KR20090002267A

KR20090002267A - Home banking terminal for processing offline payment and program recording medium

Info

Publication number: KR20090002267A
Application number: KR1020070062563A
Authority: KR
Inventors: 김순동
Original assignee: 김순동
Priority date: 2007-06-25
Filing date: 2007-06-25
Publication date: 2009-01-09

Abstract

A home banking terminal for offline payment and a recording medium for the home banking terminal are provided to solve a security problem generated when financial information or payment information is inputted by using a predetermined card reader included in the home banking terminal. A home banking terminal for offline payment includes a banking authentication module(184) into which a banking authentication IC(Integrated Circuit) card having at least one payment protocol and transaction authentication information is inserted, a card reader(170) for reading card information from a predetermined customer credit card in connection with the banking authentication module, an information input unit(120) for receiving predetermined payment amount information and extracting predetermined member store information from the banking authentication IC card, a message generator(130) for generating a predetermined payment approval request message including the card information, payment amount information and member store information, and a message transmitter(140) for transmitting the payment approval request message through a predetermined communication network.

Description

Home banking terminal for offline payment and processing and recording medium {home banking terminal for processing offline payment and program recording medium}

1 is a diagram illustrating a functional configuration of a home banking terminal for payment processing of a delivery product of an offline affiliated store according to an embodiment of the present invention.

2 is a diagram illustrating the appearance of a home banking terminal according to an embodiment of the present invention.

3 is a diagram illustrating a card payment system configuration using a home banking terminal according to an exemplary embodiment of the present invention.

4 is a diagram illustrating an operation process of a home banking terminal for generating a full payment approval request message according to an exemplary embodiment of the present invention.

5 is a diagram illustrating an operation of a home banking terminal for generating a payment approval request message according to another embodiment of the present invention.

6 is a diagram illustrating an operation process of a home banking terminal that transmits and receives a payment related message to a relay server according to an embodiment of the present invention.

7 is a diagram illustrating a relay server operation process according to an embodiment of the present invention.

8 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in a symmetric key (or secret key) method in a home banking terminal according to an embodiment of the present invention.

9 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at a relay server by a symmetric key (or secret key) method according to an embodiment of the present invention.

FIG. 10 is a diagram illustrating a method for encrypting and transmitting a full payment approval request message in a home banking terminal in a public key based structure according to an embodiment of the present invention.

FIG. 11 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a relay server in a public key based structure according to an embodiment of the present invention.

12 is a diagram illustrating a method for encrypting and transmitting a full payment approval request message in an electronic envelope method in a home banking terminal according to an embodiment of the present invention.

FIG. 13 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a relay server according to an embodiment of the present invention by an electronic envelope method.

14A and 14B illustrate a method of encrypting and transmitting a full payment approval request message in a key exchange method in a home banking terminal according to an embodiment of the present invention.

15 and 15B are diagrams illustrating a method of decrypting a full payment approval request message encrypted and received at a relay server by a key exchange method according to an embodiment of the present invention.

16 is a diagram illustrating a card company server operation process for approval of payment using a home banking terminal according to an embodiment of the present invention.

300: relay server 305: interface unit

310: professional receiver 315: professional transmitter

320: encryption unit 325: information confirmation unit

330: information relay unit 335: information storage unit

340: payment history 345: card company server

350: interface unit 355: information receiving unit

360: information transmission unit 365: card information confirmation unit

370: payment approval processing unit 375: information generation unit

380: information storage unit 385: card information D / B

390: transaction history D / B 393: home banking terminal

395: Customer Card

The present invention provides a banking authentication module having a banking authentication IC card (or banking authentication module chip) having at least one payment protocol and transaction authentication information, and a predetermined card from a predetermined customer card in association with the banking authentication module. A card reader unit for reading information, an information input unit for inputting predetermined payment amount information and merchant information in association with a predetermined key input means, and a predetermined payment approval request including the card information, payment amount information, and merchant information It relates to a home banking terminal for off-line payment processing characterized in that it comprises a full text generation unit for generating a full text and a full text transmission unit for transmitting the full text of the payment approval request through a predetermined communication network.

As information and communication technology continues to develop, various non-face-to-face financial transaction (or payment) channels are being commercialized to support various home banking (or home payment) services.

However, since a non-face-to-face financial transaction (or payment) channel for supporting a conventional home banking (or home payment) service is based on key input of various financial information (or payment information), Financial information (or payment information) includes a fatal problem that can be exposed.

In order to solve the above problems, an object of the present invention, a banking authentication module having a banking authentication IC card (or banking authentication module chip) equipped with at least one payment protocol and transaction authentication information, and linked with the banking authentication module A card reader unit for reading predetermined card information from a predetermined customer card, an information input unit for inputting predetermined payment amount information and merchant information in association with a predetermined key input means, the card information, payment amount information, and merchant According to an aspect of the present invention, there is provided a home banking terminal for offline payment settlement processing, including a specialized generation unit for generating a predetermined payment approval request message including information and a specialized transmission unit for transmitting the payment approval request message through a predetermined communication network.

The home banking terminal for offline payment processing according to the present invention includes a banking authentication module into which a predetermined merchant side banking authentication IC (Integrated Circuit) card having at least one payment protocol and transaction authentication information is inserted (or linked); A card reader unit reading predetermined card information from a predetermined customer card in association with the banking authentication module, inputting predetermined payment amount information in connection with a predetermined key input means, and in connection with the banking authentication module An information input unit for extracting and entering predetermined merchant information from a banking authentication IC card of a merchant, a professional generator for generating a predetermined payment approval request message including the card information, payment amount information, and merchant information, and a predetermined communication network; Characterized in that it comprises a specialized transmission unit for transmitting the full text through the payment approval request.

The home banking terminal for offline payment processing according to the present invention, an interface output unit for outputting an interface for switching (or selecting) the operation mode of the home banking terminal from the initial mode (or banking mode) to a predetermined payment mode and the interface And a mode checking unit for checking whether the operation mode of the home banking terminal is switched to (or selected) the payment mode in association with an output unit.

On the other hand, the above-described home banking terminal for offline payment processing includes a recording medium recording a program for realizing the device configuration function.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify, integrate, or separate the terminology so that those skilled in the art to which the present invention pertains may clearly understand the present invention. The present invention is by no means limited thereto. That is, each means described above is a server (or terminal) provided on the system shown in the following embodiments, or is a predetermined functional configuration provided in at least one or more servers (or terminals), or at least one or more servers. (Or a terminal) may be an association of at least two or more functional components. In addition, the server (or terminal) shown in the following embodiment is shown to include at least two or more functional components for achieving the technical features of the present invention for convenience, the functional component shown in the server (or terminal) Matched with the above-described means may be provided in two or more different servers (or terminals) according to the role and function of each functional component and the corresponding server (or terminal) operator (or operator), whereby the present invention is not limited No.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a functional configuration of a home banking terminal 100 for payment processing of a delivery product of an offline merchant according to an embodiment of the present invention.

In more detail, Figure 1 is a home banking for payment processing in the home for the payment amount corresponding to the delivery product after ordering at least one or more delivery products (eg, delivery food, food, courier, etc.) from at least one offline merchant Regarding the implementation method of the terminal 100, those of ordinary skill in the art to which the present invention pertains, various home banking terminal for the payment processing payment of the delivery product of the offline merchant by referring to and / or modifying the present Figure 1 (100) Although the functional configuration may be inferred, it is to be understood that the technical features of the present invention are not limited to the drawing 1 but include all the inferred implementation methods.

Referring to FIG. 1, the home banking terminal 100 for payment processing of a delivery product of an offline affiliated store basically includes a control unit 105, a memory unit 155, a card reader unit 170, and a key input unit 165. It characterized in that it comprises a screen output unit 160, the communication processing unit 182, the banking authentication module 184 and the power supply unit 175 for supplying power to the home banking terminal 100, according to the intention of the skilled person It is preferable to include at least one or more of various terminal functional units, etc. In FIG. 1, for convenience, a voice for using the home banking terminal 100 as a landline (or VoIP phone) as one of the terminal functional units. Although the call unit 180 is illustrated, the present invention is not limited thereto, and it will be apparent that the terminal unit 180 can be provided with various terminal functions according to the intention of those skilled in the art.

Referring to FIG. 1 according to an embodiment of the present invention, the home banking terminal 100 includes a predetermined relay server 188 having a professional relay function for payment processing of a delivery product of an offline merchant through a predetermined communication network. Preferably, the relay server 188 communicates with a financial company server 190 that provides at least one home banking function, or a card company server 193 that provides a payment processing function of a delivery product of the offline affiliated store. It is preferred to be connected.

In addition, a predetermined voice call terminal 195 (for example, a wireless call terminal or a wired call terminal) through the communication network and a predetermined exchange 186 to connect a voice call channel corresponding to the voice call unit 180. It is preferable to connect the voice call channel with the.

The control unit 105 controls the overall operation of the home banking terminal 100 in terms of function configuration, manages the flow of information or data between each component, and includes at least the home banking terminal 100 provided for the delivery product payment function. At least one processor and an execution memory (eg, a register and / or a RAM) including a CPU (Central Processing Unit) / MPU (Micro Processing Unit) in hardware. Random Access Memory)) and a bus for inputting and outputting predetermined data, and the execution memory from a predetermined recording medium in order to perform a function unique to the home banking terminal 100 in software. A certain program routine and / or program data loaded by the processor and computed by the processor ( Therefore, a predetermined program recorded on a recording medium provided in the home banking terminal 100 and / or a functional component provided in the home banking terminal 100 for a delivery product payment function. To be provided in the control unit 105).

According to the exemplary embodiment of the present invention, the control unit 105 outputs a component (eg, the memory unit 155, the card reader unit 170, the key input unit 165, and the screen output provided in the home banking terminal 100). The home banking terminal 100 by interworking the unit 160, the communication processing unit 182, the banking authentication module 184, and at least one various terminal function units (for example, the voice call unit 180, etc.) according to the intention of the person skilled in the art. Controlling and managing providing a home banking function defined in the above), as well as interworking to control the components provided in the home banking terminal 100 for payment processing of a delivery product of an offline merchant according to the present invention; and It is preferable to execute a program recorded on a recording medium provided in the home banking terminal 100 for payment processing of delivery goods of the offline affiliated store.

The memory unit 155 is input and output when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the home banking terminal 100 is performed. General term of non-volatile memory for storing information or data), at least one of which includes EEPROM (Electrically Erasable and Programmable Read Only Memory) and / or Flash Memory (FM) and / or Hard Disk Drive (HDD) in hardware. It includes the above storage means, the predetermined program routine and program data required for the control unit 105 to perform a predetermined control function (e.g., data input or output for the program routine to perform a predetermined function) ) Is stored.

According to the exemplary embodiment of the present invention, the memory unit 155 may store predetermined terminal specific information for identifying the home banking terminal 100 provided in the home, wherein the terminal specific information is the home banking terminal. (100) Including a unique number (or serial number) assigned to the home banking terminal 100 by a manufacturing institution (or distribution organization), or the terminal address information (for example, if a fixed IP is assigned to the terminal, At least one IP address information or MAC (Media Access Control) address information corresponding to the network communication unit of the terminal is preferably included.

