit to the server through the payment network, such a detailed description will be omitted for convenience.

According to another exemplary embodiment of the present invention, the payment server 165 may directly transmit the payment approval message (or payment processing history) to the terminal through the telephone network and / or the VoIP network (eg, a payment approval request). The terminal information providing the payment means information in a preamble), and the present invention is not limited thereto.

17 illustrates a payment approval process for payment processing using a call terminal according to an embodiment of the present invention.

In more detail, in FIG. 17, the server shown in FIG. 1 receives the process shown in FIG. 16 to generate a full payment approval request corresponding to the payment means information, and the payment is made through a predetermined payment server 165. After performing the approval procedure, if a payment approval message including the payment processing details is received, the process of processing the payment approval message in the server, the person having ordinary knowledge in the technical field to which the present invention belongs By referring to and / or modifying the drawing 17, it is possible to infer various implementation methods for processing the payment approval full text in a predetermined server, but the present invention includes all the inferred implementation methods, as shown in this drawing 17 It is not limited to the implemented method.

Hereinafter, in FIG. 17, the call terminal with the card reader shown in FIG. 3 is referred to as "terminal" for convenience.

Referring to FIG. 17, if the server shown in FIG. 1 receives the procedure shown in FIG. 16, the payment approval message corresponding to the payment approval message is received from the payment server 165 through a predetermined payment network. In operation 1700, if the payment approval message including the payment processing history corresponding to the payment approval request message is received from the payment server 165 through the payment network (1705), the server receives the payment approval message. By extracting and reading a predetermined payment processing history from the terminal, it is checked whether the payment processing through the payment means information provided from the terminal has been approved (1710).

If the payment processing through the payment means information provided from the terminal has not been approved (1715), the server transmits the payment approval message (and / or to the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP networks). Or payment processing error details) by transmitting and outputting (1720) to terminate the payment processing process using the call terminal according to the present invention.

On the other hand, if payment processing through payment means information provided from the terminal is approved (1715), the server transmits the full payment approval message (and / or) to the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP networks. After transmitting and outputting the payment processing approval details (1725), by performing an order procedure after the payment processing approval (1730), the payment processing process using the call terminal according to the present invention is completed.

18 is a diagram illustrating a payment system configuration using a call terminal 1900 according to another exemplary embodiment of the present invention.

In more detail, Fig. 18 shows a telephone order using a voice call through a call terminal 1900 equipped with a predetermined card reader, and reads predetermined payment means information from a predetermined customer-owned card through the card reader. Regarding a system configuration for processing a payment corresponding to an order, those skilled in the art to which the present invention pertains, various payment system configurations using the call terminal 1900 by referring to and / or modified in this figure 18 It may be inferred that, but the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

That is, in the implementation method illustrated in FIG. 18, a predetermined customer makes a call with a server 1800 (eg, an automatic response service (ARS) server 1800) provided in a predetermined affiliate store through a predetermined call terminal 1900. After connecting a channel, and performing a predetermined telephone ordering procedure through the call channel, predetermined payment means information is obtained from a customer-owned card equipped with a predetermined payment means through a card reader provided in the call terminal 1900. Read and transmit to the server 1800 through the data channel based on the call channel, the server 1800 transmits the payment means information and predetermined payment information to the bansa server 1855, the bansa server In 1855, a system configuration for generating a predetermined payment approval request message including the payment means information and the payment information and transmitting the generated payment approval request message to the predetermined payment server 1875 is used for payment processing.

In addition, although the functional component for payment processing using the call terminal 1900 according to the present invention is shown in the predetermined server 1800 through the embodiment shown in FIG. 18, this is a technical feature of the present invention. The present invention is not limited by this, but the present invention is not limited thereto, and the payment processing system using the call terminal 1900 according to the present invention includes a plurality of servers (or terminals) 1800 having the above-described functional components. The implementation method, and / or the method (or terminal) 1800 on the call center system, if the predetermined call center is provided in the affiliated store, the implementation method comprising the functional configuration unit, and / or the predetermined ARS server in the affiliated store ( 1800 is provided in advance, if the ARS server 1800 is provided with an additional functional configuration unit, and / or if the affiliated store is provided with a predetermined merchant terminal The merchant terminals may comprise any of the exemplary method comprising a further configuration the function.

The call terminal 1900 used by the customer is a landline telephone (and / or a radiotelephone in radio frequency (RF) communication with the landline telephone) connected to a public switched telephone network (PSTN), and / or a CDMA (Code) Division Multiple Access (Telephone) connected to a stack based mobile communication network (e.g., Personal Communication System (PCS) and / or Global System for Mobile (GSM) terminals), and / or Transmission Control Protocol / Internet Protocol (TCP / IP) And / or at least one VoIP terminal connected to a User Datagram Protocol / Internet Protocol (UDP / IP) based wired communication network and / or a Voice over IP (VoIP) network operating based on an IEEE 802.16x based portable Internet network. Characterized in that made.

In addition, the call terminal 1900 may include at least one telephone network (eg, a general switched telephone network (PSTN), and / or a mobile communication network), and / or a VoIP network (eg, a TCP / IP and / or UDP / IP-based wired communication network). And / or a server provided at a merchant through a network in which a Real-time Transport Protocol / RTP Control Protocol (RTP) layer is defined in a transport layer on a protocol stack based on the IEEE 802.16x-based portable Internet. It is characterized in that the connection 1800 and the predetermined call channel.

According to an embodiment of the present invention, the general switched telephone network is a recent intelligent network (for example, a communication network connecting a plurality of circuits using at least one or more exchangers) in a conventional intelligent network (for example, interspersed within a communication network). At least one switch, a service control node, an in-network control database, and the like, which are organically integrated through a common line signal network or a data network and controlled through a computing technology), and / or It has evolved into an intelligent network structure, whereby a wired telephone (and / or a wireless telephone in RF communication with the wired telephone) connected to the general telephone switching network (= intelligent network) basically provides a voice call service, as well as a predetermined data channel. Provides data communication (eg, message transmission and reception) services through the.

In addition, the mobile communication network provides both a CDMA stack-based circuit switched voice call channel and a data channel, whereby a mobile phone connected to the mobile communication network basically provides a voice call service and a predetermined data channel. Data communication (eg, wireless message transmission and / or wireless Internet access, etc.) services.

In addition, the VoIP network basically provides a predetermined RTP / RTCP (Real-) to provide a real-time voice call service to a higher layer of a UDP on a wired / wireless communication network supporting TCP / IP (and / or UDP / IP) supporting data communication. As a communication network defining a time transport protocol / RTP control protocol (Layer) layer, the VoIP network basically provides both a voice call channel and a data channel, whereby a VoIP terminal connected to the VoIP network basically provides a voice call service. Of course, it provides a data communication (eg, message transmission and reception) service through a predetermined data channel.

According to the present invention, the call terminal 1900 is a card reader for reading predetermined payment means information from an MS (Magnetic Stripe) card conforming to ISO / IEC 7810 standard, and / or a contact type conforming to ISO / IEC 7816 standard. At least one card reader for reading predetermined payment means information from an IC (Integrated Circuit) card and / or at least one card reader for reading predetermined payment means information from a contactless IC card conforming to ISO / IEC 14443 standard, It is characterized in that the preferred embodiment for this will be described in detail with reference to FIG.

Referring to FIG. 18, the server 1800 provided in the affiliated store may communicate with a call terminal 1900 used by a customer through at least one or more telephone networks (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network. A call channel processing unit 1805 for connecting a channel, a voice guide unit 1815 for providing a predetermined telephone order and voice guidance for payment processing according to the present invention in connection with the call channel processing unit 1805, and the call In response to the voice guidance in conjunction with the channel processing unit 1805, a key signal generated by the call terminal 1900 is received, and the predetermined information is extracted by reading the key signal using a dual tone multi-frequency (DTMF) scheme. It is characterized by comprising a signal sound processing unit 1820.

The call channel processing unit 1805 is assigned a predetermined telephone number for connecting at least one call terminal 1900 and a predetermined call channel, and corresponds to the telephone network and / or VoIP network based on the telephone number. The call channel may be connected to at least one call terminal 1900 by performing a predetermined call processing procedure.

Those skilled in the art will be familiar with certain call processing procedures corresponding to the telephone network and / or the VoIP network, and thus a detailed description thereof will be omitted.

The voice guide unit 1815 is connected to at least one or more call terminals 1900 through the call channel processing unit 1805, and then authenticates and / or products to the call terminal 1900 through the call channel. Characterized in that it outputs a predetermined voice guidance for order processing, and also outputs the voice guidance for payment processing using the call terminal 1900 according to the present invention to the call terminal 1900 through the call channel. Characterized in that.

According to an exemplary embodiment of the present invention, the voice guidance unit 1815 is based on the product information stored in a predetermined storage medium 1840 and the payment amount information corresponding to the product through the call terminal 1900 Extract a predetermined voice announcement (eg, extract from a predetermined voice announcement storage database (not shown)), and / or generate (for example, generate a voice guidance comment in a TTS (Text To Speech) method) After that, it is preferable to output the voice announcement to the call terminal 1900 through the call channel.

According to another exemplary embodiment of the present invention, the voice guide unit 1815 outputs voice guidance of a counselor corresponding to a predetermined call center terminal (and / or affiliated phone) to the call terminal 1900 through the call channel. The present invention is not limited thereto.

The tone processing unit 1820 reads the key tone using the DTMF scheme when a DTMF tone is generated from the call terminal 1900 and received through the call channel in response to the voice guidance. (Eg, “0 to 9”, “*”, “#”, etc.) are identified and extracted.

In addition, the signal tone processing unit 1820 may receive the purchase product information in the form of a key signal tone transmitted from the call terminal 1900, the purchase product information through the voice guide unit 1815 through the call terminal ( A purchase product in the form of voice information through a voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), and / or a purchase product selection number corresponding to the voice announcement provided at 1900. It is preferable to include the information, thereby extracting the product information (and / or payment amount information associated with the product information) corresponding to the purchased product information from the predetermined storage medium 1840.

According to another exemplary embodiment of the present invention, the signal processing unit 1820 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal 1900, whereby the present invention It is not limited.

The signal tone processor 1820 may further receive predetermined discount information transmitted from the call terminal 1900, and the discount information may include a coupon number corresponding to a predetermined discount coupon possessed by the customer. It is preferable to include, and thereby the payment amount can be discounted.

In addition, the signal processing unit 1820 may further receive a predetermined product delivery address information transmitted from the call terminal 1900, the product delivery address information through the voice guide unit 1815 through the call terminal 1900 The product delivery destination selection number corresponding to the voice announcement (for example, a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement) And delivery address information (eg, in the form of voice information) through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), or / or a detailed address ("address / call") number, etc.). , Customer's address), thereby securing an address to which the purchased product will be delivered.

Those skilled in the art to which the present invention pertains will understand the method for generating the DTMF type key beep and the method for reading and confirming and extracting predetermined information by reading the key beep. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the information extracted based on the key tone of the DTMF method may be extracted through a predetermined data channel based on the call channel instead of the key tone. The present invention is not limited thereby.

According to the present invention, the server 1800 provided in the affiliated store connects the call terminal 1900 to the voice call channel in association with a telephone network and / or a VoIP network component to which the call terminal 1900 is connected during the voice call. Add (or assign) a predetermined data channel for payment processing, and / or open a data channel to which the voice call channel is added (or assign) for payment processing using the call terminal 1900 And / or a channel controller 1810 for converting the voice call channel into a data channel for payment processing using the call terminal 1900.

According to an embodiment of the present invention, when the telephone network and / or VoIP network connecting the call terminal 1900 and the server 1800 simultaneously support a voice call channel and a data channel, the channel controller 1810 may call the call. A predetermined data channel for payment processing using the call terminal 1900 is added (or assigned) to a connected call channel for voice call between the terminal 1900 and the server 1800.

According to another exemplary embodiment of the present invention, a telephone network and / or a VoIP network connecting the call terminal 1900 and the server 1800 simultaneously support a voice call channel and a data channel, and the call terminal 1900 and the server ( When a predetermined data channel is added (or assigned) to a connected call channel for voice call between 1800, the channel controller 1810 is a call channel connected between the call terminal 1900 and the server 1800. The data channel added to (or assigned to) is opened for payment processing using the call terminal 1900.

According to another exemplary embodiment of the present invention, when the telephone network and / or VoIP network connecting the call terminal 1900 and the server 1800 do not simultaneously support a voice call channel and a data channel, the channel controller 1810. The method may convert a connected communication channel for a voice call between the call terminal 1900 and the server 1800 into a predetermined data channel for payment processing using the call terminal 1900.

According to the present invention, the server 1800 provided in the affiliated store is connected to the voice call channel by the channel controller 1810 from the call terminal 1900 through the data channel added (or assigned) and / or switched. And an information receiver 1825 for receiving the transmitted payment means information.

According to an embodiment of the present invention, the payment means information is credit card payment read from the MS card and / or contact IC card and / or contactless IC card through at least one card reader provided in the call terminal (1900) And at least one or more means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information. Card payment method information (e.g., credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information) of the payment method information may be a predetermined card number and And / or TRACK II information including expiration date, etc., wherein the transfer payment means information includes a predetermined financial account number and And / or customer-owned financial account information including branch number and / or account opening date.

According to an exemplary embodiment of the present invention, the payment means information is arranged in a predetermined information processing manner in the call terminal 1900 in order to prevent exposure to the outside from eavesdropping and / or interception and / or hacking. And / or number structure), and then may be transmitted through the data channel. In this case, the information receiver 1825 may receive the processed information through the data channel to restore the original payment means information. In this way, security of the payment means information may be provided.

According to another exemplary embodiment of the present invention, after the payment means information is encrypted with a predetermined encryption method in the call terminal 1900 to prevent exposure to the outside from eavesdropping and / or interception and / or hacking, In this case, the information receiving unit 1825 may receive the encrypted information and decrypt the decryption method by using a decryption method corresponding to the encryption method, thereby restoring the payment means information. High security of the means information can be provided.

In addition, in the case of payment means information transmitted and received through the data channel, a checksum may be further included in order to prevent a transmission and reception error, thereby preventing transmission and reception errors with respect to the payment means information.

In addition, the information receiving unit 1825 may receive predetermined purchase product information from the call terminal 1900 through the data channel, and the purchase product information is provided to the call terminal 1900 through the data channel. It is preferable that the purchase product selection information corresponding to at least one or more product information is included, and / or when the call channel supports a voice call channel and a data channel at the same time, the purchased product information is the voice guide unit 1815. Voice information through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone) is made, including a purchase product selection number corresponding to the voice announcement provided to the call terminal (1900) through) It is possible to include information on the selection of the purchased goods in the form of information, whereby the predetermined storage medium 1840 The product information (and / or payment information associated with product information) corresponding to group purchase information is extracted.

According to another exemplary embodiment of the present invention, the information receiver 1825 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal 1900 through the data channel, Thereby, this invention is not limited.

In addition, the information receiver 1825 may further receive predetermined discount information transmitted from the call terminal 1900 through the data channel, and the discount information is stored in a predetermined discount coupon possessed by the customer. It is preferable to include corresponding coupon information, and / or coupon information provided in the customer-owned discount card, whereby the payment amount can be discounted.

In addition, the information receiving unit 1825 may further receive predetermined goods delivery information transmitted from the call terminal 1900 through the data channel, and the goods delivery information is provided in the call terminal 1900. Address information stored in a memory, and / or subscriber address information stored in a database (eg, subscriber information D / B) on a telephone network and / or a VoIP network to which the call terminal 1900 is connected, and / or the like. Alternatively, when the call channel supports a voice call channel and a data channel at the same time, the goods delivery information is a goods delivery destination selection number corresponding to the voice announcement provided to the call terminal 1900 through the voice guide unit 1815. For example, a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to a voice announcement, a detailed address ("address / number") number, etc.) Including And / or delivery information (eg, a customer's address) in the form of voice information through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), whereby the purchase is made. The address to which the goods will be delivered is secured.

According to the present invention, the server 1800 provided in the affiliated store stores the encrypted payment means information when the payment means information received through the information receiving unit 1825 is encrypted by at least one or more encryption methods. And a decoder 1830 for decoding by at least one decoding method corresponding to the above.

According to the exemplary embodiment of the present invention, when the payment means information is encrypted using a symmetric key (or secret key) method, the decryption unit 1830 may perform the payment by a decryption method corresponding to the symmetric key (or secret key) method. Preferably, the means information is decrypted, and / or when the payment means information is encrypted using a public key method, the decryption unit 1830 decodes the payment means information by a decryption method corresponding to the public key method. Preferably, and / or when the payment means information is encrypted by the electronic envelope method, the decryption unit 1830 preferably decrypts the payment means information by a decryption method corresponding to the electronic envelope method, and / or When the payment means information is encrypted by the key exchange method, the decryption unit 1830 is a decryption method corresponding to the key exchange method To decrypt the information unit is preferred.

According to the present invention, when a predetermined payment means information is received through the information receiving unit 1825, the server 1800 provided in the affiliated store performs payment processing through the payment means information from a predetermined storage medium 1840. Characterized in that it comprises an information confirmation unit 1835 for confirming the merchant information for.

According to one embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information. If applicable, the information checking unit 1835 may be assigned to a merchant number (eg, a unique number assigned to the merchant for processing card payment) and / or a terminal number (eg, card payment processing) from the storage medium 1840. It is preferable to check the merchant information including at least one or more of the unique number provided in the merchant terminal (or payment terminal) provided in the merchant for.

According to another exemplary embodiment of the present invention, when the payment means information corresponds to the account transfer payment means information, the information checking unit 1835 is the merchant account information (for example, the financial account of the merchant) from the storage medium 1840 Number, and / or branch number, and / or account holder information, etc.).

If the affiliated store is a franchise company and a server 1800 for payment processing using the call terminal 1900 is provided in the call center of the franchise company, the affiliated store information is affiliated store information corresponding to the franchise company, and And / or affiliated store information corresponding to a franchise chain store that manufactures and packages a product corresponding to the purchased product information to the customer and delivers the product to the customer, and thus, the present invention is not limited thereto.

According to the present invention, the server 1800 provided in the affiliated store includes payment means information received through the information receiving unit 1825 and payment confirmed by a predetermined storage medium 1840 by the information checking unit 1835. And an information transmitter 1850 for transmitting the information to the bansa server 1855 through a predetermined payment network.

According to the present invention, the server 1800 provided in the affiliated store is provided with an order processing unit 1845 for performing an order processing for the payment processed product when the payment processing through the payment means information is normally performed. It is characterized by.

According to an embodiment of the present invention, when the information receiving unit 1825 receives the order processing information including the purchase product information and product delivery information from the call terminal 1900 of the customer, the order processing unit 1845 is the Order processing terminal of the department that manufactures and packaged the purchased product in the affiliated store through the predetermined communication means 1880, the order processing information including the payment processing details and the purchase product information and product delivery address information to the customer And / or when the affiliate is a franchise, manufacturing and packaging the purchased goods through predetermined communication means 1880, order processing information including the payment processing details, the purchased goods information, and the goods delivery address information. It is preferable to provide to the order processing terminal of the chain stores to deliver to the customer.

According to another exemplary embodiment of the present invention, when the information receiving unit 1825 receives only purchase goods information from the customer's call terminal 1900 in the payment processing using the call terminal 1900, the order processing unit 1845 Is further received product delivery address information from the call terminal 1900 through the voice guidance unit 1815 (and / or call center terminal, and / or merchant phone) to include the purchase product information and product delivery address information Secures the processing information, and manufactures and packages the purchased product in the affiliated store through order processing information including the payment processing details, the purchased product information, and the product delivery information, through predetermined communication means 1880, to the customer. Provided to the order processing terminal of the shipping department, and / or if the merchant is a franchise, the payment processing history and the purchase product information and goods delivery It is desirable to provide a processing order information including information to the order processing of the chain terminal by the purchased product manufacturing and packing delivered to the customer through a predetermined communication means (1880).

According to another exemplary embodiment of the present invention, when the information receiving unit 1825 receives only purchase product information from the customer's call terminal 1900 in the payment processing using the call terminal 1900, the order processing unit 1845 ) Provides the payment processing details and the purchased product information to an order processing terminal of a department that manufactures and packages the purchased product in the affiliated store through a predetermined communication means 1880 and delivers it to the customer, and / or When the affiliated store is a franchise, a chain store that manufactures and packages the purchased product through a predetermined communication means 1880 and delivers the order processing information including the payment processing history, the purchased product information, and the product delivery address information to the customer. After providing to the order processing terminal of the customer, the call channel between the call terminal 1900 and the server 1800 of the call terminal 1900 and the order processing terminal By changing to its traffic channel, it is possible that in the terminal to re-jumuncheo further obtain the product shipping information, and in addition it is possible to perform various types of processing procedures according to the order of those of ordinary skill in the art intended.

Referring to FIG. 18, the bansa server 1855 includes an information receiving unit 1865 for receiving the payment means information and the payment information from a server 1800 provided at the affiliate store through a predetermined payment network, and the information receiving unit ( On the basis of the payment means information and payment information received through 1865, through the payment means corresponding to the payment means information generating a full text for generating a predetermined payment approval request full text for the payment processing corresponding to the payment amount; The payment unit 1865 transmits the payment approval request text to the payment server 1875 corresponding to the payment means through a predetermined payment network, and the payment processing corresponding to the payment approval request text from the payment server 1875. Characterized in that it comprises a specialized transmission and reception unit (1870) for receiving a payment approval message including the details.

According to the exemplary embodiment of the present invention, when the payment means information received through the information receiving unit 1865 corresponds to credit card payment means information, the full text of the payment approval request generated by the full text generation unit 1865 is the credit. It is preferable to include a full credit card-based payment approval request corresponding to the card payment means.

