KR20080079714A - A system and method of certifying cardholder using mobile phone - Google Patents

Abstract

A system and a method for authenticating credit card payment of a cardholder with a mobile terminal are provided to simply authenticate a committed user as well as a credit card owner without changing any hardware of a credit card member shop by providing a user authentication process to the mobile terminal of the credit card owner. A credit card member shop terminal includes a card reader(22) for reading a credit card number to authenticate payment of a credit card presented by a user, and transmits the read credit card number and payment amount information received from a member shop owner to an authentication server(10). The authentication server includes an authentication requestor transmitting an approval request signal for the requested payment amount to a mobile terminal(34) registered to the credit card number and a commercial transaction approver determining to approve commercial transaction of the member shop terminal depending on the approval received from the mobile terminal. The mobile terminal receives the approval for the payment amount from a user and transmits the received approval to the authentication requestor.

Description

User authentication system for credit card payment using mobile communication terminal and method thereof {A system and method of certifying cardholder using mobile phone}

1 is a conceptual diagram showing a user authentication system for credit card payment using a mobile communication terminal according to the present invention.

2 is a block diagram showing a user authentication system for credit card payment using a mobile communication terminal according to the present invention.

3 is a plan view illustrating a state in which an approval request signal for a payment request amount is transmitted to a mobile communication terminal according to the present invention.

Figure 4 is a plan view showing a class to request the user's password input for the payment request amount in the mobile communication terminal according to the present invention.

<Description of the symbols for the main parts of the drawings>

10: Certificate Server 12: Commerce Approval Means

14: authentication request means 20: seller terminal

30: Customer 32: Credit Card

34: mobile communication terminal

The present invention relates to a system and method for user authentication of payment of a credit card using a mobile communication terminal.

In general, due to the rapid development of the credit card payment infrastructure, credit cards are widely used because they are relatively simple and convenient to use compared to other payment methods requiring real replacement of cash or check.

The payment of such a credit card basically requires the presentation of a real card and the signature of the user holding the card. In the case of online, the authentication methods for identity verification of card holders are relatively diverse, such as authentication of one-time serial number input of a text message of a mobile communication terminal, double payment through another registration password, and payment after authentication using an accredited certificate. Presented.

However, in the case of offline, the card merchants face the cardholder, so it can be more reliable than online payment, but the identity of the user, such as the user signature by using the card, that is, the card on the back of the card The user must fill out his / her signature upon receipt of the card, and the merchant is required to verify the identity of the user by checking the signature on the back of the card and the signature on the back of the card. For reasons that are not properly followed, others may similarly steal the signatures of credit card missing users.

Therefore, when the user loses the card, the user recognizes the card loss and before the user reports the loss to the card issuer, when the other person who acquired the card uses the card, the user who lost the card or the card is issued. It's easy to lose money.

As a countermeasure against this, Korean Patent Application No. 10-2001-00220487 "Method and Method of Confirming Card Payment Using a Mobile Communication Terminal" includes several card issuers using a mobile communication phone number of a user registered at the time of approval of the card. It describes a technology for transmitting payment results in real time through a message service.

However, since the technology of Korean Patent Application No. 10-2001-00220487 transmits a short message to the user's mobile communication phone number, there is no way for the affiliated store to check this, but only to notify the user of the payment. There is this.

Therefore, when an illegal user makes a payment, the approval is already completed and the purchase of the goods is notified, so it cannot be prevented before the approval is completed.

As another conventional technique for solving the problems of the conventional technique as described above,

It is well represented in Korean Patent Application No. 10-2003-0010618 "Card payment authentication method and system".

The technology shown in the Republic of Korea Patent Application No. 10-2003-0010618,

Receives and stores a wireless terminal (cell phone, etc.) number of the card-using client, and generates a one-time password (code) for authentication of the card payment when the client uses (pays) the card at the affiliated store. By simultaneously transmitting to the client's wireless terminal and the merchant terminal, and allowing the merchant to confirm the comparison of the one-time password (code), there was an advantage that can prevent the illegal use of the client's card has the following problems.

The above-described technology has a problem in that the existing merchant terminal and the user's wireless terminal must be simultaneously modified in the system, and the merchant terminal one-time password (code) of the user's wireless terminal and the one-time password (code) of the merchant terminal upon card approval. ) Must be compared and contrasted, which causes inconvenient problems.