In addition, the memory unit 155 may include a financial transaction history storage area for storing at least one financial transaction history information processed through the home banking terminal 100, and at least one or more transactions processed through the home banking terminal 100. Preferably, a payment processing history storage area for storing payment processing history information is provided.

The customer who receives the payment service for the payment of the delivery product of the offline merchant according to the present invention through the home banking terminal 100 is based on the ISO / IEC 7810 standard, the MS (Magnetic Stripe) card, and / or the ISO / IEC 7816 standard. Have (or own) a customer card 197 that includes at least one contact IC card (or wireless IC chip) and / or at least one contactless IC card (or wireless IC chip) based on ISO / IEC 14443 standards. The card reader unit 170 may provide an interface for reading at least one or more card information included in the customer card 197.

According to the embodiment of the present invention, the card reader unit 170 is an MS reader unit for providing an interface between the MS card and the home banking terminal 100, and / or the contact IC card and the home banking terminal 100. And a contact IC reader unit providing an interface between the contactless IC reader and / or the contactless IC reader unit providing an interface between the contactless IC card and the home banking terminal 100.

The MS reader unit is a card reader unit 170 based on ISO / IEC 7810 and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical It is characterized in that the predetermined card information is interfaced to the home banking terminal 100 from at least one or more tracks provided in the MS of the MS card by using the signal being loaded.

The contact IC reader unit is a card reader unit 170 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies the power to the IC chip of the IC card through the contact point, and home-banking predetermined card information from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit). Characterized in that the interface to the terminal 100.

The contactless IC reader unit is a card reader unit 170 based on ISO / IEC 14443. The contactless IC reader unit uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, the home banking terminal receives predetermined card information from the IC chip through the half-duplex transaction using the APDU It is characterized by interfacing to (100).

According to an exemplary embodiment of the present invention, the card reader unit 170 may include predetermined card information (eg, provided in a card) from at least one or more card reader units 170 for a home banking function defined in the home banking terminal 100. Payment means information corresponding to a payment means including at least one of a credit card, a check card, a debit card, a cash card, and a financial account). It is preferable to read predetermined card information from at least one customer card 197.

According to an embodiment of the present invention, the card information comprises at least one predetermined account number, financial company information and cardholder information for home banking processing, or a card number (eg, a cash card number) and financial company information and It is preferable to include at least one cardholder information, or predetermined card number (for example, credit card number, check card number, debit card number, etc.) and card company information for the payment processing payment of delivery goods of the offline merchants; At least one validity period information (some may be omitted) and cardholder information are preferably included.

The key input unit 165 is provided with at least one key button including at least one or more number keys and / or character keys and / or function keys. Detects information (or signal) inputted from a key input device of the device and detects a predetermined information provided in the key input device in a specific input mode (or operation mode) of the home banking terminal 100 controlled by the controller 105. When predetermined information (or signal) is input from a key button, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 105. The controller 105 obtains predetermined key data corresponding to the key event in the current input mode (or operation mode) of the home banking terminal 100, and / or is defined to match the key event. To obtain a command to execute the function characterized. The key input unit 165 and the key input device having at least one key button interwork with each other to perform a function of key input means provided in the home banking terminal 100.

The key input device interoperating with the key input unit 165 may include a keypad device having at least one numeric key and a function key, and / or at least one numeric key and a character key (eg, English character key, and / or Korean character). Key) and / or a keyboard device having a function key, and / or having at least one numeric key and a function key in conjunction with the screen output means, and / or having at least one numeric key, a character key and a function key. It is preferable to include at least one touch screen device.

According to an exemplary embodiment of the present invention, the key input unit 165 may include key data corresponding to the home banking function from at least one or more key input devices for the home banking function defined in the home banking terminal 100 (eg, a payment amount). It is preferable to perform the function of the key input means for receiving the input, and at least required in the process of providing a delivery product payment processing of the offline merchants from the key input device for the delivery product payment processing of offline merchants according to the present invention. It is preferable to perform the function of the key input means for receiving one or more key data.

According to an embodiment of the present invention, the key input device corresponding to the key input unit 165 may set the operation mode of the home banking terminal 100 in the initial mode or at least one home banking mode (or additional service mode) in the offline affiliated store. It is desirable to have a key button for switching to the payment mode for payment processing payment of the delivery product.

The screen output unit 160 is a liquid crystal display (LCD) and / or a CRT (Cathode) by the control unit 105 in the process of the home banking terminal 100 performs a predetermined function (for example, the electronic payment processing function) And output at least one or more information (or data) that is predefined or defined in real time to be output to a predetermined output device including a Ray Tube through a predefined interface screen. The screen output unit 160 ) And the screen output device interoperate with each other to perform the function of the screen output means provided in the home banking terminal 100.

Predefined information (or data) to be output from the home banking terminal 100 to the screen output device may be provided in the key data input through the key input unit 165 and / or in the home banking terminal 100. Information (or data) stored or generated by a component, information (or data) transmitted / received through the communication processor 182, and / or information corresponding to a predetermined operation result performed by the home banking terminal 100 ( Or data).

According to a preferred embodiment of the present invention, the screen output unit 160 outputs a screen for outputting the electronic payment processing screen according to each electronic payment step to the screen output device for the home banking function defined in the home banking terminal 100 It is preferable to perform the function of the means, and also the screen for outputting the processing screen corresponding to the step of providing the delivery goods payment processing of the offline merchants to the screen output device for the payment process for delivery goods payments of offline merchants according to the invention It is preferable to perform the function of the output means.

The communication processor 182 connects a communication channel with the relay server 188 through a predetermined communication network while the home banking terminal 100 performs a predetermined function (for example, a home banking processing function or a payment settlement processing function). And a network communication unit configured to connect a communication session with a predetermined terminal (or device) located at a short distance with the affiliated store terminal through a predetermined cable communication port according to the intention of a person skilled in the art, or at least And a short range wireless communication unit configured to connect a predetermined short distance communication terminal (or device) device with a predetermined short distance communication terminal (or device) device located at a short distance through at least one short range wireless communication unit and a communication session. Or a communication protocol and / or driver for connecting a communication session). It is done.

The network communication unit includes a wired communication network including at least one or more xDSL-based wired communication network, public switched telephone network (PSTN), intelligent network and Ethernet, or code division multiple access (CDMA) / WCDMA. (Wide-CDMA) based mobile communication network, HSDPA (High-Speed Downlink Packet Access) based wireless communication network, IEEE 802.16x based mobile communication network including at least one or more through a wireless communication network, characterized in that connecting the communication channel with the Bansa server And a modem or a network interface card (NIC) for connecting the home banking terminal 100 to the communication network in hardware. The home banking terminal 100 is connected to the communication network in software. Communication protocol and / or driver for the purpose of doing so.

The cable communication unit connects a cable communication session with a predetermined terminal (or device) through a predetermined cable communication (eg, RS-232c or Universal Serial Bus (USB)), and the cable is connected in hardware. It consists of a predetermined cable communication port, and comprises a communication protocol and / or driver for the cable communication in software.

The short range wireless communication unit includes at least one of infrared ray communication, RF (Radio Frequency) communication, Bluetooth (BlueTooth), Wireless LAN (Wi-Fi), Wi-Fi (Ui-Fi), and Ultra Wide Band system (UWB). It is characterized by connecting a predetermined terminal (or device) and a short-range wireless communication session through at least one short-range wireless communication means, the hardware includes the infrared communication, RF communication, Bluetooth, WLAN, WiFi, UWB And a predetermined short range wireless communication module for short range wireless communication, and includes a communication protocol and / or a driver for the short range wireless communication in software.

Among the terminal functional units provided in the home banking terminal 100, the voice call unit 180 may include at least one voice call channel (eg, a public switched telephone network) to which a communication network to which the network communication unit of the communication processor 182 is connected is connected. Network (PSTN) based voice call channel, or Voice over IP (Voice over IP) based voice call channel), in conjunction with the network communication unit Dual Tone Multi-Frequency (DTMF) scheme (or VoIP scheme) And a voice call channel with at least one voice call terminal 195 (eg, a wired call terminal or a wireless call terminal) according to the call processing procedure.

If the person skilled in the art to which the present invention pertains, the voice call unit 180 connects at least one voice call terminal 195 (eg, a wired call terminal or a wireless call terminal) with a voice call channel. Since it will be familiar with the technical features, a detailed description thereof will be omitted for convenience.

The banking authentication module 184 is required for confidentiality and / or authentication and / or the home banking terminal 100 in the process of processing home banking (or payment) using the customer card 197. As a safety device for performing security requirements including integrity and / or nonrepudiation in a secure and reliable structure within the home banking terminal 100 without using a server on a communication network, the home banking Encrypts or decrypts a predetermined message (information or data) that is processed in the process of the terminal 100 performing a predetermined security request function (eg, home banking or payment function), and forges (or modulates) the message. It is characterized in that the addition of the authenticator to prevent or to store the important information in the process of performing the security request function.

According to an exemplary embodiment of the present invention, the banking authentication module 184 may include a banking authentication IC card (eg, an authentication module for authenticating each home banking procedure) issued by a predetermined IC card reader and a predetermined financial company (or card company), or And an IC card having an authentication module for authenticating the delivery product payment processing procedure of the offline affiliated store.

According to another exemplary embodiment of the present invention, the banking authentication module 184 preferably includes a predetermined banking authentication module 184 inserter and a banking authentication module 184 chip, and a banking authentication module 184 chip. Is a chip containing at least 8-bit CPU and is an Application Specific Integrated Circuit (ASIC) chip (e.g., a PLCC 44-pin chip) and / or an IC chip (e.g., a SIM) having a performance of 2 MIPS (Million Instructions Per Second) or more. (IC card in the form of Subscriber Identity Module).

In addition, the banking authentication module 184 includes at least one or more security application data (eg, at least one or more identifiers, versions, expiration dates, issue dates, code values, etc.) required for the home banking terminal 100 to perform a predetermined security request function. ) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, previous transaction cancellation protocols, collection protocols, SAM issuance protocols, (financial / card company) Registration protocol, authorization protocol, mode switching protocol, key download protocol, revocation protocol) and various commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / delete / discard / initialization / reprocessing) / Cancel command).

Referring to FIG. 1, the home banking terminal 100 corresponds to at least one home banking function (eg, account inquiry, transfer account, etc.) or at least one additional service function in association with the screen output unit 160. And an interface output unit 110 for outputting a user interface or a user interface for the delivery product payment processing of the offline affiliated store.

The interface output unit 110 may include at least one function selection menu (or icon) corresponding to at least one or more home banking functions (eg, account inquiry or transfer) provided by the home banking terminal 100, and the home banking. And an interface screen for outputting at least one or more function selection menus (or icons) corresponding to at least one or more additional service functions provided by the terminal 100.

According to the exemplary embodiment of the present invention, the interface output unit 110 processes the delivery product payment processing of the offline affiliated store in the initial mode or at least one or more home banking modes (or additional service modes) of the home banking terminal 100. It is preferable to include a user interface for switching to the payment mode for.

