KR20100136361A - System and method for processing mobile phone small sum of money settlement, server and recording medium - Google Patents

Abstract

PURPOSE: A system and a method for processing the small sum monetary settlement of a mobile phone, and a server and a recording medium for the same are provided to prevent the inappropriate approval of mobile phone payment by excluding the provision of mobile phone payment if a person who picks up a mobile phone is unable to drive an OTP agent prepared in the mobile phone. CONSTITUTION: If mobile communication company selection information, user mobile phone number, user residence registration number information are received from a user wired terminal(100), a server checks whether or not an OTP agent is previously installed at a user mobile phone(175). Unless the OTP agent is installed at the user mobile phone, the server transfers to the user mobile phone a message including CallBack URL for installation of the OTP agent.

Description

System and method for Processing Mobile Phone Small Sum of Money Settlement, Server and Recording Medium}

1 is a diagram showing the configuration of a mobile phone micropayment processing system using OTP according to a first embodiment of the present invention.

2 is a diagram illustrating a mobile phone payment process using OTP according to the first embodiment of the present invention.

3 is a diagram illustrating a process of providing an OTP agent to a user mobile phone according to the first embodiment of the present invention.

4 is a diagram illustrating a mobile phone payment approval process using OTP according to the first embodiment of the present invention.

5 is a view showing the configuration of a mobile phone micropayment processing system using OTP according to a second embodiment of the present invention.

6 is a diagram illustrating a mobile phone payment process using OTP according to a second embodiment of the present invention.

7 is a diagram illustrating a process of providing an OTP agent to a user mobile phone according to the second embodiment of the present invention.

8 is a diagram illustrating a mobile phone payment approval process using OTP according to a second embodiment of the present invention.

9 is a diagram showing the configuration of a mobile phone micropayment processing system using OTP according to a third embodiment of the present invention.

10 is a diagram illustrating a mobile phone payment process using OTP according to a third embodiment of the present invention.

11 is a diagram illustrating a process of providing an OTP agent to a user mobile phone according to the third embodiment of the present invention.

12 is a diagram illustrating a mobile phone payment approval process using OTP according to a third embodiment of the present invention.

FIG. 13 is a diagram illustrating a configuration of a mobile phone payment processing system using OTP according to a fourth embodiment of the present invention.

14 is a diagram illustrating a mobile phone payment process using OTP according to a fourth embodiment of the present invention.

15 is a diagram illustrating a process of providing an OTP agent to a user mobile phone according to the fourth embodiment of the present invention.

16 is a diagram illustrating a mobile phone payment approval process using OTP according to a fourth embodiment of the present invention.

<Description of main parts of drawing>

100: user wired terminal 105: web server

110: payment system 115: payment interface providing means

120: information receiving means 125: user authentication means

130: agent confirmation means 135: agent providing means

140: OTP interface providing means 145: OTP receiving means

150: payment validity authentication means 155: information providing means

160: payment processing means 165: storage medium

170: mobile carrier server 175: user mobile phone

According to the present invention, when a user wired terminal inputs and transmits carrier selection information corresponding to a user's mobile phone and user's mobile phone number and user's social security number information, an OTP (One Time Password) agent is mounted on the user's mobile phone after user authentication through a mobile carrier. Check whether the user's mobile phone is equipped with an OTP agent, and provides an interface for inputting the OTP generated through the user's mobile phone to the user's wired terminal, and when the user's wired terminal inputs and transmits the OTP, The present invention provides a mobile phone micropayment method and system for generating an OTP 'through OTP generation information associated with the user's mobile phone number and comparing and authenticating the OTP received from the user's wired terminal.

When the user inputs a mobile phone number and subscriber information through a user terminal and provides the mobile phone payment, after verifying that the customer is a valid subscriber of the telecommunication company through the mobile phone number and the subscriber information, a predetermined authentication number is determined according to the subscriber authentication result. After generating and transmitting to the user's mobile phone, if matched by comparing the authentication number received through the user terminal and the authentication number transmitted to the user's mobile phone, the payment is approved to the next month's communication fee of the user's mobile phone by approving it It is a payment method (application number: 10-2000-0020757).

However, personal information leakage incidents occur infrequently, and the leaked personal information is openly traded (or disclosed) through the Internet, and the number of lost mobile phones occurs an average of 200,000 or more per month (December 24, 2003) ) Has a problem that anyone who acquires or duplicates another person's mobile phone can be authorized to pay for the mobile phone using the leaked personal information.

In particular, although the mobile phone payment approval is made in real time, the settlement of the payment amount on average within 45 days after the approval of the payment, due to the characteristics of the mobile phone payment, the damage occurs using the acquired / duplicated mobile phone and leaked personal information, The damage is expected to reach astronomical figures.

An object of the present invention for solving the above problems, when the user wired terminal inputs and transmits the mobile carrier selection information corresponding to the user mobile phone and the user mobile phone number and user resident registration number information, after the user authentication through the mobile communication company Check whether the mobile phone is equipped with an One Time Password (OTP) agent, and provide an interface for inputting the OTP generated through the user mobile phone to the user wired terminal only when the OTP agent is mounted on the user mobile phone. When the wired terminal inputs and transmits the OTP, the OTP 'is generated through the OTP generation information associated with the user's mobile phone number to be compared with the OTP received from the user's wired terminal to authenticate the mobile phone payment.

The method for processing a micropayment of a mobile phone using the OTP according to the present invention is a process of providing a user wired terminal connected to a micropayment target website so that an interface for selecting a mobile carrier corresponding to the user's mobile phone and inputting a user's mobile phone number and a user's social security number is provided. And receiving the mobile carrier selection information corresponding to the user mobile phone, the user mobile phone number and the user social security number information through the interface, and the user mobile phone number to the mobile communication server corresponding to the received mobile carrier selection information. Transmitting user social security number information, checking a user authentication result corresponding to a user mobile number and a user social security number verification result through a mobile carrier server, and checking whether an OTP (One Time Password) agent is already installed in the user mobile phone; If the OTP agent is not already installed in the user's mobile phone, processing to transmit a message including a CallBack URL for downloading the OTP agent to the user's mobile phone; If the OTP agent is downloaded and installed to the user's mobile phone, processing is provided so that an interface for inputting OTP generated by the OTP agent provided in the user's mobile phone is provided to the user wired terminal, and from the user wired terminal through the interface. Receiving an input OTP, checking OTP generation information for generating OTP 'to be compared with the received OTP, and determining a fixed seed value and a dynamic seed value for generating OTP' from the OTP generation information. And using the determined seed value and dynamic seed value. Generating an OTP ', comparing the received OTP with the generated OTP' and confirming the micropayment validity of the mobile phone number, and verifying the micropayment validity of the mobile phone number on the micropayment target web. Characterized in that it comprises the step of transmitting to the site.

On the other hand, the mobile phone micropayment processing method using the OTP according to the present invention, the user wired terminal connected to the website for the micropayment is provided with an interface for selecting a mobile carrier corresponding to the user's mobile phone and entering the user's mobile phone number and user's social security number Receiving the mobile communication company selection information and the user mobile phone number and the user social security number information corresponding to the user mobile phone through the interface; and transmitting the user mobile phone number to the mobile communication company server corresponding to the received mobile service provider selection information. And transmitting the user social security number information, and confirming whether the user authentication result corresponding to the user mobile number and the user social security number verification result through the mobile communication server server and whether the OTP (One Time Password) agent is already installed in the user mobile phone. And if the OTP agent is not already installed in the user's mobile phone, processing a message including a CallBack URL for downloading the OTP agent to the user's mobile phone and transmitting the message to the user's mobile phone. Or, if the OTP agent is downloaded and installed in the user's mobile phone, processing to provide an interface for inputting OTP generated by the OTP agent provided in the user's mobile phone to the user wired terminal, and the interface from the user wired terminal. Receiving an OTP input through the step, and transmitting the received OTP to the OTP server of the OTP agent provider provided in the user's mobile phone, and generated from the OTP server and OTP server generated in the user's mobile phone from the OTP server Receiving the comparison result of the OTP ', and A check micropayments efficacy corresponding to a result of comparison between the OTP and the OTP 'generated by the user's mobile phone the result is characterized in that comprises the step of transmitting to the target Web site micropayments.

On the other hand, the mobile phone micropayment processing method using the OTP according to the present invention, the user wired terminal connected to the website for the micropayment is provided with an interface for selecting a mobile carrier corresponding to the user's mobile phone and entering the user's mobile phone number and user's social security number Processing to be performed; receiving mobile carrier selection information and user mobile phone number and user social security number information corresponding to the user mobile phone through the interface; and user mobile phone through a mobile carrier server corresponding to the received mobile carrier selection information. Checking a user authentication result corresponding to the number and user social security number verification result, and checking whether an OTP agent is already installed in the user mobile phone through an OTP server, and the OTP agent is installed in the user mobile phone. Not installed When the OTP agent is installed in the user's mobile phone or the OTP agent is downloaded or installed in the user's mobile phone. Processing to provide an OTP generated by an OTP agent provided in a user mobile phone and an interface for inputting the OTP to a user wired terminal, receiving an OTP input through the interface from the user wired terminal; Transmitting the received OTP to the OTP server, receiving a comparison result of the OTP generated by the user's mobile phone and the OTP 'generated by the OTP server from the OTP server, and the OTP and OTP generated by the user's mobile phone. The small payment validation result corresponding to the comparison result of ' Including the step of transmitting a payment target Web site is characterized in that formed.

On the other hand, the mobile phone micropayment processing method using the OTP according to the present invention, the user wired terminal connected to the website for the micropayment is provided with an interface for selecting a mobile carrier corresponding to the user's mobile phone and entering the user's mobile phone number and user's social security number Processing to be performed; receiving mobile carrier selection information corresponding to the user's mobile phone, user's mobile phone number and user's social security number information through the interface; and user authentication results corresponding to the received user's mobile phone number and user social security number verification result. And checking whether an OTP agent is already installed in the user's mobile phone, and if the OTP agent is not already installed in the user's mobile phone, a CallBack URL for downloading an OTP agent to the user's mobile phone is included. Buckwheat Processing the message to be transmitted, and when the OTP agent is pre-installed on the user's mobile phone or when the OTP agent is downloaded and installed to the user's mobile phone, OTP generated by the OTP agent provided on the user's mobile phone to the user wired terminal. Processing to provide an interface for input, receiving an OTP input through the interface from the user wired terminal, and identifying OTP generation information for generating an OTP 'to be compared with the received OTP; And determining a fixed seed value and a dynamic seed value for generating OTP 'from the OTP generation information, generating an OTP' using the determined fixed seed value and the dynamic seed value, and receiving the received OTP and the generated OTP. Confirming the validity of the micropayment for the mobile number by comparing ', and carrying the The micropayment validation result for the phone number is characterized in that it comprises the step of transmitting to the micropayment target website.

The mobile phone micropayment processing method using the OTP according to the present invention further comprises the step of querying the micropayment limit for the user's mobile phone number and processing the approval for the micropayment in response to the micropayment limit inquiry result. Characterized in that made.

Cell phone micropayment processing method using the OTP according to the present invention, characterized in that the micropayment further comprises the step of processing to be charged to the user's mobile phone bill.

On the other hand, it includes a computer-readable recording medium, characterized in that for recording the program for executing the above-mentioned mobile phone micropayment processing method using the OTP.

On the other hand, the mobile phone micropayment processing system using the OTP according to the present invention, the storage medium for storing the user's mobile phone number and OTP generation information and the mobile carrier selection information and the user's mobile phone from the user wired terminal connected to the website for the micropayment target When the number and user resident registration number information is received, the user authentication result corresponding to the result of confirming the user mobile number and user resident registration number through the mobile carrier server corresponding to the received carrier selection information and the OTP (One Time Password) Check whether the agent is already installed, and if the OTP agent is not already installed in the user's mobile phone, process the message including the CallBack URL for downloading the OTP agent to the user's mobile phone, and transmit the OTP to the user's mobile phone. Agent is already installed Or, if the OTP agent is downloaded and installed to the user's mobile phone, the user's wired terminal is processed to provide an interface for inputting the OTP generated by the OTP agent provided in the user's mobile phone to receive the OTP input through the interface. Determine OTP generation information for generating OTP 'to be compared with the received OTP, determine a fixed seed value and a dynamic seed value for generating OTP' from the OTP generation information, and determine the fixed seed value and the dynamic seed value. Generating a OTP 'using a seed value, and comparing the received OTP with the generated OTP' to verify a micropayment validity for the mobile number.

On the other hand, the mobile phone micropayment processing system using the OTP according to the present invention, when the mobile communication company selection information and the user mobile phone number and user resident registration number information is received from the user wired terminal connected to the small payment target website, the received mobile carrier selection Check whether the user authentication result corresponding to the user mobile number and the user's social security number verification result and the OTP (One Time Password) agent are preinstalled on the user mobile phone through the mobile communication server corresponding to the information, and the OTP on the user mobile phone. If the agent is not already installed, a message including a callback URL for downloading an OTP agent is transmitted to the user's mobile phone, and an OTP agent is pre-installed on the user's mobile phone, or an OTP agent is downloaded to the user's mobile phone. Installed Process to provide an interface for inputting an OTP generated by an OTP agent provided in the user's mobile phone to the user wired terminal to receive the OTP input through the interface, and receive the received OTP in the user's mobile phone. Check the OTP generation information previously stored in the server and storage medium which transmits to the OTP server of the OTP agent provider, determine the fixed seed value and the dynamic seed value for generating OTP 'from the OTP generation information, and the determined seed value and It generates an OTP 'using a dynamic seed value, and compares the received OTP and the generated OTP', characterized in that it comprises an OTP server for confirming the micropayment validity for the mobile number.

On the other hand, the mobile phone micropayment processing system using the OTP according to the present invention, the OTP server for providing and managing the OTP agent to the user's mobile phone and the user's mobile terminal connected to the user's wired terminal connected to the small payment target website and the user's mobile number and When the user social security number information is received, the user mobile phone number and the user authentication result corresponding to the user social security number verification result are checked through the mobile communication company server corresponding to the received mobile carrier selection information, and the OTP is transmitted to the user mobile phone through the OTP server. (One Time Password) Check whether the agent is already installed, and if the OTP agent is not installed in the user's mobile phone, process the message including the CallBack URL for downloading the OTP agent to the user's mobile phone. To OTP on the user's mobile phone, When the agent is already installed or the OTP agent is downloaded and installed in the user's mobile phone, the user wired terminal processes to provide an OTP generated by the OTP agent provided in the user's mobile phone and an interface for inputting the OTP. And receiving the OTP input through the interface, and transmitting the received OTP to the OTP server. The OTP server checks the OTP generation information previously stored in the storage medium, The fixed seed value and the dynamic seed value for generating the OTP 'are determined from the OTP generation information, the OTP' is generated using the determined seed value and the dynamic seed value, and the received OTP is compared with the generated OTP '. Confirm the validity of the micropayment for the mobile phone number, and transfer the comparison result of the OTP to the server And it characterized in that.

On the other hand, the mobile phone micropayment processing system using the OTP according to the present invention, the storage medium for storing the user's mobile phone number and OTP generation information and the mobile carrier selection information and the user's mobile phone from the user wired terminal connected to the website for the micropayment target When the number and the user resident registration number information are received, it is checked whether the user authentication result corresponding to the received user mobile number and the user resident registration number check result and the OTP (One Time Password) agent are already installed in the user mobile phone. If the OTP agent is not already installed in the user's mobile phone, the message including the CallBack URL for downloading the OTP agent is transmitted to the user's mobile phone, and the OTP agent is pre-installed in the user's mobile phone or the OTP to the user's mobile phone. Agent is downloaded When installed, the user's wired terminal processes to provide an interface for inputting an OTP generated by an OTP agent provided in the user's mobile phone to receive the OTP input through the interface, and to compare the received OTP with the OTP '. Confirm the OTP generation information for generating an OTP, determine a fixed seed value and a dynamic seed value for generating OTP 'from the OTP generation information, and generate an OTP' using the determined fixed seed value and the dynamic seed value, Comparing the received OTP and the generated OTP 'is characterized in that it comprises a server for confirming the validity of the micropayment for the mobile number.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the present invention.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram showing the configuration of a cellular phone payment processing system using OTP according to the first embodiment of the present invention.

In more detail, Figure 1 is a user wired terminal 100 connected to a small payment target website provided with an interface for selecting a mobile carrier corresponding to the user's mobile phone 175 and inputting the user's mobile phone 175 number and user social security number. After receiving the mobile communication company selection information corresponding to the user mobile phone 175, the user mobile phone 175 number and the user resident registration number information from the user wired terminal 100 through the interface, and responds to the mobile communication company selection information. After checking whether the user authentication result and the OTP (One Time Password) agent is installed in the user mobile phone 175 through the mobile communication company server 170, the user wired terminal 100 to the user mobile phone 175 The user is processed to provide an interface for inputting OTP generated by the provided OTP agent. Receiving the OTP input via the interface from the terminal 100, and shows the system configuration for generating the OTP 'and processing the mobile phone micropayment compared to the received OTP, in the technical field to which the present invention belongs Those skilled in the art can refer to and / or modify this drawing 1 to implement various methods for the mobile phone payment processing system using the OTP (eg, some components are omitted, subdivided, or combined). Although it can be inferred, the present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG.

For example, the mobile phone micropayment processing system shown in FIG. 1 may be applied to a system for processing payment using a customer's payment means, except that the payment amount is added to the communication fee of the user's mobile phone 175. The present invention naturally includes all payment processing systems that can be inferred as described above.

Referring to FIG. 1, the mobile phone micropayment processing system includes a user wired terminal 100 used by a user connected to a micropayment target website and a user mobile phone 175 possessed by the user. Small payment target web that sells tangible / intangible goods to the user through the terminal 100 and makes payment through a mobile phone payment means that charges the communication fee for the sold goods to the user's mobile phone 175 communication fee. One or more web servers 105 that operate a site, a payment system 110 for processing a micro phone payment using OTP in connection with the user wired terminal 100 and a user mobile phone 175, and the user mobile phone 175 It includes a mobile communication company server 170 on the mobile communication network connected to), the payment system 110 is the web server 105 and the mobile communication company Implemented in the form of an authentication server (or relay server) connected to the server 170, or in the form of an internal component of the web server 105, or in the form of an internal component of the mobile carrier server 170 It is to be clearly understood that all of these are possible and thereby the invention is not limited.

