KR20100136362A - System and method for processing mobile phone small sum of money settlement, server and recording medium - Google Patents

Abstract

PURPOSE: A system and a method for processing small sum monetary settlement of a mobile phone, and a server and a recording medium thereof are provided to compare the amount of payment money with payment limit to approve the payment of communication fee charged to a mobile phone. CONSTITUTION: If a user selects a mobile phone payment method by accessing a web server(200), a server transfers a mobile phone number corresponding to the user mobile phone and mobile phone payment interface for inputting an OTP(One Time Password) verification information, to the wired terminal of the user through a communication network connected to a wired terminal of the user(205). The server confirms through the payment interface of the mobile phone whether or not the mobile phone number, the OTP and the OTP verification information are received(210).

Description

System and Method for Processing Mobile Phone Small Sum of Money Settlement, Server and Recording Medium}

1 is a diagram showing a mobile phone micropayment processing system configuration using the OTP verification information according to the first embodiment of the present invention.

2 is a diagram illustrating a mobile phone payment process using OTP verification information according to a first embodiment of the present invention.

3 is a diagram illustrating a process of providing an OTP agent to a user mobile phone according to the first embodiment of the present invention.

4 is a diagram illustrating a mobile phone payment approval process using OTP verification information according to a first embodiment of the present invention.

5 is a diagram illustrating a mobile phone micropayment processing system configuration using the OTP verification information according to the second embodiment of the present invention.

6 is a diagram illustrating a mobile phone payment process using OTP verification information according to a second embodiment of the present invention.

7 is a diagram illustrating a process of providing an OTP agent to a user mobile phone according to the second embodiment of the present invention.

8 is a diagram illustrating a mobile phone payment approval process using the OTP verification information according to the second embodiment of the present invention.

<Description of main parts of drawing>

100: user wired terminal 105: web server

110: payment system 115: payment interface providing means

120: information receiving means 125: user authentication means

130: agent confirmation means 135: agent providing means

140: OTP validation means 145: payment validation means

150: information providing means 155: payment processing means

160: storage medium 165: mobile communication company server

170: user mobile phone

The present invention provides an interface for inputting user mobile phone number and OTP (One Time Password) generated by an OTP agent provided in the user mobile phone and OTP verification information for generating OTP 'to be compared with the OTP. When the user's mobile phone number and OTP and OTP verification information are received from the user wired terminal, when the OTP 'to be compared with the OTP is verified through the OTP verification information, the OTP' generation validity is authenticated. It is to provide a mobile phone micro-payment method and system for generating an OTP 'using only the OTP generation information associated with the user's mobile phone number and comparing with the OTP received from the user wired terminal.

When the user inputs a mobile phone number and subscriber information through a user terminal and provides the mobile phone payment, after verifying that the customer is a valid subscriber of the telecommunication company through the mobile phone number and the subscriber information, a predetermined authentication number is determined according to the subscriber authentication result. After generating and transmitting to the user's mobile phone, if matched by comparing the authentication number received through the user terminal and the authentication number transmitted to the user's mobile phone, the payment is approved to the next month's communication fee of the user's mobile phone by approving it It is a payment method (application number: 10-2000-0020757).

However, personal information leakage incidents occur infrequently, and the leaked personal information is openly traded (or disclosed) through the Internet, and the number of lost mobile phones occurs an average of 200,000 or more per month (December 24, 2003) ) Has a problem that anyone who acquires or duplicates another person's mobile phone can be authorized to pay for the mobile phone using the leaked personal information.

In particular, although the mobile phone payment approval is made in real time, the settlement of the payment amount on average within 45 days after the approval of the payment, due to the characteristics of the mobile phone payment, the damage occurs using the acquired / duplicated mobile phone and leaked personal information, The damage is expected to reach astronomical figures.

An object of the present invention for solving the above problems, the OTP (One Time Password) generated by the user's mobile phone number and the OTP agent provided in the user's mobile phone and the OTP 'generation to be compared with the OTP Provides an interface for inputting OTP verification information, and when the user mobile phone number and OTP and OTP verification information are received from the user wired terminal, validity of generating OTP 'to be compared with the OTP through the OTP verification information. Only when the validity of the OTP 'generation is authenticated, the OTP' is generated through the OTP generation information associated with the user's mobile phone number to be compared with the OTP received from the user wired terminal to approve the mobile phone payment.