According to the present invention, the interface output unit 110 is a user interface for requesting to read a predetermined customer card 197 through the card reader unit 170 for the payment processing payment delivery products of the offline merchant, An interface screen including a user interface for requesting a predetermined payment amount to be input through the key input unit 165 may be output.

According to an exemplary embodiment of the present invention, an authentication module for authenticating a predetermined merchant-side banking authentication IC card (eg, the offline merchant's delivery product payment processing procedure) for the merchant employee to process payment for the delivery product payment of the offline merchant is provided. In the case of possessing an IC card), the interface output unit 110 displays an interface screen including a user interface requesting the banking authentication module 184 to insert (or interlock) the banking authentication IC card. It is preferable that the output, and then the delivery product payment processing procedure of the offline merchant is controlled by the merchant side banking authentication IC card, the merchant information included in the payment approval request for the payment processing payment of the offline merchants It is also preferable to read from the merchant side banking authentication IC card.

According to another embodiment of the present invention, when the delivery product payment processing procedure of the offline affiliated store is controlled by the banking authentication module 184, the interface output unit 110 is predetermined through the key input unit 165. It is preferable to output an interface screen including a user interface for requesting input of merchant information.

Referring to FIG. 1, the home banking terminal 100 checks whether a mode of operation of the home banking terminal 100 is selected (or switched) to a payment mode corresponding to a delivery product payment processing of the offline affiliated store. 115 and, if the operation mode of the home banking terminal 100 is selected (or switched) as the payment mode, the predetermined card from the predetermined customer card 197 in cooperation with the card reader unit 170. And a card information input unit 120 for inputting information and an information input unit 125 for inputting predetermined payment amount information in connection with the key input unit 165, wherein the information input unit 125 is provided. In connection with the banking authentication module 184 (or key input unit 165), the predetermined merchant information to be included in the payment approval text for the payment amount is input. Input beam input and the merchant information, the procedure is preferably to verify a respective phase by the banking authentication module 184.

The mode confirmation unit 115 periodically (or in response to the payment mode switch key event) the operation mode of the home banking terminal 100 in the predetermined initial mode or at least one home banking mode (or additional service mode) Characterized in that whether to switch to the payment mode for payment processing payment processing delivery products of the offline merchant.

According to the exemplary embodiment of the present invention, the mode checking unit 115 may operate in a predetermined initial mode to at least one home banking mode (or additional service) in connection with the interface output unit 110. Mode), it is preferable to check whether the offline mode is switched to the payment mode for the delivery product payment processing.

If the check result is that the operation mode of the home banking terminal 100 is the payment mode for the payment processing for delivery goods payment of the offline affiliated store, the interface output unit 110 is connected to the screen output unit 160 Outputs a user interface requesting the card reader unit 170 to read a predetermined customer card 197. In response, the card information input unit 120 is linked to the card reader unit 170 to designate a predetermined customer card. Characterized by the predetermined card information from (197), the card information input step is preferably authenticated through the banking authentication module 184.

According to an exemplary embodiment of the present invention, the card information for the payment processing of the delivery goods of the offline affiliated store may include a predetermined card number (for example, a credit card number, a check card number, and a debit card) to be used for the payment processing of the delivery goods of the offline merchant. Number, etc.), card company information, expiration date information (some may be omitted), and cardholder information.

If the person having ordinary knowledge in the technical field to which the present invention pertains, the card information input unit 120 performs the payment processing for the delivery product payment of the offline merchant from the customer card 197 in connection with the card reader unit 170. Since you will be familiar with technical features for reading card information (for example, when the customer card 197 is an IC card, a PIN procedure for authenticating the validity of the IC card), a detailed description thereof will be omitted. do.

In addition, when the operation mode of the home banking terminal 100 is determined to be a payment mode for payment processing of a delivery product of the offline affiliated store, the interface output unit 110 is connected to the screen output unit 160 and the key input unit. A user interface for requesting input of predetermined payment amount information is output through 165, and correspondingly, the information input unit 125 inputs predetermined payment amount information in association with the key input unit 165. The payment amount information input step is preferably authenticated through the banking authentication module 184.

According to an exemplary embodiment of the present invention, a predetermined merchant side banking authentication IC card (eg, the offline merchant's delivery product payment processing procedure is authenticated) by the banking authentication module 184 for the payment processing of the delivery product of the offline merchant. When the IC card provided with an authentication module is inserted (or interlocked), the information input unit 125 preferably reads and inputs predetermined merchant information from the banking authentication IC card of the affiliated store, and inputs the affiliated store information. It is preferable to authenticate through the banking authentication module 184.

According to another embodiment of the present invention, when the delivery product payment processing of the offline affiliated store is controlled by a banking authentication IC card (or banking authentication module 184 chip) that controls the home banking procedure, the information input unit 125 It is preferable to input predetermined merchant information in association with the key input unit 165, and the merchant information input step is preferably authenticated through the banking authentication module 184.

Referring to FIG. 1, the home banking terminal 100 may read the card information read from the customer card 197 through the card information input unit 120 and the key information input through the key input unit 165. A predetermined payment approval including payment amount information, merchant information input through the banking authentication module 184 (or the key input unit 165), and at least one terminal specific information stored in the memory unit 155. A relay server on a communication network through a full text generation unit 130 for generating a full text request, a cryptographic processing unit 135 for encrypting the generated payment approval request full text, and the full text of the payment approval request through the communication processing unit 182 ( 188 receives the full text of the payment approval result including the payment processing details corresponding to the full payment approval request message from the relay server 188 on the communication network through the transmission unit 140 and the communication processing unit 182. The professional receiving unit 145 and the payment processing history information included in the received payment approval result full text are stored in the payment processing history storage area provided in the memory unit 155, and the screen output unit 160 And a professional processing unit 150 for outputting the payment processing details in association with each other. When the payment approval result message received through the professional receiving unit 145 is encrypted, the encryption processing unit 135 Characterized in that the encrypted payment approval result full text decryption process, it is preferable that each step is authenticated by the banking authentication module 184 the full text generation and full text transmission and reception procedures.

The full text generation unit 130 reads and inputs the card information read from the customer card 197 through the card information input unit 120 to process the delivery product payment settlement of the offline affiliated store, and the key input unit 165. Characterized in that the payment amount information entered through the banking authentication module 184 (or key input unit 165) and the merchant information input through the unique terminal stored in the memory unit 155 Characterized by generating a predetermined payment approval request full text containing at least one or more information, the step of generating a payment approval request full text is preferably authenticated through the banking authentication module 184.

In this case, the payment approval request specialized structure may include a structure in which the relay server 188 may recognize the payment approval request full text.

When the payment approval request full text is generated through the full text generation unit 130, the cryptographic processing unit 135 includes at least the full text of the payment approval request including the card information, the payment amount information, the merchant information, and the terminal specific information. It is characterized by encrypting with one or more encryption methods, the present invention is not limited by a specific encryption method (or encryption algorithm).

The full text transmission unit 140 transmits the full text of the payment approval request to the relay server 188 on the communication network through the communication processing unit 182 (for example, the network communication unit). It is preferable to authenticate through the banking authentication module 184.

Thereafter, the relay server 188 relays the card information, the payment amount information, and the merchant information included in the full payment approval request message to a card company server 193 corresponding to the card information through a predetermined dedicated network. After performing a predetermined payment processing procedure for the payment processing payment of the delivery product of the offline merchant, the predetermined payment authorization information (eg payment approval number) or payment error information (eg payment error code) from the card company server 193 When a payment processing history including any one of the received is generated, a predetermined payment approval result message including the payment processing history is generated and transmitted to the home banking terminal 100 through the communication network.

After the payment approval request message is transmitted to the relay server 188 through the message transmission unit 140, the message receiving unit 145 is transmitted from the relay server 188 on the communication network through the communication processing unit 182. And periodically (or in response to a full text reception event of the communication processing unit 182) receive a payment approval result text including a predetermined payment processing history corresponding to the full text of the payment approval request. Receiving the result of the approval is preferably authenticated through the banking authentication module 184.

When the received payment approval result full text is encrypted by a predetermined encryption method, the encryption processing unit 135, the full text receiving unit 145 converts the encrypted payment approval result full text into a predetermined decryption method corresponding to the encryption method. It is characterized by decoding, and the present invention is not limited by a specific decoding method (or decoding algorithm).

When the payment approval result full text is received through the full text receiver 145, the full text processing unit 150 extracts the payment processing detail information from the full text of the payment approval result and stores the extracted payment processing detail information in the memory unit. Characterized in the payment processing history storage area provided at 155, characterized in that the payment processing history storage step is preferably authenticated through the banking authentication module 184.

According to the exemplary embodiment of the present invention, when the specialized processing unit 150 includes predetermined payment approval information in the payment processing history information, the payment processing history information may be selectively provided in the memory unit 155. It is preferable to store in the processing history storage area.

In addition, the professional processing unit 150 outputs the payment processing history information extracted from the payment approval result full text in connection with the screen output unit 160, the payment processing history output step is the banking authentication It is desirable to authenticate through module 184.

2 is a diagram illustrating an external appearance of a home banking terminal 100 according to an exemplary embodiment of the present invention.

In more detail, FIG. 2 is a card reader that has a predetermined voice call function and reads at least one customer card 197 in the home banking terminal 100 shown in FIG. When the banking authentication module 184 is configured to include a predetermined banking authentication IC card, it illustrates the appearance of the home banking terminal 100 for the payment processing of the delivery product of the offline affiliated store. Those skilled in the art will be able to infer various implementation methods for the external appearance of the home banking terminal 100 by referring to and / or modifying the drawing 2, but the present invention provides a method of inferring all It is not limited to the implementation method shown in FIG.

For example, those of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 2 to replace the home banking terminal 100 or the customer card 197 that is not equipped with the voice call function. A card reader that reads a home banking terminal 100 including a contact / contactless IC card in addition to the MS card reader, or the banking authentication module 184 includes a predetermined banking authentication module 184 chip in addition to the banking authentication IC card. It can be inferred how to implement the home banking terminal 100, but the present invention includes all the inferred implementation method, it is not limited to the implementation method shown in FIG.

3 is a diagram illustrating a card payment system configuration using a home banking terminal 393 according to an embodiment of the present invention.

In more detail, FIG. 3 illustrates a payment approval request message generated and transmitted by the home banking terminal 393 through a predetermined communication network when a card payment processing for a delivery product is performed through the home banking terminal 393 shown in FIG. As a card payment system for processing a card payment on the basis, if the person of ordinary skill in the art to which the present invention belongs, the card payment system using the home banking terminal 393 by referring to and / or modified in the present drawing 3 Various implementation methods for the configuration may be inferred, but the present invention includes all the implementation methods inferred, and the technical features are not limited to the implementation method shown in FIG.

Referring to FIG. 3, the card payment system using the home banking terminal 393 receives a home banking terminal 393 provided in each home and a payment approval request message generated and transmitted by the home banking terminal 393. A relay server 300 relaying card information, payment amount information, and merchant information included in the payment approval request message to a card company server 345 corresponding to the card information, and at least one card company corresponding to the card information. It is characterized by comprising a server 345.