Alternatively, when the payment means information received through the information receiving unit 1865 corresponds to the check card payment means information, the full text of the payment approval request generated by the full text generation unit 1865 is checked corresponding to the check card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information received through the information receiving unit 1865 corresponds to the debit card payment means information, the full text of the payment approval request generated by the full text generation unit 1865 may be a debit corresponding to the debit card payment means. It is desirable to include a full card-based payment approval request.

Alternatively, when the payment means information received through the information receiving unit 1865 corresponds to the prepaid card payment means information, the full text of the payment approval request generated by the full text generation unit 1865 prepaid corresponding to the prepaid card payment means. It is desirable to include a full card-based payment approval request.

According to another exemplary embodiment of the present invention, when the payment means information received through the information receiving unit 1865 corresponds to the transfer payment means information, the full text of the payment approval request generated by the full text generation unit 1865 is It is preferable to include a full financial transaction request for withdrawing the payment amount from the customer's financial account and transfers it to the financial account of the merchant.

The special transmission / reception unit 1870 transmits the full payment approval request message generated by the specialty generation unit 1865 to a payment server 1875 corresponding to the payment means through a predetermined payment network, thereby providing the payment approval request. Characterized in that the request for payment approval through a full text, and when the payment approval message corresponding to the full payment approval request message is transmitted from the payment server (1875), characterized in that it is received through the payment network.

Herein, when the payment means information corresponds to credit card payment means information, the payment server 1875 includes a credit card payment server 1875 of a card company (or financial company) that issued the credit card to the customer. And / or when the payment means information corresponds to check card payment means information, including a check card payment server 1875 of a card company (or financial company) that issued the check card to the customer, and / or Or if the payment means information corresponds to the debit card payment means information, and comprises a debit card payment server (1875) of the card company (or financial company) that issued the debit card to the customer, and / or the payment means If the information corresponds to the prepaid card payment means information, includes a prepaid card payment server 1875 of the card company (or financial company) that issued the prepaid card to the customer. And / or when the payment means information corresponds to the wire transfer payment means information, includes a financial server (eg, a ledger server) of a financial company (bank) that opened a financial account for the account transfer to the customer. It is done by

In addition, the professional transmission / reception unit 1870 checks the payment processing details included in the payment approval message when the payment approval message corresponding to the payment approval request message is received through the payment network, the payment server 1875. The method further comprises checking whether the payment processing using the payment means information provided from the call terminal 1900 is normally processed or whether a payment error has occurred.

If a predetermined payment error occurs in the payment processing using the payment means information provided from the call terminal 1900, the specialized transmission / reception unit 1870 receives the call terminal 1900 of the customer through the voice guide unit 1815. After outputting payment error information, the payment processing process using the call terminal 1900 according to the present invention is terminated.

According to an exemplary embodiment of the present invention, the specialized transmission / reception unit 1870 preferably transmits the payment approval message to the server 1800 provided in the affiliated store.

According to another exemplary embodiment of the present invention, the specialized transmission / reception unit 1870 extracts a predetermined payment processing history from the payment approval message, and transmits the extracted payment processing details to the server 1800 provided in the affiliated store. It is desirable to.

According to another embodiment of the present invention, according to the intention of the person skilled in the art, directly transmitted to the call terminal 1900, and / or extract a predetermined payment processing history from the payment approval full text, and the extracted payment processing history It is possible to directly transmit to the call terminal 1900, whereby the present invention is not limited.

Fig. 19 is a diagram showing the functional configuration of a call terminal 1900 according to another embodiment of the present invention.

In more detail, FIG. 19 illustrates one embodiment of a call terminal 1900 for payment processing using the call terminal 1900 according to the present invention. While referring to and / or modifying FIG. 19, it is possible to infer various call terminal 1900 functional configurations for payment processing using the call terminal 1900, but the present invention includes all the implementation methods inferred above. It is not limited to the implementation method shown in FIG.

Referring to FIG. 19, the call terminal 1900 basically includes a control unit 1905, a memory unit 1950, a key input unit 1910, a voice processing unit 1915, a screen output unit 1920, and a signal tone processing unit 1935. ) And a communication processor 1940 and a power supply unit 1930 for supplying power to the call terminal 1900, and a card reader unit 1925 for payment processing using the call terminal 1900 according to the present invention. And / or a security application module 1945 or the like, and may further include at least one or more functional components (not shown) according to the intention of those skilled in the art.

The control unit 1905 basically controls the key input unit 1910, the voice processing unit 1915, the screen output unit 1920, and the communication processing unit 1940, so that a predetermined telephone input through the key input unit 1910 is performed. Connect a voice call channel with at least one other call terminal 1900 (or server) through a telephone network and / or a VoIP network connected to the communication processor 1940 based on the number, and through the voice processor 1915. Converting input and output voice signals into electrical signals (and / or digital signals) to operate and control a voice call function to transmit and receive through the voice call channel. At least one processor and execution memory (eg, a register) including a Central Processing Unit (CPU) / MPU (Micro Processing Unit) included in the call terminal 1900 to realize a function. And / or a RAM (Random Access Memory) and a bus (BUS) for inputting and outputting predetermined data, and to the call terminal 1900 in order to realize the function of the call terminal 1900 by software. Program routines and / or program data, which are loaded from the provided recording medium into the execution memory and are arithmetic and processed by the processor, are collectively referred to.

In addition, the control unit 1905 controls the communication processing unit 1940 to control data channels defined in a telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network connected to the communication processing unit 1940. Connecting a predetermined data channel for data communication with at least one terminal (or server) based thereon, and operating and controlling a function of transmitting and receiving at least one digital information (or digital data) through the data channel. To this end, at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data to the call terminal 1900 for the data communication in hardware. And executing the data from a recording medium provided in the call terminal 1900 for the data communication in software. Is loaded into the memory is characterized in that the generic calculation processing routine program and / or program data by the processor.

In addition, the control unit 1905 controls the predetermined card reader unit 1925 provided in the call terminal 1900 for the payment processing using the call terminal 1900, through the card reader unit 1925. And controlling and reading predetermined payment means information from a customer's own card and transmitting the predetermined payment means information to the server. For this purpose, the call terminal 1900 for payment processing using the call terminal 1900 in hardware. And at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data, wherein the software is used for payment processing using the call terminal 1900. A program routine and / or a program routine loaded into the execution memory from the recording medium included in the call terminal 1900 and processed by the processor. Characterized in that the general term for program data.

Therefore, the call terminal 1900 shown in FIG. 19 is loaded into the execution memory from the recording medium provided in the call terminal 1900 and processed by the processor for payment processing using the call terminal 1900. The program routines to be processed are described in block form in the control unit 1905 for convenience.

The memory unit 1950 inputs and outputs when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the call terminal 1900 is performed. General term of non-volatile memory for storing information or data), including at least hardware-based electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD). It includes one or more storage means, the control unit 1905 is a predetermined program routine and program data required for performing a predetermined control function (for example, the program routine is input or output to perform a predetermined function) Data) is stored.

According to an embodiment of the present invention, the memory unit 1950 stores a predetermined encryption key for payment processing using the call terminal 1900.

The key input unit 1910 may include at least one key button including at least one number key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or operation mode of the call terminal 1900 controlled by the controller 1905. When predetermined information (or signal) is input from the key button, a key event corresponding to the input information (or signal) is generated and the generated key event is provided to the controller 1905.

When the current input mode and / or operation mode of the call terminal 1900 is a voice call mode, the controller 1905 obtains predetermined key data corresponding to the key event and provides the predetermined key data to the tone processor 1935. The tone processing unit 1935 generates a key tone corresponding to the key data according to a dual tone multifrequency (DTMF) scheme.

When the current input mode and / or operation mode of the call terminal 1900 is a data communication mode, the controller 1905 acquires predetermined key data corresponding to the key event, and then information corresponding to the key data. And performing a processing procedure, and / or acquiring an instruction for executing a predetermined function matched with the key event, and then performing a function corresponding to the instruction.

According to the exemplary embodiment of the present invention, the key input unit 1910 and the key input device including at least one or more key buttons interoperate with each other to perform a function of key input means provided in the call terminal 1900.

According to the exemplary embodiment of the present invention, the key input device interworking with the key input unit 1910 may include a keypad device having at least one numeric key, a letter key ('*', '#'), and a function key, and / Or at least one or more keyboard devices including at least one numeric key, character keys (eg, English character keys, and / or Korean character keys) and function keys.

The voice processor 1915 converts a predetermined voice input from a predetermined voice input device (for example, a microphone) included in the call terminal 1900 into a predetermined voice signal (or an electrical signal), and the communication processor 1940. ) Generates a predetermined voice data by encoding the voice coding scheme corresponding to the telephone network and / or VoIP network connected to the) and provides the voice data to the controller 1905, for this purpose The processor 1915 is preferably provided with a predetermined vocoder and a codec.

Thereafter, the controller 1905 transmits the generated voice data to the telephone network and / or the VoIP network through the communication processor 1940.

According to an embodiment of the present invention, when the communication processing unit 1940 is connected to a general telephone switching network (or intelligent network), the voice processing unit 1915 may transmit the voice signal (or electrical signal) to the general telephone switching network (or intelligent network). It is preferable to generate the voice data by encoding by using a coding scheme that can be transmitted through).

According to another exemplary embodiment of the present invention, when the communication processing unit 1940 is connected to a mobile communication network, the voice processing unit 1915 may transmit the voice signal (or electrical signal) through the mobile communication network. Division Multiple Access) It is preferable to generate the speech data by encoding in a coding scheme corresponding to the stack.

According to another exemplary embodiment of the present invention, when the communication processor 1940 is connected to a VoIP network, the voice processor 1915 may transmit a voice signal (or an electrical signal) through the VoIP network. Preferably, the voice data is generated by encoding with a coding scheme corresponding to a stack, wherein the coding scheme corresponding to the VoIP network is an H.323 protocol standard and / or an Internet Engineering Task defined by the International Telecommunication Union (ITU). It is preferable to include at least one or more of the Session Initiation Protocol (SIP) protocol specifications defined by the Force.

According to the exemplary embodiment of the present invention, the voice processing unit 1915 and the voice input device interoperate with each other to perform a function of voice input means for receiving a voice signal for voice call through the telephone network and / or the VoIP network.

When voice data encoded by a predetermined encoding method is received through the communication processor 1940, the controller 1905 provides the voice data to the voice processor 1915, at which time the voice processor 1915 Decodes the voice data by a voice encoding scheme corresponding to a telephone network and / or a VoIP network to which the communication processor 1940 is connected to generate a predetermined voice signal (or an electrical signal), and generates the voice signal (or Electrical signal) is output through a predetermined voice output device (for example, a speaker) provided in the call terminal 1900. For this purpose, the voice processing unit 1915 is provided with a predetermined vocoder and a codec. desirable.

When the communication processing unit 1940 is connected to a general telephone switching network (or an intelligent network) according to an exemplary embodiment of the present invention, the voice processing unit 1915 may transmit the voice data received through the communication processing unit 1940 to the general telephone. It is preferable to generate the voice signal (or electrical signal) by decoding by encoding method corresponding to the switching network (or intelligent network).

According to another exemplary embodiment of the present invention, when the communication processing unit 1940 is connected to a mobile communication network, the voice processing unit 1915 uses the CDMA corresponding to the mobile communication network to receive voice data received through the communication processing unit 1940. It is preferable to generate the speech signal (or electrical signal) by decoding by stack-based encoding.

According to another exemplary embodiment of the present invention, when the communication processing unit 1940 accesses the VoIP network, the voice processing unit 1915 corresponds to the VoIP network by receiving voice data received through the communication processing unit 1940. It is preferable to generate the voice signal (or electrical signal) by decoding by encoding method, wherein the encoding method corresponding to the VoIP network is at least one of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable that the above specification is included.

According to the exemplary embodiment of the present invention, the voice processing unit 1915 and the voice output device interoperate with each other to perform a function of voice output means for outputting a voice signal for voice call through the telephone network and / or the VoIP network.

The screen output unit 1920 is a liquid crystal display (LCD) by the control unit 1905 while the call terminal 1900 performs a voice call function and / or a payment processing function using the call terminal 1900. And / or at least one or more information or data which is predefined or defined in real time to be output to a predetermined display device including a Cathode Ray Tube (CRT) and / or a CRT (Cathode Ray Tube). The screen output unit 1920 and the screen output device interoperate with each other to perform a function of a screen output unit provided in the call terminal 1900.

Predefined information or data to be output from the call terminal 1900 to the screen output device may include key data input through the key input unit 1910 and / or components provided in the call terminal 1900. Information (or data) stored or generated by the information, information (or data) transmitted / received through the communication processing unit 1940, and / or (or data) corresponding to a predetermined operation result performed by the call terminal 1900. It comprises at least one.

According to a preferred embodiment of the present invention, the screen output unit 1920 of the screen output means for outputting the payment processing screen according to each payment processing step to the screen output device for payment processing using the call terminal (1900) It is desirable to perform the function.

The tone processing unit 1935 is a predetermined number key ("0 ~ 9") and / or letter key ('*) through the key input unit 1910 while the operation mode of the call terminal 1900 is the voice call mode ',' # 'Is input, generates a key tone corresponding to the input key data in a complex frequency code (DTMF) scheme, and the key tone is connected to the telephone network and / or to which the communication processing unit 1940 is connected. The voice encoding method may be encoded in a voice encoding scheme corresponding to a VoIP network and provided to the communication processor 1940.

According to an embodiment of the present invention, when the communication processing unit 1940 is connected to a general telephone switching network (or intelligent network), the voice processing unit 1915 may transmit the key tone through the general telephone switching network (or intelligent network). It is preferable to generate the speech data by encoding by a coding scheme.

According to another exemplary embodiment of the present invention, when the communication processing unit 1940 is connected to a mobile communication network, the voice processing unit 1915 may transmit a code division multiple access (CDMA) stack capable of transmitting the key tone through the mobile communication network. It is preferable to generate the speech data by encoding by a coding scheme corresponding to.

According to another exemplary embodiment of the present invention, when the communication processing unit 1940 accesses a VoIP network, the voice processing unit 1915 encodes corresponding to a VoIP protocol stack capable of transmitting the key tone through the VoIP network. It is preferable to generate the voice data by encoding in a scheme, wherein the encoding scheme corresponding to the VoIP network includes at least one or more of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable.

The communication processor 1940 connects the call terminal 1900 to a predetermined telephone network and / or a VoIP network, and at least one other call terminal 1900 according to a call processing procedure defined in the telephone network and / or the VoIP network. (Or a server) and the voice call channel is characterized in that the connection.

According to an exemplary embodiment of the present invention, the communication processing unit 1940 connects the call terminal 1900 to a general telephone switching network (or an intelligent network) in a physical network configuration (eg, the call terminal 1900 is connected to a general telephone switching network). (Or a network configuration connecting the switch and the wired communication section provided on the intelligent network), by performing a call processing procedure corresponding to the communication protocol standard defined in the general telephone switching network (or intelligent network) It is preferable to connect a voice call channel with at least one or more other call terminals 1900 (or a server).

According to another exemplary embodiment of the present invention, the communication processor 1940 may include a physical network configuration (eg, the base station provided on the mobile communication network) for connecting the call terminal 1900 to a mobile communication network. And a network configuration connecting a wireless communication section corresponding to the CDMA stack), and performing at least one call processing procedure corresponding to a communication protocol standard defined in the mobile communication network (1900). It is preferable to connect the voice communication channel with the server (or the server).

According to another exemplary embodiment of the present invention, the communication processing unit 1940 may include a physical network configuration (for example, VoIP provided with the call terminal 1900 on the VoIP network) connecting the call terminal 1900 to the VoIP network. Network configuration that connects wired communication segments through the Gateway and / or VoIP Gatekeeper and the Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) protocol layer implemented on top of the UDP / IP protocol stack. It is preferable to include a, it is preferable to connect the voice call channel with at least one or more other call terminal (1900) (or server) by performing a call processing procedure corresponding to the communication protocol standard defined in the VoIP.

In addition, the communication processor 1940 may transmit and receive voice data encoded with at least one other call terminal 1900 (or server) encoded in a coding scheme corresponding to the telephone network and / or the VoIP network through the voice call channel. It features.

According to an embodiment of the present invention, when the communication processing unit 1940 is connected to a general telephone switching network (or intelligent network), the communication processing unit 1940 is encoded by an encoding scheme corresponding to the general telephone switching network (or intelligent network). It is preferable to transmit and receive at least one voice data.

According to another embodiment of the present invention, when the communication processor 1940 is connected to a mobile communication network, the communication processor 1940 transmits and receives at least one voice data encoded by a corresponding coding scheme corresponding to the mobile communication network. It is desirable to.

According to another exemplary embodiment of the present invention, when the communication processor 1940 accesses a VoIP network, the communication processor 1940 transmits and receives at least one voice data encoded by an encoding scheme corresponding to the VoIP network. It is preferable.

In addition, when it is possible to add (or assign) a predetermined data channel to the voice call channel, the communication processor 1940 assigns a predetermined data channel to the voice call channel connected through a predetermined telephone network and / or a VoIP network. And perform data communication with at least one other call terminal 1900 (or server) to which the call channel is connected through the added (or assigned) data channel.

According to an embodiment of the present invention, when the communication processing unit 1940 is connected to a general telephone switching network (or an intelligent network), the communication processing unit 1940 uses a predetermined data channel defined in the general telephone switching network (or an intelligent network). It is preferable to add (or assign) to the voice call channel and perform predetermined data communication with the at least one other call terminal 1900 (or server) connected to the call channel through the data channel in addition to the voice call. .

According to another embodiment of the present invention, when the communication processing unit 1940 accesses a mobile communication network, the communication processing unit 1940 adds (or assigns) a predetermined data channel defined in the mobile communication network to the voice communication channel. In addition to the voice call, it is preferable to perform predetermined data communication with at least one other call terminal 1900 (or server) to which the call channel is connected through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 1940 connects to a VoIP network, the communication processing unit 1940 adds a predetermined data channel defined in the VoIP network to the voice call channel (or And a predetermined data communication in addition to the voice call with at least one other call terminal 1900 (or a server) to which the call channel is connected through the data channel.

In addition, the communication processor 1940 connects at least one terminal (or server) and a predetermined data channel (or communication channel) through a predetermined telephone network and / or a VoIP network independently of the voice call channel. And, it characterized in that a predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

When the communication processing unit 1940 is connected to a general telephone switching network (or an intelligent network) according to an embodiment of the present invention, the communication processing unit 1940 is a predetermined data communication standard defined in the general telephone switching network (or intelligent network). According to the present invention, it is preferable to connect a predetermined data channel (or communication channel) with at least one terminal (or server), and predetermined data communication with at least one terminal (or server) through the data channel (or communication channel). Do this.

According to another embodiment of the present invention, when the communication processor 1940 accesses a mobile communication network, the communication processor 1940 may include at least one terminal according to a CDMA stack based data communication standard defined in the mobile communication network. Or a server) and a predetermined data channel (or communication channel), and perform a predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

According to another embodiment of the present invention, when the communication processing unit 1940 accesses a VoIP network, the communication processing unit 1940 may include at least one or more data according to a VoIP protocol stack based data communication standard defined in the VoIP network. It is preferable to connect a predetermined data channel (or communication channel) with a terminal (or server), and perform predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

According to the present invention, the call terminal 1900 reads predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 1900 according to the present invention. It is characterized by comprising a).

That is, the customer receiving payment processing using the call terminal 1900 according to the present invention through the call terminal 1900, based on the ISO / IEC 7810 standard MS (Magnetic Stripe) card, and / or ISO / IEC Have (or own) a contact IC card (or wireless IC chip) based on the 7816 standard and / or at least one contactless IC card (or wireless IC chip) based on the ISO / IEC 14443 standard. The card reader 1925 may provide an interface for reading at least one payment means information from the customer-owned card.

According to an embodiment of the present invention, the card reader unit 1925 is an MS reader unit providing an interface between the MS card and the call terminal 1900, and / or the contact IC card and the call terminal 1900. And a contact IC reader unit providing an interface between the contactless IC reader and / or a contactless IC reader unit providing an interface between the contactless IC card and the call terminal 1900.

The MS reader unit is a card reader unit 1925 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. It is characterized by interfacing the predetermined payment means information to the call terminal 1900 from at least one or more tracks (for example, track II area) provided in the MS of the MS card using the loaded.

The contact IC reader unit is a card reader unit 1925 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies the power to the IC chip of the IC card through the contact point, and the predetermined payment means information from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) It is characterized in that the interface to the call terminal (1900).

The contactless IC reader unit is a card reader unit 1925 based on ISO / IEC 14443. The contactless IC reader unit uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, and predetermined payment means information from the IC chip through the half-duplex transaction using the APDU It is characterized in that the interface to the call terminal (1900).

According to the method of the present invention, the card reader unit 1925 is credit card payment means information, and / or check card payment means information from the customer-owned card for payment processing using the call terminal 1900, and / Or it is preferable to read at least one or more of the debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information.

According to the present invention, the call terminal 1900 performs a payment processing procedure by reading predetermined payment means information from a predetermined customer card to provide a payment processing function using the call terminal 1900 according to the present invention. It is characterized by comprising a security application module (1945) (Scure Application Module (SAM)) for managing the thing.

The secure application module 1945 (SAM) is a confidentiality and / or authentication required by the call terminal 1900 to perform electronic payment and / or electronic payment using the card. And / or security requirements, including integrity and / or nonrepudiation, within the call terminal 1900 without using an authentication server (or payment server 1875) on the payment network. As a safety device for performing a secure and reliable structure, a predetermined message (information or information) processed in the process of the call terminal 1900 performing a predetermined security request function (for example, electronic payment and / or electronic payment function). Data, encrypt or decrypt, add an authenticator that prevents forgery (or tampering) of the message, or perform critical security in performing the security request function. A it characterized in that it performs the function of storing.