And if the cardholder lends the card to another person legally, for example, if the son pays the school fee, or if the order is ordered, the other person borrows the original cardholder's card and pays for it. Code) can not be contrasted, there is an uncomfortable problem.

Looking at another conventional technology, it is well shown in Korean Patent Application No. 10-2000-0007251 "Electronic payment method of credit card using a mobile communication terminal".

The technology shown in the Republic of Korea Patent Application No. 10-2000-0007251,

By communication transmission of the input data of the card number of the credit card holder and the mobile communication terminal number in the credit card inquiry machine,

The card number and the mobile terminal number data is entered into a payment system of a financial company or an approval company via a communication relay means, and requests for approval based on the card number.

Upon approval of the requested approval, the user's password and the user's approval of the payment amount are obtained as communication to the user mobile communication terminal through the communication relay means to the mobile communication terminal number again.

The payment system of the financial company or the approval company is a technology having a payment loop for performing user account settlement and communication to the credit card inquiry.

Another conventional technology as described above is a system for simultaneously inputting a card number and a mobile communication terminal number into a credit card inquiry machine, that is, a merchant terminal, and replacing card payment through a mobile communication terminal.

Other conventional technologies as described above also inconveniently require the user to input the mobile communication terminal number of the user separately to the credit card inquiry, and accordingly, the existing merchant terminal system has to be modified. Common problems with the problems that arise, and the inconvenience that involves the addition of merchant shares separately to the existing payment system (comparing with the input of the customer's mobile terminal number, the password transmitted to the customer's mobile terminal number, etc.) have.

The present invention has been proposed to solve the above problems,

First, while maintaining the hardware of the terminal of the existing credit card merchant, the credit card holder's mobile communication terminal grants a user authentication process that plays a role of identity verification, delegating payment to credit card holders as well as credit card holders. An object of the present invention is to provide a system and a method for easily authenticating a user.

Second, by the above payment authentication system, the credit card company collects the credit card slips and does not require the process of confirming the payment so that the approval of all payments is completed only by the authentication of the mobile communication terminal. The purpose is to prevent credit card payments caused by payment.

A user authentication system for credit card payment using a mobile communication terminal according to the present invention for achieving the above object

In a credit card payment system in which a plurality of mobile communication terminals and a plurality of merchant terminals are connected to an authentication server and a communication network, a card reader for reading a card number for payment approval of a card presented by a user, Merchant terminal for transmitting the payment request amount received from the keypad from the merchant owner to the authentication server; Authentication request means for receiving the card number and the payment request amount from the merchant terminal, and transmits an approval request signal for the payment request amount to the mobile communication terminal pre-registered in the user's card number, and to the user's approval or disapproval An authentication server including a commerce approval means for determining whether to permit or disallow the commerce of the merchant terminal for the corresponding payment; And a mobile communication terminal which receives one of the intention to approve or disapprove the payment request amount from the user according to the approval request signal received from the authentication request means of the authentication server, and transmits it back to the authentication request means. do.

And user authentication method of credit card payment using a mobile communication terminal according to the present invention,

a) the authentication server receiving the user's credit card number and payment request amount from the merchant terminal;

b) the authentication server transmitting an authorization request signal for a payment request amount to a user's mobile communication terminal that is pre-registered in the user's credit card number using an authentication request means;

c) the authentication server receiving an input of approval or disapproval of a payment request amount from a user's mobile communication terminal; And

and d) determining whether to allow or disallow the commerce of the affiliated store terminal according to the approval or disapproval intention inputted from the user by using the commerce approval means.

Hereinafter, with reference to the accompanying drawings to describe the configuration of the present invention in more detail.

A user authentication system for credit card payment using a mobile communication terminal according to the present invention basically includes an affiliated store terminal 20, an authentication server 10, a mobile communication terminal 34, and the like.

As shown in FIG. 1, the affiliated store terminal 20 communicates with a card reader 22 for reading credit card information of a user, and the authentication server 10 and a value-added communication network (VAN). 29), an output means 24 for outputting a card slip as a result of card payment to the user, a display means 26 for displaying card payment information, and a user operation to perform a function such as inputting an item price and canceling authorization. A component such as a keypad 28 for generating a signal is provided.

Since the merchant terminal 20 as described above is usually made in the same way as the configuration of the credit card checker for credit card payment, a detailed description thereof will be omitted. However, the configuration of the affiliated store terminal 20 of the present invention may be characterized in that the existing credit card inquiry machine can be used as it is without changing the system.