The home banking terminal 393 on the card payment system using the home banking terminal 393 comprises at least one functional configuration shown in FIG. 1 and an external form shown in FIG. Card information read from the customer card 395 through a reader, payment amount information input through a predetermined key input means, merchant information input through a predetermined key input means (or banking authentication module) and the home banking terminal And generating a predetermined payment approval request message including at least one predetermined terminal-specific information corresponding to 393 and transmitting the predetermined payment approval request message to the relay server 300 through the communication network. Is preferably encrypted using at least one encryption method (or encryption algorithm).

Also, the relay server 300 on the card payment system using the home banking terminal 393 is connected to the home banking terminal 393 through the communication network, and generates and transmits a payment approval request generated by the home banking terminal 393. And receiving the full text and relaying the card information, payment amount information, and merchant information included in the full payment approval request message to a card company server 345 corresponding to the card information.

In addition, the relay server 300 is connected to the card company server 345 through a predetermined dedicated network, the card company server 345 to the card information, payment amount information and merchant information included in the full payment approval request message After transmitting to the network, the card company server 345 receives predetermined payment processing history information corresponding to the payment approval result, and generates a predetermined payment approval result message including the payment processing history to generate the communication network. Characterized in that the transmission to the home banking terminal 393 through.

In addition, the card company server 345 on the card payment system using the home banking terminal 393, characterized in that it comprises at least one server provided in the card company to process the payment approval for the customer card (395). After receiving the card information, the payment amount and the affiliated store information from the home banking terminal 393, the payment amount is processed through the customer card 395.

Those skilled in the art to which the present invention pertains, the technical features of the home banking terminal 393 and the technical features of the conventional card company server 345 and connecting the home banking terminal 393 and the card company server 345 Since you will be familiar with the technical features of the communication network, a detailed description thereof will be omitted for convenience.

According to the method of the present invention, the card company server 345 is the customer information issuing the customer card 395, the card information and the card attribute information corresponding to the customer card 395 issued to the customer and It has a predetermined card information D / B (385) for storing and processing the card limit information corresponding to the customer card (395), or linked with a predetermined DBMS operating the card information D / B (385) Alternatively, it is preferable to interwork with a DB server (not shown) provided with the card information D / B 385.

The customer information may include personal information (eg, customer name, resident registration number, address, wireless terminal information (or mobile number), e-mail address, etc.) of the customer who has issued the customer card 395, and member information (eg, the customer's information). , At least one member ID information).

Preferably, the card information includes a predetermined card number corresponding to the customer card 395 issued to the customer. The card issuer information (eg, card issuer number (or code)) and card type are included. Preferably, the information further includes information (eg, a card identification number (or code) and expiration date information (some may be omitted) for the customer card 395.

According to an embodiment of the present invention, the card information is preferably matched with predetermined payment means information corresponding to the customer card 395, the payment means is credit card payment means, check card payment means, debit card payment It is preferable to include at least one or more means, prepaid card payment means.

The card attribute information may include a payment attribute (eg, postpaid, debit, prepaid, etc.) for the customer card 395 issued to the customer and a mileage accrual policy for the customer card 395. At least one attribute and at least one additional service attribute associated with the customer card 395 may be included.

The card limit information is a limit for approval of payment for a payment amount using the customer card 395 according to a payment means characteristic corresponding to the customer card 395 and / or a payment attribute of the customer card 395. It is preferable to include information for confirming the amount of money.

According to an exemplary embodiment of the present invention, when the payment means corresponding to the customer card 395 includes a credit card payment means (or a postpaid payment attribute), the card limit information may be applied to the customer card 395. It is preferable that the predetermined credit limit amount information is included.

According to another exemplary embodiment of the present invention, the payment means corresponding to the customer card 395 includes a check card / debit card payment means (or a debit payment attribute associated with an account) associated with a predetermined account. The card limit information may include predetermined account information (or account balance information) associated with the customer card 395.

According to another exemplary embodiment of the present invention, when the payment means corresponding to the customer card 395 includes a prepaid card payment means (or a prepaid payment attribute), the card limit information is the customer card 395. It is preferable that the predetermined charge amount information is pre-filled.

Referring to FIG. 3, the relay server 300 may include an interface unit 350 for connecting and managing a communication channel for transmitting and receiving a payment related professional message with at least one home banking terminal 393 through a predetermined communication network, and the interface. A professional receiving unit 310 for receiving a payment approval request message including at least one of card information, payment amount information, merchant information and terminal-specific information from the home banking terminal 393 in association with the 350 and the interface unit; And a professional transmission unit 315 for transmitting a payment approval result message including a predetermined payment processing details to the home banking terminal 393 in connection with the home banking terminal 393. If encrypted, decrypt the encrypted payment authorization request full text, or encrypt the payment approval result full text sent to the home banking terminal 393. It is characterized by comprising an encryption unit 320.

The home banking terminal 393 reads predetermined card information from the customer card 395 through a predetermined card reader, and includes a full payment approval request message including the card information, payment amount information, merchant information, and the terminal specific information. After generating and transmitting through the communication network, the professional receiving unit 310 is characterized in that for receiving the payment approval request full text in conjunction with the interface unit 305.

If the home banking terminal 393 encrypts and transmits the payment approval request text, the encryption unit 320 uses the received payment approval request text in the home banking terminal 393 for at least one encryption method ( Or a decryption process (or decryption algorithm) corresponding to an encryption algorithm).

Those skilled in the art will be familiar with the various encryption schemes (or encryption algorithms) and the corresponding decryption schemes (or decryption algorithms) for the full payment approval request. Detailed description is omitted for convenience.

If the card company server 345 completes a payment approval procedure corresponding to the full payment approval request message and transmits a predetermined payment processing history, the full text transfer unit 315 is linked with the interface unit 350 to make the payment. Characterized in that the full authentication result is transmitted to the home banking terminal (393).

According to an embodiment of the present invention, when the payment approval result is encrypted and transmitted to the home banking terminal 393, the encryption unit 320 transmits the payment approval result full text to at least one encryption method (or an encryption algorithm). It is preferable to perform encryption.

Persons having ordinary knowledge in the technical field to which the present invention pertains are familiar with technical features for transmitting and receiving the payment approval request text and the payment approval result text through the communication network, and a detailed description thereof will be omitted for convenience.

Referring to FIG. 3, the relay server 300 reads card information included in the full payment approval request message received from the home banking terminal 393 and checks the card company server 345 corresponding to the card information. Information relay for relaying the card information, payment amount information, and merchant information to the information checking unit 325 and the confirmed card company server 345, and receiving predetermined payment processing history information from the card company server 345. It is characterized by comprising a portion 330.

The card information included in the payment approval request text includes predetermined bank identification number (BIN) information for identifying the card company that issued the customer card 395. The information checking unit 325 may include the BIN. The card company server 345 corresponding to the card information is identified based on the information.

When the card company server 345 corresponding to the card information is confirmed, the information relay unit 330 is included in the full payment approval request message through a dedicated network connecting the relay server 300 and the card company server 345. Card information, payment amount information and merchant information is characterized in that the transmission to the card company server 345 by substituting the communication protocol provided in the dedicated network.

If the card company server 345 processes the payment amount through the customer card 395 corresponding to the card information, predetermined payment processing history information including predetermined payment approval information (or payment error information). After generating and transmitting to the relay server 300, the information relay unit 330 is characterized in that for receiving the payment processing history information from the card company server 345, after which the payment processing history information is predetermined The payment approval result is included in the full text and transmitted to the home banking terminal 393.

Referring to FIG. 3, the relay server 300 includes predetermined payment approval information in the payment processing history information, and the full payment approval result including the payment processing history is effectively used as the home banking terminal 393. When the transmission, characterized in that it comprises an information storage unit 335 for storing in the predetermined payment history D / B (340) by linking the card information, payment amount information, merchant information and terminal-specific information, Here, the card information, payment amount information, affiliated store information, and terminal specific information may perform a function of an electronic slip.

Referring to FIG. 3, the card company server 345 connects and manages a communication channel for transmitting and receiving payment related information with the relay server 300 through the dedicated network, and the interface unit ( 305 and the information receiving unit 355 for receiving card information, payment amount and merchant information from the relay server 300, and the predetermined payment approval to the relay server 300 in connection with the interface unit 305 And an information transmission unit 360 for transmitting payment processing history information including information (or payment error information).

When the relay server 300 relays and transmits the card information, the payment amount, and the affiliated store information included in the full payment approval request message, the information receiving unit 355 is linked with the interface unit 305 to pay the card information. Characterized in that it receives the amount and merchant information.

If a payment approval procedure corresponding to the payment amount information is completed through the customer card 395 corresponding to the card information in the card company server 345, and a predetermined payment processing history is generated, the information transmitting unit 360 In connection with the interface unit 350 is characterized in that for transmitting the payment processing history information to the relay server 300.

Referring to FIG. 3, the card company server 345 receives the card information issued by the card company when the card information, the payment amount, and the merchant information are received from the relay server 300 through the information receiving unit 355. A card information checking unit 325 for checking whether the received card information matches card information issued by the card company in association with the card information D / B 385 to be stored, and the card information D / B When matched with the card information provided in (385), the payment via the customer card (395) by comparing the payment amount and the card limit information associated with the card information in conjunction with the card information D / B (385) A predetermined payment process including a payment approval processing unit 370 for processing payment approval of an amount, and a payment processing result including any one of predetermined payment error information and payment approval information corresponding to the payment approval processing. An information generation unit 375 for generating details information and predetermined transaction details D / B 390 configured to classify payment transaction details including predetermined payment approval information among the payment processing results by date and time. And an information storage unit 380 for storing the information, and the generated payment processing history information is transmitted to the relay through the information transmission unit 360.

When the card information, the payment amount, and the merchant information are received from the relay server 300 through the information receiver 355, the card information verification unit 365 receives the card information received from the relay server 300. Characterized by checking whether the card information issued by the card company.

According to the exemplary embodiment of the present invention, the card information checking unit 365 uses the card information included in the full payment approval request as a keyword to search / search card information stored in the card information D / B 385. Preferably, the card information included in the full payment approval request is card information issued by the card company.

When the card information is matched with the card information provided in the card information D / B 385, the payment approval processing unit 370 is stored in association with the card information confirmed from the card information D / B 385. Confirm the card limit information on the customer card 395, and compare the confirmed card limit information with the payment amount to approve payment processing through the customer card 395; .

According to an embodiment of the present invention, when the payment means corresponding to the confirmed card information comprises a credit card payment means (or postpaid payment attribute), the payment approval processing unit 370 is the card information D / B Confirming the predetermined credit limit amount information stored in association with the card information from (385), and comparing the confirmed credit limit amount information with the payment amount, through the customer card 395 for the payment amount It is characterized by processing the payment approval.

According to another embodiment of the present invention, when the payment means corresponding to the confirmed card information comprises a check card / debit card payment means (or a debit payment attribute associated with the account) associated with a predetermined account, The payment approval processing unit 370 checks predetermined account information stored and processed in association with the card information from the card information D / B 385, and links the account balance with a predetermined financial system in which the account is opened. After confirming, by comparing the confirmed account balance with the payment amount, the payment approval for the payment amount is processed through the customer card 395.