In general, the security application module 1945 preferably comprises a predetermined security application module 1945 inserter and a security application module 1945 chip, the security application module 1945 chip is a chip containing at least 8-bit CPU Application Specific Integrated Circuit (ASIC) chips (eg, PLCC 44-pin chips) and / or IC chips (eg, IC cards in the form of subscriber identity modules (SIMs)) with performance of 2 MIPS (Million Instructions Per Second) or more. It is preferable to comprise a.

In addition, the security application module 1945 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value, etc.) required for the call terminal 1900 to perform a predetermined security request function ) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, previous transaction cancellation protocols, collection protocols, SAM issuance protocols, (e-money company / card company) Registration protocol, authorization protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / disposal / initialization) / Reprocessing / cancellation command).

Referring to FIG. 19, the call terminal 1900 includes a mode checking unit 1955 for checking an operation mode of the call terminal 1900 for payment processing using the call terminal 1900 according to the present invention. As a result of checking by the mode confirmation unit 1955, when the call terminal 1900 is a payment mode using the call terminal 1900 according to the present invention, a predetermined payment is made from a predetermined customer-owned card through the card reader 1925. An information reading unit 1960 for reading means information and an information transmitting unit 1975 for transmitting the payment means information to the server through a data channel corresponding to a communication channel connected to the server through the communication processing unit 1940. It is characterized by comprising a).

According to another exemplary embodiment of the present invention, the communication processor 1940 directly connects the data channel with the predetermined bansa server 1855, and the information transmitter 1975 connects the bansa server through the data channel. It is possible to directly transmit the payment means information to 1855, whereby the present invention is not limited.

In addition, the call terminal 1900 further includes an information processing unit 1965 for processing an array of numbers (and / or number structure) to prevent the payment means information from intercepting and / or intercepting and / or hacking; Characterized in that made.

In addition, the call terminal 1900 is characterized in that it further comprises an encryption processing unit 1970 for encrypting in a predetermined encryption method in order to prevent the payment means information is intercepted and / or intercepted and / or hacked.

The mode checking unit 1955 checks whether an operation mode of the call terminal 1900 is a voice call mode, a voice call / data communication mode, or a data communication mode.

In addition, when the operation mode of the call terminal 1900 is a voice call / data communication mode, the mode checker 1955 indicates that a data channel added to (or assigned to) the voice call channel is data communication for general data communication. Mode or a data communication mode for payment processing according to the present invention.

If the check result indicates that the operation mode of the call terminal 1900 is a data communication mode for payment processing according to the present invention, the mode checking unit 1955 may display the screen output unit 1920 (and / or the voice processing unit 1915). By requesting to interface a customer-owned card through the card reader unit 1925 through)), the information reading unit 1960 acquires predetermined payment means information from the customer-owned card through the card reader unit 1925. Process to read.

In addition, when the operation mode of the call terminal 1900 is a data communication mode, the mode checking unit 1955 determines whether the data communication mode is a simple data communication mode or a data communication mode for payment processing according to the present invention. It is characterized by checking.

If the check result indicates that the operation mode of the call terminal 1900 is a data communication mode for payment processing according to the present invention, the mode checking unit 1955 may display the screen output unit 1920 (and / or the voice processing unit 1915). By requesting to interface a customer-owned card through the card reader unit 1925 through)), the information reading unit 1960 receives predetermined payment means information from the customer-owned card through the card reader unit 1925. Process to read.

When the call terminal 1900 is in the payment mode using the call terminal 1900 according to the present invention, the information reading unit 1960 checks the mode checking unit 1955 through the card reader unit 1925. And reading predetermined payment means information from a predetermined customer-owned card, wherein the payment means information includes credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and And / or at least one of prepaid card payment means information and / or bank transfer payment means information.

According to an embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information In the case of payment means information, the payment means information read out by the information reader 1960 through the card reader 1925 includes at least one or more numbers such as a 16-digit card number and / or an expiration date. It is preferable to make it.

In addition, when the payment means information corresponds to the account transfer payment means information, the payment means information read out by the information reader 1960 through the card reader 1925 is a 16-digit account number and / or branch number It is preferable to include at least one or more number arrangements, such as.

The information transmitting unit 1975 processes the payment means information read by the information reading unit 1960 into a predetermined data structure standard promised with the server, and transmits payment means information corresponding to the data structure standard. The processor 1940 processes the data to be transmitted to the server through the data channel.

For example, if the payment means information read out by the information reader 1960 is credit card payment means information, the information transmission unit 1975 has a data structure such as "1234123412341234 * 0407". Where "1234123412341234" corresponds to a 16-digit card number, "0407" corresponds to an expiration date corresponding to "month / year" for 2 digits each, and "*" distinguishes the card number from the expiration date. The credit card payment means information is transmitted from the communication processing unit 1940 to the server through the data channel.

According to the exemplary embodiment of the present invention, the information transmitter 1975 may further include a predetermined checksum for preventing a transmission / reception error for payment means information transmitted through the data channel. It is possible to prevent a transmission and reception error for the payment method information.

However, the payment means information as described above may be exposed to eavesdropping and / or eavesdropping and / or hacking, and to prevent this, the processing unit is a combination of the numbers included in the payment means information in the original payment means in the server And processing the data into a data structure capable of restoring the information, wherein the processed payment means information is restored to the original payment means information in the server.

For example, if the payment means information read by the information reading unit 1960 is credit card payment means information, the credit card payment means information is a 16-digit card number, such as "1234123412341234", and "0407" And a four-digit validity period, wherein the processing unit performs a bit operation (for example, an XOR operation) on the 16-digit card number with a predetermined 16-byte key value, such as an entirely different 16-digit number such as "1357246714692358". After generating the card number, the four-digit expiration date is combined to process payment means information such as "1357246714692358 * 0407", and the processed payment means information is stored in the server as "1234123412341234 * 0407". It is restored to the payment means information.

Of course, the method of processing the payment means information in the present invention is not limited to the above-described method, the above-described method is to the person having ordinary knowledge in the art to which the present invention belongs It is only one means for explaining the technical characteristic to process efficiently.

Alternatively, in order to prevent the payment means information from being exposed to eavesdropping and / or interception and / or hacking, the encryption processing unit 1970 may encrypt the payment means information by a predetermined encryption method. The encrypted payment means information is characterized in that the server is decrypted by a predetermined decryption method corresponding to the encryption method.

For example, if the payment means information read out by the information reading unit 1960 is credit card payment means information, the credit card payment means information is a 16-digit card number, such as "1234123412341234", and "0407". It includes a four-digit validity period, the encryption processing unit 1970 encrypts the 16-digit card number by a predetermined encryption method to generate a completely different 16-digit card number, such as "2472354698671135", and then "0407" Combining the four-digit expiration date, such as "2472354698671135 * 0407" generates encrypted payment means information, such as, the encrypted payment means information is decrypted by the server to the original payment means information, such as "1234123412341234 * 0407" Is restored.

Of course, the method of encrypting the payment means information in the present invention is not limited to the above-described manner, the illustrated method is to encrypt the payment means information to those of ordinary skill in the art to which the present invention belongs It is only one means for effectively explaining the technical characteristics.

20 is a diagram illustrating an MS card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

More specifically, FIG. 20 illustrates an embodiment of an MS card for storing payment means information read from a customer's own card through a card reader provided in a predetermined call terminal 1900. The illustrated MS card shows a case in which payment means information according to the present invention is stored in the Track II storage area in an MS card having a Track I storage area, a Track II storage area, and a Track III storage area. Those skilled in the art may refer to and / or modify this drawing 20 to display credit card payment means information, and / or check card payment means information in the Track II storage area of the MS card, and / or Debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is stored in the Track I storage area and / or Track III storage area. It will be possible to infer various implementation methods for storing the invention, but the present invention includes all implementation methods inferred from the above, and is not limited to the implementation methods illustrated in FIG.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 20, payment means information providing a payment processing function using the call terminal 1900 according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area. do.

21 is a view showing an IC card in which predetermined payment means information is stored according to another embodiment of the present invention.

More specifically, FIG. 21 illustrates an embodiment of an IC card for storing payment means information read from a customer's own card through a card reader provided in a predetermined call terminal 1900. A case where the payment means information according to the present invention is stored in the memory of the formula IC card, and a person having ordinary knowledge in the technical field to which the present invention pertains refers to the IC card by referring to and / or modifying the drawing 21. Various implementation methods for storing credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or wire transfer payment method information in a memory of Although it can be inferred that the present invention includes all the implementation methods inferred above, it is not limited to the implementation method illustrated in FIG.

Referring to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip of the IC card includes a power supply (VCC), a reset signal (RST), a clock signal (CLK), a ground (GND) and a program. I / O interfaces for communicating with (eg, exchanging commands or data to) the call terminal 1900 through contact points such as ramming power supplies (VPP) and / or input / output (I / O), central processing units (CPUs), MPUs A processor unit including at least one computing element including a micro process unit and / or a coprocessor, a read only memory (ROM), a random access memory (RAM), and an electrically erasable and programmable read (EPPROM). And a memory unit 1950 including at least one memory element including only memory, flash memory (FM), and the like, and in particular, at least one memory element (eg, a ROM) of the memory elements may be provided with an IC card internal resource. Chip Fortune Managing And Operating A Chip Operating System (COS) is stored, and when a predetermined power is supplied from the call terminal 1900 through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory unit 1950 is executed. Loaded into memory to control the overall operation of the IC chip, and communicates with the IC chip through an APDU (Application Protocol Data Unit) based on the clock frequency (eg, 3.57 MHz or 4.9 MHz) of the clock signal (CLK) contact point. Control information or data exchange between the terminals 1900.

According to the present invention, the memory unit 1950 of the IC chip terminates at least one or more programs that are loaded in the card terminal and is already driven, and drives a specific program among a plurality of programs stored in the card terminal, Or card storage information for executing a function of converting a screen configuration and / or a function set in the card terminal into a specific screen configuration and / or a specific function. The card storage information is stored in the terminal program. The data unit stores a data set corresponding to predetermined information or data that is read and read and / or used by the data unit, and is operated or operated by a computing function and an instruction set provided by a COS. Program routines used by programs (e.g., in the case of Javacard) JAVA Applet) is provided with a processing unit corresponding to an application including an instruction call code that interacts with the instruction set of the COS and execution code that is processed by a processor unit. In particular, the processing unit is configured through an APDU. Read a command provided from the terminal program via the input / output interface, and read or write at least one or more information or data stored in the data unit based on the read command, and as a result or read information or The data may be provided to the terminal program through the input / output interface through an APDU.

According to a preferred embodiment of the present invention, the memory unit 1950 of the IC chip includes a security structure based on ISO / IEC 10202. Accordingly, the memory unit 1950 may include a chip serial number (CSN); It consists of a protected area where the same secret information is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the like. It is preferably stored in an area excluding the protection area and the COS control area.

In addition, according to ISO / IEC 7816 and / or ISO / IEC 14443 ICC standards, the memory unit 1950 may include one master file (MF) corresponding to a root file, and a lower subordinate to the master file. An ATR (Aswer To Reset) including function information on at least one stored information, at least one dedicated file corresponding to each ICC stored information, and a dedicated file (DF) corresponding to each ICC stored information, and disposed below the dedicated file. Includes a file structure consisting of an element file (EF) containing the actual information and / or data for the smart card service, the card storage information for the present invention also includes the file structure as described above.

Referring to FIG. 21 according to an embodiment of the present invention, the data unit of the card storing information stores at least one payment means information for payment processing using the call terminal 1900 according to the present invention. The payment method information may be at least one of credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. It is made, including.

22 is a diagram showing a specialized structure for payment processing using the call terminal 1900 according to another embodiment of the present invention.

In more detail, FIG. 22 illustrates a payment approval request message generated by using the credit card payment means information provided from the call terminal 1900 and the payment information provided from the server in the bansa server 1855 shown in FIG. 18. As one of ordinary skill in the art to which the present invention pertains, the user can deduce a payment approval request specialized structure corresponding to other payment means information in addition to the credit card payment means information by referring to and / or modifying the drawing 22. It will be appreciated that the present invention encompasses all of the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

Referring to FIG. 22, the payment approval request full-text structure may include at least one specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and an end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The full text of the payment approval request may include a transaction classification item (eg, credit approval request, credit approval cancellation, etc.), a Terminal_ID item, a POS Entry Mode item, and a card reader provided in the call terminal 1900. TRACK II Data items corresponding to the payment means information obtained from a predetermined card through (for example, from the Primary Account Number (PAN) and Additional Data (AD) and / or Discretionary Data (DD) areas of TRACK II of the MS card. Credit card information obtained from a credit card file of an IC card or credit card information obtained), and an installment month item corresponding to credit card payment information after a predetermined file separator (File Separator, 0X1C); It includes the total amount item and service charge item, and also includes the Working Key Index item, password item, product code item, and document serial number item. Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

The Terminal_ID item in the payment approval request specialist information item corresponds to the affiliated store information, and the total amount item corresponds to total payment amount information corresponding to the purchase product information.

Further, the TRACK II Data item of the information on the payment approval request specialist is read out from a predetermined card reader provided in the call terminal 1900 and received by the bansa server 1855 as shown in FIG. 22. According to the payment means information corresponds to credit card information.

FIG. 23 is a diagram illustrating a method of encrypting and transmitting payment means information in a symmetric key (or secret key) method in a call terminal 1900 according to another exemplary embodiment of the present invention.

More specifically, FIG. 23 illustrates an embodiment of the present invention for encrypting and transmitting the payment means information by a symmetric key (or secret key) method in a call terminal 1900 having an encryption function as shown in FIG. 19. If one of ordinary skill in the art, with reference to the Figure 23 and / or modified in the call terminal 1900 on the telephone network and / or VoIP network the payment means information in a symmetric key (or secret key) method Various implementation methods of encryption may be inferred, but the present invention includes all of the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 23 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the call terminal 1900, the public certificate is the call terminal (1900) Stored in a predetermined memory unit 1950, and / or stored in an ID-000 type IC chip (or IC card) mounted or detached from the call terminal 1900, and / or the call terminal When a predetermined IC card reader is provided at 1900, it can be all stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit 1950 provided in the call terminal 1900 in addition to the public certificate, and / or the call terminal 1900 from a server. It may be included in the interface screen provided in, and / or embedded in the communication program to communicate with the server on the call terminal 1900, thereby semi-invention is not limited.

Referring to FIG. 23, when predetermined payment means information is read from the information reading unit 1960 of the call terminal 1900, the predetermined payment means information is provided to the encryption processing unit 1970 (2300). The encryption processing unit 1970 reads a predetermined symmetric key (or secret key) for encrypting payment means information from an authorized certificate provided in the communication terminal 1900 (2305), and reads the read symmetric key (or The payment means information is encrypted using a secret key (2310).

Here, the encryption function of the encryption processing unit 1970 is called E (Encryption), the symmetric key (or secret key) is k (key), the payment means information P (Plaintext), and the symmetric key (or secret). If the payment means information encrypted with the key) is C (Ciphertext), the encryption function of the encryption processing unit 1970 may be expressed by an expression such as "Ek (P) = C".

According to an embodiment of the present invention, the encryption processing unit 1970 encrypts the payment means information through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, It is preferable to include at least one or more of the International Data Encryption Algorithm (IDEA), and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When payment means information is encrypted using a symmetric key (or secret key) as described above, the communication processor 1940 transmits the encrypted payment means information to the server through a communication protocol defined on the telephone network and / or VoIP network. And transmit (2315).

24 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server by a symmetric key (or secret key) method according to another embodiment of the present invention.

More specifically, FIG. 24 decrypts the payment means information received from the call terminal 1900 having the encryption function as shown in FIG. 19 by a symmetric key (or secret key) method in the server as shown in FIG. As to a method of implementation, if the skilled in the art to which the present invention pertains, the encrypted payment means in the call terminal 1900 on the telephone network and / or VoIP network by referring to and / or modified in this figure 24 Various implementation methods for decrypting information in a symmetric key (or secret key) manner may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 24 according to an embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the server, and the public certificate is a predetermined database (not shown) interworking with the server. ), And the present invention is not limited thereto.

Referring to FIG. 24, the information receiving unit 1825 of the server receives the encrypted payment means information through the telephone network and / or the VoIP network and provides the encrypted payment means information to the decryption unit 1830 (2400). Is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 1830 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment means information from the authorized certificate provided in the server (2405), and extracts the extracted symmetric key (or The secret payment information is decrypted through a secret key (2410).

Here, the decryption function of the decryption unit 1830 is called D (Decryption), the payment means information encrypted with the symmetric key (or secret key) k (key) and the symmetric key (or secret key) is C ( Ciphertext), and when the decrypted payment means information is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 1830 is "Dk = P, or Dk (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment means information through the symmetric key (or secret key) by the decryption unit 1830, SEED, DES (Data Encryption Standard), Triple-DES, At least one of Skipjack and International Data Encryption Algorithm (IDEA) is preferably included. In addition, various types of decryption algorithms may be used, but the decryption algorithm matches the encryption algorithm used in the call terminal 1900. The present invention is not limited to the specific decoding algorithm.

When the payment means information encrypted through the symmetric key (or the secret key) is decrypted as described above, the decryption unit 1830 provides the decrypted payment means information to the information transmission unit 1975 (2415). The information transmitter 1975 transmits the payment means information to the bansa server 1855 through a predetermined payment network.

FIG. 25 is a diagram illustrating a method for encrypting and transmitting payment means information in a public key infrastructure in a call terminal 1900 according to another exemplary embodiment of the present invention.

In more detail, FIG. 25 illustrates an embodiment of the present invention in which a communication terminal 1900 having an encryption function as shown in FIG. 19 encrypts and transmits the payment means information in a public key infrastructure. In the case of a person with ordinary knowledge, various analogous methods of encrypting the payment means information in the call terminal 1900 on the telephone network and / or the VoIP network by referring to and / or modifying the figure 25 are inferred. As will be appreciated, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 25 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal 1900, and the public certificate is provided in the call terminal 1900. Stored in the memory unit 1950 of the device, and / or stored in an ID-000 type IC chip (or IC card) mounted on or detached from the call terminal 1900, and / or the call terminal 1900 In the case where a predetermined IC card reader is provided, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate to the call terminal 1900, and thus, the present invention is not limited thereto. .

Referring to FIG. 25, when the information reading unit 1960 of the call terminal 1900 reads predetermined payment means information, the information is provided to the encryption processing unit 1970 (2500). The encryption processing unit 1970 extracts a predetermined server side public key for encrypting the payment means information from the authorized certificate (2505), and encrypts the payment means information through the extracted server side public key ( 2510).

Here, the encryption function of the encryption processing unit 1970 is called E (Encryption), the server means public key k1 (key), the payment means information P (Plaintext), and the payment means encrypted with the server-side public key When the information is referred to as C (Ciphertext), the encryption function of the encryption processing unit 1970 may be expressed by an expression such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit 1970 encrypts the payment means information through the server-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm). , DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above. Preferably, various types of encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the payment means information through the RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by different prime factors of n and a b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the encryption function of the encryption processing unit 1970 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment means information is encrypted using the server-side public key as described above, the communication processor 1940 transmits the encrypted payment means information to the server through a network component on the telephone network and / or the VoIP network (2515). ).

FIG. 26 is a diagram illustrating a method of decrypting payment means information encrypted and received by a server according to another embodiment of the present invention using a public key infrastructure.

In more detail, FIG. 26 illustrates an embodiment of a method of decrypting the payment means information, which is encrypted and received from a call terminal 1900 having an encryption function, as shown in FIG. As is known in the art, a payment encrypted by the server-side public key in the call terminal 1900 on the telephone network and / or the VoIP network by referring to and / or modifying the drawing 26 is provided. Various implementation methods for decrypting the means information in a public key infrastructure scheme may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 26 according to an embodiment of the present invention, the server-side private key for decrypting the payment means information encrypted with the server-side public key in a public key infrastructure is preferably read from the public certificate provided in the server. In addition, the public certificate is preferably stored in a predetermined database (not shown) that interoperates with the server, whereby the present invention is not limited.

Referring to FIG. 26, the information receiving unit 1825 of the server receives encrypted payment means information through the telephone network and / or VoIP network and provides it to the decryption unit 1830 (2600). It is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 1830 extracts a server-side private key for decrypting the encrypted payment means information from the authorized certificate provided in the server (2605), and encrypts the encrypted server through the extracted server-side private key. The payment means information is decrypted (2610).

Here, the decryption function of the decryption unit 1830 is referred to as D (Decryption), the server-side private key is k2 (key), and the payment means information encrypted with the server-side public key is C (Ciphertext) and the server side. When the payment means information decrypted with the private key is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 1830 is "Dk2 = P, or Dk2 (Ek (P)) = P" and The same formula can be used.

According to an embodiment of the present invention, an algorithm for decrypting payment means information encrypted by the decryption unit 1830 with a server-side public key in the call terminal 1900 through the server-side private key may include RSA (Ron Rivest, Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, at least one or more of the various forms of decoding An algorithm may be used, but the decryption algorithm is matched with an encryption algorithm used in the call terminal 1900, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the payment means information through the RSA decryption algorithm of the public key based decryption algorithm, n is a public method (Modulus) used in the decryption process, n, a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e, the undisclosed index is d, the n satisfies "n = a * b", d is "de = 1 mod (a-1) (b-1) ", wherein the decoding function of the decoding unit 1830 may be expressed as" P = Dk2 = Cd mod n ".