The user wired terminal 100 includes one or more personal computers and laptops having a browser that can access the web server 105 that operates the micropayment target website, and the web server 105 or the payment system. A mobile phone payment interface for selecting a mobile carrier corresponding to the user's mobile phone 175 and a user's mobile phone 175 number and a user's social security number is received from the 110 and output to the screen output means, and the mobile phone payment through a key input means. The mobile terminal selects the user information corresponding to the user's mobile phone 175, the user's mobile phone 175 number and the user's social security number information is inputted to the web server 105 or payment system 110, characterized in that for transmitting.

The web server 105, the mobile phone payment means for selling tangible / intangible goods to the user through the user wired terminal 100, and the payment amount for the sold goods to the user mobile phone 175 communication fee As a general term for a server operating a small payment target website that can be paid through, if the user wired terminal 100 selects the mobile phone payment means as the payment means for the payment amount, the user wired terminal 100 The mobile phone payment interface is provided, or the mobile phone payment interface is provided to the user wired terminal 100 through the payment system 110.

The user mobile phone 175 is a mobile phone possessed by a user who purchases tangible / intangible goods sold by the web server 105, and authenticates a payment validity using a communication fee charged to the user mobile phone 175. A function of downloading an OTP agent, and a function of generating an OTP by driving the OTP agent and outputting the generated OTP (for example, a screen output or a user through a short range communication means such as Bluetooth, Wi-Fi, or RF communication). It is possible to output to the wired terminal (100).

According to the present invention, the user wired terminal 100 is an embodiment of a first terminal in which a user connects to a server through a communication network and purchases tangible / intangible goods sold by the server. It is possible to carry out various modifications according to the communication network and server type and characteristics.

According to the present invention, the user mobile phone 175 is an embodiment of a second terminal equipped with an OTP agent to authenticate the validity of the payment for the purchase price of the goods purchased through the first terminal, the second The terminal may include all communication terminals except for the first terminal.

For example, when the server to which the first terminal is connected is a home shopping server, the first terminal may include a user's IPTV, and the second terminal includes a wired telephone / VoIP phone provided near the IPTV. can do.

Alternatively, when the server to which the first terminal is connected is an ARS server, the first terminal may include a user's landline phone / mobile phone / VoIP phone, and the second terminal is another voice call except for the first terminal. Terminal (e.g., if the first terminal is a landline phone, the second terminal includes a mobile phone / VoIP phone; if the first terminal is a mobile phone, the second terminal includes a landline phone / VoIP phone, and the first terminal If the VoIP phone, the second terminal may include a landline / mobile phone).

In other words, the user wired terminal 100 of the present application is not limited to the above-described wired terminal, and it is apparent that the user mobile phone 175 of the present application is also not limited to the mobile phone.

The mobile communication company server 170 is a generic term for a mobile communication company side server provided on a mobile communication network to which the user mobile phone 175 is connected to interface with the mobile phone. In the payment system 110, the user mobile phone 175 is used. Message server, data exchange server, WAP (WAP) for transmitting information (or data) requested to be provided to the user's mobile phone 175 through a mobile communication system (eg, exchange, base station, etc.) according to a preset communication protocol. It is preferable to include one or more servers.

According to an exemplary embodiment of the present invention, the mobile communication company server 170 may query a subscriber D / B (not shown) through a user mobile phone 175 number and user social security number information to authenticate a user, and the user mobile phone ( It is desirable to provide an OTP agent to 175 or to manage the OTP agent provided to the user mobile phone 175 through a predetermined OTP server (not shown).

According to the exemplary embodiment of the present invention, when the mobile communication company server 170 is provided with the OTP agent in the user mobile phone 175 or provides the OTP agent to the user mobile phone 175, the user mobile phone 175 It is preferable to associate and store the corresponding mobile phone number and the OTP agent information corresponding to the OTP agent provided in the user mobile phone 175.

Here, the OTP agent information, it is preferable that the OTP agent version information, OTP generation algorithm and the OTP generation method provided in the user mobile phone 175 corresponding to the mobile phone number preferably comprises at least one.

Here, the OTP generation algorithm and the OTP generation method may use different algorithms and generation methods for each OTP agent, and thus the present invention is not limited thereto.

According to the present invention, the payment system 110, the mobile phone number corresponding to the user mobile phone 175 equipped with an OTP agent for generating an OTP for authenticating the payment validity using the communication charges imposed on the user mobile phone 175 And OTP generation information including at least one fixed seed value for generating an OTP 'to be compared with an OTP generated by the OTP agent provided in the mobile phone and parameters for determining a dynamic seed value. Equipped with a storage medium 165, or is connected through a communication network.

The mobile phone number is a general term for information that can identify the user mobile phone 175, and includes one or more telephone numbers, serial numbers (ESNs), and subscriber identification numbers assigned to the user mobile phone 175, or the user. At least one unique number (or unique code) stored in the memory of the mobile phone 175, the USIM serial number assigned to the USIM provided in the user mobile phone 175, the unique number (or unique code) recorded in the USIM It is preferable to comprise.

The OTP generation information may include one or more fixed seed values used to generate an OTP according to the OTP generation algorithm and the OTP generation method, and a parameter for determining the dynamic seed value. It is preferable to comprise.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm in a time-synchronization manner, wherein the parameter of the OTP generation information is It is preferable to include synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm of a challenge-response manner, and the parameter of the OTP generation information is the challenge- It is preferable to include a random number generating seed for generating a random number corresponding to the dynamic seed value of the response type OTP.

According to the embodiment of the present invention, the OTP generation information is stored in the user's mobile phone 175 memory or stored in the user's mobile phone 175 in association with the OTP agent downloaded to the user's mobile phone 175 or It is preferably stored in the USIM (encryption storage possible).

Referring to FIG. 1, the payment system 110 selects a mobile communication company corresponding to the user's mobile phone 175 and selects a user's mobile phone 175 with the user's wired terminal 100 connected to the small payment target website. Payment interface providing means 115 for processing to provide a mobile phone payment interface for inputting the social security number, and the mobile carrier selection information corresponding to the user mobile phone 175 and the user mobile phone 175 number and the user social security number through the mobile phone payment interface Transmitting the user's mobile phone 175 number and the user's social security number information to the information receiving means 120 for receiving information and the mobile communication company server 170 corresponding to the received mobile communication company selection information, and the mobile communication company server 170 Receive and receive the user authentication result corresponding to the user's mobile phone (175) number and user social security number verification results through Check whether the OTP agent is already installed in the user authentication means 125 for authenticating the user and the user mobile phone 175 corresponding to the user mobile phone 175 number through the mobile communication company server 170. If the agent checking means 130 and the OTP agent is not already installed in the user mobile phone 175, a message including a callback URL for downloading an OTP agent is transmitted to the user mobile phone 175. It is characterized by comprising the agent providing means 135 for processing.

In addition, the payment system 110, when the OTP agent is pre-installed in the user mobile phone 175, or when the OTP agent is downloaded and installed in the user mobile phone 175, the user mobile phone to the user wired terminal 100 OTP interface providing means 140 for processing to provide an OTP input interface for inputting OTP generated by the OTP agent provided at 175, and OTP input through the interface from the user wired terminal 100; Check the OTP receiving means 145 for receiving and OTP generation information for generating OTP 'to be compared with the OTP, and determine a fixed seed value and a dynamic seed value for generating OTP' from the OTP generation information; OTP 'is generated using the determined fixed seed value and the dynamic seed value, and the small amount of the mobile number is compared by comparing the received OTP with the generated OTP'. The payment validity authentication means 150 for checking the validity and the information providing means 155 for transmitting the micropayment validation result of the mobile phone number to the micropayment target website, characterized in that it comprises a.

According to the present invention, each means constituting the payment system 110 is implemented as a separate server for each means, or in the form of a predetermined authentication server (or relay server) including the means, or two The above means are combined to be implemented as a separate server, or the means are implemented in the form of components in the web server 105, or the means are implemented in the form of components in the mobile communication server server 170, or Some of the means are implemented as components in the web server 105 and some are implemented as components in the carrier server 170, or some of the means are implemented as components in the web server 105 and the rest are Some may be implemented as components in the mobile communication company server 170, and others may be implemented in a separate server form, and the payment system 110 may be configured. It is apparent that the present invention is not limited by the present practice.

The user accesses the web server 105 to purchase tangible / intangible goods, and pays a mobile phone to pay a payment amount corresponding to the purchase price for the goods through a communication fee charged to the user's mobile phone 175. When the means is selected, the payment interface providing means 115 relays the web server 105 directly to the user wired terminal 100 or the web server 105 through a communication network to which the user wired terminal 100 is connected. The mobile terminal 100 may be configured to process a mobile phone payment interface for selecting a mobile communication company corresponding to the user mobile phone 175 and inputting a user mobile phone 175 number and a user social security number.

When the mobile phone payment interface is provided to the user wired terminal 100 by the payment interface providing means 115, the information receiving means 120 is inputted from the user wired terminal 100 through the mobile payment interface. The communication session for receiving the mobile communication company selection information corresponding to the user mobile phone 175 and the user mobile phone 175 number and the user resident registration number information is connected.

According to an embodiment of the present invention, the payment interface providing unit 115 connects the communication channel with the user wired terminal 100 and provides the mobile phone payment interface to the user wired terminal 100 through the communication channel. In one case, the information receiving means 120 checks the user wired terminal 100 information (eg, an IP address) from the communication channel provided with the mobile phone payment interface to the user wired terminal 100, and the communication channel. A communication session for receiving the mobile communication company selection information corresponding to the user mobile phone 175, the user mobile phone 175 number and the user resident registration number information from the user wired terminal 100 (for example, the user wired terminal 100). Memory area allocated to receive the mobile communication company selection information, the user mobile phone 175 number and the user social security number information from It is preferred to connect the communication thread (Thread) code).

According to another embodiment of the present invention, when the payment interface providing means 115 provides the mobile phone payment interface to the user wired terminal 100 through the web server 105, the information receiving means 120 is Receiving the user wired terminal 100 information (for example, an IP address) from the web server 105, and selecting mobile communication company selection information corresponding to the user mobile phone 175 from the user wired terminal 100 based on the information. Communication session for receiving user mobile phone 175 number and user social security number information (for example, allocated to receive the mobile carrier selection information, user mobile phone 175 number and user social security number information from the user wired terminal 100) It is desirable to associate a memory area with a communication thread code.

Here, the communication session is received by encrypting the mobile communication company selection information corresponding to the user mobile phone 175 and the user mobile phone 175 number and user social security number information, and the mobile communication company corresponding to the encrypted user mobile phone 175 It preferably comprises a secure communication session for decrypting the selection information and the user's mobile phone (175) number and user social security number information.

When the communication session is connected to the user wired terminal 100, the information receiving means 120 is a mobile communication company selection information corresponding to the user mobile phone 175 from the user wired terminal 100 through the communication session and the user mobile phone (175) characterized in that receiving the number and user social security number information.

When the mobile communication company selection information corresponding to the user mobile phone 175, the user mobile phone 175 number and the user social security number information are received from the user wired terminal 100, the user authentication means 125 is connected to the mobile communication company selection information. The user mobile phone 175 number and user resident registration number information is transmitted to the corresponding mobile communication company server 170, and the user mobile phone 175 number and user resident registration number information through the subscriber D / B from the mobile communication company server 170 When the user authentication result is configured and transmitted, the user authentication means 125 receives and reads the user authentication result to authenticate the user who requested the micropayment.

In addition, the agent identification means 130, the user's mobile phone 175 number is transmitted to the mobile communication company server 170 corresponding to the mobile communication company selection information, the OTP agent D / B from the mobile communication company server 170 (Not shown) confirms that the user mobile phone 175 corresponding to the user mobile phone 175 number is provided with an OTP agent for generating an OTP for authenticating the mobile phone micropayment, and the OTP corresponding to the verification result. When the agent check result is configured and transmitted, the agent check means 130 receives and reads the OTP agent check result to generate an OTP agent for authenticating the mobile phone micropayment to the user mobile phone 175. It is characterized by checking whether there is.

According to an embodiment of the present invention, the agent verification means 130 receives and receives an OTP agent verification result corresponding to the user mobile phone 175 number transmitted by the user authentication means 125 to the mobile communication company server 170. It is preferable to check whether the user mobile phone 175 is provided with an OTP agent for generating an OTP for authenticating the mobile payment.

If the agent confirming means 130 confirms that the user's mobile phone 175 is not provided with an OTP agent for generating an OTP for authenticating the mobile phone micropayment, the agent providing means 135 for processing, The user mobile phone 175 is characterized in that it is processed to transmit a message containing a callback URL (CallBack URL) for the OTP agent download.

According to an embodiment of the present invention, when it is confirmed that the OTP agent is not provided in the user mobile phone 175, the agent providing means 135 outputs a pop-up through a mobile phone payment interface provided to the user wired terminal 100. The OTP agent download request requested by the user through an OTP agent download interface (or a menu) included in the mobile phone payment interface or outputted, and in response to the OTP agent download request, the user mobile phone 175. As a result, it is preferable to process a message including a callback UEL for OTP agent download.

Here, the callback UEL for downloading the OTP agent, the URL information of the mobile communication company server 170, or a predetermined OTP server that is set / affiliated to manage the OTP agent in the mobile communication company server (170) (Omitted), and the user mobile phone 175 receiving the message including the callback UEL downloads the OTP agent according to an OTP agent download procedure using a preset mobile communication network. It mounts on 175.

After the OTP agent is downloaded to the user mobile phone 175, the mobile communication company server 170 (or OTP server) provided by the OTP agent to the user mobile phone 175 is an OTP agent provided in the user mobile phone 175. Provides OTP generation information for generating an OTP to the user mobile phone 175 through.

According to an embodiment of the present invention, the mobile communication company server 170 (or OTP server) allocates one or more fixed seed values for generating an OTP through an OTP agent provided in the user mobile phone 175, and Generating OTP generation information (or extracting from a database storing OTP generation information) comprising one or more fixed seed values assigned and parameters for determining one or more dynamic seed values required to generate an OTP via the OTP agent, Preferably, the generated OTP generation information is provided to the user mobile phone 175 through a mobile communication network, and the mobile communication company server 170 (or OTP server) is provided to provide the OTP generation information to the user mobile phone 175. ) Connects a secure communication channel with the user mobile phone (175).

According to the method of the present invention, the mobile communication company server 170 (or OTP server) is the first after the OTP agent is downloaded to the user mobile phone 175, or the OTP agent downloaded to the user mobile phone 175 first In execution, the OTP generation information may be generated (or extracted) and provided to the user mobile phone 175, and the OTP generation information is encrypted and stored in a memory provided in the user mobile phone 175, or It is preferably stored in a Universal Subscriber Identity (USIM) module provided in the user mobile phone 175.

According to the method of the present invention, after the OTP agent is downloaded to the user mobile phone 175 or when the OTP agent downloaded to the user mobile phone 175 is first executed, the user mobile phone 175 is the OTP agent. Input a user password or a user personal identification number for generating the OTP through, and encrypts the input user password or the user personal identification number to store in the memory provided in the mobile phone, or provided in the user mobile phone 175 It is preferable to store in the USIM, and when the OTP agent is generated to generate the OTP afterwards, the OTP agent outputs an interface for inputting a user password or a user identification number, and the user password or user personal input through the interface Identification number and company stored in the memory (or USIM) It is preferable to authenticate the validity of the OTP generation by comparing the user password or the user identification number.

When it is confirmed that the OTP agent is pre-installed on the user mobile phone 175 by the agent checking means 130, or when the OTP agent is downloaded and installed to the user mobile phone 175 through the agent providing means 135, The OTP interface providing means 140, characterized in that the processing to provide the OTP input interface for inputting the OTP generated by the OTP agent provided in the user mobile phone 175 to the user wired terminal 100. .

According to the embodiment of the present invention, the OTP interface providing means 140 relays the web server 105 directly or to the user wired terminal 100 through a communication network connected to the user wired terminal 100. Preferably, the user wired terminal 100 processes the OTP input interface to be provided.

When the OTP input interface is provided to the user wired terminal 100 by the OTP interface providing means 140, the OTP receiving means 145 is input through the OTP input interface from the user wired terminal 100. It connects a communication session for receiving an OTP, and can be omitted when the user wired terminal 100 and the communication session are already connected.

According to an embodiment of the present invention, the OTP interface providing means 140 connects a communication channel with the user wired terminal 100 and provides the OTP input interface to the user wired terminal 100 through the communication channel. In one case, the OTP receiving means 145 checks the user wired terminal 100 information (eg, an IP address) from a communication channel provided with the OTP input interface to the user wired terminal 100, and performs the communication. A communication session for receiving the OTP from the user wired terminal 100 based on a channel (for example, a memory area allocated to receiving the OTP from the user wired terminal 100 and a communication thread code) It is preferable to connect.

According to another embodiment of the present invention, when the OTP interface providing means 140 provides the OTP input interface to the user wired terminal 100 through the web server 105, the OTP receiving means 145 is A communication session for receiving the user wired terminal 100 information (eg, an IP address) from the web server 105 and receiving the OTP from the user wired terminal 100 based on the information (eg, the user wired). It is preferable to connect a memory area allocated to receiving the OTP from the terminal 100 and a communication thread code.

Here, the communication session preferably comprises a secure communication session for encrypting and receiving the OTP and decrypting the encrypted OTP.

When the communication session is connected to the user wired terminal 100, the OTP receiving means 145 receives the OTP input from the user wired terminal 100 through the OTP input interface through the communication session. do.

The payment validity authentication means 150 corresponds to the user cellular phone 175 from the storage medium 165 when the OTP input interface is provided to the user wired terminal 100 by the OTP interface providing means 140. The mobile phone number (or the user social security number information) to the user wired terminal 100 provided with the OTP input interface (for example, the IP address of the user wired terminal 100) or the communication session connected to the user wired terminal 100 It is connected with the information (e.g., a DB reference or a pointer reference so that it can be mapped) and maintained until the OTP is received from the user wired terminal 100 through the OTP receiving means 145.