If the account balance information stored in association with the card information is directly stored in the card information D / B 385, the payment approval processing unit 370 may receive the card information from the card information D / B 385. After confirming the account balance stored in association, the payment balance can be processed through the customer card 395 by comparing the confirmed account balance with the payment amount.

According to another embodiment of the present invention, when the payment means corresponding to the confirmed card information comprises a prepaid card payment means (or prepaid payment attribute), the payment approval processing unit 370 is the card information By confirming the predetermined amount of charge information stored in association with the card information from the D / B (385), and compares the confirmed amount of charge information and the payment amount, the payment amount through the customer card (395) Characterized in that the payment approval for processing.

The payment approval processing unit 370 processes predetermined payment error information (eg, payment error code) or payment approval information (eg, payment approval) in the process of processing payment approval for the payment amount through the customer card 395. Number) to generate a payment processing result including any one.

When the payment approval processing unit 370 generates a payment processing result including any one of the payment error information (eg, payment error code) or payment approval information (eg, payment approval number), the information generation unit ( 375 may generate predetermined payment processing history information including the card information, payment amount information, merchant information, and payment processing result, and the information transmitting unit 360 may be connected to the interface unit 350. It characterized in that for transmitting the payment processing history information to the relay server (300).

When predetermined payment processing history information including the payment approval information (eg, payment approval number) is generated by the payment approval processing unit 370, the information storage unit 380 may perform the payment processing history information (eg, the A predetermined transaction processing history including card information, payment amount information, merchant information, and payment approval information), and generates predetermined transaction history information further including the payment date and time information to the predetermined transaction history D / B 390. It is characterized by storing.

4 is a diagram illustrating an operation of a home banking terminal 393 to generate a full payment approval request message according to an exemplary embodiment of the present invention.

In more detail, FIG. 4 is a banking authentication module provided in the home banking terminal 393 in the home banking terminal 393 shown in FIG. When the IC card is inserted (or interlocked), a process for generating a predetermined payment approval request full text for processing the payment of the delivery product of the offline merchant based on the banking authentication IC card of the merchant side, the present invention belongs to Those skilled in the art will be able to infer various implementation methods for the operation of the home banking terminal 393 to generate the full payment approval request by referring to and / or modifying the present invention. The present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG. The.

For example, FIG. 4 illustrates a case in which the affiliated banking authentication IC card is inserted (or interlocked) into the banking authentication module provided in the home banking terminal 393 to easily explain the payment approval request full text generation process. Although the validity authentication process for the merchant side banking authentication IC card is omitted, the present invention is not limited thereto.

In addition, in FIG. 4, the home banking terminal 393 reads predetermined card information, inputs payment amount information, and then displays the affiliated store information and the terminal specific information in order to easily explain the process of generating the full payment approval request. Although shown in the order of extraction and input, this is only one implementation method for easily explaining the home banking operation process, it will be apparent that the payment approval request full text generation process is not limited to the order shown in FIG. .

Hereinafter, in FIG. 4, the home banking terminal 393 illustrated in FIG. 1 is referred to as a “terminal” for convenience.

Referring to FIG. 4, the terminal includes a user interface for selecting at least one or more home banking services (or additional services) by a predetermined screen output means, or a user interface for selecting a delivery product payment service of the offline affiliated store. And outputs an interface screen (400), and in response, the terminal switches to (or selects) a mode of operation of the terminal in connection with a predetermined key input means for a delivery product payment processing of the offline affiliated store. Check (405).

If the operation mode of the terminal is not switched (or selected) to the payment mode (410), the terminal at least one or more home banking according to at least one or more operation modes corresponding to the at least one or more home banking services (or additional services) Process the service (or additional service) (415).

Those skilled in the art to which the present invention pertains may infer various home banking service (or additional service) processes through the terminal, and thus a detailed description thereof will be omitted.

On the contrary, when the operation mode of the terminal is switched (or selected) to the payment mode (410), the terminal requests to insert (or interlock) a banking authentication IC card of a predetermined merchant side through the banking authentication module (420). .

If a predetermined merchant side banking authentication IC card is inserted (or interlocked) into the banking authentication module (425), the terminal initializes the payment mode of the terminal through the merchant side banking authentication IC card, and through the terminal. Check the payment validity (430).

According to an embodiment of the present invention, the payment validity checking process through the terminal is a process of checking whether the payment processing of the delivery product of the offline affiliated store can be processed through various authentication functions provided in the banking authentication IC card of the affiliated store. It is preferable to comprise a.

If the payment validity through the merchant side banking authentication IC card is not confirmed (435), the terminal generates a predetermined payment validity error information and outputs the screen (440), and ends the process of generating the full payment approval request.

On the other hand, if the payment validity through the merchant side banking authentication IC card is confirmed (435), the terminal requests to read the predetermined card information from the customer card (395) through the card reader, and through the card reader It is checked whether card information is read and input (445).

If the card information is read and input (450), the terminal requests to input a predetermined payment amount through the key input means, and checks whether the payment amount information is input through the key input means (455). .

If the payment amount information is input (460), the terminal extracts and inputs predetermined merchant information from the merchant side banking authentication IC card, and extracts and inputs predetermined terminal specific information from the memory unit (465). In step 470, a payment approval request message including at least one or more of the card information, the payment amount information, the merchant information, and the terminal specific information is generated.

FIG. 5 is a diagram illustrating an operation of a home banking terminal 393 generating a full payment approval request message according to another embodiment of the present invention.

In more detail, FIG. 5 illustrates the affiliated store through a predetermined key input unit provided in the home banking terminal 393 in the home banking terminal 393 shown in FIG. In the case of inputting the information, a process for generating a predetermined payment approval request text for the delivery product payment processing of the offline merchant including the inputted merchant information, and the general knowledge in the technical field to which the present invention belongs. If you have, it will be able to infer various implementation methods for the operation process of the home banking terminal 393 to generate the full payment approval request by referring to and / or modifying the figure 5, the present invention is all inferred implementation It is made, including the method, the technical features are not limited only to the implementation method shown in FIG.

For example, in FIG. 5, the home banking terminal 393 reads predetermined card information, inputs the payment amount information, and then displays the affiliated store information and the terminal specific information in order to easily explain the payment approval request full text generation process. Although shown in the order of extraction and input, this is only one implementation method for easily explaining the home banking operation process, it is clear that the process for generating a payment approval request full text is not limited to the order shown in FIG. It is.

Hereinafter, in FIG. 5, the home banking terminal 393 shown in FIG. 1 is referred to as a “terminal” for convenience.

Referring to FIG. 5, the terminal includes a user interface for selecting at least one home banking service (or an additional service) by a predetermined screen output means, or a user interface for selecting a delivery product payment service of the offline affiliated store. Outputs an interface screen (500), and in response, the terminal switches (or selects) an operation mode of the terminal to a payment mode for payment processing of a delivery product of the offline merchant in association with a predetermined key input means; Check (505).

If the operation mode of the terminal is not switched (or selected) to the payment mode (510), the terminal at least one or more home banking according to at least one or more operation mode corresponding to the at least one or more home banking services (or additional services) Process the service (or additional service) (515).

On the other hand, when the operation mode of the terminal is switched (or selected) to the payment mode (510), the terminal requests to read predetermined card information from the customer card 395 through the card reader, and the card reader In operation 520, the card information is read and input.

If the card information is read and input (525), the terminal requests to input a predetermined payment amount through the key input means, and checks whether the payment amount information is input through the key input means (530). .

If the payment amount information is input (535), the terminal requests to input predetermined merchant information through the key input means, and checks whether the affiliated store information is input through the key input means (540).

If the affiliated store information is input (545), the terminal extracts and inputs predetermined terminal specific information from the memory unit (550), and then at least one of the card information, payment amount information, affiliated store information, and terminal unique information. A payment approval request message including the above is generated in full (555).

6 is a diagram illustrating an operation of a home banking terminal 393 which transmits and receives a payment related message to a relay server 300 according to an embodiment of the present invention.

In more detail, in FIG. 6, when a predetermined payment approval request text is generated through the process illustrated in FIG. 4 or FIG. 5, the generated payment approval request text is encrypted by the home banking terminal 393 illustrated in FIG. 1. After the transmission to the relay server 300 on the card payment system shown in Figure 3, the process for receiving the full payment approval result including the predetermined payment processing details from the relay server 300, the present invention Those skilled in the art, various implementation methods for the operation of the home banking terminal 393 to transmit and receive the payment-related full text to the relay server 300 by referring to and / or modified in this figure 6 It may be inferred, but the present invention includes all the inferred implementation methods, and the technical features are not limited to the implementation method illustrated in FIG.

For example, FIG. 6 shows that the home banking terminal 393 encrypts and transmits the payment approval request text in order to easily explain the process of transmitting and receiving the payment related text. Although illustrated as being received and decrypted, the encryption / decryption process may be omitted (or modified) according to the intention of those skilled in the art, whereby it is apparent that the present invention is not limited.

Hereinafter, in FIG. 6, the home banking terminal 393 illustrated in FIG. 1 is referred to as a “terminal” for convenience.

Referring to FIG. 6, when a predetermined payment approval request message is generated through the process illustrated in FIG. 4 or FIG. 5, the terminal generates at least one encryption scheme for the generated payment approval request message through the banking authentication module. (Or an encryption algorithm) (600).

According to an embodiment of the present invention, if a banking authentication IC card (or banking authentication module chip) is provided in the banking authentication module provided in the terminal, the terminal is the banking authentication IC card (or banking authentication module chip). It is preferable to encrypt the full text of the payment approval request through at least one encryption key provided in the).

According to another exemplary embodiment of the present invention, when a predetermined merchant side banking authentication IC card is inserted (or interlocked) into a banking authentication module provided in the terminal, the terminal includes at least the banking authentication IC card of the merchant side. It is preferable to encrypt the full text of the payment approval request by using one or more encryption keys.

If the payment approval request message is encrypted (605), the terminal transmits the payment approval request message to the relay server 300 through the communication network (610), and the communication network from the relay server 300 In step 615, the payment approval result including the predetermined payment processing details is received through the check.

If the payment approval result full text is received (620), the terminal checks whether the payment approval result full text is decoded (625).

If the payment approval result full text is decoded (630), the terminal decodes the data through at least one decoding method (or decryption algorithm) corresponding to the payment approval result full text (635).

If the full payment approval result is decoded (640), the terminal reads the payment processing details included in the full payment approval result and verifies whether the payment approval information includes predetermined payment approval information (645).

If the payment processing history does not include the payment approval information (eg, if at least one payment error information is included in the payment processing history) (650), the terminal outputs predetermined payment error information on the screen. After (655), the delivery product payment settlement processing of the offline merchant is terminated.

On the other hand, if the payment approval information includes the payment approval information (650), the terminal outputs the payment approval information and then stores the payment processing details in the payment processing history storage area provided in the memory unit. (660).

7 is a diagram showing the operation of the relay server 300 in accordance with an embodiment of the present invention.

In more detail, FIG. 7 receives a predetermined payment approval request message from the home banking terminal 393 shown in FIG. 1 in the relay server 300 on the card payment system shown in FIG. And transmitting to the home banking terminal 393 after receiving a predetermined payment processing details from the card company server 345 and generating a payment approval result message including the payment processing details. However, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing to infer various implementation methods for the operation of the relay server 300. It is made including all the inferred implementation method, the technical features are not limited only to the implementation method shown in FIG.

