KR20100018744A - System and method for providing card payment service - Google Patents

Abstract

PURPOSE: A system and a method for providing a card payment service are provided to implement production purchase and payment through a card in a mobile communication terminal. CONSTITUTION: A card payment request is created from a mobile communication terminal, and a flash providing unit(210) provides a card payment flash module to the mobile communication terminal. A payment control unit(220) receives payment text information from the mobile communication terminal through the card payment flash module. The payment control unit transmits the payment text information, and the payment processing server is designated based on the payment text information.

Description

SYSTEM AND METHOD FOR PROVIDING CARD PAYMENT SERVICES {SYSTEM AND METHOD FOR PROVIDING CARD PAYMENT SERVICE}

The present invention relates to a card payment service providing system and method for providing a payment service that enables the purchase and payment of goods using a card in a mobile communication terminal.

A new wave of digital convergence, which binds all information and communication technologies together in one device and service, is becoming a strong trend in IT technology. Different types of media such as video, voice and data are freely fused without restriction of the terminal service network to create new services.

When mobile phones first came out of the world, they were satisfied with the ability to make voice calls on the go.However, there are endless evolutionary developments such as camera function added to mobile phone function, camcorder function combined with mobile phone function, and MP3 player function combined with mobile phone function. Repeatedly. In addition, a new system called mobile banking (Mobile Banking) that combines communication and finance to enable financial transactions in mobile communication terminals is widely used.

On the other hand, when purchasing and paying for a product using a conventional credit card, a wired internet web service uses a security module, an authentication module, and an encryption algorithm based on Microsoft's "Active X" and a credit card company. 'Safety Payment Service' or 'Safety Payment Service' is provided. That is, the terminal was able to safely purchase and pay for the product through the "Active X" based card payment module installed according to the product purchase and payment request.

However, since ActiveX is a non-standard technology that can be executed in Microsoft's Windows-based Internet Explorer browser, ActiveX-based card payment in all browsers is possible. There is a problem that the module cannot be installed. That is, since most credit card payment solutions are designed and developed in the explorer and wired internet environment on the PC, it is possible to use H / W and S / W of mobile communication terminal and credit card in wireless internet environment. Difficulties in providing product purchase and settlement services.

Accordingly, the present invention is to propose a payment service that enables the purchase and payment of goods using a card in a mobile communication terminal without using ActiveX.

In the present invention, a product can be purchased and paid using a card in a mobile communication terminal.

In order to achieve the object of the present invention as described above, the card payment service providing system according to an embodiment of the present invention is a flash to provide a card payment flash module to the mobile communication terminal when a card payment request occurs in the mobile communication terminal. Providing means, and payment control means for receiving payment information from the mobile communication terminal through the card payment flash module and transmitting the received payment information to a payment processing server designated by the payment information; Characterized in that.

In addition, the method for providing a card payment service according to an embodiment of the present invention includes providing a card payment flash module to the mobile communication terminal when a card payment request occurs in a mobile communication terminal, and through the card payment flash module. Receiving the payment information from the mobile communication terminal, and transmitting the received payment information to the payment processing server designated by the payment information.

According to the present invention, it is possible to provide a payment service that enables the purchase and payment of goods using a card in a mobile communication terminal.

In addition, according to the present invention, based on the flash technology provided in the full browser of most wired Internet browsers and wireless mobile communication terminal and the Java run time library (embedded) embedded in the full browser It is possible to provide a payment service.

In addition, according to the present invention, by providing a card payment module that can be used in a mobile communication terminal and a mobile Internet browser (for example, a full browser) mounted on the mobile communication terminal, thereby promoting the activation of wireless Internet services and various mobile-fixed convergence services You can do it.

In addition, according to the present invention, in using the wired Internet through a mobile communication terminal and a full browser (mounted browser), as well as a simple web content display function, using a full browser to use a variety of mCommerce services provided by the wired Internet By extending the range of services, the use of the Internet in PCs and mobile communication terminals can achieve the same effect.