The payment validity authentication means 150 checks the OTP generation information necessary for generating the OTP 'to be compared with the OTP from the storage medium 165, and generates a fixed seed value for generating the OTP' from the OTP generation information. Determine a dynamic seed value and generate an OTP 'to be compared with the received OTP using the determined fixed seed value and the dynamic seed value.

If the OTP 'is generated, the payment validity authentication means 150 checks the payment validity of the mobile number by comparing the received OTP and the generated OTP', and the information providing means. In operation 155, the micropayment validity verification result for the mobile number is transmitted to the web server 105 that operates the micropayment target website.

Referring to FIG. 1, when the payment validity is authenticated by the payment validity authentication means 150, the payment processing means processes the payment amount to be settled through a communication fee charged to the mobile phone. It is preferable to further comprise 160.

According to the exemplary embodiment of the present invention, the payment processing unit 160 confirms the payment amount to be charged to the communication fee of the user mobile phone 175 from the web server 105 and associates with the mobile communication company server 170. By querying the payment limit for the user mobile phone 175 number, and comparing the payment amount and the payment limit, it is preferable to approve payment through the communication charges imposed on the mobile phone.

According to another exemplary embodiment of the present invention, the payment processing means 160 may store and manage the user mobile phone 175 number and payment limit information corresponding thereto through a separate database, in which case the payment The processing means 160 may query the payment limit for the user mobile phone 175 number through the database, compare the payment amount with the payment limit, and approve the payment through the communication fee charged to the mobile phone. Do.

When the payment using the communication fee charged to the mobile phone is approved, the payment processing means 160 processes the payment amount to be charged to the communication fee for the user mobile phone 175 through the mobile communication company server 170. And, payment approval information for the payment amount is transmitted to the web server 105.

2 is a diagram illustrating a mobile phone payment process using OTP according to the first embodiment of the present invention.

In more detail, Figure 2 is a user wired terminal 100 connected to a small payment target website provided with an interface for selecting a mobile carrier corresponding to the user's mobile phone 175 and inputting the user's mobile phone 175 number and user social security number. After receiving the mobile communication company selection information corresponding to the user mobile phone 175, the user mobile phone 175 number and the user resident registration number information from the user wired terminal 100 through the interface, and responds to the mobile communication company selection information. After checking whether the user authentication result and the OTP (One Time Password) agent is installed in the user mobile phone 175 through the mobile communication company server 170, the user wired terminal 100 to the user mobile phone 175 Illustrates a payment process that provides an interface for inputting an OTP generated by a provided OTP agent. Thus, those skilled in the art to which the present invention pertains, various implementation methods (eg, some steps are omitted, or sequence) for the mobile phone payment process using the OTP by referring to and / or modified in the Figure 2 It can be inferred that the modified implementation method), but the present invention includes all the implementation methods inferred above, the technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in FIG. 2, the payment system 110 shown in FIG. 1 is referred to as a “server” for convenience.

Referring to FIG. 2, a user accesses the web server 105 to purchase tangible / intangible goods, and a communication fee charged to the user's mobile phone 175 for a payment amount corresponding to a purchase price for the goods. When a mobile phone payment means is selected to make a payment (200), the server relays the web server 105 directly to the user wired terminal 100 or through the communication network to which the user wired terminal 100 is connected. The mobile phone payment interface for selecting a mobile communication company corresponding to the user mobile phone 175 and inputting a user mobile phone 175 number and a user social security number to the user wired terminal 100 is processed (205), and the user wired terminal 100 is processed. In step 210, the mobile communication company selection information and the user's mobile phone 175 number and the user's social security number information input through the mobile phone payment interface are received.

If the mobile communication company selection information, the user mobile phone 175 number and the user resident registration number information is received from the user wired terminal 100 (215), the server is connected to the mobile communication company server 170 corresponding to the mobile communication company selection information. User authentication is requested by transmitting the user mobile phone 175 number and user social security number information, and the user authentication result for the user mobile phone 175 number and user social security number information through the subscriber D / B in the mobile communication company server 170 If the configuration is transmitted, the user authentication result is received and read to authenticate the user who has requested the mobile phone payment (220).

If the user is not authenticated (225), the server generates a user authentication error and transmits it to the user wired terminal 100 (or user mobile phone 175) and the web server 105 (230).

On the other hand, if the user is authenticated (225), the server transmits the user's mobile phone 175 number to the mobile carrier server 170 corresponding to the mobile carrier selection information (mobile carrier server 170 for the user authentication) Can be omitted if the user's mobile phone 175 number is transmitted to the user's mobile phone 175 through the OTP agent D / B (not shown). Check whether the OTP agent for generating the OTP for authenticating the mobile phone payment is provided, and if the OTP agent confirmation result corresponding to the confirmation result is configured and transmitted, the user receives and reads the OTP agent confirmation result. The mobile phone 175 checks whether the mobile phone 175 is provided with an OTP agent for generating an OTP for authenticating the mobile micropayment (235).

If the OTP agent is not mounted on the user mobile phone 175 (240), the server processes the OTP agent to be provided to the user mobile phone 175 through the process shown in FIG.

On the other hand, if the user mobile phone 175 is equipped with the OTP agent (240), the server has an OTP input interface for inputting the OTP generated through the OTP agent provided in the user mobile phone 175 the user wired terminal Processed to be provided at 100 (245).

3 is a diagram illustrating a process of providing an OTP agent to a user mobile phone 175 according to the first embodiment of the present invention.

In more detail, FIG. 3 includes a callback UEL for providing the OTP agent to the user mobile phone 175 when the user mobile phone 175 is not equipped with the OTP agent in the process illustrated in FIG. 2. A process of processing a message to be transmitted to the user's mobile phone 175 and showing the process of providing the OTP agent to the user's mobile phone 175 through the message, having a general knowledge in the art to which the present invention pertains. If so, various implementation methods (e.g., some steps may be omitted or reordered) may be inferred by referring to and / or modifying the drawing 3 to provide the OTP agent to the user mobile phone 175. However, the present invention includes all the implementation methods inferred from the above, and only the implementation method shown in FIG. This technical feature is not limited.

Hereinafter, in FIG. 3, the payment system 110 shown in FIG. 1 is referred to as a “server” for convenience.

Referring to FIG. 3, when the OTP agent is not installed in the user mobile phone 175 in the process illustrated in FIG. 2, the server includes a callback UEL for downloading the OTP agent to the user mobile phone 175. The user's mobile phone 175 receives the message and transmits the message to the mobile communication company server 170 (or the OTP server) corresponding to the callback UEL. Ask.

The mobile telecommunication company server 170 (or OTP server) corresponding to the callback UE provides the OTP agent to the user mobile phone 175 (305).

If the OTP agent is provided to the user mobile phone 175 (310), the user mobile phone 175 inputs a user password or a user personal identification number for generating an OTP through the OTP agent, the input user The password or user identification number is encrypted and stored in the memory provided in the mobile phone, or stored in the USIM provided in the user mobile phone 175 and registered (315).

4 is a diagram illustrating a mobile phone payment approval process using OTP according to the first embodiment of the present invention.

In more detail, FIG. 4 illustrates that after the OTP input interface is provided to the user wired terminal 100 in the process shown in FIG. 2, the OTP input through the OTP input interface is received and the OTP 'is generated. The process of verifying payment validity compared to the received OTP to process payment approval, and those of ordinary skill in the art to which the present invention pertains, refer to and / or modify this drawing to modify the OTP. Various implementation methods (for example, some steps may be omitted, or the order may be changed) may be inferred for the mobile phone payment approval process used, but the present invention includes all the implementation methods inferred from this figure. The technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in FIG. 4, the payment system 110 shown in FIG. 1 is referred to as a “server” for convenience.

Referring to FIG. 4, after the OTP input interface is provided to the user wired terminal 100 in the process illustrated in FIG. 2, the server inputs an OTP input from the user wired terminal 100 through the OTP input interface. Verify that is received (400).

If the OTP is received (405), the server checks the OTP generation information for generating OTP 'to be compared with the received OTP (410), and the fixed seed value and dynamic for generating OTP' from the OTP generation information The seed value is determined (415), and the OTP 'is generated using the determined fixed seed value and the dynamic seed value to be compared with the received OTP to authenticate payment validity (420).

If the payment validity is not authenticated (425), the server generates payment error information and transmits to the user wired terminal 100 (or user mobile phone 175) and the web server 105 (430).

If the payment validity is authenticated (425), the server generates the payment validation result and transmits to the user wired terminal 100 (or user mobile phone 175) and the web server 105 (435), In response to the payment validity checking result, the payment approval through the communication fee of the user mobile phone 175 is processed (440).

According to an embodiment of the present invention, the server confirms the payment amount to be charged to the communication fee of the user mobile phone 175 from the web server 105, and the user mobile phone 175 in association with the mobile communication company server 170. It is preferable to approve the payment through the communication fee imposed on the mobile phone by querying the payment limit for the number, comparing the payment amount with the payment limit.

5 is a diagram showing the configuration of a mobile phone micropayment processing system using OTP according to a second embodiment of the present invention.

In more detail, Figure 5 is a user wired terminal 500 connected to a small payment target website provided by an interface for selecting a mobile carrier corresponding to the user's mobile phone 585 and inputting the user's mobile phone 585 number and user social security number. The mobile terminal 500 receives the mobile communication company selection information corresponding to the user mobile phone 585 and the user mobile phone 585 number and the user resident registration number information from the user wired terminal 500 through the interface, and responds to the mobile communication company selection information. After confirming the user authentication result and the OTP (One Time Password) agent is installed in the user mobile phone 585 through the mobile communication company server 580, the user wired terminal 500 to the user mobile phone 585 The user is processed to provide an interface for inputting OTP generated by the provided OTP agent. When the OTP received from the front end terminal 500 is transmitted to the OTP server 570 of the OTP agent provider provided in the user's mobile phone 585, the OTP server 570 generates the OTP's validity and A system configuration for processing a mobile phone micropayment by authenticating a payment validity, and a person having ordinary knowledge in the technical field to which the present invention pertains, referring to and / or modifying FIG. 5, mobile phone micropayment using the OTP While various implementation methods (e.g., implementations in which some components are omitted, subdivided, or combined) may be inferred for the processing system, the present invention includes all implementation methods inferred from the above. The technical features are not limited only to the implementation method shown in FIG.

For example, the mobile phone micropayment processing system shown in FIG. 5 can be applied to a system for processing payment using a customer's payment means, except that the payment amount is added to the communication fee of the user's mobile phone 585. The present invention naturally includes all payment processing systems that can be inferred as described above.

Referring to FIG. 5, the mobile phone micropayment processing system includes a user wired terminal 500 used by a user connected to a micropayment target website and a user mobile phone 585 possessed by the user. Small payment target web that sells tangible / intangible goods to the user through the terminal 500, and makes payment through the mobile phone payment means for imposing a payment amount for the sold goods on a user's mobile phone 585 communication fee At least one web server 505 that operates a site, a payment system 510 for processing a micro payment of a mobile phone using OTP in connection with the user wired terminal 500 and a user mobile phone 585, and the user mobile phone 585 OTP server 570 for authenticating the payment validity through OTP generated by the OTP agent provided in the) and the mobile communication company on the mobile communication network connected to the user's mobile phone (585) It characterized in that it comprises a server 580, the payment system 510 is implemented in the form of an authentication server (or relay server) connected to the web server 505 and the mobile carrier server 580, or the web It may be embodied in the form of the internal components of the server 505, or may be implemented in the form of the internal components of the mobile communication server server 580, whereby it is apparent that the present invention is not limited.

The user wired terminal 500 includes one or more personal computers and laptops having a browser that can access a web server 505 that operates the micropayment target website, and the web server 505 or a payment system. 510 receives a mobile phone payment interface corresponding to the user's mobile phone 585 and a mobile phone payment interface for inputting the user's mobile phone 585 number and the user's social security number to output to the screen output means, and pays the mobile phone through the key input means. The mobile terminal selects the user information corresponding to the user's mobile phone 585, the user's mobile phone 585 number and the user's social security number information by inputting the web server 505 or the payment system 510.

The web server 505 sells tangible / intangible goods to the user through the user wired terminal 500, and charges a mobile phone 585 communication fee for the sold goods. As a generic term for a server operating a small payment target website that can be paid through, when the user wired terminal 500 selects the mobile phone payment means as the payment means for the payment amount, the user wired terminal 500 The mobile phone payment interface is provided, or the mobile phone payment interface is provided to the user wired terminal 500 through the payment system 510.

The user mobile phone 585 is a mobile phone possessed by a user who purchases tangible / intangible goods sold by the web server 505 and authenticates a payment validity using a communication fee charged to the user mobile phone 585. A function of downloading an OTP agent, and a function of generating an OTP by driving the OTP agent and outputting the generated OTP (for example, a screen output or a user through a short range communication means such as Bluetooth, Wi-Fi, or RF communication). It is possible to output to the wired terminal (500).

According to the present invention, the user wired terminal 500 is an embodiment of a first terminal in which a user connects to a server through a communication network and purchases tangible / intangible goods sold by the server. It is possible to carry out various modifications according to the communication network and server type and characteristics.

According to the present invention, the user mobile phone 585 is an embodiment of a second terminal equipped with an OTP agent for authenticating payment validity for a purchase price for purchasing goods through the first terminal. The terminal may include all communication terminals except for the first terminal.

For example, when the server to which the first terminal is connected is a home shopping server, the first terminal may include a user's IPTV, and the second terminal includes a wired telephone / VoIP phone provided near the IPTV. can do.

Alternatively, when the server to which the first terminal is connected is an ARS server, the first terminal may include a user's landline phone / mobile phone / VoIP phone, and the second terminal is another voice call except for the first terminal. Terminal (e.g., if the first terminal is a landline phone, the second terminal includes a mobile phone / VoIP phone; if the first terminal is a mobile phone, the second terminal includes a landline phone / VoIP phone, and the first terminal If the VoIP phone, the second terminal may include a landline / mobile phone).

In other words, the user wired terminal 500 of the present application is not limited to the above-described wired terminal, and it will be apparent that the user mobile phone 585 of the present application is also not limited to the mobile phone.

The mobile telecommunication company server 580 is a generic term for a mobile telecommunication company side server provided on the mobile communication network to which the user mobile phone 585 is connected to interface with the mobile phone. In the payment system 510, the user mobile phone 585 is used. A message server, a data exchange server, and a WAP that transmits information (or data) requested to be provided to the user's mobile phone 585 through a mobile communication system (eg, a switch, a base station, etc.) according to a preset communication protocol. It is preferable to include at least one server.

According to an embodiment of the present invention, the mobile telecommunication company server 580 functions to authenticate a user by querying a subscriber D / B (not shown) through the user mobile phone 585 number and user social security number information, and the user mobile phone ( It is desirable to have a function of managing the OTP agent provided to the user mobile phone 585 through the OTP server 570 that provides the OTP agent to 585.

According to the exemplary embodiment of the present invention, when the mobile communication company server 580 is provided with the OTP agent in the user mobile phone 585 or provides the OTP agent to the user mobile phone 585, the user mobile phone 585 It is preferable to store the corresponding mobile phone number and OTP agent information corresponding to the OTP agent provided in the user mobile phone 585 in association.

In this case, the OTP agent information, it is preferable to include at least one version information, OTP generation algorithm and OTP generation method of the OTP agent provided in the user mobile phone 585 corresponding to the mobile phone number.

Here, the OTP generation algorithm and the OTP generation method may use different algorithms and generation methods for each OTP agent, and thus the present invention is not limited thereto.

The OTP server 570 is characterized in that to authenticate the payment via the OTP generated by the OTP agent provided in the user's mobile phone 585, the OTP agent for generating the OTP for the payment validity authentication is provided To determine one or more fixed seed values and dynamic seed values for generating a mobile phone number corresponding to the user's mobile phone 585 and an OTP 'to be compared with the OTP generated by the OTP agent provided in the mobile phone. The storage medium 575 may be provided in association with the OTP generation information including the parameter and stored therein, or may be connected through a communication network.

The mobile phone number is a general term for information that can identify the user mobile phone 585, and includes one or more telephone numbers, serial numbers (ESNs), and subscriber identification numbers assigned to the user mobile phone 585, or the user. At least one unique number (or unique code) stored in the memory of the mobile phone 585, a USIM serial number assigned to the USIM provided in the user mobile phone 585, and a unique number (or unique code) recorded in the USIM. It is preferable to comprise.

The OTP generation information may include one or more fixed seed values used to generate an OTP according to the OTP generation algorithm and the OTP generation method, and a parameter for determining the dynamic seed value. It is preferable to comprise.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm in a time-synchronization manner, wherein the parameter of the OTP generation information is It is preferable to include synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm of a challenge-response manner, and the parameter of the OTP generation information is the challenge- It is preferable to include a random number generating seed for generating a random number corresponding to the dynamic seed value of the response type OTP.

According to an embodiment of the present invention, the OTP generation information is stored in the user cellular phone 585 memory in association with the OTP agent downloaded to the user cellular phone 585 or stored in the user cellular phone 585. It is preferable to be stored in the USIM (encryption storage possible).

When the OTP is provided from the payment system 510, the OTP server 570 checks OTP generation information for generating OTP 'to be compared with the OTP, and generates a fixed seed for generating OTP' from the OTP generation information. Determine the value and the dynamic seed value, generate an OTP 'using the determined seed value and the dynamic seed value, and compare the received OTP and the generated OTP' to confirm the micropayment validity for the mobile number. To provide to the payment system 510 characterized in that.