For example, in FIG. 7, when the home banking terminal 393 encrypts and transmits the full payment approval request message in order to easily explain the operation of the relay server 300, the encrypted payment approval is performed by the relay server 300. Although the request message is illustrated as being decrypted and the relaying server 300 is encrypted and transmitted to the home banking terminal 393, the payment approval result is encrypted. It may be omitted (or modified) accordingly, it will be apparent that the present invention is not limited thereto.

Hereinafter, in FIG. 7, the home banking terminal 393 shown in FIG. 1 is referred to as a "terminal" for convenience, and the relay server 300 on the card payment system shown in FIG. 3 is referred to as a "server" for convenience.

Referring to FIG. 7, when the terminal illustrated in FIG. 1 requests a connection of at least one communication channel for transmitting / receiving payment related information to the server through the process illustrated in FIG. 6, at least one of the terminal and the terminal is connected to the terminal. The communication channel for transmitting and receiving the above payment-related full text is connected (700), and it is checked whether a predetermined payment approval request full text is received from the terminal (705).

If a predetermined payment approval request text is received from the terminal (710), the server decrypts the received payment approval request text (710), and if the payment approval request text is decrypted (720), the payment approval The card information included in the request message is read to check the predetermined card company server 345 corresponding to the card information (725).

According to an embodiment of the present invention, the card information included in the full payment approval request message includes predetermined bank identification number (BIN) information for identifying a card company that issued the customer card 395. It is preferable to check the card company server 345 corresponding to the card information based on the BIN information.

If the card company server 345 corresponding to the card information is confirmed (730), the server and the card information and payment amount information included in the full payment approval request to the card company server 345 through a predetermined dedicated network; Relay transmission of the merchant information (735), and checks whether the predetermined payment processing history information is received from the card company server 345 (740).

If payment processing history information is received from the card company server 345 (745), the server generates a predetermined payment approval result message including the payment processing history and transmits it to the terminal (750).

When the full payment approval result is normally transmitted to the terminal, the server reads the payment processing details and checks whether the payment processing details include predetermined payment approval information (755).

If it is confirmed that the payment processing details include the predetermined payment approval information (760), the server links the card information, the payment amount information, the affiliated store information, and the terminal-specific information with a predetermined payment history D. It stores in / B (340) (765), wherein the card information, payment amount information, merchant information and the terminal-specific information preferably comprises an electronic slip information configuration for the card payment processing.

8 is a diagram illustrating a method for encrypting and transmitting a transmission approval request text in a symmetric key (or secret key) method in a home banking terminal according to an embodiment of the present invention.

In more detail, Figure 8 is a method for encrypting and transmitting the full payment approval request in a symmetric key (or secret key) method in a home banking terminal equipped with an encryption function as shown in Figure 1, the present invention If one of ordinary skill in the art can refer to and / or modify this drawing, various implementation methods for encrypting the full payment approval request message in a symmetric key (or secret key) manner in a home banking terminal on the communication network can be inferred. It will be appreciated that the present invention encompasses all of the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

In this figure 8 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the banking authentication module 820 provided in the home banking terminal, the banking authentication module 820 is the At least one banking authentication IC card having a symmetric key (or secret key) or a banking authentication module 820 chip is preferably included.

According to another embodiment of the present invention, the symmetric key (or secret key) is an interface that is stored in the memory unit provided in the home banking terminal in addition to the banking authentication module 820, and / or provided from the relay server to the home banking terminal. It can be included in the screen and / or embedded in the communication program to communicate with the relay server on the home banking terminal, it is not limited by the anti-invention by this.

Referring to FIG. 8, when a predetermined payment approval request message including predetermined card information, payment amount information, merchant information, and terminal specific information is generated in the text generation unit 835 of the home banking terminal, the encryption processing unit ( 825), if the payment approval request text is provided, the encryption processing unit 825 provides a predetermined symmetric key for encrypting the payment approval request text from the banking authentication module 820 provided in the home banking terminal. (Or a secret key) is read (805), and the full text of the payment approval request is encrypted (810) using the read symmetric key (or secret key).

Herein, the encryption function of the encryption processing unit 825 is referred to as E (Encryption), the symmetric key (or secret key) is k (key), the full payment authorization request is P (Plaintext), and the symmetric key (or If the full payment approval request encrypted with a secret key) is C (Ciphertext), the encryption function of the encryption processing unit 825 may be expressed by a formula such as "Ek (P) = C".

According to an embodiment of the present invention, the encryption processing unit 825 encrypts the payment approval request message through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack It is preferable to include at least one or more of an International Data Encryption Algorithm (IDEA), and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the payment approval request message is encrypted through the symmetric key (or secret key) as described above, the expert transmission unit 830 transmits the encrypted payment approval request message to the relay server through a communication protocol defined on the communication network. Transmit (815).

In more detail, FIG. 9 is an embodiment in which the payment approval request message encrypted and received from a home banking terminal having an encryption function as shown in FIG. 1 is decrypted by a symmetric key (or secret key) method in a relay server as shown in FIG. As to a method, if the present invention has a common knowledge in the technical field to which the present invention belongs, the symmetric key (or secret key) to refer to and / or modify the present invention the encrypted payment authorization request message in the home banking terminal on the network Various implementation methods for decoding in the ()) method may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 9 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the security module (not shown) provided in the relay server, the security module is linked to the relay server It is preferably stored in a predetermined database (not shown), and the present invention is not limited thereby.

Referring to FIG. 9, the full-text receiving unit 930 of the relay server receives the encrypted payment approval request message through the communication network and provides the encrypted payment approval request message to the encryption unit 925 (900). It is preferably received via a communication protocol stack defined in the communication network.

Thereafter, the encryption unit 925 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment approval request message from the security module provided in the relay server (905), and extracts the extracted symmetry. The encrypted payment authorization request message is decrypted through a key (or secret key) (910).

Here, the decryption function of the encryption unit 925 is referred to as D (Decryption), the full text of the payment approval request encrypted with the symmetric key (or secret key) k (key) and the symmetric key (or secret key). (Ciphertext) and the decrypted payment approval request full text is P (Plaintext), the function of the encryption unit 925 decrypting the encrypted payment approval request full text is "Dk = P, or Dk (Ek (P )) = P ".

According to an embodiment of the present invention, an algorithm for decrypting the encrypted payment authorization request message through the symmetric key (or secret key) by the encryption unit 925 may include SEED, DES (Data Encryption Standard), Triple-DES. Preferably, at least one of Skipjack, International Data Encryption Algorithm (IDEA), and various other decryption algorithms may be used, but the decryption algorithm is matched with the encryption algorithm used in the home banking terminal. The present invention is not limited by the specific decoding algorithm.

When the payment approval request message encrypted through the symmetric key (or the secret key) is decrypted as described above, the encryption unit 925 provides the decrypted payment approval request message to the information relay unit 920 in operation 915. The information relay unit 920 may relay card information, payment amount information, and merchant information included in the full payment approval request to a card company server corresponding to the card information.

If one of ordinary skill in the art to which the present invention belongs, it will be able to infer a technical feature of encrypting the full payment approval result in the relay server and transmitting it to the home banking terminal with reference to FIGS. 8 and 9. Detailed description thereof will be omitted for convenience.

FIG. 10 is a diagram illustrating a method of encrypting and transmitting a full payment approval request in a home keying terminal in a public key based structure according to an embodiment of the present invention.

In more detail, FIG. 10 is a method for encrypting and transmitting the full payment approval request message in a public key infrastructure structure in a home banking terminal equipped with an encryption function as shown in FIG. However, the present invention may infer various implementation methods of encrypting the full payment approval request message in a public key manner in a home banking terminal on the communication network by referring to and / or modifying the drawing 10. It includes all the implementation methods, and is not limited to the implementation method shown in FIG.

According to an embodiment of the present invention, the server-side public key is preferably read from the banking authentication module 1035 provided in the home banking terminal, and the banking authentication module 1035 is a predetermined public key. (Or a secret key) preferably comprises at least one banking authentication IC card, or banking authentication module (1035) chip.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by an authentication authority that issues the banking authentication module 1035 to the home banking terminal, thereby limiting the present invention. No.

Referring to FIG. 10, when a predetermined payment approval request message including predetermined card information, payment amount information, merchant information, and terminal specific information is generated in the full text generation unit 1020 of the home banking terminal, the encryption processing unit ( 1025), if the payment approval request message is provided, the encryption processing unit 1025 extracts a predetermined server-side public key for encrypting the payment approval request message from the banking authentication module 1035. In operation 1010, the payment authorization request message is encrypted using the extracted server-side public key.

Herein, the encryption function of the encryption processing unit 1025 is called E (Encryption), the server-side public key is k1 (key), the payment approval request full text is P (Plaintext), and the server-side public key is encrypted. When the full text of the approval request is referred to as C (Ciphertext), the encryption function of the password processing unit 1025 may be expressed by an expression such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit 1025 encrypts the payment approval request message through the server-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm). ), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, in addition to various encryption algorithms may be used, but by a specific encryption algorithm The present invention is not limited.

For example, in the case of encrypting the full payment approval request message through the RSA encryption algorithm among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by the different prime factors of n is a. And b, if the published index (e.g., 3 or 216+) is e, and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a -1) (b-1) ", wherein the encryption function of the encryption processing unit 1025 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment approval request message is encrypted through the server-side public key as described above, the specialized transmission unit 1030 transmits the encrypted payment approval request message to the relay server through a network component on the communication network (1015). .

11 is a diagram illustrating a method for decrypting a full payment approval request message encrypted and received by a relay server according to an embodiment of the present invention using a public key infrastructure.

In more detail, FIG. 11 illustrates an embodiment of a method of decrypting the full payment approval request message encrypted and received from a home banking terminal equipped with an encryption function as shown in FIG. As a person of ordinary skill in the art to which the present invention pertains, a public key based architecture scheme may be described in detail with reference to FIG. 11 and / or modified from the home banking terminal on the communication network to encrypt the payment approval request message encrypted with the server-side public key. Although various embodiments of decoding may be inferred, the present invention includes all of the inferred embodiments, and is not limited to the embodiments shown in FIG.

In this figure 11 according to an embodiment of the present invention, the server-side private key for decrypting the payment approval request text encrypted with the server-side public key in a public key infrastructure structure is the security module (not shown) provided in the relay server. Preferably, the security module is stored in a predetermined database (not shown) interworking with the relay server, and the present invention is not limited thereto.

Referring to FIG. 11, the full-text receiving unit 1130 of the relay server receives the encrypted payment approval request message through the communication network and provides the full text to the encryption unit 1125 (1100). It is preferably received via a communication protocol stack defined in the communication network.

Thereafter, the encryption unit 1125 extracts a server-side private key for decrypting the encrypted payment approval request message from the security module provided in the relay server (1105), and through the extracted server-side private key. The encrypted payment approval request text is decrypted (1110).