The merchant terminal 20, when the user pays for the goods with the card, reads the credit card information of the user using the card reader 22, receives the payment for the goods through the keypad 28, The payment request amount according to the card number and the amount of the goods obtained by the component, and the affiliated store unique number (the affiliated store serial number designated by the credit card company) and the like play a role of wired and wireless transmission to the authentication server 10.

The wired and wireless communication between the affiliated store terminal 20 and the authentication server 10 is made of a value added network (VAN), and the value added communication network owns the same line as the Korean communication. It is a communication network that is borrowed from a service provider and constitutes an independent communication network. In general, a telephone line is used to transmit and receive data between an authentication server and an affiliated terminal.

In addition, the output means 24 serves to output a card payment allow or disallow signal in accordance with a commerce permission or disapproval signal received from the commerce approval means of the authentication server to be described later.

The authentication server 10 is connected to the merchant terminal 20 and the value-added communication network, and the user's mobile communication terminal 34 is connected to the wireless communication network, such as CDMA, largely database 14, the transaction approval means 12 and authentication Requesting means 16 and the like.

That is, the authentication server 10 is preferably made of a server of the card company, the database 14 of the authentication server 10, personal identification information according to the card number of the user subscribed to the credit card, usage, etc. Is stored.

In this case, the personal identification information of the user is stored with the name and address of the user described when the user subscribes to the card.

Accordingly, the authentication server 10 uses the commerce approval means 12, when the merchant terminal 20 transmits the user's card number and the payment request amount according to the goods price, the database of the transmitted user's card number Inquiry in (14), and loads the personal information including the user's mobile communication terminal number.

Accordingly, the authentication request means 16 of the authentication server 20 transmits an approval request signal for the payment request amount to the user's mobile communication terminal 34 stored in the database 14 according to the payment request amount.

Transmission of the approval request signal of the authentication request means 16 as described above is preferably transmitted in the form of a text message of the user's mobile communication terminal 34, all the mobile communication terminal 34 can recognize and confirm this. Means can be used.

In this case, the authentication requesting means 16 additionally transmits a user's previously registered password or card password together with the user's mobile communication terminal 34 and receives an input from the user. It can prevent it beforehand.

The commerce approval means 12 serves to transmit a corresponding commerce permit or disallow signal back to the affiliated store terminal 20 according to the approval or disapproval signal input from the user.

Although the mobile communication terminal 34 has been described above, the authorization request signal of the goods price is transmitted from the authentication request means 16 of the authentication server 10, and accordingly receives an approval or disapproval signal from the user, and again the authentication server Sending to the authentication request means (16) of (10), preferably made of a mobile communication terminal 34, and includes a display means and a keypad for allowing the user to confirm and input the approval or disapproval signal.

The user authentication method of credit card payment using a mobile communication terminal according to the present invention having the above configuration will be described with reference to FIGS. 2 to 4 as follows.

When joining a user's credit card, other personal information, passwords and emergency communication number 34 is registered in the authentication server (credit card company server).

Accordingly, the authentication server 20 builds the user's password and mobile communication terminal 34 number in the database 14 according to the user's credit card number.

When the user purchases goods at the merchant and makes a card payment at the merchant terminal 20 using the credit card as described above, the merchant terminal 20 reads the user's credit card number using a card reader. In addition to the reading result, the price of goods input through the keypad by the merchant owner is input to the merchant terminal, the merchant terminal communicates the card number of the user who paid the goods, the payment request amount according to the goods price and the merchant's unique number By using the transmission to the transaction approval means 12 of the authentication server.

Accordingly, the transaction approval means 12 of the authentication server 10 receives the user's card number and payment request amount from the merchant terminal, inquires the user's card number in a database, and exceeds the user's card usage limit and others. When additional information about the theft report, lost report, credit status, etc. is recognized that payment is possible, the card number, mobile terminal number, payment request amount, payment date and time, merchant's unique number, and user's password The inquired merchant name is transmitted to the authentication requesting means (16).

As shown in Figure 3, the authentication request means 16, the payment request amount, the payment date and time and the name of the merchant and the approval request or approval or disapproval according to the mobile communication terminal number of the customer received from the commerce approval means as shown in FIG. The request signal is transmitted.