Cell phone micropayment processing method according to the present invention, compared to the OTP (One Time Password) generated by the user's mobile phone number and the OTP agent provided in the user's mobile phone to the user wired terminal connected to the small payment target website Processing to provide an interface for inputting OTP verification information for generating an OTP ', receiving a mobile phone number, OTP and OTP verification information input through the interface from the user wired terminal, and receiving the received OTP. Verifying OTP 'generation to be compared with the OTP by comparing verification information with OTP verification information previously stored in a storage medium, and when the OTP' generation is verified, OTP generation information for generating OTP 'to be compared with the OTP. Determining a fixed seed value and a dynamic seed value for generating an OTP 'from the OTP generation information, and determining the fixed seed value. Generating an OTP 'using a seed value and a dynamic seed value, comparing the received OTP with the generated OTP' and confirming the micropayment validity of the mobile number; and the micropayment validity of the mobile number And transmitting the verification result to the micropayment target website.

On the other hand, the mobile phone micropayment processing method according to the present invention, the OTP (One Time Password) generated by the user's mobile phone number and the OTP agent provided in the user's mobile phone to the user wired terminal connected to the small payment target website and the OTP And processing to provide an interface for inputting OTP verification information for generating OTP 'to be compared with the mobile terminal; receiving a mobile number and OTP and OTP verification information inputted through the interface from the user wired terminal; Transmitting the mobile number and OTP and OTP verification information to an OTP server that provides an OTP agent to the user's mobile phone by reading the mobile phone number, and OTP 'and the user's mobile phone generated based on the OTP verification information from the OTP server. Receiving a comparison result of the OTP generated in the, and the comparison of the OTP 'and the OTP generated in the user's mobile phone The retail payment validation results corresponding to and is characterized in that comprises the step of transmitting to the target Web site micropayments.

The mobile phone micropayment processing method according to the present invention further comprises the step of further receiving the user resident registration number information from the user wired terminal and the step of authenticating the user using the received user resident registration number information and the user mobile number information. It is characterized by.

The mobile phone micropayment processing method according to the present invention further comprises the step of inquiring a micropayment limit for the user mobile phone number and processing the approval for the micropayment in response to the micropayment limit inquiry result. It features.

The mobile phone micropayment processing method according to the present invention is characterized in that it further comprises the step of processing such that the micropayment charge is charged to the user's mobile phone usage fee.

On the other hand, it includes a computer-readable recording medium, characterized in that for recording the program for executing the above-mentioned mobile phone micropayment processing method.

On the other hand, the mobile phone micropayment processing system according to the present invention, a storage medium for storing the user's mobile phone number, OTP generation information and OTP verification information and the user wired terminal connected to the website for the micropayment target user's mobile phone number and the user A mobile phone number and an OTP input through the interface are processed by providing an interface for inputting an OTP (One Time Password) generated by an OTP agent provided in the mobile phone and OTP verification information for generating an OTP 'to be compared with the OTP. Receive OTP verification information, compare the received OTP verification information and the OTP verification information previously stored in the storage medium to verify the OTP 'generation to be compared with the OTP, and if the OTP' generation is verified, compare with the OTP Check the OTP generation information for generating the OTP 'to be, and the fixed seed value and dynamic to generate the OTP' from the OTP generation information A server for determining a seed value, generating an OTP 'using the determined fixed seed value and the dynamic seed value, and comparing the received OTP with the generated OTP' to confirm the micropayment validity for the mobile number; It is characterized by comprising.

On the other hand, the mobile phone micropayment processing system according to the present invention, the OTP server for providing and managing the OTP agent to the user mobile phone and the user wired terminal connected to the website for small payments, the user mobile phone number and the OTP agent provided in the user mobile phone Process to provide an interface for inputting OTP (One Time Password) generated by OTP and OTP verification information for generating OTP 'to be compared with the OTP and receiving the mobile phone number and OTP and OTP verification information inputted through the interface. And a server for transmitting a mobile phone number and OTP and OTP verification information to the OTP server, wherein the OTP server compares OTP verification information previously stored in a storage medium to be compared with the OTP '. Verify the generation, and if the OTP 'generation is verified, OTP generation information for generating OTP' to be compared with the OTP Determine and determine a fixed seed value and a dynamic seed value for generating OTP 'from the OTP generation information, generate the OTP' using the determined fixed seed value and the dynamic seed value, and generate the received OTP and the generated seed value. By comparing the OTP 'and confirming the validity of the micropayment for the mobile phone number, characterized in that for transmitting the comparison result of the OTP to the server.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be made based on the contents throughout the present invention.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a mobile phone micropayment processing system configuration using the OTP verification information according to the first embodiment of the present invention.