As described above, when the payment means information encrypted with the server-side public key is decrypted by the call terminal 1900 through the server-side private key, the decryption unit 1830 transmits the decrypted payment means information to the information transmission unit 1975. In operation 2615, the information transmitter 1975 transmits the payment means information to the bansa server 1855 through a predetermined payment network.

FIG. 27 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal 1900 according to another exemplary embodiment of the present invention.

More specifically, Figure 27 is an embodiment of the method for encrypting and transmitting the payment means information in an electronic envelope method in the call terminal (1900) equipped with the encryption function as shown in Figure 19, in the art With the knowledge of the present invention, various implementation methods for encrypting the payment means information in an electronic envelope method in the call terminal 1900 on the telephone network and / or the VoIP network can be inferred by referring to and / or modifying the present invention. However, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 27 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal 1900, and the public certificate is provided in the call terminal 1900. Stored in the memory unit 1950 of the device, and / or stored in an ID-000 type IC chip (or IC card) mounted on or detached from the call terminal 1900, and / or the call terminal 1900 In the case where a predetermined IC card reader is provided, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the certificate to the call terminal 1900, and the present invention is not limited thereto. .

Referring to FIG. 27, when the information reading unit 1960 of the call terminal 1900 reads predetermined payment means information, the information is provided to the encryption processing unit 1970 (2700). The encryption processing unit 1970 generates a random secret key for encrypting the payment means information using a secret key (symmetric key) method (2705), and generates the generated secret key. In operation 2710, the payment means information is encrypted.

Here, the encryption function of the encryption processing unit 1970 is called E (Encryption), the secret key is r (random secret key), the payment means information P (Plaintext), and the payment means information encrypted with the secret key Suppose C (Ciphertext), the encryption function of the encryption processing unit 1970 can be expressed by a formula such as "Er (P) = C".

According to an embodiment of the present invention, the encryption processing unit 1970 encrypts the payment means information through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption) It is preferable to include at least one of the algorithm (Algorithm), and various forms of encryption algorithm may be used, but the present invention is not limited by a specific encryption algorithm.

Thereafter, the encryption processing unit 1970 encrypts the secret key (random secret key) used to encrypt the payment means information. To this end, the encryption processing unit 1970 extracts a predetermined server-side public key from the public certificate. The private key is encrypted (2715) using the server-side public key (2720).

Here, the encryption function of the encryption processing unit 1970 is called E (Encryption), the server-side public key is k1 (key), the secret key is r (random Secret key), and the secret encrypted with the server-side public key. If the key is C (Ciphertext), the encryption function of the encryption processing unit 1970 may be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key through the server-side public key by the encryption processing unit 1970 includes: RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the undisclosed prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 1970 may be expressed as" C = Ek1 (r) = re mod n ".

When the payment means information is encrypted with the secret key, and the secret key is encrypted through the server-side public key, the encryption processing unit 1970 encrypts the payment means information encrypted with the secret key and the server-side public key. Generate and provide transaction data associated with a key to the communication processing unit 1940 (2725), and the communication processing unit 1940 transmits the transaction data to the server through a network component on a telephone network and / or a VoIP network ( 2730).

FIG. 28 is a diagram illustrating a method of decrypting payment means information encrypted and received by a server according to another exemplary embodiment of the present invention by an electronic envelope method.

In more detail, FIG. 28 shows the transaction data in an electronic envelope manner in a server such as FIG. 18 that receives transaction data including encrypted payment means information from a call terminal 1900 having an encryption function as shown in FIG. The present invention relates to a method of decoding, and if the present invention is known to those skilled in the art, the electronic device in the call terminal (1900) on the telephone network and / or VoIP network by referring to and / or modified with reference to FIG. Various implementation methods for decrypting the envelope-encrypted transaction data by the same electronic envelope method may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG. .

In this figure 28 according to an embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate provided in the server, and the public certificate is linked with the server. It is preferably stored in a predetermined database (not shown), and the present invention is not limited thereby.

Referring to FIG. 28, the information receiving unit 1825 of the server receives predetermined transaction data including the payment means information encrypted through the telephone network and / or the VoIP network and provides the predetermined transaction data to the decrypting unit 1830 ( 2800), preferably, the transaction data is received through a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 1830 extracts a server-side private key for decrypting an encrypted secret key included in the transaction data from the public certificate provided in the server (2805), and extracts the extracted server-side individual. By decrypting the secret key encrypted with the server-side public key in the call terminal 1900 through a key (2810), a predetermined secret key for decrypting the payment means information is extracted (2815), and the extracted secret key By decoding the payment means information using (2820), the call means 1900 extracts the payment means information encrypted with the secret key (2825).

Here, the decryption function of the decryption unit 1830 is called D (Decryption), the server-side private key is k2 (key), and the secret key encrypted with the server-side public key is C (Ciphertext), and the server-side individual. When a secret key decrypted with a key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 1830 is as follows: "Dk2 = r, or Dk2 (Ek1 (r)) = r". It can be expressed as an expression.

According to an exemplary embodiment of the present invention, an algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal 1900 through the server-side private key may include RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it can be used, the decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal 1900, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 1830 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the decryption unit 1830 is called D (Decryption), the secret key is r (random secret key), the payment means information encrypted with the secret key (C (Ciphertext)), and the decrypted When the payment means information is called P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 1830 may be expressed by an expression such as "Dr = P or Dr (Er (P)) = P". Can be.

According to the embodiment of the present invention, the algorithm for decrypting the encrypted payment means information by the decryption unit 1830, the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International) It is preferable to include at least one or more of Data Encryption Algorithm, and in addition, various forms of decryption algorithms may be used, but the decryption algorithm is matched with the encryption algorithm used in the call terminal 1900. The present invention is not limited to the specific decoding algorithm.

When the payment means information is decrypted as described above, the decoding unit 1830 provides the decrypted payment means information to the information transmission unit 1975 (2830), the information transmission unit 1975 is the payment means information Is transmitted to the bansa server 1855 through a predetermined payment network.

29A and 29B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a call terminal 1900 according to another exemplary embodiment of the present invention.

More specifically, FIGS. 29A and 29B illustrate an embodiment of the present invention for encrypting and transmitting the payment means information in a key exchange method in a call terminal 1900 having an encryption function as shown in FIG. 19. In the art, various embodiments of the present invention can be inferred by referring to and / or modifying the drawing of FIG. 29 to encrypt the payment means information in a key exchange method in the call terminal 1900 on the telephone network and / or the VoIP network. As will be appreciated, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 29 according to the embodiment of the present invention, the terminal-side private key and the server-side public key are preferably read from the public certificate provided in the communication terminal 1900, and the public certificate is the communication terminal 1900. Stored in a predetermined memory unit 1950, and / or stored in an ID-000 type IC chip (or IC card) mounted on or detached from the call terminal 1900, and / or When a predetermined IC card reader is provided in the call terminal 1900, it can be all stored in the IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the certificate to the call terminal 1900. The invention is not limited.

29A and 29B, when the information reading unit 1960 of the call terminal 1900 reads predetermined payment means information, the information is provided to the encryption processing unit 1970 (2900). If is provided, the encryption processing unit 1970 is a message digest including a predetermined one-way hash function (for example, a hash code of a predetermined length regardless of the length of the payment means information) Message Digest (Message Digest) And a one-way hash function that cannot identify (or infer) the original message via the hash code (or message digest) .The call terminal 1900 and the server use the same hash function.) A predetermined message digest is generated (2905) and the digital signature is encrypted by encrypting the message digest with the terminal-side private key (2910).

Here, the encryption function of the encryption processing unit 1970 is called E (Encryption), the terminal-side private key is encrypted with t1 (30erminal side key), the message digest is m (message digest), and the terminal-side private key. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 1970 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the algorithm for encrypting the message digest by the encryption processing unit 1970 using the terminal-side private key includes: RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the digital signature function of the encryption processing unit 1970 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 1970 generates a random secret key for encrypting the payment means information by a secret key (symmetric key) method (2915), and the payment means information and The message digest encrypted with the terminal-side private key and a copy of a certificate (eg, a certificate including a terminal-side public key) included in the public certificate are linked to each other and encrypted through the generated secret key (2920).

Here, the encryption function of the encryption processing unit 1970 is called E (Encryption), the secret key is r (random secret key), the payment means information and the copy of the certificate P (Plaintext), and the encrypted payment with the secret key If the means information and the copy of the certificate are referred to as C (Ciphertext), the encryption function of the encryption processing unit 1970 can be expressed by a formula such as "Er (P) = C".

According to an embodiment of the present invention, the encryption processing unit 1970 encrypts the payment means information and the copy of the certificate through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm.

In addition, the encryption processing unit 1970 extracts a predetermined server-side public key from the authorized certificate to encrypt the secret key that encrypts the payment means information (2925), and uses the server-side public key to make the payment. The secret key encrypting the means information is encrypted (2930).

Here, the encryption function of the encryption processing unit 1970 is called E (Encryption), the server-side public key is encrypted with s1 (server side key), the secret key is r (random secret key), and the server-side public key. When the secret key is referred to as C (Ciphertext), the encryption function of the encryption processing unit 1970 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key through the server-side public key by the encryption processing unit 1970 includes: RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the undisclosed prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 1970 may be expressed as" C = Es1 (r) = re mod n ".

The payment means information, the message digest encrypted with the terminal-side private key, and a copy of the certificate including the terminal-side public key are linked to each other and encrypted through the generated secret key, and the secret key is passed through the server-side public key. When encrypted, the encryption processing unit 1970 encrypts a copy of a certificate including the message digest and the terminal-side public key encrypted with the payment means information and the terminal-side private key encrypted through the secret key with the server-side public key. Generate predetermined transaction data in association with the secret key, and provide the generated transaction data to the communication processing unit 1940 (2935), and the communication processing unit 1940 transmits the transaction data to a telephone network and / or a VoIP network. The server transmits the packet through the network component on the server (2940).

30A and 30B illustrate a method of decrypting payment means information encrypted and received at a server by a key exchange method according to another exemplary embodiment of the present invention.

In more detail, FIGS. 30A and 30B show the transaction data in a server as shown in FIG. 18, which receives transaction data including encrypted payment means information from a call terminal 1900 having an encryption function as shown in FIG. As an embodiment of the present invention, a method of decrypting by an exchange method, and having ordinary skill in the art to which the present invention pertains, will be described with reference to FIG. 30 and / or modified in the call terminal 1900 on the telephone network and / or the VoIP network. Although various implementation methods for decrypting the transaction data encrypted by the key exchange scheme may be inferred by the same key exchange scheme, the present invention includes all the inferred implementation methods and is limited to the implementation method illustrated in FIG. Not.

In this figure 30 according to an embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method are preferably read from the public certificate provided in the server. Is preferably stored in a predetermined database (not shown) that cooperates with the server, whereby the present invention is not limited.

30A and 30B, the receiver of the server receives the transaction data including the payment means information encrypted through the telephone network and / or the VoIP network (3000), and decrypts the transaction data into the decryption unit (1830). Preferably, the transaction data is received through a communication protocol defined in the telephone network and / or the VoIP network, and / or the payment means information and the terminal-side individual encrypted with the secret key. And a copy of the certificate including the message digest encrypted with the key and the terminal-side public key, and the secret key encrypted with the server-side public key.

Thereafter, the decryption unit 1830 extracts the server-side private key from the public certificate provided in the server to decrypt the secret key encrypted with the server-side public key (3010), and through the server-side private key. By decrypting the private key (3015), the private key for decrypting a copy of the certificate including the message digest encrypted with the payment means information and the terminal-side private key and the terminal-side public key is extracted (3020).

Here, the decryption function of the decryption unit 1830 is called D (Decryption), the server-side private key is s2 (server side key), the secret key encrypted with the server-side public key is C (Ciphertext), and the server When the secret key decrypted with the side private key is r (random secret key), the function of decrypting the encrypted secret key by the decrypting unit 1830 is "Ds2 = r, or Ds2 (Es1 (r)) = r". It can be expressed as

According to an exemplary embodiment of the present invention, an algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal 1900 through the server-side private key may include RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it can be used, the decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal 1900, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 1830 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the decryption unit 1830 copies the certificate including the message digest and the terminal side public key encrypted with the payment means information and the terminal side private key using the extracted secret key. By decrypting (3025), a copy of the certificate including the payment means information encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key are extracted.

Here, the decryption function of the decryption unit 1830 is called D (Decryption), and the secret key is r (random secret key), the payment means information encrypted with the secret key and the message digest encrypted with the terminal-side private key; C (Ciphertext) is a copy of the certificate containing the terminal-side public key, and P (Plaintext) is a copy of the certificate including the message digest encrypted with the decrypted payment means information and the terminal-side private key and the terminal-side public key. In this case, the function of decrypting the copy of the certificate including the message digest encrypted with the encrypted payment means information and the terminal-side private key and the terminal-side public key is "Dr = P, or Dr." It can be expressed by an expression such as (Er (P)) = P ".

According to an exemplary embodiment of the present invention, the decryption unit 1830 decrypts a copy of a certificate including the message digest encrypted with the encrypted payment means information and the terminal-side private key through the secret key and the terminal-side public key. Preferably, the algorithm includes at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA). In addition, various types of decryption algorithms may be used. The decryption algorithm is characterized by matching with the encryption algorithm used in the call terminal 1900, the present invention is not limited by a specific decryption algorithm.

In addition, the decryption unit 1830 decodes the message digest encrypted with the terminal-side private key through the terminal-side public key (3030), thereby generating and transmitting the message from the payment means information in the call terminal (1900). The digest is extracted (3035).

Here, the decryption function of the decryption unit 1830 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. When the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the decryption unit 1830 is "Dt2 = m, or Dt2 (Es1 (r)) = m" and The same formula can be used.

According to an embodiment of the present invention, an algorithm for decrypting the message digest encrypted by the decryption unit 1830 with the terminal-side private key through the terminal-side public key is RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it can be used, the decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal 1900, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoding unit 1830 may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the decoder 1830 generates the predetermined message digest through the same one-way hash function with the received payment means information (3040), and then generates the generated message digest and the decoded message. By comparing the message digest (3045), the validity of the received payment instrument information is verified.

If the generated message digest coincides with the decrypted message digest (3050), the decryption unit 1830 provides the payment means information to the information transmitter 1975 (3055), wherein the information transmitter ( 1975 transmits the payment means information to the bansa server 1855 through a predetermined payment network.

31 illustrates a product ordering and purchasing process for payment processing using the call terminal 1900 according to another exemplary embodiment of the present invention.

In more detail, FIG. 31 illustrates a process in which a call terminal 1900 shown in FIG. 19 accesses a server shown in FIG. 18 through at least one or more telephone networks and / or VoIP networks to order and purchase certain products. Through the payment process using the call terminal 1900 according to the present invention through the process, if the person of ordinary skill in the art to which the present invention belongs, with reference to and / or modified this figure 31 a predetermined currency The terminal 1900 connects a call channel for ordering and purchasing a product with a predetermined server through at least one telephone network and / or a VoIP network, and orders and purchases at least one product through the call channel. Various implementation methods for initiating payment processing using the call terminal 1900 according to the present invention may be inferred, but the present invention includes all the inferred implementation methods. , It is not limited to the exemplary method shown in the figure 31.

Hereinafter, in FIG. 31, the call terminal 1900 having the card reader shown in FIG. 19 is referred to as "terminal" for convenience.

Referring to FIG. 31, a terminal conforming to the functional configuration shown in FIG. 19 may include at least one or more telephone networks (e.g., general switched telephone network (or intelligent network), and / or mobile communication network) and / or VoIP network (e.g., TCP / IP (And / or UDP / IP) based wired communication network (IEEE 802.16x based portable Internet) to connect a predetermined communication channel with the server (3100), and according to the product ordering procedure provided by the server through the communication channel A process of selecting, ordering, and purchasing at least one or more purchased products is performed (3105).

Those skilled in the art to which the present invention pertains, the terminal connects the predetermined communication channel with the server, and through the communication channel through a predetermined product order procedure (eg, ARS and / or counselor connection) As you will be familiar with key tones-based product ordering procedures, the detailed process is omitted for convenience.

During the product order process as described above, the server checks whether or not payment processing for the purchased product (3110), if the payment processing for the purchased product is confirmed (3115), the server and the terminal Adding (or allocating) a data channel corresponding to the telephone network and / or a VoIP network to a connected call channel, or converting the voice call-based communication channel into a data channel corresponding to the telephone network and / or the VoIP network (3120). .

If a data channel corresponding to the telephone network and / or VoIP network is added (or assigned) to the call channel as described above, or if the voice call-based communication channel is switched to a data channel corresponding to the telephone network and / or VoIP network, The server requests to read the predetermined payment means information from the customer's own card through the card reader provided in the terminal through the data channel (3125).

32 is a flowchart illustrating a payment means information reading process for payment processing using the call terminal 1900 according to another exemplary embodiment of the present invention.

In more detail, the drawing 32 shows a predetermined number of the call terminals 1900 shown in the drawing 19 through at least one telephone network and / or the VoIP network by receiving the process shown in the drawing 31 from the server shown in the drawing 18. When requesting payment means information, the call terminal 1900 is a process for reading the predetermined payment means information from the customer-owned card through the predetermined card reader to provide to the server, in the technical field to which the present invention belongs Those skilled in the art may refer to and / or modify this drawing 32 to read predetermined payment means information from a predetermined call terminal 1900 and provide it to a predetermined server through at least one or more telephone networks and / or VoIP networks. Various implementation methods may be inferred, but the present invention includes all the implementation methods inferred, and is limited to the implementation method shown in FIG. It does not.

For example, in FIG. 32, the terminal performs an encryption procedure for predetermined payment means information read from the customer's own card. The encryption procedure is performed to satisfy a high degree of security of the payment means information. As performed, it may be omitted in accordance with the intention of those skilled in the art, whereby the present invention is not limited.

Hereinafter, in FIG. 32, the call terminal 1900 having the card reader shown in FIG. 19 is referred to as "terminal" for convenience.

Referring to FIG. 32, the terminal transmits the predetermined payment means information through a data channel corresponding to at least one or more telephone networks and / or VoIP networks by the server shown in FIG. 18 performing the process shown in FIG. In operation 3200, if predetermined payment means information is requested from the server (3205), the terminal switches the operation mode to the payment processing mode using the data channel (3210) and is provided to the terminal. The card reader may output through the screen output means provided in the terminal to read predetermined payment means information from the customer-owned card through the card reader, and / or through the audio output means provided in the terminal (3215).

After the predetermined payment means information reading is requested from the customer-owned card as described above, the terminal checks whether the predetermined payment means information is read from the customer-owned card through the card reader (3220). If predetermined payment means information is read from 3322, the terminal performs an encryption procedure for the read payment means information (3230).

Thereafter, when the payment means information is encrypted (3235), the terminal transmits the encrypted payment means information to the server through a data channel set in the telephone network and / or VoIP network (3240).

33 shows an information processing process for payment processing using the call terminal 1900 according to another embodiment of the present invention.

In more detail, FIG. 33 allows a server shown in FIG. 18 through at least one telephone network and / or a VoIP network to undergo a process shown in FIG. 32 in the call terminal 1900 shown in FIG. When the payment means information is transmitted, the server relays the payment means information to a predetermined bansa server 1855, and transfers the predetermined payment information to the bansa server 1855 to process the payment, Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 33 to generate a predetermined payment approval request full text using payment means information provided from the call terminal 1900 in a predetermined server. Various implementation methods may be inferred, but the present invention includes all the implementation methods inferred and is not limited to the implementation method shown in FIG. The.

For example, in FIG. 33, the terminal performs a decryption procedure on payment means information provided from the call terminal 1900. The decryption procedure is performed only when the payment means information is encrypted. It may be omitted depending on the intention, and thereby the present invention is not limited.

In addition, the full text of the payment approval request generated by the server in FIG. 33 is a full credit card payment approval request including the credit card payment means information shown in FIG. 2, and has a general knowledge in the technical field to which the present invention belongs. If you grow up, the full check card payment approval request, and / or debit card payment approval request, and / or prepaid card payment approval request in the server in response to the payment means information provided from the call terminal (1900), and / Or it may be inferred the implementation method for generating the full payment transfer approval request, etc. The present invention comprises all the inferred implementation method.

Hereinafter, in FIG. 33, the call terminal 1900 having the card reader shown in FIG. 19 is referred to as "terminal" for convenience.

Referring to FIG. 33, the server shown in FIG. 18 receives a predetermined payment means information through a data channel corresponding to at least one or more telephone networks and / or VoIP networks by performing the process shown in FIG. 32 at the terminal. In operation 3300, if predetermined payment means information is received from the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP networks (3305), the server encrypts the received payment means information. In operation 3310, it is determined whether the payment means information is decrypted.

If it is determined that the payment means information is decrypted (3315), the server performs a decryption procedure on the encrypted payment means information, so that the terminal reads from the customer-owned card through a predetermined card reader. The paid payment method information is restored (3320).

On the other hand, if it is determined that the payment means information does not need to be decrypted (eg, when the payment means information is not encrypted) 3315, and / or the encrypted payment means information is decrypted, the server stores the storage. The payment information including the merchant information and the total payment amount information to be included in the full payment approval request message is extracted from the medium 1840 (3325), and the payment means information and the payment information are transmitted to a predetermined bansa server 1855 ( 3330).

Thereafter, the bansa server 1855 generates a predetermined payment approval request message including the payment means information and the payment information (3335), and generates the payment approval request message through the predetermined payment network (1875). 3340, and the payment server 1875 receives and reads the full payment approval request message and performs a payment processing procedure corresponding to the payment means information (e.g., payment processing approval details). Or generate payment settlement details (3345), generate a predetermined payment approval text including the payment processing history (3350), and transmit the payment approval text to the server through the payment network (3350). 3355).