Referring to FIG. 5, the payment system 510 selects a mobile communication company corresponding to the user's mobile phone 585 and selects a user's mobile phone 585 and the user with the user's wired terminal 500 connected to the small payment target website. Payment interface providing means (515) for processing to provide a mobile phone payment interface for entering the social security number, the mobile carrier selection information corresponding to the user mobile phone 585 and the user mobile phone number 585 and the user social security number through the mobile phone payment interface And transmits the user mobile phone 585 number and the user social security number information to the information receiving means 520 for receiving the information and the mobile telecommunication company server 580 corresponding to the received mobile telecommunication company selection information. The mobile telecommunication company server 580 Receive and receive the user authentication result corresponding to the user mobile phone (585) number and user social security number verification results through Whether the OTP agent is already installed in the user mobile phone 585 corresponding to the user mobile phone 585 number through the user authentication unit 525 for authenticating the user and the mobile communication company server 580. When the agent checking means for checking 530 and the OTP agent is not already installed in the user mobile phone 585, a message including a callback URL for downloading an OTP agent is transmitted to the user mobile phone 585. It is characterized by comprising an agent providing means 535 to process.

In addition, the payment system 510, if the OTP agent is pre-installed in the user mobile phone 585, or when the OTP agent is downloaded and installed in the user mobile phone 585, the user mobile phone to the user wired terminal 500 OTP interface providing means 540 for processing to provide an OTP input interface for inputting OTP generated by the OTP agent provided at 585 and OTP input through the interface from the user wired terminal 500. OTP receiving means 545 for receiving, OTP providing means 550 for transmitting the received OTP to the OTP server 570 of the OTP agent provider provided in the user's mobile phone 585, and the OTP server 570 Authentication result receiving means 555 for receiving the comparison result of the OTP 'generated from the user's mobile phone 585 and the comparison result of the OTP generated from the OTP' and the user's mobile phone 585. And the information providing means 560 for transmitting the corresponding micropayment validation result to the micropayment target website.

According to the present invention, each means constituting the payment system 510 is implemented as a separate server for each means, or in the form of a predetermined authentication server (or relay server) including the means, or two The above means are combined to be implemented as a separate server, or the means are implemented in the form of components in the web server 505, or the means are implemented in the form of components in the mobile communication server server 580, or Some of the means are implemented as components in the web server 505 and some are implemented as components in the carrier server 580, or some of the means are implemented as components in the web server 505 and some are Is implemented as a component in the mobile carrier server 580 and the other part can all be implemented in a separate server form, the billing system 510 Bayida put out to clarify SHALL not limited by the embodiment to which the present invention method.

The user accesses the web server 505 to purchase tangible / intangible goods, and pays a mobile phone to pay a payment amount corresponding to the purchase price for the goods through a communication fee charged to the user mobile phone 585. When the user selects a means, the payment interface providing means 515 relays the web server 505 directly to the user wired terminal 500 or directly through the communication network to which the user wired terminal 500 is connected. The mobile terminal 500 may be configured to process a mobile phone payment interface for selecting a mobile communication company corresponding to the user mobile phone 585 and inputting a user mobile phone 585 number and a user social security number.

When the mobile phone payment interface is provided to the user wired terminal 500 by the payment interface providing means 515, the information receiving means 520 is input through the mobile phone payment interface from the user wired terminal 500. The communication session for receiving the mobile communication company selection information corresponding to the user mobile phone 585 and the user mobile phone 585 number and the user social security number information is connected.

According to an embodiment of the present invention, the payment interface providing means 515 connects the communication channel with the user wired terminal 500 and provides the mobile phone payment interface to the user wired terminal 500 through the communication channel. In one case, the information receiving means 520 checks the user wired terminal 500 information (for example, an IP address) from the communication channel provided with the mobile phone payment interface to the user wired terminal 500, and the communication channel. A communication session for receiving the mobile communication company selection information corresponding to the user mobile phone 585, the user mobile phone 585 number, and the user social security number information from the user wired terminal 500 (for example, the user wired terminal 500). Memory area allocated to receive the mobile communication company selection information, the user mobile phone 585 number, and the user social security number information from It is preferred to connect the communication thread (Thread) code).

According to another embodiment of the present invention, when the payment interface providing means 515 provides the mobile phone payment interface to the user wired terminal 500 through the web server 505, the information receiving means 520 is Receiving the user wired terminal 500 information (eg, an IP address) from the web server 505, and selecting mobile communication company selection information corresponding to the user mobile phone 585 from the user wired terminal 500 based on the user wired terminal 500. Communication session for receiving user mobile phone 585 number and user social security number information (e.g., memory allocated for receiving the mobile communication company selection information, user mobile phone 585 number and user social security number information from the user wired terminal 500). It is desirable to link the area with the communication thread code.

Here, the communication session is received by encrypting the mobile communication company selection information corresponding to the user mobile phone 585, the user mobile phone 585 number and the user social security number information encrypted, and the mobile communication company corresponding to the encrypted user mobile phone 585 It preferably comprises a secure communication session for decoding the selection information and the user's mobile phone (585) number and user social security number information.

When the user's wired terminal 500 and the communication session are connected, the information receiving means 520 is selected from the user's wired terminal 500 corresponding to the user's mobile phone 585 and the user's mobile phone through the communication session. (585) characterized by receiving the number and the user social security number information.

When the mobile communication company selection information corresponding to the user mobile phone 585, the user mobile phone 585 number and the user social security number information are received from the user wired terminal 500, the user authentication means 525 is connected to the mobile communication company selection information. The user mobile phone 585 number and the user resident registration number information are transmitted to the corresponding mobile communication company server 580, and the user mobile phone 585 number and user resident registration number information are transmitted from the mobile communication company server 580 through the subscriber D / B. When the user authentication result is configured and transmitted, the user authentication means 525 may receive and read the user authentication result to authenticate the user who has requested the micro payment.

In addition, the agent identification means 530 transmits the user's mobile phone 585 number to the mobile communication company server 580 corresponding to the mobile communication company selection information, and the OTP agent D / B at the mobile communication company server 580. (Not shown) confirms that the user mobile phone 585 corresponding to the user mobile phone 585 number is provided with an OTP agent for generating an OTP for authenticating the mobile phone micropayment, and the OTP corresponding to the verification result. When the agent check result is configured and transmitted, the agent check means 530 receives and reads the OTP agent check result to generate an OTP agent for authenticating the mobile phone micropayment to the user mobile phone 585. It is characterized by checking whether there is.

According to an embodiment of the present invention, the agent verification means 530 receives and receives an OTP agent verification result corresponding to the user mobile phone 585 number transmitted by the user authentication means 525 to the mobile telecommunication company server 580. It is preferable to check whether the user mobile phone 585 is provided with an OTP agent for generating an OTP for authenticating the mobile phone micropayment.

If the agent confirming means 530 confirms that the user's mobile phone 585 is not provided with an OTP agent for generating an OTP for authenticating the mobile payment, the agent providing means for processing 535, The mobile phone 585 may be configured to transmit a message including a callback URL for downloading an OTP agent.

According to an embodiment of the present invention, when it is confirmed that the OTP agent is not provided in the user mobile phone 585, the agent providing means 535 outputs a pop-up through a mobile phone payment interface provided to the user wired terminal 500. The OTP agent download request requested by the user through an OTP agent download interface (or menu) included in the mobile phone payment interface or outputted, and in response to the OTP agent download request, the user mobile phone 585. As a result, it is preferable to process a message including a callback UEL for OTP agent download.

The callback UEL for downloading the OTP agent may include URL information of the OTP server 570 that provides the OTP agent to the user's mobile phone 585, and receives the message including the callback UEL. The user mobile phone 585 downloads the OTP agent and mounts it on the user mobile phone 585 according to an OTP agent download procedure using a preset mobile communication network.

After the OTP agent is downloaded to the user mobile phone 585, the OTP server 570 provided by the OTP agent to the user mobile phone 585 generates an OTP through the OTP agent provided in the user mobile phone 585. Provides OTP generation information for the user mobile phone (585).

According to an embodiment of the present invention, the OTP server 570 assigns one or more fixed seed values for generating an OTP through an OTP agent provided in the user mobile phone 585, and assigns the one or more fixed seed values assigned thereto. Generating OTP generation information (or extracting from a database storing OTP generation information) including a value and a parameter for determining one or more dynamic seed values required to generate an OTP via the OTP agent, and generating the OTP generation information It is preferable to provide to the user mobile phone 585 through a mobile communication network, the OTP server 570 is a secure communication channel with the user mobile phone 585 to provide the OTP generation information to the user mobile phone 585 Connect

According to the method of the present invention, the OTP server 570 generates the OTP after the OTP agent is downloaded to the user mobile phone 585 or when the OTP agent downloaded to the user mobile phone 585 is first executed. It is preferable to generate (or extract) information and provide the information to the user mobile phone 585. The OTP generation information is encrypted and stored in a memory provided in the user mobile phone 585, or in the user mobile phone 585. It is preferably stored in the provided Universal Subscriber Identity (USIM) Module.

According to the method of the present invention, after the OTP agent is downloaded to the user mobile phone 585 or when the OTP agent downloaded to the user mobile phone 585 is first executed, the user mobile phone 585 is the OTP agent. Input a user password or a user personal identification number for generating an OTP through, and encrypts the user password or the user personal identification number stored in the memory provided in the mobile phone, or provided in the user mobile phone 585 It is preferable to store in the USIM, and when the OTP agent is generated to generate the OTP afterwards, the OTP agent outputs an interface for inputting a user password or a user identification number, and the user password or user personal input through the interface Identification number and company stored in the memory (or USIM) It is preferable to authenticate the validity of the OTP generation by comparing the user password or the user identification number.

When it is confirmed that the OTP agent is already installed in the user mobile phone 585 by the agent checking means 530, or the OTP agent is downloaded and installed in the user mobile phone 585 through the agent providing means 535, The OTP interface providing means 540 is characterized in that the processing to provide an OTP input interface for inputting the OTP generated by the OTP agent provided in the user's mobile phone 585 to the user wired terminal 500.

According to an embodiment of the present invention, the OTP interface providing means 540 relays directly to the user wired terminal 500 or the web server 505 through a communication network connected to the user wired terminal 500. Preferably, the user wired terminal 500 processes the OTP input interface to be provided.

When the OTP input interface is provided to the user wired terminal 500 by the OTP interface providing means 540, the OTP receiving means 545 is input from the user wired terminal 500 through the OTP input interface. It connects a communication session for receiving an OTP, and can be omitted when the user wired terminal 500 and the communication session are already connected.

According to an embodiment of the present invention, the OTP interface providing means 540 connects a communication channel with the user wired terminal 500, and provides the OTP input interface to the user wired terminal 500 through the communication channel. In one case, the OTP receiving means 545 checks the user wired terminal 500 information (eg, an IP address) from the communication channel provided with the OTP input interface to the user wired terminal 500, and the communication channel. A communication session for receiving the OTP from the user wired terminal 500 (eg, a memory area allocated to receive the OTP from the user wired terminal 500 and a communication thread code). It is desirable to.

According to another embodiment of the present invention, when the OTP interface providing means 540 provides the OTP input interface to the user wired terminal 500 through the web server 505, the OTP receiving means 545 is A communication session for receiving the user wired terminal 500 information (eg, an IP address) from the web server 505, and receiving the OTP from the user wired terminal 500 based on the user's wired terminal 500 (eg, the user's wired). It is preferable to connect a memory area allocated to receiving the OTP from the terminal 500 and a communication thread code.

Here, the communication session preferably comprises a secure communication session for encrypting and receiving the OTP and decrypting the encrypted OTP.

When the communication session is connected to the user wired terminal 500, the OTP receiving means 545 receives the OTP input from the user wired terminal 500 through the OTP input interface through the communication session. The OTP providing means 550 transmits the received OTP to the OTP server 570 of the OTP agent provider provided in the user mobile phone 585.

The OTP providing means 550, when the OTP input interface is provided to the user wired terminal 500 by the OTP interface providing means 540, the mobile phone number corresponding to the user mobile phone 585 (or the user resident registration number) Information can be connected to user wired terminal 500 information (eg, IP address of the user wired terminal 500) provided with the OTP input interface or communication session information connected to the user wired terminal 500 (eg, refer to a DB). Or to map a pointer reference so as to maintain the OTP from the user wired terminal 500 through the OTP receiving means 545.

If the OTP is received from the user wired terminal 500 through the OTP receiving means 545, the OTP providing means 550 may provide information about the user wired terminal 500 corresponding to the user wired terminal 500. Check the communication session information, the user wired terminal 500 information or the mobile phone number connected to the communication session information, the mobile phone number and the received OTP of the OTP agent provider provided in the user mobile phone 585 Send to the OTP server 570.

According to another embodiment of the present invention, the OTP providing means 550 is authenticated by the user by the user authentication means 525, or the OTP to the user mobile phone 585 by the agent verification means 530 When it is confirmed that the agent is mounted or when the OTP agent is provided to the user mobile phone 585 by the agent providing means 535, the user wired terminal 500 connects the information with the mobile phone number and maintains it. It is possible that the present invention is not limited thereby.

The OTP server 570 confirms OTP generation information necessary for generating OTP 'to be compared with the OTP from the storage medium 575, and generates a fixed seed value and a dynamic seed for generating OTP' from the OTP generation information. Determine a value, and generate the OTP 'to be compared with the received OTP using the determined fixed seed value and the dynamic seed value.

If the OTP 'is generated, the OTP server 570 checks the validity of payment for the mobile number by comparing the received OTP and the generated OTP', and outputs the payment validity result to the payment system 510. And the authentication result receiving means 555 is characterized in that for receiving and reading the payment validity results from the OTP server 570 to confirm the payment validity.

The information providing means 560 transmits a micropayment validity verification result corresponding to a comparison result of the OTP 'and the OTP generated by the user's mobile phone 585 to the web server 505 operating the micropayment target website. It is characterized by.

Referring to FIG. 5, when the payment validity is authenticated by the OTP server 570, the payment system 510 processes the payment amount to be settled through a communication charge imposed on the mobile phone. It is preferable to further comprise 565).

According to the embodiment of the present invention, the payment processing means 565 confirms the payment amount to be charged to the communication fee of the user mobile phone 585 from the web server 505, and associates with the mobile communication company server 580. It is preferable to query the payment limit for the user's mobile phone 585 number, and compare the payment amount and the payment limit to approve payment through the communication fee charged to the mobile phone.

According to another exemplary embodiment of the present invention, the payment processing means 565 may store and manage the user mobile phone 585 number and payment limit information corresponding thereto through a separate database, in which case the payment The processing means 565 can query the payment limit for the user mobile phone 585 number through the database, compare the payment amount with the payment limit, and approve the payment through the communication fee charged to the mobile phone. Do.

If the payment using the communication fee charged to the mobile phone is approved, the payment processing means 565 processes the payment amount to be charged to the communication fee for the user mobile phone 585 through the mobile communication company server 580. In addition, payment approval information for the payment amount is transmitted to the web server 505.

6 is a diagram illustrating a mobile phone payment process using OTP according to a second embodiment of the present invention.

In more detail, FIG. 6 is a user wired terminal 500 connected to a small payment target website, and an interface for selecting a mobile carrier corresponding to the user mobile phone 585 and inputting a user mobile phone 585 number and a user social security number is provided. The mobile terminal 500 receives the mobile communication company selection information corresponding to the user mobile phone 585 and the user mobile phone 585 number and the user resident registration number information from the user wired terminal 500 through the interface, and responds to the mobile communication company selection information. After confirming the user authentication result and the OTP (One Time Password) agent is installed in the user mobile phone 585 through the mobile communication company server 580, the user wired terminal 500 to the user mobile phone 585 Illustrates a payment process that provides an interface for inputting an OTP generated by a provided OTP agent. For those skilled in the art to which the present invention pertains, various implementation methods (e.g., some steps may be omitted or ordered) for the mobile phone payment process using the OTP by referring to and / or modifying the present invention. It can be inferred that the modified implementation method), but the present invention includes all the implementation methods inferred above, the technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in FIG. 6, the payment system 510 illustrated in FIG. 5 is referred to as a “server” for convenience.

Referring to FIG. 6, a user accesses the web server 505 to purchase tangible / intangible goods, and a communication fee charged to the user's mobile phone 585 corresponding to a purchase price for the goods. When the mobile phone payment means is selected to make a payment (600), the server relays the web server 505 directly to the user wired terminal 500 or through the communication network to which the user wired terminal 500 is connected. The mobile phone payment interface for selecting a mobile carrier corresponding to the user mobile phone 585 and inputting a user mobile phone 585 number and a user social security number to the user wired terminal 500 is processed (605), and the user wired terminal 500 is processed. In operation 610, the mobile communication company selection information, the user's mobile phone 585 number, and the user's social security number information received through the mobile phone payment interface are received.

If the mobile communication company selection information, the user mobile phone 585 number and the user resident registration number information is received from the user wired terminal 500 (615), the server is sent to the mobile communication company server 580 corresponding to the mobile communication company selection information; User authentication is requested by transmitting the user mobile phone 585 number and user social security number information, and the user authentication result for the user mobile phone 585 number and user social security number information through the subscriber D / B in the mobile communication company server 580 When configured and transmitted, the user authentication result is received and read to authenticate the user who has requested the mobile payment.

If the user is not authenticated (625), the server generates a user authentication error and transmits to the user wired terminal 500 (or user mobile phone 585) and the web server 505 (630).

On the other hand, if the user is authenticated (625), the server transmits the user's mobile phone (585) number to the mobile carrier server 580 corresponding to the mobile carrier selection information (mobile carrier server 580 for the user authentication) Can be omitted if the user's mobile phone 585 number is transmitted to the user's mobile phone 585 through the OTP agent D / B (not shown) in the mobile communication company server 580. Check whether the OTP agent for generating the OTP for authenticating the mobile phone payment is provided, and if the OTP agent confirmation result corresponding to the confirmation result is configured and transmitted, the user receives and reads the OTP agent confirmation result. Check whether the mobile phone 585 is provided with an OTP agent for generating an OTP for authenticating the mobile micropayment (635).

If the user mobile phone 585 is not equipped with the OTP agent (640), the server processes the OTP agent to be provided to the user mobile phone 585 through the process shown in FIG.

On the other hand, if the user mobile phone 585 is equipped with the OTP agent (640), the server has an OTP input interface for inputting the OTP generated through the OTP agent provided in the user mobile phone 585 is the user wired terminal Processed to be provided at 500 (645).

7 is a diagram illustrating a process of providing an OTP agent to a user mobile phone 585 according to the second embodiment of the present invention.