Here, the decryption function of the encryption unit 1125 is referred to as D (Decryption), the server-side private key is k2 (key), and the full payment approval request encrypted with the server-side public key is C (Ciphertext) and the server. When the payment approval request text decrypted with the side private key is P (Plaintext), the function of decrypting the encrypted payment approval request text by the encryption unit 1125 is "Dk2 = P, or Dk2 (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, the encryption unit 1125 decrypts the payment approval request message encrypted with the server-side public key in the home banking terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. The decryption algorithm may be matched with an encryption algorithm used in the home banking terminal, and the present invention is not limited to a specific decryption algorithm.

For example, in the case of decrypting the full payment approval request message through the RSA decryption algorithm, the public method (Modulus) used in the decryption process is not disclosed with n and different prime factors of n. If the prime is a and b, the published exponent (e.g. 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", wherein the decryption function of the encryption unit 1125 may be expressed as" P = Dk2 = Cd mod n ".

When the payment approval request message encrypted with the server-side public key is decrypted by the home banking terminal as described above, the encryption unit 1125 transfers the decrypted payment approval request message to the information relay unit 1120. To provide (1115), the information relay unit 1120 is characterized in that for transmitting the card information, payment amount information and merchant information contained in the full payment approval request to the card company server corresponding to the card information.

Those skilled in the art to which the present invention belongs can infer the technical feature of encrypting the full payment approval result in the relay server and transmitting it to the home banking terminal with reference to FIGS. 10 and 11. Therefore, detailed description thereof will be omitted for convenience.

12 is a diagram illustrating a method of encrypting and transmitting a full payment approval request message in an electronic envelope method in a home banking terminal according to an embodiment of the present invention.

More specifically, FIG. 12 is an embodiment of the present invention for encrypting and transmitting the full payment approval request message in an electronic envelope method in a home banking terminal equipped with an encryption function as shown in FIG. With reference to the Figure 12 and / or modified to be able to infer various implementation methods for encrypting the payment approval request full text electronic envelope method in the home banking terminal on the communication network, the present invention is inferred implementation It includes all methods, and is not limited to the embodiment shown in FIG.

In FIG. 12 according to an embodiment of the present invention, the server-side public key is preferably read from the banking authentication module 1250 provided in the home banking terminal, and the banking authentication module 1250 is a predetermined public key ( Or at least one banking authentication IC card having a secret key) or a banking authentication module 1250 chip.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by an authentication authority that issues the banking authentication module 1250 to the home banking terminal, thereby limiting the present invention. No.

Referring to FIG. 12, when a predetermined payment approval request text including predetermined card information, payment amount information, merchant information, and terminal specific information is generated in the full text generation unit of the home banking terminal, it is transmitted to the cryptographic processing unit 1240. In operation 1200, when the payment approval request text is provided, the cryptographic processing unit 1240 encrypts the payment approval request text in a secret key (symmetric key) manner. key), and encrypts the full text of the payment approval request using the generated secret key (1210).

Herein, the encryption function of the encryption processing unit 1240 is called E (Encryption), the secret key is r (random secret key), the payment approval request is P (Plaintext), and the payment approval request encrypted with the secret key. When the full text is called C (Ciphertext), the encryption function of the encryption processing unit 1240 may be expressed by an expression such as "Er (P) = C".

According to an embodiment of the present invention, the encryption processing unit 1240 encrypts the payment approval request full text through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data). It is preferable to include at least one or more of the Encryption Algorithm, and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

Thereafter, the encryption processing unit 1240 encrypts the secret key (random secret key) used to encrypt the full payment approval request message. For this purpose, the encryption processing unit 1240 is a predetermined server from the banking authentication module 1250. The public key is extracted (1215), and the secret key is encrypted using the server-side public key (1220).

Here, the encryption function of the encryption processing unit 1240 is called E (Encryption), the server-side public key is k1 (key), the secret key is r (random Secret key), and the secret encrypted with the server-side public key. If the key is C (Ciphertext), the encryption function of the encryption processing unit 1240 may be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key by the encryption processing unit 1240 through the server-side public key includes: RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 1240 may be expressed as" C = Ek1 (r) = re mod n ".

When the payment approval request text is encrypted with the secret key and the secret key is encrypted with the server-side public key, the encryption processing unit 1240 encrypts the payment approval request text with the secret key and the server-side public key. It generates the transaction data associated with the secret key is provided to the specialized transmission unit 1245 (1225), and the specialized transmission unit 1245 transmits the transaction data to the relay server through a network component on the communication network ( 1230).

FIG. 13 is a diagram illustrating a method for decrypting a full payment approval request received encrypted by a relay server in an electronic envelope method according to an embodiment of the present invention.

In more detail, FIG. 13 illustrates an electronic envelope method of the transaction data in a relay server as shown in FIG. 3 that receives transaction data including an encrypted payment approval request message from a home banking terminal equipped with an encryption function as shown in FIG. As the embodiment of the present invention relates to an embodiment of the present invention, a person having ordinary knowledge in the technical field to which the present invention pertains may refer to FIG. Various implementation methods for decoding by an electronic envelope method may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 13 according to the embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the security module (not shown) provided in the relay server. Is preferably stored in a predetermined database (not shown) interworking with the relay server, and the present invention is not limited thereto.

Referring to FIG. 13, the relay receiver 1345 of the relay server receives predetermined transaction data including the encrypted payment approval request telegram through the communication network and provides the transaction data to the encryption unit 1340 (1300). Preferably, the transaction data is received through a communication protocol stack defined in the communication network.

Thereafter, the encryption unit 1340 extracts a server-side private key for decrypting an encrypted secret key included in the transaction data from the security module provided in the relay server (1305), and extracts the extracted server-side individual. By decrypting the secret key encrypted with the server-side public key in the home banking terminal through a key (1310), a predetermined secret key for decrypting the full payment approval request message is extracted (1315), and the extracted secret key is used. By decrypting the payment approval request text (1320), the home banking terminal extracts the payment approval request text encrypted with the secret key (1325).

Here, the decryption function of the encryption unit 1340 is called D (Decryption), the server-side private key is k2 (key), the secret key encrypted with the server-side public key is C (Ciphertext), and the server-side individual. When the secret key decrypted with the key is r (random secret key), the function of decrypting the encrypted secret key by the encryption unit 1340 is "Dk2 = r, or Dk2 (Ek1 (r)) = r". It can be expressed as an expression.

According to an embodiment of the present invention, the encryption unit 1340 decrypts the secret key encrypted with the server-side public key in the home banking terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman). (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the following. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the home banking terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the encryption unit 1340 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the encryption unit 1340 is referred to as D (Decryption), the secret key is r (random secret key), the full text of the payment approval request encrypted with the secret key (Ciphertext), and the decryption When the payment approval request message is P (Plaintext), the function of decrypting the encrypted payment approval request message by the encryption unit 1340 is "Dr = P, or Dr (Er (P)) = P". It can be expressed as an expression.

According to the exemplary embodiment of the present invention, the encryption unit 1340 decrypts the encrypted payment approval request message through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( International Data Encryption Algorithm) preferably includes at least one or more, and various other decryption algorithms may be used, but the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the home banking terminal, The present invention is not limited by the decoding algorithm.

When the payment approval request text is decrypted as described above, the encryption unit 1340 provides the decrypted payment approval request text to the information relay unit 1335 (1330), and the information relay unit 1335 is the payment. Card information, payment amount information and merchant information contained in the full authorization request is relayed to the card company server corresponding to the card information.

If those skilled in the art to which the present invention pertains, it will be able to infer the technical feature of encrypting the full payment approval result in the relay server and transmitting to the home banking terminal with reference to FIGS. Detailed description thereof will be omitted for convenience.

More specifically, FIGS. 14A and 14B illustrate an embodiment of the present invention in which a home banking terminal equipped with an encryption function as shown in FIG. 1 encrypts and transmits the full payment approval request message in a key exchange method. If the knowledge of the present invention, with reference to and / or modified in Figure 14 may be inferred from the various implementation methods for encrypting the full payment approval request in the key exchange method in the home banking terminal on the communication network, the present invention is It includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

According to the embodiment of the present invention, the terminal-side private key and the server-side public key are preferably read from the banking authentication module 1465 provided in the home banking terminal, and the banking authentication module 1465 is At least one banking authentication IC card or a banking authentication module 1465 chip having a predetermined public key (or secret key) is preferably included.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by an authentication authority that issues the banking authentication module 1465 to the home banking terminal. The present invention is not limited.

Referring to FIGS. 14A and 14B, when a predetermined payment approval request message including predetermined card information, payment amount information, merchant information, and terminal-specific information is generated in the full text generation unit of the home banking terminal, the encryption processing unit ( 1450, if the payment approval request text is provided, the cryptographic processing unit 1450 provides the payment approval request text to a predetermined one-way hash function (for example, regardless of the length of the payment approval request text). A one-way hash function that generates a Message Digest containing a hash code of length and cannot identify (or infer) the original message via the hash code (or message digest). The home banking terminal and the relay server use the same hash function to generate a predetermined message digest (1405), and the message digest is generated. The digital signature is performed by encrypting the terminal-side private key (1410).

Herein, the encryption function of the encryption processing unit 1450 is referred to as E (Encryption), the terminal side private key is t1 (15erminal side key), the message digest is m (message digest), and the terminal side private key is encrypted. If the message digest is C (Ciphertext), the digital signature function of the cryptographic processor 1450 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the encryption processing unit 1450 encrypts the message digest through the terminal-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), At least one of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, and ECDH is preferably included. This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a decimal number that is not disclosed by the different prime factors of n is a. b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the digital signature function of the encryption processing unit 1450 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 1450 generates a predetermined random secret key for encrypting the payment approval request text in a secret key (symmetric key) manner (1415), and the payment approval request The message digest encrypted with the full text and the terminal-side private key and a copy of a certificate (eg, a certificate including the terminal-side public key) included in the banking authentication module 1465 are linked to each other and encrypted through the generated secret key ( 1420).

Herein, the encryption function of the encryption processing unit 1450 is referred to as E (Encryption), the secret key is r (random secret key), the payment approval request and the copy of the certificate is encrypted with P (Plaintext) and the secret key. When the full text of the payment approval request and the copy of the certificate are referred to as C (Ciphertext), the encryption function of the encryption processing unit 1450 may be expressed by an equation such as "Er (P) = C".

According to an embodiment of the present invention, the encryption processing unit 1450 encrypts the payment approval request full text and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, It is preferable to include at least one or more of the International Data Encryption Algorithm (IDEA), and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 1450 extracts a predetermined server-side public key from the banking authentication module 1465 to encrypt the secret key that encrypts the payment approval request message (1425), and the server-side public key. Using a 1430 to encrypt the secret key encrypted the full payment approval request using.

Here, the encryption function of the encryption processing unit 1450 is called E (Encryption), the server-side public key is encrypted with s1 (server side key), the secret key is r (random secret key), and the server-side public key. When the secret key is referred to as C (Ciphertext), the encryption function of the encryption processing unit 1450 may be expressed by an expression such as "Es1 (r) = C".

According to the exemplary embodiment of the present invention, the encryption processing unit 1450 encrypts the secret key through the server-side public key: RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, and various other encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 1450 may be expressed as" C = Es1 (r) = re mod n ".