Those skilled in the art to which the present invention pertains may include a method for transmitting the full text of a payment approval request from the server to the payment server 1875 through a predetermined payment network, and / or the payment server 1875. Reads the payment approval request message in full and performs a payment processing procedure, and / or generates a predetermined payment processing history after performing the payment processing procedure in the payment server 1875 and includes the payment processing history. Since it will be familiar with how to generate a payment approval message to transmit to the server through the payment network, such a detailed description will be omitted for convenience.

According to another exemplary embodiment of the present invention, the payment server 1875 may directly transmit the payment approval message (or payment processing history) to the terminal through the telephone network and / or the VoIP network (eg, a payment approval request). The terminal information providing the payment means information in a preamble), and the present invention is not limited thereto.

34 is a flowchart illustrating a payment approval process for payment processing using the call terminal 1900 according to another exemplary embodiment of the present invention.

In more detail, in FIG. 34, the server shown in FIG. 18 performs the process shown in FIG. 33 to generate a full text of a payment approval request corresponding to the payment means information, and the payment is made through a predetermined payment server 1875. After performing the approval procedure, if a payment approval message including the payment processing details is received, the process of processing the payment approval message in the server, the person having ordinary knowledge in the technical field to which the present invention belongs By referring to and / or modifying the drawing 34, it is possible to infer various implementation methods for processing the payment approval full text in a predetermined server, but the present invention includes all the inferred implementation methods, as shown in this drawing 34 It is not limited to the implemented method.

Hereinafter, in FIG. 34, the call terminal 1900 having the card reader shown in FIG. 19 is referred to as " terminal "

Referring to FIG. 34, the server shown in FIG. 18 performs the process shown in FIG. 33 to determine whether a payment approval message corresponding to the payment approval message is received from the payment server 1875 through a predetermined payment network. In operation 3400, if the payment approval message including the payment processing history corresponding to the payment approval request message is received from the payment server 1875 through the payment network, the server may receive the payment approval message. By extracting and reading a predetermined payment processing history from the terminal, it is checked whether the payment processing through the payment means information provided from the terminal has been approved (3410).

If payment processing through payment means information provided from the terminal has not been approved (3415), the server transmits the full text of the payment approval to the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP networks. Alternatively, by transmitting and outputting a payment processing error history (3420), the payment processing process using the call terminal 1900 according to the present invention is terminated.

On the other hand, when payment processing through payment means information provided from the terminal is approved (3415), the server transmits the payment approval message (and / or) to the terminal through a data channel corresponding to at least one or more telephone networks and / or VoIP networks. After transmitting and outputting the payment processing approval details (3425), by performing an order procedure after the payment processing approval (3430), the payment processing process using the call terminal 1900 according to the present invention is completed.

35 is a diagram illustrating a payment system configuration using a call terminal 3600 according to another embodiment of the present invention.

In more detail, in FIG. 35, after a telephone order using a voice call through a call terminal 3600 equipped with a predetermined card reader, the predetermined payment means information is read from a predetermined customer-owned card through the card reader. As a system configuration for processing a payment corresponding to an order, those skilled in the art to which the present invention pertains, various payment system configuration using the call terminal 3600 by referring to and / or modified in this figure 35 It can be inferred that, but the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

That is, in the implementation method illustrated in FIG. 35, a predetermined customer makes a call with a server 3500 (eg, an Automatic Response Service (ARS) server 3500) provided at a predetermined affiliated store through a predetermined call terminal 3600. After connecting a channel, performing a predetermined telephone ordering procedure through the call channel, and receiving predetermined payment means information from a customer-owned card provided with a predetermined payment means through a card reader provided in the call terminal 3600. When the data is read and transmitted to the server 3500 through the data channel based on the call channel, the server 3500 transmits the payment means information and the predetermined payment information to the payment server 3560 through a predetermined communication network. System configuration for payment processing.

In addition, although the functional configuration unit for payment processing using the call terminal 3600 according to the present invention is shown in the predetermined server 3500 through the embodiment illustrated in FIG. 35, this is a technical feature of the present invention. The present invention is not limited by the present invention, and the payment processing system using the call terminal 3600 according to the present invention is provided with a plurality of servers (or terminals) 3500 having the above-described functional components. The implementation method, and / or the method (or terminal) 3500 in the server (or terminal) on the call center system, if the predetermined call center is provided in the implementation method, and / or the predetermined ARS server in the merchant ( If 3500 is already provided, an implementation method of additionally providing the functional configuration unit in the ARS server 3500, and / or a predetermined affiliated terminal is provided in the affiliated store. The merchant terminals may comprise any of the exemplary method comprising a further configuration the function.

The call terminal 3600 used by the customer is a landline telephone (and / or a radiotelephone in radio frequency (RF) communication) connected to a public switched telephone network (PSTN), and / or a CDMA (Code) Division Multiple Access (Telephone) connected to a stack based mobile communication network (e.g., Personal Communication System (PCS) and / or Global System for Mobile (GSM) terminals), and / or Transmission Control Protocol / Internet Protocol (TCP / IP) And / or at least one VoIP terminal connected to a User Datagram Protocol / Internet Protocol (UDP / IP) based wired communication network and / or a Voice over IP (VoIP) network operating based on an IEEE 802.16x based portable Internet network. Characterized in that made.

In addition, the call terminal 3600 may include at least one telephone network (eg, a general switched telephone network (PSTN), and / or a mobile communication network), and / or a VoIP network (eg, a TCP / IP and / or UDP / IP-based wired communication network). And / or a server provided at a merchant through a network in which a Real-time Transport Protocol / RTP Control Protocol (RTP) layer is defined in a transport layer on a protocol stack based on the IEEE 802.16x-based portable Internet. It is characterized in that the 3500 and the predetermined call channel.

According to an embodiment of the present invention, the general switched telephone network is a recent intelligent network (for example, a communication network connecting a plurality of circuits using at least one or more exchangers) in a conventional intelligent network (for example, interspersed within a communication network). And at least one switch, a service control node, an in-network control database, and the like, which are organically integrated through a common line signal network or data network, and controlled through a computing technology), and / or the intelligent network. In this way, a landline telephone (and / or a radiotelephone in RF communication with the landline telephone) connected to the general telephone switching network (= intelligent network) basically provides a voice call service and also provides a predetermined data channel. Provides data communication (eg, message transmission and reception) services.

In addition, the mobile communication network provides both a CDMA stack-based circuit switched voice call channel and a data channel, whereby a mobile phone connected to the mobile communication network basically provides a voice call service and a predetermined data channel. Data communication (eg, wireless message transmission and / or wireless Internet access, etc.) services.

In addition, the VoIP network basically provides a predetermined RTP / RTCP (Real-) to provide a real-time voice call service to a higher layer of a UDP on a wired / wireless communication network supporting TCP / IP (and / or UDP / IP) supporting data communication. As a communication network defining a time transport protocol / RTP control protocol (Layer) layer, the VoIP network basically provides both a voice call channel and a data channel, whereby a VoIP terminal connected to the VoIP network basically provides a voice call service. Of course, it provides a data communication (eg, message transmission and reception) service through a predetermined data channel.

According to the present invention, the call terminal 3600 is a card reader for reading predetermined payment means information from a magnetic stripe (MS) card conforming to ISO / IEC 7810 standard, and / or a contact type conforming to ISO / IEC 7816 standard. At least one card reader for reading predetermined payment means information from an IC (Integrated Circuit) card and / or at least one card reader for reading predetermined payment means information from a contactless IC card conforming to ISO / IEC 14443 standard, It is characterized in that the preferred embodiment for this will be described in detail with reference to FIG.

Referring to FIG. 35, the server 3500 provided in the affiliated store includes a call terminal 3600 and a call channel used by a customer through at least one telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network. A call channel processor 3505 connecting the call channel, a voice guide unit 3515 providing a voice call for a predetermined telephone order and payment processing according to the present invention in connection with the call channel processor 3505, and the call channel In response to the voice guidance in response to the voice guidance, the processor 3505 receives a key tone generated by the call terminal 3600, and reads the key tone by a dual frequency multi-frequency (DTMF) scheme to extract predetermined information. It is characterized by comprising a signal processing unit 3520.

The call channel processor 3505 is assigned a predetermined telephone number for connecting at least one call terminal 3600 with a predetermined call channel, and corresponds to the telephone network and / or VoIP network based on the telephone number. The call channel may be connected to at least one call terminal 3600 by performing a predetermined call processing procedure.

Those skilled in the art will be familiar with certain call processing procedures corresponding to the telephone network and / or the VoIP network, and thus a detailed description thereof will be omitted.

The voice guide unit 3515 is connected to at least one or more call terminals 3600 through the call channel processor 3505, and then authenticates the customer and / or goods to the call terminal 3600 through the call channel. Characterized in that it outputs a predetermined voice guidance for order processing, and also outputs the voice guidance for payment processing using the call terminal 3600 according to the present invention to the call terminal 3600 through the call channel. Characterized in that.

According to an exemplary embodiment of the present invention, the voice guide unit 3515 is based on product information stored in a predetermined storage medium 3540 and payment amount information corresponding to the product, through the call channel 3600. Extract a predetermined voice announcement (eg, extract from a predetermined voice announcement storage database (not shown)), and / or generate (for example, create a voice guide comment in a TTS (Text To Speech) method) After that, it is preferable to output the voice announcement to the call terminal 3600 through the call channel.

According to another exemplary embodiment of the present invention, the voice guide unit 3515 may provide voice guidance of a counselor corresponding to a predetermined call center terminal (and / or affiliated phone) to the call terminal 3600 through the call channel. It is possible to output, and the present invention is not limited thereby.

The tone signal processing unit 3520 reads the key tone using the DTMF scheme when a DTMF tone is generated from the call terminal 3600 in response to the voice guidance and is received through the call channel. (Eg, “0 to 9”, “*”, “#”, etc.) are identified and extracted.

In addition, the signal tone processing unit 3520 may receive the purchase product information in the form of a key signal tone transmitted from the call terminal 3600, and the purchase product information may be received through the voice guide unit 3515. 3600), including purchase product selection number corresponding to the voice announcement provided in the information, and / or purchase information selection information in the form of voice information through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone) Preferably, it comprises a, whereby the product information corresponding to the purchased product information (and / or payment amount information associated with the product information) is extracted from the predetermined storage medium (3540).

According to another exemplary embodiment of the present invention, the signal processing unit 3520 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal 3600, whereby the present invention It is not limited.

In addition, the signal processing unit 3520 may further receive predetermined discount information transmitted from the call terminal 3600, and the discount information may include a coupon number corresponding to a predetermined discount coupon possessed by the customer. It is preferable to include, and thereby the payment amount can be discounted.

In addition, the signal processing unit 3520 may further receive predetermined goods delivery address information transmitted from the call terminal 3600, and the goods delivery address information is provided through the voice guide unit 3515 through the call terminal 3600. The product delivery destination selection number corresponding to the voice announcement (for example, a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to the voice announcement) And delivery address information (eg, in the form of voice information) through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), or / or a detailed address ("address / call") number, etc.). , Customer's address), thereby securing an address to which the purchased product will be delivered.

Those skilled in the art to which the present invention pertains will understand the method for generating the DTMF type key beep and the method for reading and confirming and extracting predetermined information by reading the key beep. Detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the information extracted based on the key tone of the DTMF method may be extracted through a predetermined data channel based on the call channel instead of the key tone. The present invention is not limited thereby.

According to the present invention, the server 3500 provided in the affiliated store connects the call terminal 3600 to the voice call channel in association with a telephone network and / or a VoIP network component to which the call terminal 3600 is connected during the voice call. Add (or assign) a predetermined data channel for payment processing, and / or open a data channel to which the voice call channel is added (or assign) for payment processing using the call terminal 3600 And / or a channel controller 3510 for converting the voice call channel into a data channel for payment processing using the call terminal 3600.

According to an embodiment of the present invention, when the telephone network and / or VoIP network connecting the call terminal 3600 and the server 3500 simultaneously support a voice call channel and a data channel, the channel controller 3510 may call the call. A predetermined data channel for payment processing using the call terminal 3600 is added (or assigned) to a connected call channel for voice call between the terminal 3600 and the server 3500.

According to another exemplary embodiment of the present invention, a telephone network and / or a VoIP network connecting the call terminal 3600 and the server 3500 simultaneously support a voice call channel and a data channel, and the call terminal 3600 and the server ( When a predetermined data channel is added (or assigned) to a connected call channel for voice call between 3500, the channel control unit 3510 is a call channel connected between the call terminal 3600 and the server 3500. The data channel added to (or assigned to) is opened for payment processing using the call terminal 3600.

According to another exemplary embodiment of the present invention, when the telephone network and / or the VoIP network connecting the call terminal 3600 and the server 3500 do not support a voice call channel and a data channel at the same time, the channel control unit 3510 The method may convert a connected communication channel for a voice call between the call terminal 3600 and the server 3500 into a predetermined data channel for payment processing using the call terminal 3600.

According to the present invention, the server 3500 provided in the affiliated store is connected to the voice call channel by the channel controller 3510 from the call terminal 3600 through the data channel added (or assigned) and / or switched. And an information receiving unit 3525 for receiving the transmitted payment means information.

According to the method of the present invention, the payment means information is credit card payment read from the MS card and / or contact IC card and / or contactless IC card through at least one card reader provided in the call terminal (3600) And at least one or more means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information. Card payment method information (e.g., credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information) of the payment method information may be a predetermined card number and And / or TRACK II information including an expiration date, etc., wherein the bank transfer payment means information includes a predetermined financial account number. To include / or branch number and / or account gaeseolil preferably made, including customer-owned financial account information.

According to an exemplary embodiment of the present invention, the payment means information is arranged in a predetermined information processing manner in the call terminal 3600 in order to prevent exposure to the outside from eavesdropping and / or interception and / or hacking. And / or number structure), and may be transmitted through the data channel. In this case, the information receiver 3525 may receive the processed information through the data channel to restore original payment means information. In this way, security of the payment means information may be provided.

According to another exemplary embodiment of the present invention, after the payment means information is encrypted with a predetermined encryption method in the call terminal 3600 to prevent exposure to the outside from eavesdropping and / or interception and / or hacking, The information receiving unit 3525 may receive the encrypted information and decrypt the received information using the decryption method corresponding to the encryption method, thereby restoring the payment means information. High security of the means information can be provided.

In addition, in the case of payment means information transmitted and received through the data channel, a checksum may be further included in order to prevent a transmission and reception error, thereby preventing transmission and reception errors with respect to the payment means information.

In addition, the information receiver 3525 may receive predetermined purchase product information from the call terminal 3600 through the data channel, and the purchase product information may be provided to the call terminal 3600 through the data channel. It is preferable that the purchase product selection information corresponding to at least one or more pieces of product information is included, and / or when the call channel simultaneously supports a voice call channel and a data channel, the purchased goods information is the voice guide unit 3515. Voice selection through the voice guidance of the counselor corresponding to the call center terminal (and / or merchant phone) is made, including a purchase product selection number corresponding to the voice announcement provided to the call terminal (3600) through) It is possible to include information on the selection of the purchased goods in the form of information, whereby the image from the predetermined storage medium 3540 Product information (and / or payment amount information associated with the product information) corresponding to the previously purchased product information is extracted.

According to another exemplary embodiment of the present invention, the information receiver 3525 may directly receive predetermined payment amount information (eg, payment amount) transmitted from the call terminal 3600 through the data channel. Thereby, this invention is not limited.

In addition, the information receiver 3525 may further receive predetermined discount information transmitted from the call terminal 3600 through the data channel, and the discount information may be a predetermined discount coupon possessed by the customer. Coupon information, and / or coupon information provided in the customer-owned discount card, etc., whereby the payment amount may be discounted.

In addition, the information receiver 3525 may further receive predetermined goods delivery information transmitted from the call terminal 3600 through the data channel, and the goods delivery address information may be provided in the call terminal 3600. Address information stored in a memory, and / or subscriber address information stored in a database (eg, subscriber information D / B) on a telephone network and / or a VoIP network to which the call terminal 3600 is connected, and / or the like. Alternatively, when the call channel supports a voice call channel and a data channel at the same time, the goods delivery address information may correspond to a goods delivery destination selection number corresponding to the voice announcement provided to the call terminal 3600 through the voice guide unit 3515. For example, a number for selecting "city", "gu (gun)", "dong (myeon / eup / ri)" corresponding to a voice announcement, a detailed address ("address / number") number, etc.) Including And / or delivery information (eg, a customer's address) in the form of voice information through voice guidance of a counselor corresponding to the call center terminal (and / or merchant phone), whereby the purchase is made. The address to which the goods will be delivered is secured.

According to the present invention, the server 3500 provided in the affiliated store encrypts the encrypted payment means information when the payment means information received through the information receiver 3525 is encrypted using at least one encryption method. And a decoder 3530 for decoding by at least one decoding method corresponding to the method.

According to the exemplary embodiment of the present invention, when the payment means information is encrypted using a symmetric key (or secret key) method, the decryption unit 3530 uses the decryption method corresponding to the symmetric key (or secret key) method. Preferably, the means information is decrypted, and / or when the payment means information is encrypted using a public key method, the decryption unit 3530 decrypts the payment means information by a decryption method corresponding to the public key method. Preferably, and / or when the payment means information is encrypted by the electronic envelope method, the decryption unit 3530 preferably decrypts the payment means information by a decryption method corresponding to the electronic envelope method, and / or When the payment means information is encrypted using a key exchange method, the decryption unit 3530 uses the decryption method corresponding to the key exchange method. To decrypt the information unit is preferred.

According to the present invention, the server 3500 provided in the affiliated store performs payment processing through the payment means information from a predetermined storage medium 3540 when predetermined payment means information is received through the information receiver 3525. Characterized in that it comprises an information confirmation unit 3535 for confirming the merchant information for.

According to one embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information. If applicable, the information checking unit 3535 may be assigned to a merchant number (eg, a unique number assigned to the merchant for processing card payment) and / or a terminal number (eg, card payment processing) from the storage medium 3540. It is preferable to check the merchant information including at least one or more of the unique number provided in the merchant terminal (or payment terminal) provided in the merchant for.

According to another exemplary embodiment of the present invention, when the payment means information corresponds to the account transfer payment means information, the information checking unit 3535 is the merchant account information (for example, the financial account of the merchant) from the storage medium 3540 Number, and / or branch number, and / or account holder information, etc.).

If the affiliated store is a franchise company and a server 3500 for payment processing using the call terminal 3600 is provided in a call center of the franchise company, the affiliated store information is affiliated store information corresponding to the franchise company, and And / or affiliated store information corresponding to a franchise chain store that manufactures and packages a product corresponding to the purchased product information to the customer and delivers the product to the customer, and thus, the present invention is not limited thereto.

According to the present invention, the server 3500 provided in the affiliated store includes payment means information received through the information receiving unit 3525 and payment confirmed by a predetermined storage medium 3540 by the information checking unit 3535. Characterized in that it comprises an information transmitting unit for transmitting the information to the payment server 3560 via a predetermined communication network.

The payment server 3560 performs a predetermined payment processing procedure using the payment means information and the payment information. The payment server 3560 generates a payment processing detail corresponding to the payment processing procedure and generates the payment processing details through the server ( 3500 to be transmitted.

Here, when the payment means information corresponds to credit card payment means information, the payment server 3560 includes a credit card payment server 3560 of a card company (or financial company) that issued the credit card to the customer. And / or when the payment means information corresponds to check card payment means information, the check card payment server 3560 of the card company (or financial company) that issued the check card to the customer, and / or Or when the payment means information corresponds to the debit card payment means information, and comprises a debit card payment server 3560 of the card company (or financial company) that issued the debit card to the customer, and / or the payment means If the information corresponds to prepaid card payment means information, the prepaid card payment server 3560 of the card company (or financial company) that issued the prepaid card to the customer is included. If the payment means information and / or the payment means information corresponds to the payment method information, the financial server (for example, ledger server) of the financial company (bank) that opened the financial account for the account transfer to the customer It is made to include.

According to the present invention, the server 3500 provided in the affiliated store includes an order processing unit 3545 which performs an order process for the processed product when the payment process through the payment means information is normally performed. It is characterized by.

According to an embodiment of the present invention, when the information receiving unit 3525 receives order processing information including purchase product information and product delivery address information from the call terminal 3600 of the customer, the order processing unit 3545 may include the above information. Order processing terminal of the department for manufacturing and packaging the purchased goods in the affiliated store through the predetermined communication means (3565), the order processing information including payment processing details and the purchase goods information and goods delivery address information And / or when the affiliate is a franchise, manufacturing and packaging the purchased goods through predetermined communication means 3565, order processing information including the payment processing details, the purchased goods information, and the goods delivery address information. It is preferable to provide to the order processing terminal of the chain stores to deliver to the customer.

According to another exemplary embodiment of the present invention, when the information receiving unit 3525 receives only the purchase product information from the customer's call terminal 3600 in the payment processing using the call terminal 3600, the order processing unit 3545 Is further processed to receive goods delivery information from the call terminal 3600 through the voice guide unit 3515 (and / or call center terminal, and / or merchant phone) to include the purchase goods information and goods delivery destination information Secures information, manufactures and packages the purchased product in the affiliated store through order processing information including the payment processing history, the purchased product information, and the product delivery address information, through a predetermined communication means 3565, and delivers it to the customer. Provided to the order processing terminal of the department, and / or when the affiliated store is a franchise, the payment processing history, the purchased product information, and the product delivery location It is preferable to provide order processing information including information to an order processing terminal of a chain store that manufactures and packages the purchased product through a predetermined communication means 3565 and delivers it to the customer.