In more detail, FIG. 7 includes a callback UEL for providing the OTP agent to the user mobile phone 585 when the OTP agent is not mounted on the user mobile phone 585 in the process shown in FIG. A process of processing a message to be transmitted to the user mobile phone 585 and showing the process of providing the OTP agent to the user mobile phone 585 through the message, having a general knowledge in the art to which the present invention pertains. If so, various implementation methods (e.g., some steps may be omitted or reordered) may be inferred by referring to and / or modifying the drawing 7 to provide the OTP agent to the user mobile phone 585. However, the present invention includes all the implementation methods inferred from the above, and only the implementation method shown in FIG. This technical feature is not limited.

Hereinafter, in FIG. 7, the payment system 510 shown in FIG. 5 is referred to as a “server” for convenience.

Referring to FIG. 7, when the OTP agent is not installed in the user mobile phone 585 in the process illustrated in FIG. 6, the server includes a callback UEL for downloading the OTP agent to the user mobile phone 585. The mobile phone 585 receiving the message requests the OTP agent to the OTP server 570 corresponding to the callback UEL.

The OTP server 570 corresponding to the callback UEL provides the OTP agent to the user mobile phone 585 (705).

If the OTP agent is provided to the user mobile phone 585 (710), the user mobile phone 585 inputs a user password or a user personal identification number for generating an OTP through the OTP agent, the input The user password or user identification number is encrypted and stored in the memory provided in the mobile phone, or stored in the USIM provided in the user mobile phone 585 to register (715).

8 is a diagram illustrating a mobile phone payment approval process using OTP according to a second embodiment of the present invention.

In more detail, in FIG. 8, after the OTP input interface is provided to the user wired terminal 500 in the process illustrated in FIG. 6, the payment system 510 receives the OTP input through the OTP input interface. When provided to the OTP server 570, the OTP server 570 checks the validity of the OTP 'generation and generates the OTP' and then authenticates the payment validity compared to the OTP to provide to the payment system 510, the payment As a process of payment approval processing based on the payment validity in the system 510, a person having ordinary knowledge in the art to which the present invention pertains may refer to and / or modify this drawing to use the OTP. Various implementation methods (for example, some steps may be omitted or the order may be changed) for the mobile phone payment approval process may be inferred. It is made to include all the additional implementation methods, the technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in FIG. 8, the payment system 510 shown in FIG. 5 is referred to as a “server” for convenience.

Referring to FIG. 8, after the OTP input interface is provided to the user wired terminal 500 in the process illustrated in FIG. 6, the server inputs an OTP input from the user wired terminal 500 through the OTP input interface. Verify that is received (800).

If the OTP is received (805), the server provides the received OTP to the OTP server 570 (810), and the OTP server 570 generates an OTP 'to be compared with the received OTP. Determine the generation information (815), determine a fixed seed value and a dynamic seed value for generating OTP 'from the OTP generation information (820), and generate the OTP' using the determined fixed seed value and the dynamic seed value The payment validity is verified in comparison with the received OTP (825).

If the payment validity is not authenticated (830), the OTP server 570 generates payment error information and transmits it to the server (835), and the server transmits the payment error information to the user wired terminal 500 (or User mobile phone 585) and the web server 505 is transmitted (840).

If the payment validity is authenticated (830), the OTP server 570 generates the payment validation result and transmits it to the server (845), and the server transmits the payment validation result to the user wired terminal (500). (Or the user's mobile phone 585) and the web server 505 is transmitted (850), and in response to the payment validity check result, payment approval through the communication fee of the user's mobile phone 585 is processed (855).

According to an embodiment of the present invention, the server confirms the payment amount to be charged to the communication fee of the user mobile phone 585 from the web server 505, and in connection with FIG. 5 for the user mobile phone 585 number; It is preferable to approve a payment through a communication fee imposed on the mobile phone by inquiring a payment limit and comparing the payment amount with the payment limit.

9 is a diagram showing the configuration of a mobile phone payment processing system using OTP according to a third embodiment of the present invention.

In more detail, FIG. 9 is a user wired terminal 900 connected to a small payment target website, and an interface for selecting a mobile carrier corresponding to the user's mobile phone 985 and inputting a user's mobile phone 985 number and a user's social security number is provided. The mobile communication company selection information corresponding to the user mobile phone 985 and the user mobile phone 985 number and the user resident registration number information from the user wired terminal 900 through the interface, and the mobile communication company selection information is received. After confirming the user authentication result through the mobile carrier server 980, and whether or not the OTP (One Time Password) agent is installed in the user mobile phone 985 through the OTP server 970, the user wired terminal An interface for inputting an OTP generated by an OTP agent provided in the user mobile phone 985 is provided to the 900. When processing to receive the OTP input through the interface from the user wired terminal 900 and transmits to the OTP server 970, the OTP server 970 authenticates the OTP 'generation validity and payment validity to the mobile phone micro As a configuration of a system for processing a payment, a person having ordinary knowledge in the technical field to which the present invention pertains may refer to and / or modify the drawing 9 and various implementation methods for a mobile phone small payment processing system using the OTP. (Eg, some implementations may be omitted, subdivided, or combined). However, the present invention includes all the implementation methods inferred above, and only the implementation method shown in FIG. The technical features are not limited.

For example, the mobile phone micropayment processing system shown in FIG. 9 can be applied to a system for processing payment using a customer's payment means, except that the payment amount is added to the communication fee of the user's mobile phone 985, The present invention naturally includes all payment processing systems that can be inferred as described above.

Referring to FIG. 9, the mobile phone micropayment processing system includes a user wired terminal 900 used by a user who accesses a website for micropayment and a user mobile phone 985 possessed by the user. Small payment target web that sells tangible / intangible goods to the user through the terminal 900 and makes payment through the mobile phone payment means for imposing a payment amount for the sold goods on a user's mobile phone 985 communication fee At least one web server 905 that operates a site, a payment system 910 for processing a micro payment of a mobile phone using OTP in association with the user wired terminal 900 and a user mobile phone 985, and the user mobile phone 985 OTP server 970 for authenticating the payment validity through OTP generated by the OTP agent provided in the) and the mobile communication company on the mobile communication network connected to the user's mobile phone (985) It characterized in that it comprises a (980), the payment system 910 is implemented in the form of an authentication server (or relay server) connected to the web server 905 and the mobile carrier server 980, or the web server It is possible to implement in the form of the internal component of 905, or in the form of the internal component of the mobile communication server 980, it will be apparent that the present invention is not limited thereby.

The user wired terminal 900 includes one or more personal computers and laptops having a browser that can access a web server 905 that operates the small payment target website, and the web server 905 or a payment system. A mobile phone payment interface for selecting a mobile carrier corresponding to the user's mobile phone 985 and a user's mobile phone 985 and a user's social security number is output from the screen 910 and output to the screen output means, and through the key input means. The mobile communication company selects information corresponding to the user's mobile phone 985, the user's mobile phone 985, and the user's social security number information by inputting the payment interface to the web server 905 or the payment system 910.

The web server 905 sells tangible / intangible goods to the user through the user wired terminal 900, and charges the mobile phone 985 a communication fee for the sold goods to the user mobile phone 985. As a generic term for a server operating a small payment target website that can be paid through, when the user wired terminal 900 selects the mobile phone payment means as the payment means for the payment amount, the user wired terminal 900 The mobile phone payment interface is provided, or the mobile phone payment interface is provided to the user wired terminal 900 through the payment system 910.

The user mobile phone 985 is a mobile phone possessed by a user who purchases tangible / intangible goods sold by the web server 905 and authenticates payment validity using a communication fee charged to the user mobile phone 985. A function of downloading an OTP agent, and a function of generating an OTP by driving the OTP agent and outputting the generated OTP (for example, a screen output or via a near-field communication means such as Bluetooth, Wi-Fi, RF communication, etc.). It is possible to output to the user wired terminal 900).

According to the present invention, the user wired terminal 900 is an embodiment of a first terminal in which a user connects to a server through a communication network and purchases tangible / intangible goods sold by the server. It is possible to carry out various modifications according to the communication network and server type and characteristics.

According to the present invention, the user mobile phone 985 is an embodiment of a second terminal equipped with an OTP agent for authenticating a payment validity for a purchase price for purchasing goods through the first terminal. The terminal may include all communication terminals except for the first terminal.

For example, when the server to which the first terminal is connected is a home shopping server, the first terminal may include a user's IPTV, and the second terminal includes a wired telephone / VoIP phone provided near the IPTV. can do.

Alternatively, when the server to which the first terminal is connected is an ARS server, the first terminal may include a user's landline phone / mobile phone / VoIP phone, and the second terminal is another voice call except for the first terminal. Terminal (e.g., if the first terminal is a landline phone, the second terminal includes a mobile phone / VoIP phone; if the first terminal is a mobile phone, the second terminal includes a landline phone / VoIP phone, and the first terminal If the VoIP phone, the second terminal may include a landline / mobile phone).

In other words, the user wired terminal 900 of the present application is not limited to the above-described wired terminal, and it will be apparent that the user mobile phone 985 of the present application is also not limited to the mobile phone.

The mobile telecommunication company server 980 is a generic term for a mobile telecommunication company side server provided on the mobile communication network to which the user mobile phone 985 is connected to interface with the mobile phone. Message server, data exchange server, WAP (WAP) for transmitting the information (or data) requested to be provided to the user's mobile phone 985 through a mobile communication system (eg, exchange, base station, etc.) according to a preset communication protocol. It is preferable to include one or more servers.

According to an embodiment of the present invention, the mobile telecommunication company server 980 preferably has a function of authenticating a user by inquiring a subscriber D / B (not shown) through the user's mobile phone 985 and the user's social security number information. .

The OTP server 970 is characterized in that to authenticate the payment via the OTP generated by the OTP agent provided in the user's mobile phone (985), the OTP agent for generating the OTP for the payment validity authentication is provided The mobile phone number corresponding to the user mobile phone 985, the OTP agent information provided in the user mobile phone 985 corresponding to the mobile phone number, and the OTP 'to be compared with the OTP generated through the OTP agent provided in the mobile phone. And a storage medium 975 for storing OTP generation information including at least one fixed seed value for generating and a parameter for determining a dynamic seed value, or being connected through a communication network. do.

The mobile phone number is a general term of information for identifying the user mobile phone 985 and includes one or more telephone numbers, serial numbers (ESNs), and subscriber identification numbers assigned to the user mobile phone 985, or the user. At least one unique number (or unique code) stored in the memory of the mobile phone (985), USIM serial number assigned to the USIM provided in the user mobile phone (985), the unique number (or unique code) recorded in the USIM It is preferable to comprise.

The OTP agent information may include one or more version information, an OTP generation algorithm, and an OTP generation method of the OTP agent provided in the user mobile phone 985 corresponding to the mobile phone number.

Here, the OTP generation algorithm and the OTP generation method may use different algorithms and generation methods for each OTP agent, and thus the present invention is not limited thereto.

The OTP generation information may include one or more fixed seed values used to generate an OTP according to the OTP generation algorithm and the OTP generation method, and a parameter for determining the dynamic seed value. It is preferable to comprise.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm in a time-synchronization manner, wherein the parameter of the OTP generation information is It is preferable to include synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm of a challenge-response manner, and the parameter of the OTP generation information is the challenge- It is preferable to include a random number generating seed for generating a random number corresponding to the dynamic seed value of the response type OTP.

According to an embodiment of the present invention, the OTP generation information is stored in the user mobile phone 985 memory in association with an OTP agent downloaded to the user mobile phone 985, or is provided in the user mobile phone 985. It is preferable to be stored in the USIM (encryption storage possible).

When the OTP is provided from the payment system 910, the OTP server 970 checks OTP generation information for generating OTP 'to be compared with the OTP, and generates a fixed seed for generating OTP' from the OTP generation information. Determine the value and the dynamic seed value, generate an OTP 'using the determined seed value and the dynamic seed value, and compare the received OTP and the generated OTP' to confirm the micropayment validity for the mobile number. To provide to the payment system (910).

Referring to FIG. 9, the payment system 910 selects a mobile communication company corresponding to the user's mobile phone 995 and selects a user's mobile phone 985 and the user's mobile terminal 900 connected to the small payment target website. Payment interface providing means (915) for processing to provide a mobile phone payment interface for inputting the social security number, the mobile carrier selection information corresponding to the user mobile phone 985 and the user mobile phone 985 and the user social security number through the mobile phone payment interface Information receiving means 920 for receiving information and a mobile communication company server 980 corresponding to the received mobile carrier selection information, and transmitting the user's mobile phone 985 and the user's social security number information to the mobile communication company server 980; Receive and receive the user authentication results corresponding to the user mobile number (985) number and user social security number verification results through The user authentication means 925 for reading and authenticating the user, and whether the OTP agent is already installed in the user mobile phone 985 corresponding to the user mobile phone 985 number through the OTP server 970 When the agent checking means 930 and the OTP agent are not already installed in the user mobile phone 985, the message including the callback URL for downloading the OTP agent is transmitted to the user mobile phone 985. It is characterized by comprising the agent providing means 935 to.

In addition, the payment system 910, when the OTP agent is pre-installed in the user mobile phone 985, or when the OTP agent is downloaded and installed in the user mobile phone 985, the user mobile phone to the user wired terminal 900 OTP interface providing means 940 for processing to provide an OTP input interface for inputting OTP generated by the OTP agent provided in (985), and OTP input through the interface from the user wired terminal (900) OTP receiving means 945 for receiving, OTP providing means 950 for transmitting the received OTP to the OTP server 970 of the OTP agent provider provided in the user mobile phone 985, and the OTP server 970 Authentication result receiving means 955 for receiving a comparison result of the OTP 'generated from the user's mobile phone 985 and the comparison result of the OTP generated from the user's mobile phone 985 with the OTP' And the information providing means 960 for transmitting the corresponding micropayment validation result to the micropayment target website.

According to the present invention, each means constituting the payment system 910 is implemented as a separate server for each means, or in the form of a predetermined authentication server (or relay server) including the means, or two The above means are combined to be implemented as a separate server, or the means are implemented in the form of components in the web server 905, or the means are implemented in the form of components in the mobile communication server 980, or Some of the means are implemented as components in the web server 905 and some are implemented as components in the carrier server 980, or some of the means are implemented as components in the web server 905 and some are Is implemented as a component in the mobile carrier server 980 and the other part can all be implemented in a separate server form, the billing system 910 to obtain Bayida put out to clarify SHALL not limited by the embodiment to which the present invention method.

The user accesses the web server 905 to purchase tangible / intangible goods, and pays a mobile phone to pay a payment amount corresponding to the purchase price for the goods through a communication fee charged to the user mobile phone 985. If a means is selected, the payment interface providing means 915 directly relays the web server 905 to the user wired terminal 900 through the communication network to which the user wired terminal 900 is connected, or the user. The mobile terminal 900 is characterized in that the mobile phone payment interface for selecting the mobile carrier corresponding to the user mobile phone 985 and the user mobile phone 985 and the user resident registration number is provided.

When the mobile phone payment interface is provided to the user wired terminal 900 by the payment interface providing means 915, the information receiving means 920 is input through the mobile phone payment interface from the user wired terminal 900. The communication session for receiving the mobile communication company selection information corresponding to the user mobile phone 985 and the user mobile phone 985 number and the user social security number information is connected.

According to an embodiment of the present invention, the payment interface providing means 915 connects a communication channel with the user wired terminal 900 and provides the mobile phone payment interface to the user wired terminal 900 through the communication channel. In one case, the information receiving means 920 checks the user wired terminal 900 information (eg, an IP address) from the communication channel provided with the mobile phone payment interface to the user wired terminal 900, and the communication channel. A communication session for receiving the mobile communication company selection information corresponding to the user mobile phone 985, the user mobile phone 985 number and the user resident registration number information from the user wired terminal 900 (for example, the user wired terminal 900). Memory area allocated to receive the mobile communication company selection information, the user mobile phone 985 number and the user social security number information from It is preferred to connect the communication thread (Thread) code).

According to another embodiment of the present invention, when the payment interface providing means 915 provides the mobile phone payment interface to the user wired terminal 900 through the web server 905, the information receiving means 920 is Receiving the user wired terminal 900 information (eg, an IP address) from the web server 905, and selecting mobile communication company selection information corresponding to the user mobile phone 995 from the user wired terminal 900 based on the information. Communication session for receiving user mobile phone 985 number and user social security number information (e.g., memory allocated to receive the mobile communication company selection information, user mobile phone 985 number and user social security number information from the user wired terminal 900). It is desirable to link the area with the communication thread code.

Here, the communication session is received by encrypting the mobile communication company selection information corresponding to the user mobile phone (985) and the user mobile phone 985 and the user resident registration number information encrypted, the mobile communication company corresponding to the encrypted user mobile phone (985) It preferably comprises a secure communication session for decrypting the selection information and the user's mobile phone (985) number and user social security number information.

When the communication session is connected to the user wired terminal 900, the information receiving means 920 is a mobile communication company selection information corresponding to the user mobile phone 985 from the user wired terminal 900 and the user mobile phone through the communication session (985) characterized in that to receive the number and the user registration number information.

When the mobile communication company selection information corresponding to the user mobile phone 985, the user mobile phone 985 number and the user social security number information are received from the user wired terminal 900, the user authentication means 925 is connected to the mobile communication company selection information. The user mobile phone 985 and the user resident registration number information are transmitted to the corresponding mobile communication company server 980, and the user mobile phone 985 and the user resident registration number information are transmitted through the subscriber D / B in the mobile communication company server 980. When the user authentication result is configured and transmitted, the user authentication means 925 receives and reads the user authentication result to authenticate the user who has requested the micro payment.

In addition, the agent identification means 930 transmits the user mobile phone 985 number to the OTP server 970, and the user mobile phone 985 number through the storage medium 975 in the OTP server 970. If the user mobile phone (985) corresponding to the OTP agent for generating an OTP for authenticating the mobile phone micropayment is provided, and configures and transmits the OTP agent verification result corresponding to the verification result, the agent verification means In operation 930, the OTP agent confirmation result is received and read to determine whether the user mobile phone 985 includes an OTP agent for generating an OTP for authenticating the mobile phone payment.