Hereinafter, with reference to the accompanying drawings, a card payment service providing system and method according to the present invention will be described in detail.

1 is a diagram illustrating an overall network connection relationship between a card payment service providing system and a mobile communication terminal, a shopping mall web server, an authorized authentication server, and a payment processing server according to an embodiment of the present invention.

Card payment service providing system 200 according to an embodiment of the present invention, as the card payment request occurs in the mobile communication terminal 110 connected to the shopping mall web server 120, the card payment flash module to the mobile communication terminal 110 may be provided.

In addition, the card payment service providing system 200 encrypts the payment professional information input from the terminal user through the card payment flash module driven in the mobile communication terminal 110, and is encrypted and received from the mobile communication terminal 110. The payment information may be decrypted to obtain card payment related information.

At this time, the card payment flash module encrypts the payment information using a Java runtime library (embedded) embedded in the mobile Internet browser, or from the authorized authentication server 130 to the mobile communication terminal (110) If the user authentication is successful, the electronic signature for the payment specialized information may be encrypted by using an authorized certificate stored in the mobile communication terminal 110.

In addition, the card payment service providing system 200 may transmit the payment expert information received from the mobile communication terminal 110 to the payment processing server 140 through the card payment flash module to allow payment processing. In addition, the card payment service providing system 200 may inform the mobile communication terminal 110 of the result of the payment processing.

Therefore, according to the present invention, based on the flash technology provided in the full browser of most wired Internet browsers and wireless mobile communication terminals and a Java run time library embedded in the full browser. It is possible to provide a payment service.

2 is a diagram showing the configuration of a card payment service providing system according to an embodiment of the present invention.

The card payment service providing system 200 may include a flash providing means 210 and a payment control means 220.

The flash providing means 210 functions to provide a card payment flash module to the mobile communication terminal as a card payment request occurs in the mobile communication terminal.

The card payment flash module may be implemented using flash, which is a standard technology that can be operated in a mobile internet browser (eg, a full browser) of a mobile communication terminal.

The mobile communication terminal may drive the card payment flash module received according to the card payment request, and receive payment information information from a terminal user through the card payment flash module (see FIG. 3). Here, the payment information may include a payment method such as a card type used for payment, a lump sum or an installment month, and card information such as a card number, an expiration date, a password, and a resident registration number of a card holder. In addition, the card payment flash module may request the terminal user to check information on the input payment information.

The card payment flash module may encrypt the payment information using a Java runtime library embedded in a mobile Internet browser. For example, the card payment flash module may encrypt the payment special information using an RSA-based public key, and the payment special information encrypted using the public key may be an RSA-based secret key ( Key) can be decrypted only.

At this time, when the payment amount requested for the card payment is more than a predetermined amount (for example, 300,000 won), the card payment flash module encrypts by performing an electronic signature on the payment information using an official certificate stored in the mobile communication terminal. can do. For example, the card payment flash module may drive the accredited certificate service scenario in order as shown in FIG. 4. That is, the card payment flash module receives the resident registration number from the terminal user (401), check the official certificate stored in the mobile communication terminal (402, 403), receive the official certificate to be used from the terminal user (404), the terminal user In step 405, the password of the selected official certificate may be input. The authentication server 130 performs user authentication through the password of the authentication certificate, and if the user authentication is successful, the card payment flash module performs an electronic signature on the payment information, the RSA-based public key Using the (Key) can encrypt the payment information. At this time, the password of the public certificate may also be public key encrypted.

6 is a diagram illustrating a process of storing an accredited certificate stored in a PC in a mobile communication terminal in a card payment service providing system according to an exemplary embodiment of the present invention.

The terminal user may request the authorized authentication server 130 and store the authorized certificate used in the wired internet banking in the mobile communication terminal.