According to another exemplary embodiment of the present invention, when the information receiver 3525 receives only the purchased goods information from the customer's call terminal 3600 in the payment processing using the call terminal 3600, the order processor 3545 ) Provides the payment processing history and the purchased product information to an order processing terminal of a department that manufactures and packages the purchased product in the affiliated store through a predetermined communication means 3565, and delivers it to the customer, and / or When the affiliated store is a franchise, a chain store that manufactures and packages the purchased product through a predetermined communication means 3565 and delivers the order processing information including the payment processing history, the purchased product information, and the product delivery address information to the customer. After providing to the order processing terminal of the customer, the call channel between the call terminal 3600 and the server 3500 of the call terminal 3600 and the order processing terminal By changing to its traffic channel, so that it is possible to further obtain the product shipping information from the order processing terminal and, in addition, it is possible to perform various types of processing procedures according to the order of those of ordinary skill in the art intended.

36 is a view showing the functional configuration of the call terminal 3600 according to another embodiment of the present invention.

More specifically, FIG. 36 illustrates one embodiment of a call terminal 3600 for payment processing using the call terminal 3600 according to the present invention, and a person having ordinary knowledge in the art to which the present invention belongs, While it will be possible to infer and configure various features of the call terminal 3600 for payment processing using the call terminal 3600 by referring to FIG. 36 and / or modifications, the present invention includes all implementation methods inferred from the above. It is not limited to the implementation method shown in FIG.

Referring to FIG. 36, the call terminal 3600 basically includes a control unit 3605, a memory unit 3650, a key input unit 3610, a voice processing unit 3615, a screen output unit 3620, and a signal tone processing unit 3635. And a power supply unit 3630 for supplying power to the communication terminal 3640 and the call terminal 3600, and a card reader unit for payment processing using the call terminal 3600 according to the present invention. 3625) and / or the security application module 3635, etc., and may further include at least one or more functional components (not shown) according to the intention of those skilled in the art.

The control unit 3605 basically controls the key input unit 3610, the voice processing unit 3615, the screen output unit 3620, and the communication processing unit 3640, thereby providing a predetermined telephone input through the key input unit 3610. Based on the number, the voice communication channel is connected to at least one or more other call terminals (or servers) through a telephone network and / or a VoIP network to which the communication processor 3640 is connected, and voice input and output through the voice processor 3615. Converts a signal into an electrical signal (and / or a digital signal) to operate and control a voice call function transmitted and received through the voice call channel, and to achieve the function of the call terminal 3600 in hardware. At least one processor and execution memory (eg, register and / or including a Central Processing Unit (CPU) / Micro Processing Unit (MPU) provided in the communication terminal 3600 for It comprises a RAM (Random Access Memory) and a bus (BUS) for inputting and outputting predetermined data, and is provided in the call terminal 3600 to realize the function of the call terminal 3600 by software And a program routine and / or program data which are loaded from the recorded recording medium into the execution memory and are arithmetic processed by the processor.

In addition, the controller 3605 controls the communication processor 3640 to control data channels defined in a telephone network (eg, an intelligent network and / or a mobile communication network) and / or a VoIP network connected to the communication processor 3640. Connecting a predetermined data channel for data communication with at least one terminal (or server) based thereon, and operating and controlling a function of transmitting and receiving at least one digital information (or digital data) through the data channel. To this end, the communication terminal comprises at least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data to the call terminal 3600 for hardware data communication. And the execution message from a recording medium provided in the call terminal 3600 for the data communication in software. Program routines and / or program data loaded into the memory and processed by the processor may be collectively referred to.

In addition, the control unit 3605 controls the predetermined card reader unit 3625 provided in the call terminal 3600 for payment processing using the call terminal 3600, and thereby through the card reader unit 3625. And operating and controlling reading the predetermined payment means information from the customer's own card and transmitting the predetermined payment means information to the server, and for this purpose, the call terminal 3600 for payment processing using the call terminal 3600 in hardware. At least one processor including a CPU / MPU, an execution memory, and a bus for inputting and outputting predetermined data, wherein the software is used for payment processing using the call terminal 3600. A program routine loaded into the execution memory from the recording medium included in the call terminal 3600 and arithmeticly processed by the processor; and / or Characterized in that the general term for program data.

Therefore, the call terminal 3600 shown in FIG. 36 is loaded into the execution memory from the recording medium provided in the call terminal 3600 and processed by the processor for payment processing using the call terminal 3600. The program routines to be processed are described in block form in the control section 3605 for convenience.

The memory unit 3650 inputs and outputs when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the call terminal 3600 is performed. General term of non-volatile memory for storing information or data), including at least hardware-based electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD). It includes one or more storage means, the control unit 3605 is a predetermined program routine and program data required for performing a predetermined control function (for example, the program routine is input or output to perform a predetermined function) Data) is stored.

According to the exemplary embodiment of the present invention, the memory unit 3650 stores a predetermined encryption key for payment processing using the call terminal 3600.

The key input unit 3610 includes a predetermined at least one key button including at least one numeric key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or operation mode of the call terminal 3600 controlled by the controller 3605. When predetermined information (or signal) is input from the key button, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 3605.

When the current input mode and / or operation mode of the call terminal 3600 is a voice call mode, the controller 3605 obtains predetermined key data corresponding to the key event and provides the predetermined key data to the signal tone processor 3635. The tone processing unit 3635 generates a key tone corresponding to the key data according to a dual tone multifrequency (DTMF) scheme.

When the current input mode and / or operation mode of the call terminal 3600 is a data communication mode, the controller 3605 acquires predetermined key data corresponding to the key event, and then information corresponding to the key data. Characterized in that a processing procedure is performed, and / or an instruction for executing a predetermined function matched with the key event is obtained, and then a function corresponding to the instruction is performed.

According to the exemplary embodiment of the present invention, the key input unit 3610 and the key input device having at least one key button interwork with each other to perform a function of key input means provided in the call terminal 3600.

According to the method of the present invention, the key input device which is interlocked with the key input unit 3610 includes a keypad device having at least one numeric key, a letter key ('*', '#') and a function key, and / Or at least one or more keyboard devices including at least one numeric key, character keys (eg, English character keys, and / or Korean character keys) and function keys.

The voice processor 3615 converts a predetermined voice input from a predetermined voice input device (for example, a microphone) included in the call terminal 3600 into a predetermined voice signal (or an electrical signal), and the communication processor 3640. ) Encodes a voice encoding scheme corresponding to a telephone network and / or a VoIP network to which a) is connected, generates predetermined voice data, and provides the voice data to the controller 3605. The processor 3615 is preferably provided with a predetermined vocoder and a codec.

Thereafter, the controller 3605 transmits the generated voice data to the telephone network and / or the VoIP network through the communication processor 3640.

According to an embodiment of the present invention, when the communication processing unit 3640 is connected to a general telephone switching network (or intelligent network), the voice processing unit 3615 may transmit the voice signal (or electrical signal) to the general telephone switching network (or intelligent network). It is preferable to generate the voice data by encoding by using a coding scheme that can be transmitted through).

According to another exemplary embodiment of the present invention, when the communication processor 3640 is connected to a mobile communication network, the voice processor 3615 may transmit the voice signal (or electrical signal) through the mobile communication network. Division Multiple Access) It is preferable to generate the speech data by encoding in a coding scheme corresponding to the stack.

According to another exemplary embodiment of the present invention, when the communication processor 3640 accesses a VoIP network, the voice processor 3615 may transmit the voice signal (or electrical signal) through the VoIP network. Preferably, the voice data is generated by encoding with a coding scheme corresponding to a stack, wherein the coding scheme corresponding to the VoIP network is an H.323 protocol standard and / or an Internet Engineering Task defined by the International Telecommunication Union (ITU). It is preferable to include at least one or more of the Session Initiation Protocol (SIP) protocol specifications defined by the Force.

According to the exemplary embodiment of the present invention, the voice processor 3615 and the voice input device interoperate with each other to perform a function of voice input means for receiving a voice signal for voice call through the telephone network and / or the VoIP network.

When voice data encoded by a predetermined encoding method is received through the communication processor 3640, the controller 3605 provides the voice data to the voice processor 3615, at which time the voice processor 3615 is provided. Decodes the voice data by a voice encoding scheme corresponding to a telephone network and / or a VoIP network connected to the communication processor 3640 to generate a predetermined voice signal (or an electrical signal), and generates the voice signal (or Electrical signal) is output through a predetermined voice output device (for example, a speaker) provided in the call terminal 3600. For this purpose, the voice processor 3615 is provided with a predetermined vocoder and a codec. desirable.

According to an embodiment of the present invention, when the communication processing unit 3640 is connected to a general telephone switching network (or an intelligent network), the voice processing unit 3615 may convert the voice data received through the communication processing unit 3640 into the general telephone. It is preferable to generate the voice signal (or the electrical signal) by decoding by an encoding scheme corresponding to the switching network (or intelligent network).

According to another exemplary embodiment of the present invention, when the communication processor 3640 connects to a mobile communication network, the voice processor 3615 uses the CDMA corresponding to the mobile communication network to receive voice data received through the communication processor 3640. It is preferable to generate the speech signal (or electrical signal) by decoding by stack-based encoding.

According to another exemplary embodiment of the present invention, when the communication processing unit 3640 accesses a VoIP network, the voice processing unit 3615 may convert the voice data received through the communication processing unit 3640 into the VoIP network. It is preferable to generate the voice signal (or electrical signal) by decoding by encoding method, wherein the encoding method corresponding to the VoIP network is at least one of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable that the above specification is included.

According to an embodiment of the present invention, the voice processing unit 3615 and the voice output device interoperate with each other to perform a function of voice output means for outputting a voice signal for voice call through the telephone network and / or the VoIP network.

The screen output unit 3620 is a liquid crystal display (LCD) by the control unit 3605 while the call terminal 3600 performs a voice call function and / or a payment processing function using the call terminal 3600. And / or at least one or more information or data which is predefined or defined in real time to be output to a predetermined display device including a Cathode Ray Tube (CRT) and / or a CRT (Cathode Ray Tube). The screen output unit 3620 and the screen output device interoperate with each other to perform a function of a screen output means provided in the call terminal 3600.

Predefined information or data to be output from the call terminal 3600 to the screen output device may include key data input through the key input unit 3610, and / or components included in the call terminal 3600. Information (or data) stored or generated by the information, information (or data) transmitted / received through the communication processor 3640, and / or (or data) corresponding to a predetermined operation result performed by the call terminal 3600. It comprises at least one.

According to a preferred embodiment of the present invention, the screen output unit 3620 of the screen output means for outputting the payment processing screen according to each payment processing step to the screen output device for payment processing using the call terminal 3600 It is desirable to perform the function.

The tone processing unit 3635 may use a predetermined number key (“0 to 9”) and / or a letter key ('*) through the key input unit 3610 while the call mode 3600 is in a voice call mode. ',' # 'Is input, generates a key tone corresponding to the input key data in a complex frequency code (DTMF) scheme, and the key tone is connected to the telephone network and / or to which the communication processor 3640 is connected. It is characterized in that the encoding by the voice encoding method corresponding to the VoIP network to provide to the communication processor 3640.

According to an embodiment of the present invention, when the communication processing unit 3640 is connected to a general telephone switching network (or an intelligent network), the voice processing unit 3615 may transmit the key tone through the general telephone switching network (or an intelligent network). It is preferable to generate the speech data by encoding by a coding scheme.

According to another exemplary embodiment of the present invention, when the communication processor 3640 is connected to a mobile communication network, the voice processor 3615 may transmit a code division multiple access (CDMA) stack capable of transmitting the key tone through the mobile communication network. It is preferable to generate the speech data by encoding by a coding scheme corresponding to.

According to another exemplary embodiment of the present invention, when the communication processor 3640 accesses a VoIP network, the voice processor 3615 encodes corresponding to a VoIP protocol stack capable of transmitting the key tone through the VoIP network. It is preferable to generate the voice data by encoding in a scheme, wherein the encoding scheme corresponding to the VoIP network includes at least one or more of the H.323 protocol standard defined by the ITU and / or the SIP protocol standard defined by the IETF. It is preferable to make.

The communication processor 3640 connects the call terminal 3600 to a predetermined telephone network and / or a VoIP network, and at least one or more other call terminals (or servers) according to call processing procedures defined in the telephone network and / or VoIP network. ) And a voice call channel.

According to an exemplary embodiment of the present invention, the communication processing unit 3640 connects the call terminal 3600 to a general telephone switching network (or an intelligent network) (for example, connecting the call terminal 3600 to a general telephone switching network). (Or a network configuration connecting the switch and the wired communication section provided on the intelligent network), by performing a call processing procedure corresponding to the communication protocol standard defined in the general telephone switching network (or intelligent network) It is preferable to connect a voice call channel with at least one or more other call terminals (or servers).

According to another exemplary embodiment of the present invention, the communication processor 3640 may include a physical network configuration (eg, the base station provided on the mobile communication network) for connecting the call terminal 3600 to a mobile communication network. And a network configuration connecting a wireless communication section corresponding to the CDMA stack, and performing at least one call processing procedure corresponding to a communication protocol standard defined in the mobile communication network. ) Is preferably connected to the voice call channel.

According to another exemplary embodiment of the present invention, the communication processing unit 3640 may include a physical network configuration (for example, VoIP provided with the call terminal 3600 on the VoIP network) connecting the call terminal 3600 to the VoIP network. Network configuration that connects wired communication segments through the Gateway and / or VoIP Gatekeeper and the Real-time Transport Protocol / RTP Control Protocol (RTP / RTCP) protocol layer implemented on top of the UDP / IP protocol stack. It is preferable to include a, it is preferable to perform a call processing procedure corresponding to the communication protocol standard defined in the VoIP to connect the voice call channel with at least one or more other call terminals (or servers).

In addition, the communication processing unit 3640 transmits and receives voice data encoded with at least one other call terminal (or server) and an encoding scheme corresponding to the telephone network and / or VoIP network through the voice call channel. .

When the communication processing unit 3640 is connected to a general telephone switching network (or an intelligent network) according to an embodiment of the present invention, the communication processing unit 3640 is encoded by an encoding scheme corresponding to the general telephone switching network (or intelligent network). It is preferable to transmit and receive at least one voice data.

According to another exemplary embodiment of the present invention, when the communication processor 3640 accesses a mobile communication network, the communication processor 3640 transmits and receives at least one voice data encoded by a corresponding coding scheme corresponding to the mobile communication network. It is desirable to.

According to another exemplary embodiment of the present invention, when the communication processor 3640 accesses a VoIP network, the communication processor 3640 transmits and receives at least one voice data encoded by an encoding scheme corresponding to the VoIP network. It is preferable.

In addition, when it is possible to add (or assign) a predetermined data channel to the voice call channel, the communication processor 3640 assigns a predetermined data channel to the voice call channel connected through a predetermined telephone network and / or a VoIP network. Add (or assign) and perform data communication with at least one other call terminal (or server) to which the call channel is connected through the added (or assigned) data channel.

According to an embodiment of the present invention, when the communication processing unit 3640 is connected to a general telephone switching network (or intelligent network), the communication processing unit 3640 is a predetermined data channel defined in the general telephone switching network (or intelligent network). Is added to (or assigned to) the voice call channel, and data communication is performed in addition to the voice call with at least one other call terminal (or server) to which the call channel is connected through the data channel.

According to another exemplary embodiment of the present invention, when the communication processor 3640 accesses a mobile communication network, the communication processor 3640 adds (or assigns) a predetermined data channel defined in the mobile communication network to the voice call channel. In addition to the voice call, it is preferable to perform predetermined data communication with at least one other call terminal (or server) connected with the call channel through the data channel.

According to another exemplary embodiment of the present invention, when the communication processing unit 3640 accesses a VoIP network, the communication processing unit 3640 adds a predetermined data channel defined in the VoIP network to the voice call channel (or And a predetermined data communication in addition to the voice call with at least one or more other call terminals (or servers) to which the call channel is connected through the data channel.

In addition, the communication processor 3640 connects at least one terminal (or server) and a predetermined data channel (or communication channel) through a predetermined telephone network and / or a VoIP network independently of the voice call channel. And, it characterized in that the predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

When the communication processing unit 3640 is connected to a general telephone switching network (or an intelligent network) according to an embodiment of the present invention, the communication processing unit 3640 is a predetermined data communication standard defined in the general telephone switching network (or intelligent network). According to the present invention, it is preferable to connect a predetermined data channel (or communication channel) with at least one terminal (or server), and predetermined data communication with at least one terminal (or server) through the data channel (or communication channel). Do this.

According to another exemplary embodiment of the present invention, when the communication processor 3640 accesses a mobile communication network, the communication processor 3640 may include at least one terminal according to a CDMA stack based data communication standard defined in the mobile communication network. Or a server) and a predetermined data channel (or communication channel), and perform a predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

According to another exemplary embodiment of the present invention, when the communication processing unit 3640 accesses a VoIP network, the communication processing unit 3640 may include at least one or more data according to a VoIP protocol stack based data communication standard defined in the VoIP network. It is preferable to connect a predetermined data channel (or communication channel) with a terminal (or server), and perform predetermined data communication with at least one terminal (or server) through the data channel (or communication channel).

According to the present invention, the call terminal 3600 reads predetermined payment means information from a predetermined customer card in order to provide a payment processing function using the call terminal 3600 according to the present invention. It is characterized by comprising a).

That is, the customer receiving payment processing using the call terminal 3600 according to the present invention through the call terminal 3600, based on the ISO / IEC 7810 standard MS (Magnetic Stripe) card, and / or ISO / IEC Have (or own) a contact IC card (or wireless IC chip) based on the 7816 standard and / or at least one contactless IC card (or wireless IC chip) based on the ISO / IEC 14443 standard. The card reader 3625 may provide an interface for reading at least one payment means information from the customer-owned card.

According to an exemplary embodiment of the present invention, the card reader unit 3625 includes an MS reader unit that provides an interface between the MS card and the call terminal 3600, and / or the contact IC card and the call terminal 3600. And a contact IC reader unit for providing an interface, and / or a contactless IC reader unit for providing an interface between the contactless IC card and the call terminal 3600.

The MS reader unit is a card reader unit 3625 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. It is characterized by interfacing the predetermined payment means information to the call terminal 3600 from at least one or more tracks (eg, track II area) provided in the MS of the MS card using the loaded.

The contact IC reader unit is a card reader unit 3625 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies the power to the IC chip of the IC card through the contact point, and the predetermined payment means information from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) Characterized in that the interface to the call terminal (3600).

The contactless IC reader part is a card reader part 3625 based on ISO / IEC 14443. The contactless IC reader part uses at least electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, and calls the predetermined payment means information from the IC chip through the half-duplex transaction using the APDU It is characterized in that the interface to the terminal 3600.

According to an embodiment of the present invention, the card reader unit 3625 may use credit card payment means information, and / or check card payment means information from the customer-owned card for payment processing using the call terminal 3600, and / Or it is preferable to read at least one or more of the debit card payment means information, and / or prepaid card payment means information, and / or bank transfer payment means information.

According to the present invention, the call terminal 3600 performs a payment processing procedure by reading predetermined payment means information from a predetermined customer card to provide a payment processing function using the call terminal 3600 according to the present invention. It is characterized in that it comprises a security application module (3645) (Scure Application Module; SAM) for managing the thing.

The secure application module (3645) is a confidentiality and / or authentication required by the call terminal 3600 in the process of performing the electronic payment and / or electronic payment using the card. Security requirements, including integrity and / or nonrepudiation, etc., within the call terminal 3600 without using an authentication server (or payment server) on the payment network. As a safety device for performing the structure, the call terminal 3600 encrypts a predetermined message (information or data) processed in the process of performing a predetermined security request function (for example, an electronic payment and / or an electronic payment function). Or decrypt the message, add an authenticator that prevents forgery (or tampering) of the message, or provide important information in the process of performing the security request function. It characterized in that it performs the function of Chapter.

In general, the security application module (3645) is preferably composed of a predetermined security application module (3645) inserter and a security application module (3645) chip, the security application module (3645) chip is a chip containing at least 8-bit CPU Application Specific Integrated Circuit (ASIC) chips (eg, PLCC 44-pin chips) and / or IC chips (eg, IC cards in the form of subscriber identity modules (SIMs)) with performance of 2 MIPS (Million Instructions Per Second) or more. It is preferable to comprise a.

In addition, the security application module 3635 may include at least one or more security application data (eg, at least one or more identifiers, versions, expiration dates, issue dates, code values, etc.) required for the call terminal 3600 to perform a predetermined security request function. ) And / or keys (e.g. one master key and at least one application key) and / or protocols (e.g. trading protocols, re-transaction protocols, previous transaction cancellation protocols, collection protocols, SAM issuance protocols, (e-money companies / card companies) Registration protocol, authorization protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / disposal / initialization) / Reprocessing / cancellation command).

Referring to FIG. 36, the call terminal 3600 includes a mode checking unit 3655 for checking an operation mode of the call terminal 3600 for payment processing using the call terminal 3600 according to the present invention. As a result of checking by the mode confirmation unit 3555, when the call terminal 3600 is in the payment mode using the call terminal 3600 according to the present invention, a predetermined payment is made from a predetermined customer-owned card through the card reader 3625. An information transmitter 3660 for reading means information, and an information transmitter 3675 for transmitting the payment means information to the server through a data channel corresponding to a communication channel connected to the server through the communication processor 3640. It is characterized by comprising a).

According to another exemplary embodiment of the present invention, the communication processing unit 3640 connects a data channel directly with the predetermined payment server 3560, and the information transmission unit 3757 may connect the payment server ( It is possible to directly transmit the payment means information to 3560, whereby the present invention is not limited.