If the agent confirming means 930 confirms that the user's mobile phone 985 is not provided with an OTP agent for generating an OTP for authenticating the mobile payment, the agent providing means for processing 935 is provided. The mobile phone 985 may process a message including a callback URL for downloading an OTP agent to be transmitted to the user mobile phone 985.

According to an embodiment of the present invention, when it is confirmed that the OTP agent is not provided in the user mobile phone 985, the agent providing means 935 outputs a pop-up through a mobile phone payment interface provided to the user wired terminal 900. The OTP agent download request requested by the user through an OTP agent download interface (or menu) included in the mobile phone payment interface or outputted, and in response to the OTP agent download request, the user mobile phone 985. As a result, it is preferable to process a message including a callback UEL for OTP agent download.

The callback UEL for downloading the OTP agent may include URL information of the OTP server 970 that provides the OTP agent to the user mobile phone 985, and receives the message including the callback UEL. The user mobile phone 985 downloads the OTP agent and mounts it on the user mobile phone 985 according to an OTP agent download procedure using a preset mobile communication network.

After the OTP agent is downloaded to the user mobile phone 985, the OTP server 970 provided by the OTP agent to the user mobile phone 985 generates an OTP through the OTP agent provided in the user mobile phone 985. Provides OTP generation information for the user mobile phone 985.

According to an embodiment of the present invention, the OTP server 970 allocates one or more fixed seed values for generating an OTP through an OTP agent provided in the user mobile phone 985, and assigns the one or more fixed seed values assigned thereto. Generating OTP generation information (or extracting from a database storing OTP generation information) including a value and a parameter for determining one or more dynamic seed values required to generate an OTP via the OTP agent, and generating the OTP generation information It is preferable to provide to the user mobile phone (985) through a mobile communication network, the OTP server 970 is a secure communication channel with the user mobile phone (985) to provide the OTP generation information to the user mobile phone (985). Connect

According to an embodiment of the present invention, the OTP server 970 generates the OTP after the OTP agent is downloaded to the user mobile phone 985 or when the OTP agent downloaded to the user mobile phone 985 is first executed. It is preferable to generate (or extract) information and provide the information to the user mobile phone 985. The OTP generation information is encrypted and stored in a memory provided in the user mobile phone 985, or in the user mobile phone 985. It is preferably stored in the provided Universal Subscriber Identity (USIM) Module.

According to an embodiment of the present invention, after the OTP agent is downloaded to the user mobile phone 985 or when the OTP agent downloaded to the user mobile phone 985 is first executed, the user mobile phone 985 is the OTP agent. Input a user password or a user personal identification number for generating an OTP through, and encrypts the input user password or user personal identification number to store in the memory provided in the mobile phone, or provided in the user mobile phone 985 It is preferable to store in the USIM, and when the OTP agent is generated to generate the OTP afterwards, the OTP agent outputs an interface for inputting a user password or a user identification number, and the user password or user personal input through the interface Identification number and company stored in the memory (or USIM) It is preferable to authenticate the validity of the OTP generation by comparing the user password or the user identification number.

When it is confirmed that the OTP agent is already installed in the user mobile phone 985 by the agent checking means 930, or the OTP agent is downloaded and installed in the user mobile phone 985 through the agent providing means 935, The OTP interface providing means 940 is characterized in that the processing to provide the OTP input interface for inputting the OTP generated by the OTP agent provided in the user mobile phone 985 to the user wired terminal 900.

According to the method of the present invention, the OTP interface providing means 940 relays directly to the user wired terminal 900 or the web server 905 through a communication network connected to the user wired terminal 900. Preferably, the user wired terminal 900 processes the OTP input interface to be provided.

When the OTP input interface is provided to the user wired terminal 900 by the OTP interface providing means 940, the OTP receiving means 945 is input from the user wired terminal 900 through the OTP input interface. It connects a communication session for receiving an OTP, and can be omitted when the user wired terminal 900 and the communication session are already connected.

According to an embodiment of the present invention, the OTP interface providing means 940 connects a communication channel with the user wired terminal 900 and provides the OTP input interface to the user wired terminal 900 through the communication channel. In one case, the OTP receiving means 945 checks the user wired terminal 900 information (for example, an IP address) from the communication channel provided with the OTP input interface to the user wired terminal 900, and the communication channel. A communication session for receiving the OTP from the user wired terminal 900 (for example, a memory area allocated to receiving the OTP from the user wired terminal 900 and a communication thread code). It is preferable to connect.

According to another embodiment of the present invention, when the OTP interface providing means 940 provides the OTP input interface to the user wired terminal 900 through the web server 905, the OTP receiving means 945 is A communication session for receiving the user wired terminal 900 information (eg, an IP address) from the web server 905 and receiving the OTP from the user wired terminal 900 based on the communication session (eg, the user wired). It is preferable to connect a memory area allocated for receiving the OTP from the terminal 900 and a communication thread code.

Here, the communication session preferably comprises a secure communication session for encrypting and receiving the OTP and decrypting the encrypted OTP.

When the communication session is connected to the user wired terminal 900, the OTP receiving means 945 receives the OTP input from the user wired terminal 900 through the OTP input interface through the communication session. The OTP providing means 950 may transmit the received OTP to an OTP server 970 of an OTP agent provider provided in the user mobile phone 985.

The OTP providing means 950, when the OTP input interface is provided to the user wired terminal 900 by the OTP interface providing means 940, a mobile phone number corresponding to the user mobile phone 985 (or the user social security number) Information can be connected to user wired terminal 900 information (eg, IP address of the user wired terminal 900) provided with the OTP input interface or communication session information connected to the user wired terminal 900 (see, for example, DB). Or, so as to map a pointer reference and maintain the OTP from the user wired terminal 900 through the OTP receiving means 945.

If the OTP is received from the user wired terminal 900 through the OTP receiving means 945, the OTP providing means 950 may provide information about the user wired terminal 900 corresponding to the user wired terminal 900. Check the communication session information, the user wired terminal 900 information or the mobile phone number associated with the communication session information, the mobile phone number and the received OTP of the OTP agent provider provided in the user mobile phone 985 Send to OTP server 970.

According to another embodiment of the present invention, the OTP providing means 950 is authenticated by the user by the user authentication means 925, or the OTP to the user mobile phone 985 by the agent identification means 930 When it is confirmed that the agent is mounted or when the OTP agent is provided to the user mobile phone 985 by the agent providing means 935, the user wired terminal 900 information and the mobile phone number to connect and maintain It is possible that the present invention is not limited thereby.

The OTP server 970 is provided with the mobile number and OTP from the payment system 910, and confirms OTP generation information required to generate OTP 'to be compared with the OTP from the storage medium 975, The fixed seed value and the dynamic seed value for generating the OTP 'are determined from the OTP generation information, and the OTP' to be compared with the received OTP is generated using the determined seed value and the dynamic seed value.

If the OTP 'is generated, the OTP server 970 compares the received OTP and the generated OTP' to confirm the payment validity of the mobile number, and the payment validity result is determined by the payment system 910. And the authentication result receiving means 955 is characterized in that for receiving and reading the payment validity results from the OTP server 970 to confirm the payment validity.

The information providing means 960 transmits a micropayment validity verification result corresponding to a comparison result of the OTP 'and the OTP generated by the user's mobile phone 985 to the web server 905 operating the micropayment target website. It is characterized by.

Referring to FIG. 9, when the payment validity is authenticated by the OTP server 970, the payment system 910 processes payment so that the payment amount is settled through a communication fee charged to the mobile phone. It is preferable to further comprise 965).

According to the method of the present invention, the payment processing means 965 confirms the payment amount to be charged to the communication fee of the user mobile phone 985 from the web server 905 and associates with the mobile communication company server 980. It is preferable to query the payment limit for the user's mobile phone (985) number, and to compare the payment amount and the payment limit to approve payment through the communication charges imposed on the mobile phone.

According to another exemplary embodiment of the present invention, the payment processing unit 965 may store and manage the user mobile phone 985 number and payment limit information corresponding thereto through a separate database, in which case the payment The processing means 965 can query the payment limit for the user mobile phone 985 number through the database, compare the payment amount with the payment limit, and approve the payment through the communication fee charged to the mobile phone. Do.

If the payment using the communication fee charged to the mobile phone is approved, the payment processing means 965 processes the payment amount to be charged to the mobile phone 985 through the mobile communication company server 980. In addition, payment approval information for the payment amount is transmitted to the web server 905.

10 is a diagram illustrating a mobile phone payment process using OTP according to a third embodiment of the present invention.

In more detail, FIG. 10 is a user wired terminal 900 connected to a small payment target website, and an interface for selecting a mobile carrier corresponding to the user's mobile phone 985 and inputting a user's mobile phone 985 number and a user's social security number is provided. The mobile communication company selection information corresponding to the user mobile phone 985 and the user mobile phone 985 number and the user resident registration number information from the user wired terminal 900 through the interface, and the mobile communication company selection information is received. After confirming the user authentication result through the mobile carrier server 980, and whether or not the OTP (One Time Password) agent is installed in the user mobile phone 985 through the OTP server 970, the user wired terminal In step 900, an interface for inputting an OTP generated by an OTP agent provided in the user mobile phone 985 is provided. As a payment process is illustrated, those of ordinary skill in the art to which the present invention pertains can refer to and / or modify this drawing 10 to implement various methods for the mobile phone payment process using the OTP (eg, some steps). May be omitted or the order may be changed), but the present invention includes all the implementation methods inferred, and the technical features are not limited to the implementation method shown in FIG.

Hereinafter, in FIG. 10, the payment system 910 illustrated in FIG. 9 is referred to as a “server” for convenience.

Referring to FIG. 10, a user accesses the web server 905 to purchase tangible / intangible goods, and a communication fee charged to the user's mobile phone 985 by a payment amount corresponding to the purchase price of the goods. When the mobile phone payment means is selected to make a payment (1000), the server relays the web server 905 directly to the user wired terminal 900 or directly through the communication network to which the user wired terminal 900 is connected. A mobile payment interface for selecting a mobile communication company corresponding to the user mobile phone 985 and inputting a user mobile phone 985 number and a user social security number to the user wired terminal 900 is processed (1005), and the user wired terminal 900 is processed. In step 1010, the mobile communication company selection information, the user's mobile phone 985, and the user's social security number information received through the mobile phone payment interface are received.

If the mobile communication company selection information, the user mobile phone (985) number and the user resident registration number information is received from the user wired terminal (900) (1015), the server to the mobile communication company server 980 corresponding to the mobile carrier selection information; User authentication is requested by transmitting user mobile phone 985 and user social security number information, and the user authentication result for the user mobile phone 985 and user social security number information through the subscriber D / B in the mobile phone gentleman server 980 When configured and transmitted, the user authentication result is received and read to authenticate the user who has requested the mobile phone payment (1020).

If the user is not authenticated (1025), the server generates a user authentication error and transmits it to the user wired terminal 900 (or user mobile phone 985) and the web server 905 (1030).

On the other hand, if the user is authenticated (1025), the server transmits the user's mobile phone (985) number to the OTP server 970, the user's mobile phone (985) through the storage medium 975 in the OTP server (970) If the user mobile phone 985 corresponding to the number is provided with an OTP agent for generating an OTP for authenticating the mobile micropayment, and configures and transmits an OTP agent verification result corresponding to the verification result, the OTP Receiving and reading an agent verification result, it is checked whether the user mobile phone 985 is provided with an OTP agent for generating an OTP for authenticating the mobile payment.

If the OTP agent is not installed in the user mobile phone 985 (1040), the server processes the OTP agent to be provided to the user mobile phone 985 through the process shown in FIG.

On the other hand, if the user mobile phone (985) is equipped with the OTP agent (1040), the server has an OTP input interface for inputting the OTP generated through the OTP agent provided in the user mobile phone (985) the user wired terminal Process to be provided to 900 (1045).

11 is a diagram illustrating a process of providing an OTP agent to a user mobile phone 985 according to the third embodiment of the present invention.

In more detail, FIG. 11 includes a callback UEL for providing the OTP agent to the user mobile phone 985 when the user mobile phone 985 is not equipped with the OTP agent in the process illustrated in FIG. 10. A process of processing a message to be transmitted to the user mobile phone 985, and showing the process of providing the OTP agent to the user mobile phone 985 through the message, a person of ordinary skill in the art to which the present invention belongs If not, various implementation methods (for example, some steps may be omitted or reordered) may be inferred from the process of providing an OTP agent to the user mobile phone 985 by referring to and / or modifying the drawing 11. However, the present invention includes all the implementation methods inferred from the above, and only the implementation method shown in FIG. The technical features are not limited.

Hereinafter, in FIG. 11, the payment system 910 shown in FIG. 9 is referred to as a "server" for convenience.

Referring to FIG. 11, when the OTP agent is not installed in the user mobile phone 985 in the process illustrated in FIG. 10, the server includes a callback UEL for downloading the OTP agent to the user mobile phone 985. The mobile phone 985 receives the message and requests the OTP agent from the OTP server 970 corresponding to the callback UEL.

The OTP server 970 corresponding to the callback UEL provides the OTP agent to the user mobile phone 985 (1105).

If the OTP agent is provided to the user mobile phone 985 (1110), the user mobile phone 985 inputs a user password or a user personal identification number for generating an OTP through the OTP agent, and inputs the input user. The password or user identification number is encrypted and stored in the memory provided in the mobile phone, or stored in the USIM provided in the user mobile phone 985 and registered (1115).

12 is a diagram illustrating a mobile phone payment approval process using OTP according to a third embodiment of the present invention.

In more detail, FIG. 12 illustrates that the OTP input interface is provided to the user wired terminal 900 in the process shown in FIG. 10, and then, the payment system 910 receives the OTP input through the OTP input interface. When provided to the OTP server 970, the OTP server 970 checks the validity of the OTP 'generation to generate the OTP' and verify the payment validity compared to the OTP to provide to the payment system 910, the payment A process of approving a payment based on the validity of payment in the system 910, and a person of ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawing 12 to use the OTP. Various implementation methods (for example, some steps may be omitted or the order may be changed) for the mobile phone payment approval process may be inferred. It is made to include all the inferred implementation method, the technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in this drawing 12, the payment system 910 shown in the drawing 9 is referred to as a "server" for convenience.

Referring to FIG. 12, after the OTP input interface is provided to the user wired terminal 900 in the process illustrated in FIG. 10, the server is inputted from the user wired terminal 900 through the OTP input interface. In step 1200, the OTP is received.

If the OTP is received (1205), the server provides the received OTP to an OTP server 970 (1210), and the OTP server 970 generates an OTP 'to be compared with the received OTP. Determine the generation information (1215), determine a fixed seed value and a dynamic seed value for generating the OTP 'from the OTP generation information (1220), and generate the OTP' using the determined fixed seed value and the dynamic seed value The payment validity is verified in comparison with the received OTP (1225).

If the payment validity is not authenticated (1230), the OTP server 970 generates payment error information and transmits it to the server (1235), the server transmits the payment error information to the user wired terminal 900 (or The user mobile phone 985) and the web server 905 are transmitted (1240).

If the payment validity is authenticated (1230), the OTP server 970 generates and transmits the payment validation result to the server (1245), the server transmits the payment validation result to the user wired terminal 900 (Or the user mobile phone 985) and the web server 905 (1250), and in response to the payment validity check result, the payment approval through the communication fee of the user mobile phone (985) (1255).

According to an embodiment of the present invention, the server confirms a payment amount to be charged to the communication fee of the user mobile phone 985 from the web server 905, and in connection with FIG. 9 for the user mobile phone 985 number. It is preferable to approve a payment through a communication fee imposed on the mobile phone by inquiring a payment limit and comparing the payment amount with the payment limit.

FIG. 13 is a diagram showing the configuration of a cellular phone payment processing system using OTP according to a fourth embodiment of the present invention.

In more detail, FIG. 13 is a user wired terminal 1300 accessing a small payment target website, and an interface for selecting a mobile carrier corresponding to the user's mobile phone 1375 and inputting a user's mobile phone 1375 number and a user's social security number is provided. After processing to receive the user's mobile terminal selection information corresponding to the user's mobile phone (1375), the user's mobile phone (1375) number and the user's social security number information from the wired terminal (1300) through the interface, the user's mobile phone (1375) number And after checking whether the user authentication result corresponding to the user social security number verification result and the OTP (One Time Password) agent are pre-installed on the user mobile phone 1375, the user wired terminal 1300 to the user mobile phone 1375. Process to provide an interface for inputting OTP generated by the provided OTP agent Receiving the OTP input via the interface from the user wired terminal 1300, and shows the system configuration for generating a mobile phone 'and comparing the received OTP and mobile phone micropayment, the present invention belongs to Those skilled in the art may refer to and / or modify this drawing 13 to implement various methods for the mobile phone payment processing system using the OTP (e.g., some components may be omitted, subdivided, or combined). Implementation method) may be inferred, but the present invention includes all the implementation methods inferred, and the technical features are not limited to the implementation method shown in FIG.

For example, the mobile phone micropayment processing system shown in FIG. 13 can be applied to a system for processing payment using a customer's payment means, except that the payment amount is added to the communication fee of the user's mobile phone 1375, The present invention naturally includes all payment processing systems that can be inferred as described above.

Referring to FIG. 13, the mobile phone micropayment processing system includes a user wired terminal 1300 used by a user who accesses a website for micropayment and a user mobile phone 1375 possessed by the user. Small payment target web that sells tangible / intangible goods to the user through the terminal 1300 and makes payments through the mobile phone payment means for imposing a payment amount for the sold goods on a user's mobile phone 1375 communication fee At least one web server 1305 that operates a site, a payment system 1310 for processing a micro payment of a mobile phone using an OTP in connection with the user wired terminal 1300 and a user mobile phone 1375, and the user mobile phone 1375 ) Is a mobile communication company server 1370 on the mobile communication network connected to the billing system 1310 is the web server 1305 and In the form of an authentication server (or a relay server) connected to the mobile communication company server 1370, or in the form of an internal component of the web server 1305, or in the form of an internal component of the mobile communication company server 1370 It is to be apparent that all implementations are possible, whereby the invention is not limited.