In (6) of FIG. 6, the terminal user accesses the website 'www.creditbank.co.kr' of the accredited authentication server 130 and inputs the resident registration number and the authentication number obtained through mobile phone authentication. ), You can request to move the certificate. In FIG. 6 (ii), the terminal user may select an official certificate to be stored in the mobile communication terminal from among the official certificates stored in the personal computer (PC), and input a certificate password. If the entered public certificate password is identical, the terminal user in Figure 6 (iii) can enter the phone number of the mobile communication terminal to store the public certificate. In FIG. 6 (iii), the authentication server 130 may transmit the selected official certificate (that is, wireless certificate) to the mobile terminal identified by the input telephone number. In (iii) of FIG. 6, the terminal user newly registers an authorized certificate password to be used in the wireless certification certificate transmitted to the mobile communication terminal, and in FIG. 6 (iii), the authorized authentication server 130 completes the transmission of the accredited certificate. You can therefore display a message about "Certificate export successful". Management for the above-described official certificate can be implemented by the card payment flash module.

2 again, the public certification server 130 is a public key infrastructure (PKI) system of the public certification authority (or financial settlement agency) that verifies the public certificate issued by the public certification authority and provides the digital signature service. Can be.

The payment control unit 220 receives payment special information from the mobile communication terminal through the card payment flash module and transmits the received payment special information to the payment processing server 140 designated by the payment special information. Function.

The payment control unit 220 may obtain encrypted card payment related information by decrypting the received payment information. For example, the payment control unit 220 may verify the electronic signature on the received payment information, and obtain card payment related information by decrypting the payment information with an RSA-based secret key.

Here, the card payment related information may include a payment method such as a card type used for payment, a lump sum or an installment month, and card information such as a card number, an expiration date, a password, and a resident registration number of a card holder. The payment control unit 220 may transmit the received payment information to the payment processing server 140 of the card company identified according to the card type.

The payment processing server 140 may perform payment processing based on the payment information, and generate a result for the payment processing. The payment control unit 220 may inform the mobile communication terminal of the generated payment processing result (eg, 'payment success' or 'payment failure') in response to the card payment request.

Therefore, according to the present invention, it is possible to provide a payment service that enables the purchase and settlement of goods using a card in a mobile communication terminal. That is, according to the present invention, it is possible to provide a payment service based on the flash technology provided in the full browser of most wired Internet browsers and wireless mobile communication terminals and a Java runtime library embedded in the full browser.

In addition, according to the present invention, by providing a card payment module that can be used in a mobile communication terminal and a mobile Internet browser (for example, a full browser) mounted on the mobile communication terminal, thereby promoting the activation of wireless Internet services and various mobile-fixed convergence services You can do it.

3 is a diagram illustrating an example of receiving payment professional information from a terminal user through a card payment flash module in a card payment service providing system according to an exemplary embodiment of the present invention.

The card payment service providing system according to an embodiment of the present invention may receive payment information from a terminal user as shown in FIG. 3 through a card payment flash module driven in a mobile communication terminal. The card payment flash module may be implemented using flash, which is a standard technology that can be operated in a mobile internet browser (eg, a full browser) of a mobile communication terminal.

That is, the card payment flash module receives a payment method such as the type of card to be used for payment in FIG. 3 and payment, such as a lump sum or an installment month, and in FIG. 3 (ii), a card number and an expiration date. The card information such as a password, or a card holder's resident registration number may be input, and the terminal user may request confirmation of information by displaying the payment information input in FIG.

The card payment flash module encrypts the input payment information using a Java runtime library embedded in a mobile Internet browser or by using an official certificate stored in the mobile communication terminal. It can be encrypted by digitally signing the information.

4 is a diagram illustrating an example of receiving authentication data from a terminal user for user authentication in a card payment service providing system according to an exemplary embodiment of the present invention.

The card payment service providing system according to an exemplary embodiment of the present invention may sequentially drive an authorized certificate service scenario as shown in FIG. 4 through a card payment flash module provided to a mobile communication terminal. That is, the card payment flash module receives the resident registration number from the terminal user (401), check the official certificate stored in the mobile communication terminal (402, 403), receive the official certificate to be used from the terminal user (404), the terminal user In step 405, the password of the selected official certificate may be input. The authentication server 130 performs user authentication through the password of the authentication certificate, and if the user authentication is successful, the card payment flash module performs an electronic signature on the payment information, the RSA-based public key Using the (Key) can encrypt the payment information. At this time, the password of the public certificate may also be public key encrypted.