In addition, the call terminal 3600 further includes an information processing unit 3655 which processes a number array (and / or number structure) to prevent the payment means information from being eavesdropped and / or intercepted and / or hacked. Characterized in that made.

In addition, the call terminal 3600 is characterized in that it further comprises an encryption processing unit 3670 to encrypt in a predetermined encryption method in order to prevent the payment means information is intercepted and / or intercepted and / or hacked.

The mode checking unit 3555 checks whether an operation mode of the call terminal 3600 is a voice call mode, a voice call / data communication mode, or a data communication mode.

In addition, when the operation mode of the call terminal 3600 is a voice call / data communication mode, the mode checking unit 3565 may include a data channel added to (or assigned to) the voice call channel for data communication. Mode or a data communication mode for payment processing according to the present invention.

If the result of the check indicates that the operation mode of the call terminal 3600 is a data communication mode for payment processing according to the present invention, the mode checking unit 3565 may display the screen output unit 3620 (and / or the voice processing unit 3615). By requesting to interface a customer-owned card through the card reader unit 3625 through)), the information reading unit 3660 receives predetermined payment means information from the customer-owned card through the card reader unit 3625. Process to read.

In addition, when the operation mode of the call terminal 3600 is a data communication mode, the mode checking unit 3555 is whether the data communication mode is a simple data communication mode or a data communication mode for payment processing according to the present invention. It is characterized by checking.

If the result of the check indicates that the operation mode of the call terminal 3600 is a data communication mode for payment processing according to the present invention, the mode checking unit 3565 may display the screen output unit 3620 (and / or the voice processing unit 3615). By requesting to interface a customer-owned card through the card reader unit 3625 through)), the information reading unit 3660 receives predetermined payment means information from the customer-owned card through the card reader unit 3625. Process to read.

As a result of the check by the mode checking unit 3555, when the call terminal 3600 is in the payment mode using the call terminal 3600 according to the present invention, the information reading unit 3660 is connected to the card reader unit 3625. And reading predetermined payment means information from a predetermined customer-owned card, wherein the payment means information includes credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and And / or at least one of prepaid card payment means information, and / or bank transfer payment means information.

According to an embodiment of the present invention, the payment means information is any one of credit card payment means information, and / or check card payment means information, and / or debit card payment means information, and / or prepaid card payment means information In the case of payment means information, the payment means information read by the information reader 3660 through the card reader 3625 includes at least one or more number arrays such as a 16-digit card number and / or an expiration date. It is preferable to make it.

In addition, when the payment means information corresponds to the account transfer payment means information, the payment means information read out by the information reader 3660 through the card reader 3625 is a 16-digit account number and / or branch number It is preferable to include at least one or more number arrangements, such as.

The information transmitting unit 3757 processes the payment means information read by the information reading unit 3660 in a predetermined data structure standard promised with the server, and transmits payment means information corresponding to the data structure standard. The processor 3640 processes the data to be transmitted to the server through the data channel.

For example, if the payment means information read out by the information reader 3660 is credit card payment means information, the information transmission unit 3475 has a data structure such as "1234123412341234 * 0407". Where "1234123412341234" corresponds to a 16-digit card number, "0407" corresponds to an expiration date corresponding to "month / year" for 2 digits each, and "*" distinguishes the card number from the expiration date. The credit card payment means information is transmitted from the communication processor 3640 to the server through the data channel.

According to an embodiment of the present invention, the information transmission unit 3757 may further include a predetermined checksum for preventing a transmission / reception error for payment means information transmitted through the data channel. It is possible to prevent a transmission and reception error for the payment method information.

However, the payment means information as described above may be exposed to eavesdropping and / or eavesdropping and / or hacking, and to prevent this, the processing unit is a combination of the numbers included in the payment means information in the original payment means in the server And processing the data into a data structure capable of restoring the information, wherein the processed payment means information is restored to the original payment means information in the server.

For example, if the payment means information read out by the information reader 3660 is credit card payment means information, then the credit card payment means information is a 16-digit card number such as "1234123412341234" and "0407". And a four-digit validity period, wherein the processing unit performs a bit operation (for example, an XOR operation) on the 16-digit card number with a predetermined 16-byte key value, such as an entirely different 16-digit number such as "1357246714692358". After generating the card number, the four-digit expiration date is combined to process payment means information such as "1357246714692358 * 0407", and the processed payment means information is stored in the server as "1234123412341234 * 0407". It is restored to the payment means information.

Of course, the method of processing the payment means information in the present invention is not limited to the above-described method, the above-described method is to the person having ordinary knowledge in the art to which the present invention belongs It is only one means for explaining the technical characteristic to process efficiently.

Alternatively, in order to prevent the payment means information from being exposed to eavesdropping and / or interception and / or hacking, the encryption processing unit 3670 encrypts the payment means information by a predetermined encryption method. The encrypted payment means information is characterized in that the server is decrypted by a predetermined decryption method corresponding to the encryption method.

For example, if the payment means information read out by the information reader 3660 is credit card payment means information, then the credit card payment means information is a 16-digit card number such as "1234123412341234" and "0407". The encryption processing unit 3670 encrypts the 16-digit card number by a predetermined encryption method to generate a completely different 16-digit card number such as "2472354698671135" and then "0407". Combining the four-digit expiration date, such as "2472354698671135 * 0407" generates encrypted payment means information, such as, the encrypted payment means information is decrypted by the server to the original payment means information, such as "1234123412341234 * 0407" Is restored.

Of course, the method of encrypting the payment means information in the present invention is not limited to the above-described manner, the illustrated method is to encrypt the payment means information to those of ordinary skill in the art to which the present invention belongs It is only one means for effectively explaining the technical characteristics.

37 illustrates an MS card in which predetermined payment means information is stored according to another exemplary embodiment of the present invention.

More specifically, FIG. 37 illustrates an embodiment of an MS card for storing payment means information read from a customer's own card through a card reader provided in a predetermined call terminal 3600. The illustrated MS card shows a case in which payment means information according to the present invention is stored in the Track II storage area in an MS card having a Track I storage area, a Track II storage area, and a Track III storage area. Those skilled in the art may refer to and / or modify this drawing 37 to provide credit card payment means information, and / or check card payment means information in the Track II storage area of the MS card. Debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information, provided that the bank transfer payment method information is stored in the Track I storage area and / or Track III storage area. It will be possible to infer various implementation methods for storing the invention, but the present invention includes all implementation methods inferred from the above, and is not limited to the implementation methods illustrated in FIG.

According to the American Bank Association (ABA) standard, the track II storage area of the MS card can store up to 40 digits of 5-bit characters based on 75 bpi magnetic density, and start digits of one digit size (Start Sentinel). , SS, 0xB), Primary Account Number (PAN) field for storing up to 19 digits, Field Separator (FS, 0xD) with 1 digit size, Addition Data field and Discretionary Data) field, one digit end character (End Sentinel, ES, 0xF) and one digit long redundancy check (LRC).

Referring to FIG. 37, the payment means information providing the payment processing function using the call terminal 3600 according to the present invention is stored in a PAN field, an additional data field and an arbitrary data field of the Track II storage area. do.

38 is a view showing an IC card in which predetermined payment means information is stored according to another embodiment of the present invention.

More specifically, FIG. 38 illustrates an embodiment of an IC card for storing payment means information read from a customer's own card through a card reader provided in a predetermined call terminal 3600. A case where the payment means information according to the present invention is stored in a memory of a formula IC card, and a person having ordinary knowledge in the technical field to which the present invention pertains refers to the IC card by referring to and / or modifying the drawing of FIG. Various implementation methods for storing credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or wire transfer payment method information in a memory of It may be inferred that the present invention includes all the implementation methods inferred above, and is not limited to the implementation method illustrated in FIG.

Referring to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip's IC chip includes power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), I / O interfaces for communicating with the call terminal 3600 (e.g., command or data exchange, etc.) through contact points such as programming power supplies (VPP) and / or input / output (I / O), central processing units (CPUs), MPUs A processor unit including at least one computing element including a micro process unit and / or a coprocessor, a read only memory (ROM), a random access memory (RAM), and an electrically erasable and programmable read (EPPROM). And a memory unit 3650 including at least one memory element including only memory, flash memory (FM), and the like. In particular, at least one memory element (eg, a ROM) of the memory elements is provided with an IC card internal resource. Chip Fortune Managing And Operating A chip operating system (COS) is stored, and when a predetermined power is supplied from the call terminal 3600 through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory unit 3650 is executed. Loaded into memory to control the overall operation of the IC chip, and communicates with the IC chip through an APDU (Application Protocol Data Unit) based on the clock frequency (eg, 3.57 MHz or 4.9 MHz) of the clock signal (CLK) contact point. Controls information or data exchange between the terminals 3600.

According to the present invention, the memory unit 3650 of the IC chip terminates at least one or more programs that are loaded in the card terminal and is pre-driven, and drives a specific program among a plurality of programs stored in the card terminal, Or card storage information for executing a function of converting a screen configuration and / or a function set in the card terminal into a specific screen configuration and / or a specific function. The card storage information is stored in the terminal program. The data unit stores a data set corresponding to predetermined information or data that is read and read and / or used by the data unit, and is operated or operated by a computing function and an instruction set provided by a COS. Program routines used by programs (e.g., in the case of Javacard) JAVA Applet) is provided with a processing unit corresponding to an application including an instruction call code that interacts with the instruction set of the COS and execution code that is processed by a processor unit. In particular, the processing unit is configured through an APDU. Read a command provided from the terminal program via the input / output interface, and read or write at least one or more information or data stored in the data unit based on the read command, and as a result or read information or The data may be provided to the terminal program through the input / output interface through an APDU.

According to a preferred embodiment of the present invention, the memory unit 3650 of the IC chip includes a security structure based on ISO / IEC 10202. Accordingly, the memory unit 3650 may include a chip serial number (CSN). It consists of a protected area where the same secret information is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the like. It is preferably stored in an area excluding the protection area and the COS control area.

In addition, according to ISO / IEC 7816 and / or ISO / IEC 14443 ICC standards, the memory unit 3650 may include one master file (MF) corresponding to a root file, and a lower subordinate to the master file. An ATR (Aswer To Reset) including function information on at least one stored information, at least one dedicated file corresponding to each ICC stored information, and a dedicated file (DF) corresponding to each ICC stored information, and disposed below the dedicated file. Includes a file structure consisting of an element file (EF) containing the actual information and / or data for the smart card service, the card storage information for the present invention also includes the file structure as described above.

Referring to FIG. 38 according to an embodiment of the present invention, the data unit of the card storage information may store at least one or more payment means information for payment processing using the call terminal 3600 according to the present invention. The payment method information may be at least one of credit card payment method information, and / or check card payment method information, and / or debit card payment method information, and / or prepaid card payment method information, and / or bank transfer payment method information. It is made, including.

39 is a diagram for a method of encrypting and transmitting payment information using a symmetric key (or secret key) method in a call terminal 3600 according to another exemplary embodiment of the present invention.

More specifically, FIG. 39 is an embodiment of the present invention for encrypting and transmitting the payment means information by a symmetric key (or secret key) method in a call terminal 3600 equipped with an encryption function as shown in FIG. 36. If one of ordinary skill in the art, with reference to the Figure 39 and / or modified in the call terminal 3600 on the telephone network and / or VoIP network the payment means information in a symmetric key (or secret key) method Various implementation methods of encryption may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 39 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the call terminal 3600, the public certificate 3600 to the call terminal 3600 Stored in a predetermined memory unit 3650, and / or stored in an IC chip (or IC card) of ID-000 type mounted on or detached from the call terminal 3600, and / or in the call terminal When a predetermined IC card reader is provided at 3600, it can be all stored in the IC card inserted into the IC card reader, and the present invention is not limited thereto.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit 3650 provided in the call terminal 3600 in addition to the public certificate, and / or from the server to the call terminal 3600 It may be included in the interface screen provided by), and / or embedded in the communication program to communicate with the server on the call terminal 3600, thereby the anti-invention is not limited.

Referring to FIG. 39, when predetermined payment means information is read from the information reader 3660 of the call terminal 3600, the predetermined payment means information is provided to the cryptographic processor 3670 (3900). The encryption processing unit 3670 reads a predetermined symmetric key (or secret key) for encrypting payment means information from an authorized certificate provided in the call terminal 3600 (3905), and reads the read symmetric key (or The payment means information is encrypted using a secret key (3910).

Here, the encryption function of the encryption processing unit 3670 is called E (Encryption), the symmetric key (or secret key) is k (key), the payment means information P (Plaintext), and the symmetric key (or secret). If the payment means information encrypted with the key) is C (Ciphertext), the encryption function of the encryption processing unit 3670 can be expressed by an expression such as "Ek (P) = C".

According to the embodiment of the present invention, the encryption processing unit 3670 encrypts the payment means information through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, It is preferable to include at least one or more of the International Data Encryption Algorithm (IDEA), and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When payment means information is encrypted through a symmetric key (or secret key) as described above, the communication processor 3640 sends the encrypted payment means information to the server through a communication protocol defined on the telephone network and / or VoIP network. And transmit (3915).

40 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server by a symmetric key (or secret key) method according to another embodiment of the present invention.

In more detail, FIG. 40 decrypts the payment means information received from the call terminal 3600 having the encryption function as shown in FIG. 36 by a symmetric key (or secret key) method in the server as shown in FIG. As to a method of implementation, if the skilled in the art to which the present invention pertains, the encrypted payment means in the call terminal 3600 on the telephone network and / or VoIP network by referring to and / or modifying this figure 40 Various implementation methods for decrypting information in a symmetric key (or secret key) manner may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 40 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate provided in the server, and the public certificate is a predetermined database (not shown) interworking with the server. ), And the present invention is not limited thereto.

Referring to FIG. 40, the information receiving unit 3525 of the server receives the encrypted payment means information through the telephone network and / or the VoIP network and provides the encrypted payment means information to the decryption unit 3530 (4000). Is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 3530 extracts (4005) a predetermined symmetric key (or secret key) for decrypting the encrypted payment means information from the authorized certificate provided in the server, and the extracted symmetric key (or The encrypted payment means information is decrypted through a secret key (4010).

Here, the decryption function of the decryption unit 3530 is called D (Decryption), and the payment means information encrypted with the symmetric key (or secret key) with k (key) and the symmetric key (or secret key) is C. (Ciphertext) and the decrypted payment means information is P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 3530 is "Dk = P, or Dk (Ek (P)) ) = P ".

According to the embodiment of the present invention, the algorithm for decrypting the encrypted payment means information by the decryption unit 3530 through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, It is preferable to include at least one or more of Skipjack, International Data Encryption Algorithm (IDEA), and various forms of decryption algorithms may be used, but the decryption algorithm matches the encryption algorithm used in the call terminal 3600. The present invention is not limited to the specific decoding algorithm.

When the payment means information encrypted through the symmetric key (or secret key) is decrypted as described above, the decryption unit 3530 provides the decrypted payment means information to the information transmission unit 3550 (4015). The information transmitter 3550 transmits the payment means information to the bansa server through a predetermined payment network.

FIG. 41 is a diagram for a method of encrypting and transmitting payment means information in a public key infrastructure structure in a call terminal 3600 according to another exemplary embodiment of the present invention.

More specifically, FIG. 41 is an embodiment of the present invention for encrypting and transmitting the payment means information in a public key infrastructure structure in a call terminal 3600 equipped with an encryption function as shown in FIG. 36. If it is known to those skilled in the art, by referring to and / or modifying the present Figure 41 to infer various implementation methods for encrypting the payment means information in a public key method in the call terminal 3600 on the telephone network and / or VoIP network As will be appreciated, the invention encompasses all of the inferred practice methods, and is not limited to the practice method illustrated in FIG.

In this figure 41 according to an embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal 3600, and the public certificate is provided in the call terminal 3600. Stored in the memory unit 3650, and / or stored in an ID-000 type IC chip (or IC card) mounted on or detached from the call terminal 3600, and / or the call terminal 3600 In the case where a predetermined IC card reader is provided, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal 3600, and the present invention is not limited thereto. .

Referring to FIG. 41, when the information reading unit 3660 of the call terminal 3600 reads predetermined payment means information, the information is provided to the encryption processing unit 3670 (4100). The encryption processing unit 3670 extracts a predetermined server side public key for encrypting the payment means information from the authorized certificate (4105), and encrypts the payment means information through the extracted server side public key ( 4110).

Here, the encryption function of the encryption processing unit 3670 is called E (Encryption), the server means public key k1 (key), the payment means information P (Plaintext), and the payment means encrypted with the server-side public key When the information is referred to as C (Ciphertext), the encryption function of the encryption processing unit 3670 can be expressed by an expression such as "Ek1 (P) = C".

According to an embodiment of the present invention, an algorithm for encrypting the payment means information through the server-side public key by the encryption processing unit 3670 may include RSA (Ron Rivest, Adi Shamir, Len Adleman) and DSA (Digital Signature Algorithm). , DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above. Preferably, various types of encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the payment means information through the RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by different prime factors of n and a b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the encryption function of the encryption processing unit 3670 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment means information is encrypted through the server-side public key as described above, the communication processor 3640 transmits the encrypted payment means information to the server through a network component on the telephone network and / or the VoIP network (4115). ).

42 is a diagram illustrating a method of decrypting payment means information encrypted and received at a server according to another embodiment of the present invention using a public key infrastructure.

More specifically, FIG. 42 illustrates a method of decrypting the payment means information, which is encrypted and received from a call terminal 3600 having an encryption function as shown in FIG. 36, in a public key infrastructure structure in a server as shown in FIG. As is known in the art, a payment encrypted by the server-side public key in the call terminal 3600 on the telephone network and / or the VoIP network by referring to and / or modifying the drawing of FIG. Various implementation methods for decrypting the means information in a public key infrastructure scheme may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 42 according to an embodiment of the present invention, the server-side private key for decrypting the payment means information encrypted with the server-side public key in a public key infrastructure is preferably read from the public certificate provided in the server. , The public certificate is preferably stored in a predetermined database (not shown) in conjunction with the server, by which the present invention is not limited.

Referring to FIG. 42, the information receiving unit 3525 of the server receives encrypted payment means information through the telephone network and / or VoIP network and provides it to the decryption unit 3530 (4200). It is preferably received via a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 3530 extracts a server-side private key for decrypting the encrypted payment means information from the authorized certificate provided in the server (4205), and encrypts the encrypted server through the extracted server-side private key. The payment means information is decrypted (4210).

Here, the decryption function of the decryption unit 3530 is referred to as D (Decryption), the server-side private key is k2 (key), the payment means information encrypted with the server-side public key is C (Ciphertext), and the server side. When the payment means information decrypted with the private key is called P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 3530 is "Dk2 = P, or Dk2 (Ek (P)) = P" and The same formula can be used.

According to an embodiment of the present invention, an algorithm for decrypting the payment means information encrypted by the server-side public key in the call terminal 3600 by the decryption unit 3530 may be RSA (Ron Rivest, Adi). Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, at least one or more of the various forms of decoding algorithms May be used, the decryption algorithm is matched with the encryption algorithm used in the call terminal 3600, and the present invention is not limited by a specific decryption algorithm.

For example, when decrypting the payment means information through the RSA decryption algorithm of the public key based decryption algorithm, n is a public method (Modulus) used in the decryption process, n, a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e, the undisclosed index is d, the n satisfies "n = a * b", d is "de = 1 mod (a-1) (b-1) ", wherein the decoding function of the decoder 3530 may be expressed as" P = Dk2 = Cd mod n ".

When the payment means information encrypted by the server-side public key in the call terminal 3600 is decrypted through the server-side private key as described above, the decryption unit 3530 transfers the decrypted payment means information to the information transmission unit 3550. The information transmitting unit 3550 transmits the payment means information to the bansa server through a predetermined payment network.

43 is a diagram illustrating a method of encrypting and transmitting payment means information in an electronic envelope method in a call terminal 3600 according to another exemplary embodiment of the present invention.

More specifically, FIG. 43 is an embodiment of the present invention for encrypting and transmitting the payment means information by an electronic envelope method in the call terminal 3600 equipped with the encryption function as shown in FIG. 36. With the knowledge of the present invention, various implementation methods for encrypting the payment means information in an electronic envelope method in the call terminal 3600 on the telephone network and / or the VoIP network can be inferred by referring to and / or modifying the drawing 43. However, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 43 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate provided in the call terminal 3600, and the public certificate is provided in the call terminal 3600. Stored in the memory unit 3650, and / or stored in an ID-000 type IC chip (or IC card) mounted on or detached from the call terminal 3600, and / or the call terminal 3600 In the case where a predetermined IC card reader is provided, all of them can be stored in an IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal 3600, and the present invention is not limited thereto. .

Referring to FIG. 43, when the information reading unit 3660 of the call terminal 3600 reads predetermined payment means information, the information is provided to the encryption processing unit 3670 (4300). The encryption processing unit 3670 generates a random secret key for encrypting the payment means information using a secret key (symmetric key) method (4305), and generates the generated secret key. The payment means information is encrypted by using 4310.

Here, the encryption function of the encryption processing unit 3670 is called E (Encryption), the secret key is r (random secret key), the payment means information P (Plaintext), and the payment means information encrypted with the secret key Speaking of C (Ciphertext), the encryption function of the encryption processing unit 3670 can be expressed by a formula such as "Er (P) = C".

According to an embodiment of the present invention, the encryption processing unit 3670 encrypts the payment means information through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption). It is preferable to include at least one of the algorithm (Algorithm), and various forms of encryption algorithm may be used, but the present invention is not limited by a specific encryption algorithm.

Thereafter, the encryption processing unit 3670 encrypts the secret key (random secret key) used to encrypt the payment means information. To this end, the encryption processing unit 3670 extracts a predetermined server-side public key from the public certificate. In operation 4315, the private key is encrypted using the server-side public key (4320).