In more detail, FIG. 1 is a user wired terminal 100 connected to a small payment target website, a user mobile phone 170 number and an OTP (One Time Password) generated by an OTP agent provided in the user mobile phone 170. And a process for providing an interface for inputting OTP verification information for generating an OTP 'to be compared with the OTP, and then a mobile phone number and an OTP corresponding to the user's mobile phone 170 from the user wired terminal 100 through the interface. After receiving the OTP verification information, and comparing the received OTP verification information and the OTP verification information previously stored in the storage medium 160 to verify the OTP 'generation validity to be compared with the OTP, if the OTP' generation validity is verified , Shows a system configuration for generating a mobile phone micropayment compared to the generated OTP 'and compared with the received OTP, the general knowledge in the technical field to which the present invention belongs If you have, various implementation methods (e.g., some components are omitted, subdivided, or combined) for the mobile phone micropayment processing system using the OTP verification information by referring to and / or modifying the present Figure 1 It may be inferred, but the present invention includes all the inferred implementation methods, and the technical features are not limited to the implementation method shown in FIG.

For example, the mobile phone micropayment processing system shown in FIG. 1 may be applied to a system for processing payment using a customer's payment means, except that the payment amount is added to the communication fee of the user's mobile phone 170. The present invention naturally includes all payment processing systems that can be inferred as described above.

Referring to FIG. 1, the mobile phone micropayment processing system includes a user wired terminal 100 used by a user who accesses a website for micropayment and a user mobile phone 170 possessed by the user. Small payment target web that sells tangible / intangible goods to the user through the terminal 100 and makes payment through a mobile phone payment means that charges a communication fee for the sold goods to the user's mobile phone 170 One or more web servers 105 to operate the site, the payment system 110 for processing the micro-payment using the OTP verification information in connection with the user wired terminal 100 and the user mobile phone 170, and the user mobile phone And a mobile telecommunication company server 165 on a mobile communication network to which the 170 is connected, and the payment system 110 includes the web server 105 and the same. Implemented in the form of a certificate server (or relay server) connected to the mobile communication company server 165, or in the form of an internal component of the web server 105, or in the form of an internal component of the mobile communication company server 165 It is to be apparent that all implementations are possible, whereby the invention is not limited.

The user wired terminal 100 includes one or more personal computers and laptops having a browser that can access the web server 105 that operates the micropayment target website, and the web server 105 or the payment system. The mobile phone number corresponding to the user's mobile phone 170 and the mobile phone payment interface for inputting the OTP and OTP verification information are received and output to the screen output means, and the user mobile phone to the mobile phone payment interface through a key input means. Input the mobile phone number and the OTP and OTP verification information corresponding to the 170 and transmits to the web server 105 or the payment system 110.

The web server 105, the mobile payment means for selling the tangible / intangible goods to the user through the user wired terminal 100, and charges the payment amount for the sold goods to the user mobile phone 170 communication fee As a general term for a server operating a small payment target website that can be paid through, if the user wired terminal 100 selects the mobile phone payment means as the payment means for the payment amount, the user wired terminal 100 The mobile phone payment interface is provided, or the mobile phone payment interface is provided to the user wired terminal 100 through the payment system 110.

The user mobile phone 170 is a mobile phone possessed by a user who purchases tangible / intangible goods sold by the web server 105, and authenticates a payment validity using a communication fee charged to the user mobile phone 170. A function of downloading an OTP agent, and a function of generating an OTP by driving the OTP agent and outputting the generated OTP (for example, a screen output or a user through a short range communication means such as Bluetooth, Wi-Fi, or RF communication). It is possible to output to the wired terminal (100).

According to the present invention, the user wired terminal 100 is an embodiment of a first terminal in which a user connects to a server through a communication network and purchases tangible / intangible goods sold by the server. It is possible to carry out various modifications according to the communication network and server type and characteristics.

According to the present invention, the user mobile phone 170 is an embodiment of a second terminal equipped with an OTP agent to authenticate the payment validity for the purchase price of the goods purchased through the first terminal, the second The terminal may include all communication terminals except for the first terminal.