The payment authorization request message is encrypted with the generated private key in association with a copy of a certificate including the message digest encrypted with the terminal-side private key and the terminal-side public key, and the secret key is encrypted with the server-side public key. When encrypted through the encryption processing unit 1450, the server side publishes a copy of the certificate including the message digest encrypted with the payment authorization request message encrypted with the secret key and the terminal-side private key and the terminal-side public key. Generates predetermined transaction data in association with a secret key encrypted with a key, provides the generated transaction data to the specialized transmission unit 1455 (1435), and the specialized transmission unit 1455 transmits the transaction data on a communication network. It transmits to the relay server through a network component (1440).

15A and 15B illustrate a method of decrypting a full payment approval request message encrypted and received at a relay server by a key exchange method according to an embodiment of the present invention.

In more detail, Figures 15a and 15b are keyed to the transaction data in the relay server as shown in Figure 3 that receives the transaction data including the encrypted payment authorization request message from the home banking terminal equipped with the encryption function as shown in Figure 1 An embodiment of the present invention relates to a method of decrypting by a switching method. If the present invention belongs to one of ordinary skill in the art, a transaction encrypted by the key exchange method in a home banking terminal on the communication network by referring to and / or modifying the drawing of FIG. Various implementation methods for decrypting data by the same key exchange method may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In FIG. 15 according to the embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method are preferably read from the security module (not shown) provided in the relay server. In addition, the security module is preferably stored in a predetermined database (not shown) that interoperates with the relay server, whereby the present invention is not limited.

Referring to FIGS. 15A and 15B, the full-text receiver 1565 of the relay server receives transaction data including the full payment approval request message encrypted through the communication network (1500), and converts the transaction data into the encryption unit ( 1670, wherein the transaction data is preferably received through a communication protocol defined in the communication network, and / or the encrypted message is encrypted with the payment approval request message and the terminal-side private key encrypted with the secret key. And a copy of the certificate including a message digest and the terminal-side public key, and the secret key encrypted with the server-side public key.

Thereafter, the encryption unit 1670 extracts the server-side private key from the security module provided in the relay server to decrypt the secret key encrypted with the server-side public key (1510), and through the server-side private key. By decrypting the secret key (1515), the secret key for decrypting a copy of the certificate including the message digest encrypted with the full payment approval request message and the terminal-side private key and the terminal-side public key is extracted (1520). .

Here, the decryption function of the encryption unit 1670 is called D (Decryption), the server side private key is s2 (server side key), the server side public key is encrypted with C (Ciphertext), and the server When the secret key decrypted with the side private key is r (random secret key), the function of decrypting the encrypted secret key by the encryption unit 1670 is "Ds2 = r, or Ds2 (Es1 (r)) = r". It can be expressed as

According to an embodiment of the present invention, the encryption unit 1670 decrypts the secret key encrypted with the server-side public key in the home banking terminal through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman). (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the following. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the home banking terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the encryption unit 1670 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the encryption unit 1670 includes the message digest encrypted with the payment approval request message and the terminal-side private key using the extracted secret key and the terminal-side public key. By decrypting the copy (1525), a certificate copy including the message digest encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key are extracted.

Here, the decryption function of the encryption unit 1670 is called D (Decryption), the secret key is r (random secret key), and the message digest encrypted with the secret key encrypted payment payment request and the terminal private key And a copy of the certificate including the terminal-side public key C (Ciphertext), and a copy of the certificate including the message digest encrypted with the decrypted full payment authorization request message and the terminal-side private key and the terminal-side public key P ( Plaintext), the encryption unit 1670 decrypts a copy of the certificate including the message digest encrypted with the encrypted payment authorization request message and the terminal-side private key and the terminal-side public key. , Or Dr (Er (P)) = P ".

According to an embodiment of the present invention, the encryption unit 1670 copies the certificate including the message digest encrypted with the encrypted payment approval request message and the terminal-side private key through the secret key, and the terminal-side public key. The decryption algorithm may include at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA), and various types of decryption algorithms may be used. The decryption algorithm is matched with an encryption algorithm used in the home banking terminal, and the present invention is not limited to a specific decryption algorithm.

In addition, the encryption unit 1670 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (1530), thereby generating a message digest generated and transmitted from the payment approval request message in the home banking terminal. Extract (1535).

Here, the decryption function of the encryption unit 1670 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. If the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the encryption unit 1670 is "Dt2 = m, or Dt2 (Es1 (r)) = m"; The same formula can be used.

According to an embodiment of the present invention, the encryption unit 1670 decrypts the message digest encrypted with the terminal-side private key in the home banking terminal through the terminal-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman). (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the following. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the home banking terminal, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the encryption unit 1670 may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the encryption unit 1670 generates a predetermined message digest through the same one-way hash function of the received payment approval request message (1540), and then generates the generated message digest and the decrypted message digest. By comparing 1545, the validity of the received payment approval request text is confirmed.

If the generated message digest and the decrypted message digest match (1550), the encryption unit 1670 provides the full text of the payment approval request to the information relay unit 1560 (1555). In operation 1560, the card information, payment amount information, and merchant information included in the payment approval request specialist may be relayed to a card company server corresponding to the card information.

Those skilled in the art to which the present invention pertains, with reference to the Figure 14a and 14b and the Figure 15a and Figure 15b the technical to encrypt the full payment approval result in the relay server to transmit to the home banking terminal Since a feature may be inferred, a detailed description thereof will be omitted for convenience.

FIG. 16 is a diagram illustrating an operation process of a card company server 345 for approval of payment using a home banking terminal 393 according to an embodiment of the present invention.

In more detail, FIG. 16 illustrates the payment amount in the card company server 345 when the payment process is performed using the payment channel corresponding to the card payment system shown in FIG. 3 through the customer card 395 issued by the card company. The process of the payment approval process through the customer card (395) corresponding to the card information, if one of ordinary skill in the art to which the present invention belongs, the home banking terminal by referring to and / or modified this figure 16 Various implementation methods for the operation process of the card company server 345 for payment approval using 393 may be inferred, but the present invention includes all the implementation methods inferred above, and is illustrated in FIG. The technical features are not limited only by the method.

Referring to FIG. 16, when the card information, the payment amount, and the merchant information are received from the relay server 300 shown in FIG. 3 through the process shown in FIG. 7, the card company server 345 receives In operation 1605, the received card information is issued by the card company and is matched with card information stored in the card information D / B 385.

According to an embodiment of the present invention, the affiliate server uses the card information as a keyword to search / search for card information stored in the card information D / B 385, whereby the card information is issued by the card company. It is desirable to confirm that it is.

If the card information does not match the card information stored in the card information D / B 385 (1610), the card company server 345 generates a payment processing history including the card information error code. In operation 1615, the generated payment processing details are transmitted to the relay server 300 (1655). Then, the relay server 300 displays the full payment approval result including the payment processing details in FIG. It is preferable to transmit to the home banking terminal 393.

On the other hand, if the card information is found to match the card information stored in the card information D / B (385) (1610), the card company server 345 is the card information from the card information D / B (385) The limit amount for the customer card 395 is checked based on the card limit information associated with the information (1620).

According to one embodiment of the present invention, when the payment means corresponding to the confirmed card information includes a credit card payment means (or postpaid payment attribute), the card company server 345 is the card information D / B ( 385) confirms the predetermined credit limit amount information stored in association with the card information and compares the confirmed credit limit amount information with the payment amount, thereby making payment for the payment amount through the customer card 395; It is desirable to process the approval.

According to another embodiment of the present invention, when the payment means corresponding to the confirmed card information comprises a check card / debit card payment means (or a debit payment attribute associated with the account) associated with a predetermined account, The card company server 345 checks predetermined account information stored in association with the card information from the card information D / B 385 and checks the account balance in connection with a predetermined financial system in which the account is opened. Thereafter, it is preferable to process payment approval for the payment amount through the customer card 395 by comparing the confirmed account balance with the payment amount.

Alternatively, when the account balance information stored in association with the card information is directly stored in the card information D / B 385, the card company server 345 is connected to the card information from the card information D / B 385. After confirming the account balance stored in association, the payment balance can be processed through the customer card 395 by comparing the confirmed account balance with the payment amount.

According to another embodiment of the present invention, when the payment means corresponding to the confirmed card information includes a prepaid card payment means (or prepaid payment attribute), the card company server 345 is the card information D / By confirming the predetermined charge amount information stored in association with the card information from the B (385), and comparing the confirmed charge amount information and the payment amount, the payment for the payment amount through the customer card (395) It is desirable to process the approval.

If the limit amount for the customer card 395 is confirmed (1625), the card company server 345 pays the payment amount using the customer card 395 by comparing the payment amount with the limit amount. A payment approval procedure for processing is performed (1630).

If, as a result of the payment approval, payment approval for the payment amount is not confirmed (1635), the card company server 345 performs payment including payment error information (for example, payment error code) for the customer card 395. Produces the processing history information (1640), and transmits the generated payment processing history to the relay server 300 (1655), after which the relay server 300 completes the payment approval result including the payment processing history It is preferable to transmit to the home banking terminal 393 shown in FIG.

On the other hand, if the payment approval is confirmed, the payment approval for the payment amount (1635), the card company server 345 includes the card information, payment amount information, merchant information and payment approval information (eg, payment approval number) Generating payment processing history information (1645); and the transaction processing history information including the card information, the payment amount information, the merchant information, and the payment approval information, and the transaction history information including the payment date and time information; After storing in B 390 (1650), the generated payment processing details are transmitted to the relay server 300 (1655), after which the relay server 300 includes a payment approval result including the payment processing details. It is preferable to transmit the full text to the home banking terminal 393 shown in FIG.

According to the present invention, by providing a home banking terminal with a predetermined card reader in each home, payment processing for a delivery product is safely and conveniently while offsetting security problems caused by key input of various financial information (or payment information). This has the advantage.

Claims

A banking authentication module into which a predetermined merchant side banking authentication IC (Integrated Circuit) card having at least one payment protocol and transaction authentication information is inserted (or linked);

A card reader unit for reading predetermined card information from a predetermined customer card in association with the banking authentication module;

An information input unit for inputting predetermined payment amount information in association with a predetermined key input means and extracting and inputting predetermined merchant information from the banking authentication IC card at the affiliated store in association with the banking authentication module;

A text generation unit for generating a predetermined payment approval request message including the card information, payment amount information, and merchant information; And

And a specialized transmission unit for transmitting the full text of the payment approval request through a predetermined communication network.

A banking authentication module having a banking authentication IC card (or banking authentication module chip) having at least one payment protocol and transaction authentication information;

A card reader unit reading predetermined card information from a predetermined customer card in association with the banking authentication module;

An information input unit which inputs predetermined payment amount information and affiliated store information in association with predetermined key input means;

The method according to claim 1 or 2,

An interface output unit configured to output an interface for changing (or selecting) an operation mode of the home banking terminal from an initial mode (or a banking mode) to a predetermined payment mode; And

And a mode checking unit for checking whether the operation mode of the home banking terminal is switched to (or selected) the payment mode in connection with the interface output unit.

A recording medium which records a program for realizing the device constituting part functions of the first to second terms.