Here, the encryption function of the encryption processing unit 3670 is called E (Encryption), the server-side public key is k1 (key), the secret key is r (random Secret key), and the secret encrypted with the server-side public key. If the key is C (Ciphertext), the encryption function of the encryption processing unit 3670 can be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 3670 encrypts the secret key through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 3670 may be expressed as" C = Ek1 (r) = re mod n ".

If the payment means information is encrypted with the secret key, and the secret key is encrypted with the server-side public key, the encryption processing unit 3670 is a secret encrypted with the secret method information and the server-side public key encrypted with the secret key. A transaction data associated with a key is generated and provided to the communication processor 3640 (4325), and the communication processor 3640 transmits the transaction data to the server through a network component on a telephone network and / or a VoIP network ( 4330).

44 is a diagram illustrating a method of decrypting payment means information received encrypted by a server by an electronic envelope method according to another exemplary embodiment of the present invention.

In more detail, FIG. 44 shows the transaction data in an electronic envelope manner in a server such as FIG. 35 that receives transaction data including encrypted payment means information from a call terminal 3600 equipped with an encryption function as shown in FIG. A method for decrypting, which is a thing of ordinary skill in the art to which the present invention pertains, refers to and / or modifys the drawing 44 and the electronic envelope in the call terminal 3600 on the telephone network and / or the VoIP network. Although various implementation methods for decrypting transaction data encrypted in the same manner may be inferred by the same electronic envelope method, the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 44 according to an embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate provided in the server, and the public certificate is linked with the server. It is preferably stored in a predetermined database (not shown), and the present invention is not limited thereby.

Referring to FIG. 44, the information receiving unit 3525 of the server receives predetermined transaction data including payment means information encrypted through the telephone network and / or VoIP network, and provides the predetermined transaction data to the decryption unit 3530. 4400, the transaction data is preferably received through a communication protocol stack defined in the telephone network and / or VoIP network.

Thereafter, the decryption unit 3530 extracts a server-side private key for decrypting the encrypted secret key included in the transaction data from the public certificate provided in the server (4405), and extracts the extracted server-side private key. By decrypting the private key encrypted with the server-side public key in the call terminal 3600 (4410), a predetermined secret key for decrypting the payment means information is extracted (4415), and the extracted secret key is used. By decoding the payment means information (4420), the call terminal 3600 extracts the payment means information encrypted with the secret key (4425).

Here, the decryption function of the decryption unit 3530 is called D (Decryption), the server-side private key is k2 (key), the secret key encrypted with the server-side public key is C (Ciphertext), and the server-side individual. When the secret key decrypted with the key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 3530 is "Dk2 = r, or Dk2 (Ek1 (r)) = r". It can be expressed as an expression.

According to an embodiment of the present invention, an algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal 3600 by the decryption unit 3530 may be RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it may be used, the decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal 3600, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", where the decoding function of the decoder 3530 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the decryption unit 3530 is called D (Decryption), the secret key is r (random secret key), the payment means information encrypted with the secret key (C (Ciphertext)), and the decrypted When the payment means information is called P (Plaintext), the function of decrypting the encrypted payment means information by the decryption unit 3530 may be expressed by an expression such as "Dr = P or Dr (Er (P)) = P". Can be.

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment means information by the decryption unit 3530 through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International) And at least one or more of Data Encryption Algorithm, and various types of decryption algorithms may be used. However, the decryption algorithm is matched with the encryption algorithm used in the call terminal 3600. However, the present invention is not limited to the specific decoding algorithm.

When the payment means information is decrypted as described above, the decryption unit 3530 provides the decrypted payment means information to the information transmission unit 3757 (4430), and the information transmission unit 3757 provides the payment means information. To the Bansa server through a predetermined payment network.

45A and 45B illustrate a method of encrypting and transmitting payment means information in a key exchange method in a call terminal 3600 according to another exemplary embodiment of the present invention.

45A and 45B illustrate a method of encrypting and transmitting the payment means information in a key exchange method in a call terminal 3600 equipped with an encryption function as shown in FIG. 36. If one of ordinary skill in the art with reference to Figure 45 and / or modified to infer various implementation methods for encrypting the payment means information in the call terminal 3600 on the telephone network and / or VoIP network by a key exchange method Although the present invention may be performed, the present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

In this figure 45 according to the embodiment of the present invention, the terminal-side private key and the server-side public key are preferably read out from the official certificate provided in the call terminal 3600, and the public certificate is the call terminal 3600. Stored in a predetermined memory unit 3650, and / or stored in an ID-000 type IC chip (or IC card) mounted on or detached from the call terminal 3600, and / or the When a predetermined IC card reader is provided in the call terminal 3600, it can be all stored in the IC card inserted into the IC card reader, and the present invention is not limited thereto.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the call terminal 3600. The invention is not limited.

45A and 45B, when the information reading unit 3660 of the call terminal 3600 reads predetermined payment means information, the information is provided to the encryption processing unit 3670 (4500). If is provided, the encryption processing unit 3670 is a message digest including a predetermined one-way hash function (for example, a hash code of a predetermined length regardless of the length of the payment means information) message digest (Message) A one-way hash function that cannot create and digest (or infer) the original message via the hash code (or message digest) The call terminal 3600 and the server use the same hash function. Generate a predetermined message digest (4505), and digitally sign the message digest by encrypting the message digest using the terminal-side private key (4510).

Herein, the encryption function of the encryption processing unit 3670 is referred to as E (Encryption), the terminal-side private key is encrypted with t1 (46erminal side key), the message digest is m (message digest), and the terminal-side private key. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 3670 may be expressed by an expression such as "Et1 (m) = C".

According to the exemplary embodiment of the present invention, the encryption processing unit 3670 encrypts the message digest through the terminal-side private key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the digital signature function of the encryption processing unit 3670 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 3670 generates a predetermined random secret key for encrypting the payment means information by a secret key (symmetric key) method (4515), and the payment means information and The message digest encrypted with the terminal-side private key and a copy of a certificate (eg, a certificate including a terminal-side public key) included in the public certificate are linked to each other and encrypted through the generated secret key (4520).

Herein, the encryption function of the encryption processing unit 3670 is called E (Encryption), the secret key is r (random secret key), the payment means information and the copy of the certificate P (Plaintext), and the encrypted payment with the secret key When the means information and the copy of the certificate are referred to as C (Ciphertext), the encryption function of the encryption processing unit 3670 can be expressed by an expression such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 3670 encrypts the payment means information and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 3670 extracts a predetermined server-side public key from the authorized certificate to encrypt the private key that encrypts the payment means information (4525), and uses the server-side public key to make the payment. The private key encrypting the means information is encrypted (4530).

Here, the encryption function of the encryption processing unit 3670 is called E (Encryption), the server side public key is referred to as s1 (server side key), the secret key is r (random secret key), and the server side public key. When the encrypted secret key is C (Ciphertext), the encryption function of the encryption processing unit 3670 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the encryption processing unit 3670 encrypts the secret key through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 3670 may be expressed as" C = Es1 (r) = re mod n ".

The payment means information, the message digest encrypted with the terminal-side private key, and a copy of the certificate including the terminal-side public key are linked to each other and encrypted through the generated secret key, and the secret key is passed through the server-side public key. When encrypted, the encryption processing unit 3670 encrypts a copy of the certificate including the message digest and the terminal-side public key encrypted with the payment means information and the terminal-side private key encrypted with the secret key with the server-side public key. Generate predetermined transaction data in association with the secret key, and provide the generated transaction data to the communication processor 3640 (4535), and the communication processor 3640 transmits the transaction data to a telephone network and / or a VoIP network. It transmits to the server through the network component on the network (4540).

46A and 46B illustrate a method of decrypting payment means information encrypted and received at a server by a key exchange method according to another exemplary embodiment of the present invention.

In more detail, FIGS. 46A and 46B show the transaction data in a server as shown in FIG. 35 that receives transaction data including encrypted payment means information from a call terminal 3600 equipped with an encryption function as shown in FIG. As an embodiment of the present invention, a method of decrypting by an exchange method, and having ordinary skill in the art to which the present invention pertains, will be described with reference to and / or modified with reference to FIG. 46 in the call terminal 3600 on the telephone network and / or the VoIP network. Various implementation methods for decrypting the transaction data encrypted by the key exchange method may be inferred by the same key exchange method, but the present invention includes all the inferred implementation methods and is limited to the embodiment shown in FIG. Not.

In this figure 46 according to an embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method are preferably read from the public certificate provided in the server. Is preferably stored in a predetermined database (not shown) that cooperates with the server, whereby the present invention is not limited.

Referring to FIGS. 46A and 46B, the receiving unit of the server receives transaction data including payment means information encrypted through the telephone network and / or the VoIP network (4600), and the decryption unit ( 3530, the transaction data is preferably received through a communication protocol defined in the telephone network and / or VoIP network, and / or the payment means information and the terminal-side individual encrypted with the secret key. And a copy of the certificate including the message digest encrypted with the key and the terminal-side public key, and the secret key encrypted with the server-side public key.

Thereafter, the decryption unit 3530 extracts the server-side private key from the public certificate provided in the server in order to decrypt the secret key encrypted with the server-side public key (4610), and through the server-side private key. By decrypting the private key (4615), the private key for decrypting a copy of the certificate including the message digest encrypted with the payment means information and the terminal-side private key and the terminal-side public key is extracted (4620).

Here, the decryption function of the decryption unit 3530 is called D (Decryption), the server side private key is s2 (server side key), the secret key encrypted with the server side public key is C (Ciphertext), and the When a secret key decrypted with a server-side private key is r (random secret key), the function of decrypting the encrypted secret key by the decryption unit 3530 is "Ds2 = r, or Ds2 (Es1 (r)) = r". Can be expressed as an expression such as "

According to an embodiment of the present invention, an algorithm for decrypting the secret key encrypted by the server-side public key in the call terminal 3600 by the decryption unit 3530 may be RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it may be used, the decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal 3600, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoder 3530 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the decryption unit 3530 copies the certificate including the message digest and the terminal side public key encrypted with the payment means information and the terminal side private key using the extracted secret key. By decrypting (4625), a copy of the certificate including the payment means information encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key is extracted.

Here, the decryption function of the decryption unit 3530 is called D (Decryption), and the secret key is r (random secret key), the payment means information encrypted with the secret key, and the message digest encrypted with the terminal-side private key; C (Ciphertext) is a copy of the certificate containing the terminal-side public key, and P (Plaintext) is a copy of the certificate including the message digest encrypted with the decrypted payment means information and the terminal-side private key and the terminal-side public key. In this case, the function of decrypting the certificate copy including the message digest encrypted with the encrypted payment means information and the terminal-side private key and the terminal-side public key is "Dr = P, or Dr." It can be expressed by an expression such as (Er (P)) = P ".

According to an exemplary embodiment of the present invention, the decryption unit 3530 decrypts a copy of a certificate including the message digest encrypted with the encrypted payment means information and the terminal-side private key and the terminal-side public key through the secret key. Preferably, the algorithm includes at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA). In addition, various types of decryption algorithms may be used. The decryption algorithm is characterized in that it is matched with the encryption algorithm used in the call terminal 3600, the present invention is not limited by a specific decryption algorithm.

In addition, the decryption unit 3530 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (4630), thereby generating and transmitting the message from the payment means information in the call terminal 3600. The digest is extracted (4635).

Here, the decryption function of the decryption unit 3530 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. When the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the decryption unit 3530 is "Dt2 = m, or Dt2 (Es1 (r)) = m" and The same formula can be used.

According to an embodiment of the present invention, the algorithm for decrypting the message digest encrypted by the decryption unit 3530 with the terminal-side private key through the terminal-side public key is RSA (Ron Rivest, Adi Shamir). , Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although it may be used, the decryption algorithm is characterized in that it matches the encryption algorithm used in the call terminal 3600, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the decoder 3530 may be expressed as" P = Dt2 = Cd mod n ".

Subsequently, the decoder 3530 generates a predetermined message digest through the same one-way hash function with the received payment means information (4640), and then generates the generated message digest and the decoded message. By comparing the message digest (4645), the validity of the received payment instrument information is verified.

If the generated message digest and the decrypted message digest match (4650), the decryption unit 3530 provides the payment means information to the information transmission unit 3475 (4655), and the information transmission unit ( 3675 transmits the payment means information to the bansa server through a predetermined payment network.

47 illustrates a product order and purchase process for payment processing using the call terminal 3600 according to another exemplary embodiment of the present invention.

In more detail, FIG. 47 illustrates a process in which the call terminal 3600 shown in FIG. 36 accesses the server shown in FIG. 35 through at least one or more telephone and / or VoIP networks to order and purchase certain goods. Through the payment process using the call terminal 3600 according to the present invention through the process, if the person of ordinary skill in the art to which the present invention belongs, with reference to and / or modified this figure 47 a predetermined currency The terminal 3600 connects a call channel for ordering and purchasing a product with a predetermined server through at least one telephone network and / or a VoIP network, and orders and purchases at least one product through the call channel. It would be possible to infer various implementation methods for initiating payment processing using the call terminal 3600 according to the present invention, but the present invention includes all the implementation methods inferred. , It is not limited to the exemplary method shown in the figure 47.

In the following Figure 47, the call terminal 3600 with the card reader shown in Figure 36 is referred to as "terminal" for convenience.

Referring to FIG. 47, a terminal conforming to the functional configuration shown in FIG. 36 may include at least one or more telephone networks (e.g., general switched telephone network (or intelligent network), and / or mobile communication network) and / or VoIP network (e.g., TCP / IP). (And / or UDP / IP) based wired communication network (IEEE 802.16x based portable Internet) to connect a predetermined communication channel with the server (4700), and according to the product ordering procedure provided by the server through the communication channel A procedure of selecting, ordering and purchasing at least one or more purchased products is performed (4705).

Those skilled in the art to which the present invention pertains, the terminal connects the predetermined communication channel with the server, and through the communication channel through a predetermined product order procedure (eg, ARS and / or counselor connection) As you will be familiar with key tones-based product ordering procedures, the detailed process is omitted for convenience.

During the product order process as described above, the server checks whether the payment process for the purchased product (4710), if the payment process for the purchased product is confirmed (4715), the server and the terminal Add (or assign) a data channel corresponding to the telephone network and / or VoIP network to a connected call channel, or convert the voice call-based communication channel into a data channel corresponding to the telephone network and / or VoIP network (4720). ).

If a data channel corresponding to the telephone network and / or VoIP network is added (or assigned) to the call channel as described above, or if the voice call-based communication channel is switched to a data channel corresponding to the telephone network and / or VoIP network, The server requests to read predetermined payment means information from the customer's own card through the card reader provided in the terminal through the data channel (4725).

48 is a flowchart illustrating a payment means information reading process for payment processing using the call terminal 3600 according to another exemplary embodiment of the present invention.

In more detail, Fig. 48 shows that the server shown in Fig. 35 is transferred to the call terminal 3600 shown in Fig. 36 through at least one telephone network and / or VoIP network by performing the process shown in Fig. 47. When requesting payment means information, the call terminal 3600 is a process for reading the predetermined payment means information from the customer-owned card through a predetermined card reader to provide to the server, in the technical field to which the present invention belongs Those skilled in the art may refer to and / or modify this drawing 48 to read predetermined payment means information from a predetermined call terminal 3600 and provide it to a predetermined server through at least one or more telephone networks and / or VoIP networks. Various implementation methods may be inferred, but the present invention includes all the implementation methods inferred, and is limited to the implementation method shown in FIG. It does not.

For example, in FIG. 48, the terminal performs an encryption procedure for predetermined payment means information read from the customer's own card. The encryption procedure is performed to satisfy the high security of the payment means information. As performed, it may be omitted in accordance with the intention of those skilled in the art, whereby the present invention is not limited.

Hereinafter, in FIG. 48, the call terminal 3600 having the card reader shown in FIG. 36 is referred to as " terminal "

Referring to FIG. 48, the terminal transmits the predetermined payment means information through a data channel corresponding to at least one or more telephone networks and / or VoIP networks by the server illustrated in FIG. 35 performing the process illustrated in FIG. In operation 4800, if predetermined payment means information is requested from the server (4805), the terminal switches the operation mode to the payment processing mode using the data channel (4810) and is provided to the terminal. The card reader may output through the screen output means provided in the terminal to read predetermined payment means information from the customer-owned card through the card reader, and / or through the audio output means provided in the terminal (4815).

After the predetermined payment means information reading is requested from the customer-owned card as described above, the terminal checks whether the predetermined payment means information is read from the customer-owned card through the card reader (4820). When predetermined payment means information is read from the terminal 4482, the terminal performs an encryption procedure on the read payment means information (4830).

Thereafter, if the payment means information is encrypted (4835), the terminal transmits the encrypted payment means information to the server through a data channel set in the telephone network and / or VoIP network (4840).

49 illustrates an information processing process for payment processing using the call terminal 3600 according to another embodiment of the present invention.

* Figure 49 shows the server shown in Figure 35 via at least one or more telephone and / or VoIP networks by performing the procedure shown in Figure 48 in the call terminal 3600 shown in Figure 36. When the payment means information of the transmission, the server relays the payment means information to a predetermined bansa server, and transfers the predetermined payment information to the bansa server for the process of payment processing, the present invention For those skilled in the art, various implementation methods for generating a predetermined payment approval request full text by using the payment means information provided from the call terminal 3600 in a predetermined server by referring to and / or modifying the drawing 49 are provided. It may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

For example, FIG. 49 illustrates that the terminal performs a decryption procedure on payment means information provided from the call terminal 3600. The decryption procedure is performed only when the payment means information is encrypted. It may be omitted depending on the intention, and thereby the present invention is not limited.

In addition, the full text of the payment approval request generated by the server in FIG. 49 is a full credit card payment approval request including the credit card payment means information shown in FIG. 2, and has a general knowledge in the technical field to which the present invention belongs. Grows, the full check card payment approval request, and / or debit card payment approval request, and / or prepaid card payment approval request in the server corresponding to the payment means information provided from the call terminal (3600), and / Or it may be inferred the implementation method for generating the full payment transfer approval request, etc. The present invention comprises all the inferred implementation method.

Hereinafter, in FIG. 49, the call terminal 3600 having the card reader shown in FIG. 36 is referred to as "terminal" for convenience.

Referring to FIG. 49, the server shown in FIG. 35 receives predetermined payment means information through a data channel corresponding to at least one telephone network and / or VoIP network by performing the process shown in FIG. 48 at the terminal. If the predetermined payment means information is received from the terminal through at least one data channel corresponding to at least one telephone network and / or VoIP network (4905), the server encrypts the received payment means information. By checking whether the payment is made, it is determined whether the payment means information is decrypted (4910).

If it is confirmed that the payment means information is decrypted (4915), the server performs a decryption procedure on the encrypted payment means information, so that the terminal reads from the customer-owned card through a predetermined card reader. The paid payment method information is restored (4920).

On the other hand, if it is determined that the payment means information does not need to be decrypted (eg, when the payment means information is not encrypted) 4915, and / or the encrypted payment means information is decrypted, the server stores the storage. From the medium 3540, payment information including merchant information and total payment amount information to be included in the full payment approval request is extracted (4925), and the payment means information and payment information are transmitted to a predetermined payment server (3560). (4930).

Thereafter, the payment server 3560 receives and reads the full payment approval request message and performs a payment processing procedure corresponding to the payment means information, such as a predetermined payment processing history (for example, payment processing approval history or payment processing error history). ) Is generated (4935), and the payment processing details are generated and transmitted to the server through the communication network (4940).

Those skilled in the art to which the present invention pertains, a method for transmitting the full text of the payment approval request from the server to the payment server 3560 via a predetermined communication network, and / or at the payment server 3560 A method for performing a payment processing procedure by reading the full text of the payment approval request, and / or after performing the payment processing procedure in the payment server 3560, generating a predetermined payment processing history, and including the payment processing history Since you will be familiar with the method of generating a payment approval message and transmitting it to the server through the communication network, a detailed description thereof will be omitted for convenience.

According to another exemplary embodiment of the present invention, the payment server 3560 may directly transmit the payment approval message (or payment processing details) to the terminal through the telephone network and / or the VoIP network (eg, a payment approval request). The terminal information providing the payment means information in a preamble), and the present invention is not limited thereto.

According to the present invention, a card reader (eg, MS card reader, IC card reader, etc.) is provided in a call terminal connected to a telephone network and / or a VoIP network, and the call terminal and a predetermined merchant side voice call-based server (or terminal) are provided. And payment information corresponding to the affiliated server (or terminal) by reading the predetermined payment means information from the call terminal through the card reader and providing the payment means information to the bansa while the voice call channel is connected to the voice call channel. By the payment processing, there is an advantage of convenient payment processing without a payment error due to an incorrect operation in the payment processing process using the call terminal.

According to the present invention, a card reader (eg, MS card reader, IC card reader, etc.) is provided in a call terminal connected to a telephone network and / or a VoIP network, and the call terminal and a predetermined merchant side voice call-based server (or terminal) are provided. And a voice call channel connected, reads predetermined payment means information from the call terminal through the card reader, and then provides the payment means information to a payment server to correspond to the affiliated server (or terminal). By processing the payment information, there is an advantage that the payment processing conveniently without a payment error due to an incorrect operation in the payment processing process using the call terminal.

Claims (1)

Receiving card information from a phone equipped with a card (IC card or MS card) reader at a server; Receiving payment information corresponding to a product or service order request from a merchant terminal (or server) connected to the phone by the server; Performing a predetermined payment approval process by using the received card information and payment information at a server; And And transmitting the payment approval processing result from the server to the affiliated store terminal (or the server) and the telephone.

Images