5 is a flowchart illustrating a procedure of a card payment service providing method according to an embodiment of the present invention.

The card payment service providing method may be implemented by the card payment service providing system of the present invention. In addition, in the following description of FIG. 5, FIG. 5 will be described with reference to FIG. 2.

In step S510, the card payment service providing system checks whether a card payment request occurs in the mobile communication terminal.

As a result of the check, when a card payment request occurs in the mobile communication terminal, the card payment service providing system provides a card payment flash module to the mobile communication terminal in step S520.

In step S530, the card payment service providing system encrypts the payment information input from the terminal user through the card payment flash module that is driven in the mobile communication terminal.

The card payment flash module may be implemented using flash, which is a standard technology that can be operated in a mobile internet browser (eg, a full browser) of a mobile communication terminal.

The mobile communication terminal may drive the card payment flash module received according to the card payment request, and receive payment information information from a terminal user through the card payment flash module (see FIG. 3). Here, the payment information may include a payment method such as a card type used for payment, a lump sum or an installment month, and card information such as a card number, an expiration date, a password, and a resident registration number of a card holder. In addition, the card payment flash module may request the terminal user to check information on the input payment information.

The card payment flash module may encrypt the payment information using a Java runtime library embedded in a mobile Internet browser. For example, the card payment flash module may encrypt the payment special information using an RSA-based public key, and the payment special information encrypted using the public key may be an RSA-based secret key ( Key) can be decrypted only.

At this time, if the payment amount requested for the card payment is more than a predetermined amount (for example, 300,000 won), the card payment flash module performs an electronic signature for the payment information using the official certificate stored in the mobile communication terminal It can be encrypted. For example, the card payment flash module may drive the accredited certificate service scenario in order as shown in FIG. 4. That is, the card payment flash module receives the resident registration number from the terminal user (401), check the official certificate stored in the mobile communication terminal (402, 403), receive the official certificate to be used from the terminal user (404), the terminal user In step 405, the password of the selected official certificate may be input. The authentication server 130 performs user authentication through the password of the authentication certificate, and if the user authentication is successful, the card payment flash module performs an electronic signature on the payment information, the RSA-based public key Using the (Key) can encrypt the payment information. At this time, the password of the public certificate may also be public key encrypted.

In this case, the terminal user may make a request to the authentication server 130 to convert the authentication certificate used in the wired Internet banking (internet banking) to the mobile communication terminal. In other words, the authorized authentication server 130 may move the authorized certificate selected by the terminal user to the mobile communication terminal among the certified certificates stored in the personal computer (PC) of the terminal user at the request of the terminal user. The public certification server 130 may receive a phone number of a mobile communication terminal to move the public certificate from the terminal user, and transmit the selected public certificate to the mobile communication terminal identified by the input phone number. In addition, the terminal user may register the public certificate password for the public certificate received by the public authentication server 130. Management of the certificate may also be implemented by the card payment flash module.

Here, the certification server 130 may be a public key infrastructure (PKI) system of a certification authority (or financial settlement agency) that verifies the certification issued by the certification authority, and provides an electronic signature service.

In steps S540 and S550, the card payment service providing system receives payment special information from a mobile communication terminal through the card payment flash module, and decodes the received payment special information to obtain card payment related information.

Here, the card payment related information may include a payment method such as a card type used for payment, a lump sum or an installment month, and card information such as a card number, an expiration date, a password, and a resident registration number of a card holder.

In steps S560 and S570, the card payment service providing system transmits the received payment information to the payment processing server 140 designated by the payment information, and transfers the payment processing result from the payment processing server 140 to mobile communication. Guide to the terminal.