The user wired terminal 1300 may include one or more personal computers and laptops having a browser that can access a web server 1305 that operates the micropayment target website, and the web server 1305 or a payment system. A mobile phone payment interface for selecting a mobile carrier corresponding to the user mobile phone 1375 and inputting a user mobile phone 1375 number and a user social security number from 1310 is output to a screen output means, and the mobile phone payment is performed through a key input means. The mobile terminal selects information corresponding to the user's mobile phone 1375, user's mobile phone 1375, and user's social security number information by inputting the web server 1305 or payment system 1310.

The web server 1305 sells tangible / intangible goods to the user through the user wired terminal 1300, and the mobile phone payment means for charging the communication fee for the sold goods to the user mobile phone 1375 As a generic term for a server operating a small payment target website that can be paid through, when the user wired terminal 1300 selects the mobile phone payment means as a payment means for the payment amount, the user wired terminal 1300 The mobile phone payment interface is provided, or the mobile phone payment interface is provided to the user wired terminal 1300 through the payment system 1310.

The user mobile phone 1375 is a mobile phone possessed by a user who purchases tangible / intangible goods sold by the web server 1305 and authenticates payment validity using a communication fee charged to the user mobile phone 1375. A function of downloading an OTP agent, and a function of generating an OTP by driving the OTP agent and outputting the generated OTP (for example, a screen output or a user through a short range communication means such as Bluetooth, Wi-Fi, or RF communication). It can be output to the wired terminal 1300) characterized in that it comprises a.

According to the present invention, the user wired terminal 1300 is an embodiment of a first terminal in which a user connects to a server through a communication network and purchases tangible / intangible goods sold by the server. It is possible to carry out various modifications according to the communication network and server type and characteristics.

According to the present invention, the user mobile phone 1375 is an embodiment of a second terminal equipped with an OTP agent for authenticating payment validity for a purchase price for purchasing goods through the first terminal. The terminal may include all communication terminals except for the first terminal.

For example, when the server to which the first terminal is connected is a home shopping server, the first terminal may include a user's IPTV, and the second terminal includes a wired telephone / VoIP phone provided near the IPTV. can do.

Alternatively, when the server to which the first terminal is connected is an ARS server, the first terminal may include a user's landline phone / mobile phone / VoIP phone, and the second terminal is another voice call except for the first terminal. Terminal (e.g., if the first terminal is a landline phone, the second terminal includes a mobile phone / VoIP phone; if the first terminal is a mobile phone, the second terminal includes a landline phone / VoIP phone, and the first terminal If the VoIP phone, the second terminal may include a landline / mobile phone).

That is, the user wired terminal 1300 of the present application is not limited to the above-described wired terminal, and it will be apparent that the user mobile phone 1375 of the present application is also not limited to the mobile phone.

The mobile telecommunication company server 1370 is a generic term for a mobile telecommunication company side server provided on a mobile communication network to which the user mobile phone 1375 is connected to interface with the mobile phone. In the payment system 1310, the user mobile phone 1375 is used. Message server, data exchange server, WAP (WAP) for transmitting information (or data) requested to be provided to the user mobile phone 1375 through a mobile communication system (eg, exchange, base station, etc.) according to a preset communication protocol. It is preferable to include one or more servers.

According to the present invention, the payment system 1310, the mobile phone number corresponding to the user mobile phone (1375) equipped with the OTP agent for generating an OTP for authenticating the payment validity using the communication charges imposed on the user mobile phone (1375) And one or more fixed seed values for generating OTP agent information provided in the user mobile phone 1375 corresponding to the mobile phone number, and OTP 'to be compared with OTP generated through the OTP agent provided in the mobile phone. And a storage medium 1365 for storing and linking OTP generation information including a parameter for determining a dynamic seed value, or connected through a communication network.

The mobile phone number is a general name of information that can identify the user mobile phone 1375, and includes one or more telephone numbers, serial numbers (ESNs), and subscriber identification numbers assigned to the user mobile phone 1375, or A unique number (or unique code) stored in the memory of the user's mobile phone 1375, a USIM serial number assigned to the USIM provided in the user's mobile phone 1375, and a unique number (or unique code) recorded in the USIM. It is preferable to comprise as mentioned above.

The OTP agent information may include one or more version information, an OTP generation algorithm, and an OTP generation method of the OTP agent provided in the user mobile phone 1375 corresponding to the mobile phone number.

Here, the OTP generation algorithm and the OTP generation method may use different algorithms and generation methods for each OTP agent, and thus the present invention is not limited thereto.

The OTP generation information may include one or more fixed seed values used to generate an OTP according to the OTP generation algorithm and the OTP generation method, and a parameter for determining the dynamic seed value. It is preferable to comprise.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm in a time-synchronization manner, and the parameter of the OTP generation information is Preferably, the time-synchronization method includes synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm of a challenge-response manner, and the parameter of the OTP generation information is the challenge- It is preferable to include a random number generating seed for generating a random number corresponding to the dynamic seed value of the response type OTP.

According to an embodiment of the present invention, the OTP generation information is stored in the user's mobile phone 1375 memory in association with an OTP agent downloaded to the user's mobile phone 1375 or stored in the user's mobile phone 1375 It is preferable to be stored in the USIM (encryption storage possible).

Referring to FIG. 13, the payment system 1310 selects a mobile communication company corresponding to a user mobile phone 1375 and a user mobile phone 1375 number and a user by using a user wired terminal 1300 accessing the micropayment target website. Payment interface providing means (1315) for processing to provide a mobile phone payment interface for entering the social security number, and the mobile carrier selection information corresponding to the user mobile phone (1375) and the user mobile phone (1375) number and user social security number through the mobile phone payment interface An information receiving means 1320 for receiving information, a user authentication means 1325 for authenticating a user through a user mobile phone 1375 number and a user social security number, and a user mobile phone 1375 corresponding to the user mobile phone 1375 number Agent checking means (1330) for checking whether or not the OTP agent is already installed in the user interface; If the OTP agent is not already installed in the phone 1375, an agent providing means 1335 for processing a message including a callback URL for downloading an OTP agent to the user mobile phone 1375 is provided. Characterized in that made.

In addition, the payment system 1310, when the OTP agent is pre-installed in the user mobile phone 1375, or when the OTP agent is downloaded and installed in the user mobile phone 1375, the user mobile phone to the user wired terminal 1300 OTP interface providing means (1340) for processing to provide an OTP input interface for inputting OTP generated by the OTP agent provided in (1375), and the OTP input from the user wired terminal 1300 through the interface Check the receiving OTP receiving means 1345, OTP generation information for generating OTP 'to be compared with the OTP, and determine a fixed seed value and a dynamic seed value for generating OTP' from the OTP generation information; The OTP 'is generated using the determined seed value and the dynamic seed value, and the received OTP is compared with the generated OTP' for the mobile number. And billing validity verification means 1350 to check the liquid billing validation and verification micropayments validity for the cell number results characterized in that obtained by having a providing means (1355) information to be transmitted to the micropayments the website.

According to the present invention, each means constituting the payment system 1310 is implemented as a separate server for each means, or in the form of a predetermined authentication server (or relay server) including the means, or two The above means may be combined to be implemented as a separate server, or the means may be implemented in the form of components in the web server 1305, or the means may be implemented in the form of components in the mobile communication server 1370, or Some of the means are implemented as components in the web server 1305 and some are implemented as components in the carrier server 1370, or some of the means are implemented as components in the web server 1305 and some are Is implemented as a component in the mobile carrier server 1370 and the other part can all be implemented in a separate server form, the payment system 1310 It will be apparent that the present invention is not limited by the implementation method.

The user accesses the web server 1305 to purchase tangible / intangible goods, and pays a mobile phone to pay a payment amount corresponding to the purchase price of the goods through a communication fee charged to the user mobile phone 1375. When the means is selected, the payment interface providing means 1315 is directly connected to the user wired terminal 1300 or the web server 1305 through the communication network to which the user wired terminal 1300 is connected. The mobile wired terminal 1300 is characterized in that the mobile phone selection interface corresponding to the user's mobile phone (1375) and the mobile phone payment interface for inputting the user's mobile phone (1375) number and the user's social security number is characterized in that the processing is provided.

When the mobile phone payment interface is provided to the user wired terminal 1300 by the payment interface providing unit 1315, the information receiving unit 1320 is input through the mobile phone payment interface from the user wired terminal 1300. The communication session for receiving the mobile communication company selection information corresponding to the user mobile phone 1375 and the user mobile phone 1375 number and the user social security number information is connected.

According to an embodiment of the present invention, the payment interface providing unit 1315 connects a communication channel with the user wired terminal 1300 and provides the mobile phone payment interface to the user wired terminal 1300 through the communication channel. In one case, the information receiving unit 1320 checks the user wired terminal 1300 information (eg, an IP address) from the communication channel provided with the mobile phone payment interface to the user wired terminal 1300, and the communication channel. A communication session for receiving mobile communication company selection information corresponding to the user mobile phone 1375, a user mobile phone 1375 number and user resident registration number information from the user wired terminal 1300 based on a communication session (for example, the user wired terminal 1300). ) To receive the mobile carrier selection information, the user mobile phone (1375) number and the user social security number information It is preferred to connect the communication area and the re-thread (Thread) code).

According to another embodiment of the present invention, when the payment interface providing means 1315 provides the mobile phone payment interface to the user wired terminal 1300 through the web server 1305, the information receiving means 1320 is Receiving the user wired terminal 1300 information (for example, an IP address) from the web server 1305, and selecting mobile communication company selection information corresponding to the user cellular phone 1375 from the user wired terminal 1300 based on the information. Communication session for receiving user mobile phone 1375 number and user social security number information (e.g., memory allocated to receive the mobile carrier selection information, user mobile phone 1375 number and user social security number information from the user wired terminal 1300) It is desirable to link the area with the communication thread code.

Here, the communication session is received by encrypting the mobile communication company selection information corresponding to the user mobile phone (1375), the user mobile phone (1375) number and the user resident registration number information encrypted, the mobile communication company corresponding to the encrypted user mobile phone (1375) It preferably comprises a secure communication session for decoding the selection information and the user's mobile phone (1375) number and user social security number information.

When the communication session is connected to the user wired terminal 1300, the information receiving terminal 1320 is a mobile communication company selection information corresponding to the user mobile phone 1375 from the user wired terminal 1300 through the communication session and the user Characterized by receiving a mobile phone (1375) number and user social security number information.

When the mobile communication company selection information corresponding to the user mobile phone 1375, the user mobile phone 1375 number, and the user resident registration number information are received from the user wired terminal 1300, the user authentication means 1325 is a member D / B (shown in FIG. And the user's mobile phone 1375 number and the user's resident registration number information, and the received user's mobile phone 1375 number and the user's resident registration number information to authenticate the user who requested the micropayment.

In addition, the agent checking means 1330, OTP agent for generating an OTP for authenticating the mobile phone micropayment to the user mobile phone 1375 through the OTP agent information stored in the storage medium 1365 in association with the mobile phone number It is characterized by checking whether there is provided.

If the agent confirming means 1330 confirms that the user's mobile phone 1375 is not equipped with an OTP agent for generating an OTP for authenticating the mobile payment, the agent providing means 1335 for processing is provided. The mobile phone 1375 may be configured to transmit a message including a callback URL for downloading an OTP agent.

According to the embodiment of the present invention, when it is confirmed that the OTP agent is not provided in the user mobile phone 1375, the agent providing means 1335 outputs a pop-up through a mobile phone payment interface provided to the user wired terminal 1300. The OTP agent download request requested by the user through an OTP agent download interface (or menu) included in the mobile phone payment interface or outputted, and in response to the OTP agent download request, the user mobile phone 1375 As a result, it is preferable to process a message including a callback UEL for OTP agent download.

Here, the callback UEL for downloading the OTP agent includes a URL information of the payment system 1310 or a predetermined OTP server (not shown) set / partnered to manage the OTP agent in the payment system 1310. It is preferable to include the URL information of the user, the user mobile phone (1375) receiving the message containing the callback UEL is to download the OTP agent according to the OTP agent download procedure using a preset mobile communication network to the user mobile phone (1375) Mount).

After the OTP agent is downloaded to the user mobile phone 1375, the payment system 1310 (or OTP server) provided by the OTP agent to the user mobile phone 1375 is an OTP agent provided in the user mobile phone 1375. The OTP generation information for generating an OTP is provided to the user mobile phone 1375 through.

According to an embodiment of the present invention, the payment system 1310 (or OTP server) allocates one or more fixed seed values for generating an OTP through an OTP agent provided in the user mobile phone 1375, and assigns the assignment. Generate OTP generation information (or extract from a database storing OTP generation information), the OTP generation information comprising one or more fixed seed values, and parameters for determining one or more dynamic seed values required to generate an OTP via the OTP agent; Preferably, the generated OTP generation information is provided to the user mobile phone 1375 through a mobile communication network, and the payment system 1310 (or OTP server) is provided to provide the OTP generation information to the user mobile phone 1375. A secure communication channel is connected to the user mobile phone 1375.

According to an embodiment of the present invention, the payment system 1310 (or the OTP server) may be executed after the OTP agent is downloaded to the user mobile phone 1375 or the OTP agent downloaded to the user mobile phone 1375 for the first time. In this case, the OTP generation information may be generated (or extracted) and provided to the user mobile phone 1375, and the OTP generation information is encrypted and stored in a memory provided in the user mobile phone 1375 or the user. It is preferably stored in a Universal Subscriber Identity (USIM) module provided in the mobile phone 1375.

According to an embodiment of the present invention, after the OTP agent is downloaded to the user mobile phone 1375 or when the OTP agent downloaded to the user mobile phone 1375 is executed for the first time, the user mobile phone 1375 is the OTP agent. Input a user password or a user personal identification number for generating an OTP through, and encrypts the input user password or user personal identification number to store in the memory provided in the mobile phone, or provided in the user mobile phone (1375) It is preferable to store in the USIM, and when the OTP agent is generated to generate the OTP afterwards, the OTP agent outputs an interface for inputting a user password or a user identification number, and the user password or user personal input through the interface Stored in the memory (or USIM) It is preferable to authenticate the OTP generation validity by comparing the user password or the user identification number.

When it is confirmed that the OTP agent is already installed in the user mobile phone 1375 by the agent checking means 1330, or the OTP agent is downloaded and installed in the user mobile phone 1375 through the agent providing means 1335, The OTP interface providing means 1340 is characterized in that the processing to provide the OTP input interface for inputting the OTP generated by the OTP agent provided in the user mobile phone 1375 to the user wired terminal 1300.

According to an embodiment of the present invention, the OTP interface providing means 1340 may be directly connected to the user wired terminal 1300 or the web server 1305 through a communication network connected to the user wired terminal 1300. Preferably, the user wired terminal 1300 processes the OTP input interface to be provided.

When the OTP input interface is provided to the user wired terminal 1300 by the OTP interface providing means 1340, the OTP receiving means 1345 is input from the user wired terminal 1300 through the OTP input interface. A communication session for receiving an OTP is connected, and may be omitted when the user wired terminal 1300 and the communication session are already connected.

According to an embodiment of the present invention, the OTP interface providing means 1340 connects a communication channel with the user wired terminal 1300 and provides the OTP input interface to the user wired terminal 1300 through the communication channel. In one case, the OTP receiving means 1345 checks the user wired terminal 1300 information (for example, an IP address) from the communication channel provided with the OTP input interface to the user wired terminal 1300, and the communication channel. A communication session for receiving the OTP from the user wired terminal 1300 (eg, a memory area allocated to receive the OTP from the user wired terminal 1300 and a communication thread code). It is desirable to.

According to another embodiment of the present invention, when the OTP interface providing means 1340 provides the OTP input interface to the user wired terminal 1300 through the web server 1305, the OTP receiving means 1345 A communication session for receiving the user wired terminal 1300 information (eg, an IP address) from the web server 1305 and receiving the OTP from the user wired terminal 1300 based on the information (eg, the user wired). It is preferable to connect a memory area allocated to receiving the OTP from the terminal 1300 and a communication thread code.

Here, the communication session preferably comprises a secure communication session for encrypting and receiving the OTP and decrypting the encrypted OTP.

When the communication session is connected to the user wired terminal 1300, the OTP receiving means 1345 receives an OTP input through the OTP input interface from the user wired terminal 1300 through the communication session. do.

The payment validity authentication means 1350 corresponds to the user mobile phone 1375 from the storage medium 1365 when the OTP input interface is provided to the user wired terminal 1300 by the OTP interface providing means 1340. The mobile phone number (or the user social security number information) to communicate with the user wired terminal 1300 provided with the OTP input interface (for example, the IP address of the user wired terminal 1300) or the user wired terminal 1300. Connection with session information (e.g., a DB reference or a pointer reference is mapped) is maintained until the OTP is received from the user wired terminal 1300 through the OTP receiving means 1345.

The payment validity authentication means 1350 checks the OTP generation information necessary for generating OTP 'to be compared with the OTP from the storage medium 1365, and generates a fixed seed value for generating OTP' from the OTP generation information. Determine a dynamic seed value and generate an OTP 'to be compared with the received OTP using the determined fixed seed value and the dynamic seed value.

If the OTP 'is generated, the payment validity authentication means 1350 compares the received OTP and the generated OTP' and confirms the payment validity of the mobile number, and the information providing means. In operation 1355, the micropayment validity verification result for the mobile number is transmitted to the web server 1305 for operating the micropayment target website.

Referring to FIG. 13, when the payment validity is authenticated by the payment validity authentication means 1350, the payment processing means for processing the payment amount through the communication fee charged to the mobile phone. It is preferable to further comprise (1360).

According to the exemplary embodiment of the present invention, the payment processing unit 1360 checks the payment amount to be charged on the communication fee of the user mobile phone 1375 from the web server 1305 and associates with the mobile communication company server 1370. It is preferable to query the payment limit for the user's mobile phone (1375) number, compare the payment amount and the payment limit and approve payment through the communication charges imposed on the mobile phone.

According to another exemplary embodiment of the present invention, the payment processing means 1360 may store and manage the user mobile phone 1375 number and payment limit information corresponding thereto through a separate database, in which case the payment The processing means 1360 may inquire the payment limit for the user mobile phone 1375 number through the database, compare the payment amount with the payment limit, and approve the payment through the communication fee charged to the mobile phone. Do.