Of course, as shown in FIG. 4, the authentication requesting means 16 may transmit a password input request signal that asks the user for a password to the user's mobile communication terminal 34.

Accordingly, the authentication request means 16 is connected to the server of the mobile communication company and is provided with a wireless communication module to transmit and receive wireless data with the user's mobile communication terminal 34, or connected to the wireless Internet, or the mobile communication terminal It can be implemented by using a web server that can send and receive text messages.

Accordingly, the mobile communication terminal 34 inputs an approval or disapproval intention and a password using a keypad according to the approval request signal received from the commerce approval means 12, and the user inputs the authentication request means 16 again. You will be sent an approval or disapproval and password.

When the information input by the user is an approval signal, the authentication requesting means 16 transmits a signal indicating that the commerce is allowed to the commerce approval means 12, and the commerce approval means 12 re-enters it to the affiliated store terminal 20. By transmitting to the merchant terminal 20 can be performed to perform the card payment approval of the user normally.

However, if the user's input signal is a disapproval signal or the password is incorrect, the commerce disallowed signal is transmitted to the commerce approval means, and the commerce approval means may transmit this to the merchant terminal again to output a transaction disallowed signal to the output means.

Of course, if the user has been disapproved, the user may further send a text message asking for confirmation of theft again.

And the method of inputting the approval or disapproval signal from the approval request signal in the mobile communication terminal 34 of the present invention, when the text message is received from the mobile communication terminal 34, the authentication or disapproval signal of the authentication server 10 authentication In order to retransmit to the requesting means, it is possible to access a wireless Internet such as MagicN and Jun provided by each telecommunication company, and transmit an approval or disapproval signal.

In addition, it can be configured to convey his intention by replying to the text message.

According to the present invention configured as described above,

According to the present invention, after transmitting credit card information of a user who has made a payment at an affiliated terminal to an authentication server, the authentication server uses an authentication requesting means only when an approval signal for payment is input from a real owner of a credit card. In addition to the basic effect of receiving a user authentication that has the effect of verifying the identity of the user by using the credit card by sending a transaction permit signal to the user, the owner and the owner of the credit card are required to pay the credit card to others. Through separate contact, the actual owner can check the payment details and make the approval possible.

The present invention obtains the user authentication by adding the authentication request server of the authentication server while maintaining the system of the existing merchant terminal provided to the merchant, the same as the conventional technology, the hardware configuration of the existing credit card merchant terminal It can be applied while maintaining.

The present invention, unlike the conventional authentication server (card company) collects the card slip from the merchant, and confirms the payment approval again, by the end of the post-payment review itself only by the authentication of the user's mobile terminal, the speed of the card payment business Has the effect of bringing.

Claims (4)

In a credit card payment system in which a mobile communication terminal and a plurality of merchant terminals of a plurality of users are connected to an authentication server and a communication network, A card reader for reading a card number to approve payment of a card presented by a user, and a merchant terminal for transmitting the read card number and the payment request amount received from a keypad from the affiliate store owner to the authentication server; Authentication request means for receiving the card number and the payment request amount from the merchant terminal, and transmits an approval request signal for the payment request amount to the mobile communication terminal pre-registered in the user's card number, and to the user's approval or disapproval An authentication server including a commerce approval means for determining whether to permit or disallow the commerce of the merchant terminal for the corresponding payment; And A mobile communication terminal which receives any one of the intention or disapproval of the payment request amount from the user according to the approval request signal received from the authentication request means of the authentication server, and transmits it back to the authentication request means User authentication system for credit card payment using a communication terminal. The method of claim 1, The authorization request signal is a user authentication system for credit card payment using a mobile communication terminal, characterized in that it further comprises a password input request message of a pre-registered user. a) the authentication server receiving the user's credit card number and payment request amount from the merchant terminal; b) the authentication server transmitting an authorization request signal for a payment request amount to a user's mobile communication terminal that is pre-registered in the user's credit card number using an authentication request means; c) the authentication server receiving an input of approval or disapproval of a payment request amount from a user's mobile communication terminal; And d) The authentication server determines the commerce permission or denial of the merchant terminal according to the approval or disapproval intention received from the user by using the commerce approval means; credit card payment using a mobile communication terminal How to authenticate users. The method of claim 3, In b), The authentication request signal is a user authentication method of credit card payment using a mobile communication terminal, characterized in that further comprises a password input request message of the user already registered.

Images