For example, the payment control unit 220 may transmit the received payment information to the payment processing server 140 of the card company identified according to the card type, the payment processing server 140 based on the payment information; The result of the payment processing may be transmitted to the payment control means 220. The payment control unit 220 may inform the mobile communication terminal of the generated payment processing result (eg, 'payment success' or 'payment failure') in response to the card payment request.

Therefore, according to the present invention, it is possible to provide a payment service that enables the purchase and settlement of goods using a card in a mobile communication terminal. That is, according to the present invention, it is possible to provide a payment service based on the flash technology provided in the full browser of most wired Internet browsers and wireless mobile communication terminals and a Java runtime library embedded in the full browser.

In addition, according to the present invention, by providing a card payment module that can be used in a mobile communication terminal and a mobile Internet browser (for example, a full browser) mounted on the mobile communication terminal, thereby promoting the activation of wireless Internet services and various mobile-fixed convergence services You can do it.

In addition, embodiments of the present invention include computer-readable media containing program instructions for performing various computer-implemented operations. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. The medium or program instructions may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine code, such as produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter.

While specific embodiments of the present invention have been described so far, various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the claims below, but also by those equivalent to the claims.

1 is a diagram illustrating an overall network connection relationship between a card payment service providing system and a mobile communication terminal, a shopping mall web server, an authorized authentication server, and a payment processing server according to an embodiment of the present invention.

2 is a diagram showing the configuration of a card payment service providing system according to an embodiment of the present invention.

3 is a diagram illustrating an example of receiving payment professional information from a terminal user through a card payment flash module in a card payment service providing system according to an exemplary embodiment of the present invention.

4 is a diagram illustrating an example of receiving authentication data from a terminal user for user authentication in a card payment service providing system according to an exemplary embodiment of the present invention.

5 is a flowchart illustrating a procedure of a card payment service providing method according to an embodiment of the present invention.

6 is a diagram illustrating a process of storing an accredited certificate stored in a PC in a mobile communication terminal in a card payment service providing system according to an exemplary embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

200: card payment service providing system

210: flash providing means

220: payment control means

110: mobile communication terminal

120: shopping mall web server

130: public authentication server

140: payment processing server

Claims (11)

Flash providing means for providing a card payment flash module to the mobile communication terminal when a card payment request is generated in a mobile communication terminal; And Payment control means for receiving payment information from the mobile communication terminal via the card payment flash module, and transmits the received payment information to the payment processing server specified by the payment information; Card payment service providing system comprising a. The method of claim 1, The card payment flash module, The card payment service providing system, characterized in that driven by the mobile communication terminal receives the payment information from the terminal user, and encrypts the input payment information. The method of claim 2, The card payment flash module, Card payment service providing system, characterized in that for encrypting the payment information using a Java runtime library (embedded) embedded in a mobile Internet browser. The method of claim 2, The card payment flash module, Card payment service providing system, characterized in that by encrypting by performing the electronic signature for the payment information using the official certificate stored in the mobile communication terminal. The method of claim 1, The payment control means, Card payment service providing system, characterized in that to obtain the card payment related information by decrypting the received payment information encrypted. Providing a card payment flash module to the mobile communication terminal when a card payment request occurs in a mobile communication terminal; Receiving payment expert information from the mobile communication terminal through the card payment flash module; And Transmitting the received payment information to a payment processing server designated by the payment information; Card payment service providing method comprising a. The method of claim 6, Encrypting the payment specialized information input from the terminal user through the card payment flash module driven in the mobile communication terminal; Card payment service providing method characterized in that it further comprises. The method of claim 7, wherein Encrypting the payment information, Encrypting the payment information using a java runtime library embedded in a mobile internet browser Card payment service providing method comprising a. The method of claim 7, wherein Encrypting the payment information, Encrypting by performing an electronic signature on the payment information using an authorized certificate stored in the mobile communication terminal; Card payment service providing method comprising a. The method of claim 6, Acquiring the card payment related information by decrypting the received payment information; Card payment service providing method characterized in that it further comprises. A computer-readable recording medium having recorded thereon a program for performing the method of any one of claims 6 to 10.

Images