If the payment using the communication fee charged to the mobile phone is approved, the payment processing means 1360 processes the payment amount to be charged to the communication fee for the user mobile phone 1375 through the mobile telecommunication company server 1370. In addition, payment approval information on the payment amount is transmitted to the web server 1305.

14 is a diagram illustrating a mobile phone payment process using OTP according to a fourth embodiment of the present invention.

More specifically, FIG. 14 is a user wired terminal 1300 accessing a small payment target website, and an interface for selecting a mobile carrier corresponding to the user's mobile phone 1375 and inputting a user's mobile phone 1375 number and a user's social security number is provided. After processing to receive the user's mobile terminal selection information corresponding to the user's mobile phone (1375), the user's mobile phone (1375) number and the user's social security number information from the wired terminal (1300) through the interface, the user's mobile phone (1375) number And after checking whether the user authentication result corresponding to the user social security number verification result and the OTP (One Time Password) agent are pre-installed on the user mobile phone 1375, the user wired terminal 1300 to the user mobile phone 1375. Payment and providing an interface for entering the OTP generated by the equipped OTP agent and As shown in the drawings, a person of ordinary skill in the art to which the present invention pertains can refer to and / or modify this drawing 14 to implement various methods for the mobile phone payment process using the OTP (for example, some steps are omitted). The present invention may be inferred from the above-described method, but the technical features are not limited to the method shown in FIG.

Hereinafter, in FIG. 14, the payment system 1310 shown in FIG. 13 is referred to as a “server” for convenience.

Referring to FIG. 14, a user accesses the web server 1305 to purchase tangible / intangible goods, and a communication fee charged to the user's mobile phone 1375 for a payment amount corresponding to the purchase price of the goods. When the mobile phone payment means is selected to make a payment (1400), the server relays the web server 1305 directly to the user wired terminal 1300 or through the communication network to which the user wired terminal 1300 is connected. The mobile phone payment interface for selecting a mobile communication company corresponding to the user mobile phone 1375 and inputting a user mobile phone 1375 number and a user social security number to the user wired terminal 1300 is processed (1405), and the user wired terminal 1300. Check whether the mobile carrier selection information and the user's mobile phone 1375 number and the user's social security number information received through the mobile phone payment interface are received from 1410).

If the mobile communication company selection information, the user mobile phone (1375) number and the user resident registration number information is received from the user wired terminal (1300) (1415), the server is the user mobile phone (1375) number stored in the member D / B (not shown) In operation 1420, the user resident registration number information, the received user's mobile phone 1375 number and the user's resident registration number information are compared to authenticate the user who requested the micro payment.

If the user is not authenticated (1425), the server generates a user authentication error and transmits it to the user wired terminal 1300 (or user mobile phone 1375) and the web server 1305 (1430).

On the other hand, if the user is authenticated (1425), the server generates an OTP for authenticating the mobile phone micropayment to the user mobile phone 1375 through the OTP agent information stored in the storage medium 1365 in association with the mobile phone number Check whether the OTP agent is provided (1435).

If the OTP agent is not installed in the user mobile phone 1375 (1440), the server processes the OTP agent to be provided to the user mobile phone 1375 through the process shown in FIG.

On the other hand, if the user mobile phone (1375) is equipped with the OTP agent (1440), the server has an OTP input interface for inputting the OTP generated through the OTP agent provided in the user mobile phone (1375) the user wired terminal It is processed to provide (1300) (1445).

15 is a diagram illustrating a process of providing an OTP agent to a user mobile phone 1375 according to the fourth embodiment of the present invention.

In more detail, FIG. 15 includes a callback UEL for providing the OTP agent to the user mobile phone 1375 when the OTP agent is not mounted on the user mobile phone 1375 in the process shown in FIG. To process the message to be transmitted to the user mobile phone (1375), and showing the process of providing the OTP agent to the user mobile phone (1375) through the message, having a general knowledge in the art Growing up, it can be inferred from various embodiments of the process (e.g., some steps are omitted or reordering) for providing the OTP agent to the user mobile phone (1375) by referring to and / or modifying this figure. As will be appreciated, the present invention includes all implementation methods inferred, and only the implementation method illustrated in FIG. The technical features are not limited.

In the following figure 15, the payment system 1310 shown in FIG. 13 is referred to as " server " for convenience.

Referring to FIG. 15, when the OTP agent is not installed in the user mobile phone 1375 in the process illustrated in FIG. 14, the server includes a callback UEL for downloading the OTP agent to the user mobile phone 1375. The user's mobile phone 1375 receiving the message requests the OTP agent to a server (or an OTP server) corresponding to the callback UE in response to the message being transmitted through the mobile communication network (1500).

The server (or OTP server) corresponding to the callback UEL provides the OTP agent to the user mobile phone 1375 (1505).

If the OTP agent is provided to the user mobile phone 1375 (1510), the user mobile phone 1375 inputs a user password or a user personal identification number for generating an OTP through the OTP agent, and the input user The password or user identification number is encrypted and stored in the memory provided in the mobile phone, or stored in the USIM provided in the user mobile phone 1375 and registered (1515).

16 is a diagram illustrating a mobile phone payment approval process using OTP according to the fourth embodiment of the present invention.

In more detail, in FIG. 16, after the OTP input interface is provided to the user wired terminal 1300 in the process illustrated in FIG. 14, an OTP input through the OTP input interface is received and the OTP 'is generated. A process of authenticating payment validity and payment approval processing in comparison with the received OTP, and a person having ordinary skill in the art to which the present invention pertains may refer to and / or modify this figure 16 to modify the OTP. Various implementation methods (for example, some steps may be omitted, or the order may be changed) may be inferred for the mobile phone payment approval process used, but the present invention includes all the implementation methods inferred from this figure. The technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in FIG. 16, the payment system 1310 shown in FIG. 13 is referred to as a "server" for convenience.

Referring to FIG. 16, after the OTP input interface is provided to the user wired terminal 1300 in the process illustrated in FIG. 14, the server inputs an OTP input from the user wired terminal 1300 through the OTP input interface. Verify that is received (1600).

If the OTP is received (1605), the server checks the OTP generation information for generating OTP 'to be compared with the received OTP (1615), and the fixed seed value and dynamic for generating OTP' from the OTP generation information. The seed value is determined (1620), and the OTP 'is generated using the determined seed value and the dynamic seed value, and the payment validity is verified by comparing the received OTP (1625).

If the payment validity is not authenticated (1630), the server generates payment error information and transmits the generated payment error information to the user wired terminal 1300 (or user mobile phone 1375) and the web server 1305 (1635).

If the payment validity is authenticated (1630), the server generates the payment validity verification result and transmits it to the user wired terminal (1300) (or user mobile phone (1375)) and the web server (1305) (1640). In response to the payment validity check result, the payment approval through the communication fee of the user mobile phone 1375 is processed (1645).

According to an embodiment of the present invention, the server confirms the payment amount to be charged to the user mobile phone 1375 communication fee from the web server 1305, and the user mobile phone 1375 in association with the mobile communication company server 1370. It is preferable to approve the payment through the communication charges imposed on the mobile phone by querying the payment limit for the number and comparing the payment amount with the payment limit.

According to the present invention, when the user wired terminal inputs and transmits mobile carrier selection information corresponding to the user's mobile phone and user's mobile phone number and user's social security number information, the OTP (One Time Password) agent is transmitted to the user's mobile phone after user authentication through the mobile carrier. Is provided, and provides an interface for inputting the OTP generated through the user mobile phone to the user wired terminal only when the OTP agent is mounted on the user mobile phone, and inputs and transmits the OTP in the user wired terminal. Then, OTP 'is generated through the OTP generation information associated with the user's mobile phone number, and the mobile phone payment is approved by comparing with the OTP received from the user's wired terminal, thereby acquiring personal information of the mobile phone user. Even if you know it, In the case that the OTP agent provided in the mobile phone cannot be driven through a personal identification number, the mobile phone payment is not provided so that the mobile phone payment is illegally blocked.

Claims (11)

Processing a user wired terminal connected to the small payment target website so that a mobile communication company corresponding to the user's mobile phone and an interface for inputting the user's mobile phone number and user social security number are provided; Receiving mobile communication company selection information and user mobile phone number and user social security number information corresponding to the user mobile phone through the interface; Transmitting user mobile phone number and user resident registration number information to a mobile communication company server corresponding to the received mobile communication company selection information; Checking whether a user authentication result corresponding to a user mobile number and a social security number verification result and an OTP (One Time Password) agent are already installed in the user mobile phone through a mobile communication company server; If an OTP agent is not already installed in the user's mobile phone, processing a message including a CallBack URL for downloading an OTP agent to the user's mobile phone; If an OTP agent is already installed in the user's mobile phone or if the OTP agent is downloaded and installed in the user's mobile phone, the user wired terminal is provided to provide an interface for inputting an OTP generated by the OTP agent provided in the user's mobile phone. Making; Receiving an OTP input through the interface from the user wired terminal; Confirming OTP generation information for generating OTP 'to be compared with the received OTP; The fixed seed value and the dynamic seed value for generating OTP 'are determined from the OTP generation information. The OTP' is generated using the determined seed value and the dynamic seed value, and the received OTP and the generated OTP 'are generated. Confirming the micropayment validity for the mobile number by comparing;  Transmitting the micropayment validity verification result for the mobile phone number to the micropayment target website; Mobile phone micropayment processing method using an OTP comprising a. Processing a user wired terminal connected to the small payment target website so that a mobile communication company corresponding to the user's mobile phone and an interface for inputting the user's mobile phone number and user social security number are provided; Receiving mobile communication company selection information and user mobile phone number and user social security number information corresponding to the user mobile phone through the interface; Transmitting user mobile phone number and user resident registration number information to a mobile communication company server corresponding to the received mobile communication company selection information; Checking whether a user authentication result corresponding to a user mobile number and a social security number verification result and an OTP (One Time Password) agent are already installed in the user mobile phone through a mobile communication company server; If an OTP agent is not already installed in the user's mobile phone, processing a message including a CallBack URL for downloading an OTP agent to the user's mobile phone; If an OTP agent is already installed in the user's mobile phone or if the OTP agent is downloaded and installed in the user's mobile phone, the user wired terminal is provided to provide an interface for inputting an OTP generated by the OTP agent provided in the user's mobile phone. Doing; Receiving an OTP input through the interface from the user wired terminal; Transmitting the received OTP to an OTP server of an OTP agent provider provided in the user's mobile phone; Receiving a comparison result of the OTP generated by the user's mobile phone and the OTP 'generated by the OTP server from the OTP server; And transmitting the small payment validity verification result corresponding to the comparison result between the OTP and the OTP 'generated by the user's mobile phone to the small payment target website. 2. Processing a user wired terminal connected to the small payment target website so that a mobile communication company corresponding to the user's mobile phone and an interface for inputting the user's mobile phone number and user social security number are provided; Receiving mobile communication company selection information and user mobile phone number and user social security number information corresponding to the user mobile phone through the interface; The user authentication result corresponding to the check result of the user's mobile phone number and the user's social security number is checked through the mobile communication company server corresponding to the received mobile carrier selection information, and an OTP (One Time Password) agent is provided to the user's mobile phone through an OTP server. Checking whether it is installed; If an OTP agent is not already installed in the user's mobile phone, processing a message including a CallBack URL for downloading an OTP agent to the user's mobile phone; When the OTP agent is pre-installed in the user's mobile phone or the OTP agent is downloaded and installed in the user's mobile phone, an interface for inputting the OTP generated by the OTP agent provided in the user's mobile phone and the OTP is provided to the user's wired terminal. Processing to be provided; Receiving an OTP input through the interface from the user wired terminal; Transmitting the received OTP to the OTP server; Receiving a comparison result of the OTP generated by the user's mobile phone and the OTP 'generated by the OTP server from the OTP server; And transmitting the small payment validity verification result corresponding to the comparison result between the OTP and the OTP 'generated by the user's mobile phone to the small payment target website. 2. Processing a user wired terminal connected to the small payment target website so that a mobile communication company corresponding to the user's mobile phone and an interface for inputting the user's mobile phone number and user social security number are provided; Receiving mobile communication company selection information and user mobile phone number and user social security number information corresponding to the user mobile phone through the interface; Confirming whether a user authentication result corresponding to the received user mobile number and user resident registration number confirmation result and an OTP agent are already installed in the user mobile phone; If an OTP agent is not already installed in the user's mobile phone, processing a message including a CallBack URL for downloading an OTP agent to the user's mobile phone; If an OTP agent is already installed in the user's mobile phone or if the OTP agent is downloaded and installed in the user's mobile phone, the user wired terminal is provided to provide an interface for inputting an OTP generated by the OTP agent provided in the user's mobile phone. Doing; Receiving an OTP input through the interface from the user wired terminal; Confirming OTP generation information for generating OTP 'to be compared with the received OTP; The fixed seed value and the dynamic seed value for generating OTP 'are determined from the OTP generation information. The OTP' is generated using the determined seed value and the dynamic seed value, and the received OTP and the generated OTP 'are generated. Confirming the micropayment validity for the mobile number by comparing;  Transmitting the micropayment validity verification result for the mobile phone number to the micropayment target website; Mobile phone micropayment processing method using an OTP comprising a. 5. The method according to any one of claims 1 to 4, Querying a micropayment limit for the user's mobile number; And And processing the approval for the micropayment in response to the micropayment limit inquiry result. 5. The method according to any one of claims 1 to 4, And processing the small payment amount so that the user's mobile phone usage fee is charged. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 1 to 4. A storage medium storing the user's mobile phone number and the OTP generated information in association with each other; And When the mobile carrier selection information, the user mobile phone number and the user social security number information are received from the user's wired terminal connected to the small payment target website, the user mobile phone number and the user social security number are confirmed through the mobile carrier server corresponding to the received mobile carrier selection information. Check whether the user authentication result corresponding to the result and the OTP (One Time Password) agent are preinstalled in the user's mobile phone. If the OTP agent is not preinstalled in the user's mobile phone, download the OTP agent to the user's mobile phone. If a message including a CallBack URL is transmitted, the OTP agent is pre-installed in the user's mobile phone or the OTP agent is downloaded and installed in the user's mobile phone. On Process to provide an interface for inputting the OTP generated by the controller to receive the OTP input through the interface, confirm OTP generation information for generating OTP 'to be compared with the received OTP, and from the OTP generation information. Determine a fixed seed value and a dynamic seed value for generating an OTP ', generate an OTP' using the determined fixed seed value and the dynamic seed value, and compare the received OTP with the generated OTP ' Server for verifying the micropayment validity for a mobile phone micropayment processing system using an OTP comprising a. When the mobile carrier selection information, the user mobile phone number and the user social security number information are received from the user's wired terminal connected to the small payment target website, the user mobile phone number and the user social security number are confirmed through the mobile carrier server corresponding to the received mobile carrier selection information. Check whether the user authentication result corresponding to the result and the OTP (One Time Password) agent are preinstalled in the user's mobile phone. If the OTP agent is not preinstalled in the user's mobile phone, download the OTP agent to the user's mobile phone. If a message including a CallBack URL is transmitted, the OTP agent is pre-installed on the user's mobile phone or the OTP agent is downloaded and installed on the user's mobile phone.A server which processes to provide an interface for inputting an OTP generated by the controller, receives an OTP input through the interface, and transmits the received OTP to an OTP server of an OTP agent provider provided in the user mobile phone; And Check the OTP generation information previously stored in the storage medium, determine a fixed seed value and a dynamic seed value for generating OTP 'from the OTP generation information, and generate the OTP' using the determined fixed seed value and the dynamic seed value. And an OTP server for comparing the received OTP and the generated OTP 'to confirm the micropayment validity of the mobile number. An OTP server for providing and managing an OTP agent to a user's mobile phone; And When the mobile carrier selection information, the user mobile phone number and the user social security number information are received from the user's wired terminal connected to the small payment target website, the user mobile phone number and the user social security number are confirmed through the mobile carrier server corresponding to the received mobile carrier selection information. If the user authentication result corresponding to the result is checked, and whether the OTP (One Time Password) agent is already installed in the user's mobile phone through the OTP server, and if the OTP agent is not already installed in the user's mobile phone, If a message including a callback URL for downloading an OTP agent is transmitted to the user's mobile phone, and the OTP agent is pre-installed on the user's mobile phone or the OTP agent is downloaded and installed on the user's mobile phone, user A server for processing an OTP generated by an OTP agent provided in a phone and an interface for inputting the OTP to receive an OTP input through the interface, and transmitting the received OTP to the OTP server. Characterized in that made, The OTP server, Check the OTP generation information previously stored in the storage medium, determine a fixed seed value and a dynamic seed value for generating OTP 'from the OTP generation information, and generate the OTP' using the determined fixed seed value and the dynamic seed value. And comparing the received OTP with the generated OTP 'to confirm the validity of the micropayment for the mobile phone number, and to transmit the comparison result of the OTP to the server. A storage medium storing the user's mobile phone number and the OTP generated information in association with each other; And When the carrier selection information, the user's mobile phone number, and the user's social security number information are received from the user's wired terminal connected to the small payment target website, the user authentication result corresponding to the received user's mobile phone number and the user's social security number verification result and the user's mobile phone are received. Check whether the One Time Password (OTP) agent is already installed, and if the OTP agent is not already installed in the user's mobile phone, process a message including a CallBack URL for downloading the OTP agent to the user's mobile phone. When the OTP agent is pre-installed on the user's mobile phone or when the OTP agent is downloaded and installed to the user's mobile phone, an interface for inputting OTP generated by the OTP agent provided in the user's mobile phone is provided to the user's wired terminal. A fixed seed value and a dynamic seed for receiving the OTP input through the interface to confirm the OTP generation information for generating OTP 'to be compared with the received OTP, and generating the OTP' from the OTP generation information. A server for determining a value, generating an OTP 'using the determined fixed seed value and the dynamic seed value, and comparing the received OTP with the generated OTP' to confirm the micropayment validity for the mobile number; Cell phone micropayment processing system using OTP, characterized in that comprises.

Images