For example, when the server to which the first terminal is connected is a home shopping server, the first terminal may include a user's IPTV, and the second terminal includes a wired telephone / VoIP phone provided near the IPTV. can do.

Alternatively, when the server to which the first terminal is connected is an ARS server, the first terminal may include a user's landline phone / mobile phone / VoIP phone, and the second terminal is another voice call except for the first terminal. Terminal (e.g., if the first terminal is a landline phone, the second terminal includes a mobile phone / VoIP phone; if the first terminal is a mobile phone, the second terminal includes a landline phone / VoIP phone, and the first terminal If the VoIP phone, the second terminal may include a landline / mobile phone).

That is, the user wired terminal 100 of the present application is not limited to the above-described wired terminal, and it is apparent that the user mobile phone 170 of the present application is also not limited to the mobile phone.

The mobile communication company server 165 is a generic name of a mobile communication company side server provided on the mobile communication network to which the user mobile phone 170 is connected to interface with the mobile phone. In the payment system 110, the user mobile phone 170 is used. Message server, data exchange server, WAP (WAP) for transmitting information (or data) requested to be provided to the user mobile phone 170 via a mobile communication system (eg, a communication, a base station, etc.) according to a preset communication protocol. It is preferable to include at least one server.

According to an embodiment of the present invention, the mobile communication company server 165 functions to authenticate a user by querying a subscriber D / B (not shown) through the user mobile phone 170 number and the user social security number information, and the user mobile phone ( It is preferable to provide the OTP agent to the 170, or to manage the OTP agent provided to the user mobile phone 170 through a predetermined OTP server (not shown).

According to the embodiment of the present invention, the mobile communication company server 165 is provided with the OTP agent in the user mobile phone 170, or when the OTP agent is provided to the user mobile phone 170, the user mobile phone 170 It is preferable to associate and store the corresponding mobile phone number and the OTP agent information corresponding to the OTP agent provided in the user mobile phone 170.

In this case, the OTP agent information, it is preferable to include at least one version information, OTP generation algorithm and OTP generation method of the OTP agent provided in the user mobile phone 170 corresponding to the mobile phone number.

Here, the OTP generation algorithm and the OTP generation method may use different algorithms and generation methods for each OTP agent, and thus the present invention is not limited thereto.

According to the present invention, the payment system 110, the mobile phone number corresponding to the user mobile phone 170 equipped with an OTP agent for generating an OTP for authenticating the payment validity using the communication charges imposed on the user mobile phone 170 And OTP generation information and OTP generation information including parameters for determining one or more fixed seed values and a dynamic seed value for generating an OTP 'to be compared with an OTP generated through an OTP agent provided in the mobile phone. It is characterized in that it comprises a storage medium 160 for storing and linking OTP verification information for verifying the validity of generating OTP 'through the information, or is connected through a communication network.

The mobile phone number is a generic name of information that can identify the user mobile phone 170, and includes one or more phone numbers, serial numbers (ESNs), and subscriber identification numbers assigned to the user mobile phone 170, or the user. At least one unique number (or unique code) stored in the memory of the mobile phone 170, the USIM serial number assigned to the USIM provided in the user mobile phone 170, the unique number (or unique code) recorded in the USIM It is preferable to comprise.

The OTP generation information may include one or more fixed seed values and dynamic seed values used by the OTP agent provided in the mobile phone to generate the OTP according to the OTP generation algorithm and the OTP generation method. It is preferable to comprise a.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm in a time-synchronization manner, wherein the parameter of the OTP generation information is It is preferable to include synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm of a challenge-response manner, and the parameter of the OTP generation information is the challenge- It is preferable to include a random number generating seed for generating a random number corresponding to the dynamic seed value of the response type OTP.

According to the method of the present invention, the OTP generation information is stored in the user cell phone 170 encrypted in association with the OTP agent downloaded to the user cell phone 170, or is provided in the user cell phone 170 It is preferable to be stored in the USIM (encryption storage possible).

The OTP verification information, when receiving the OTP generated through the OTP agent and OTP generation information provided in the user mobile phone 170 from the user wired terminal 100, the OTP generation information stored in the storage medium 160 It is preferably made by including one or more user password or user identification number to verify that generates the OTP to be compared with the OTP using.

According to an embodiment of the present invention, the OTP verification information includes a user password or a user personal identification number input to drive the OTP agent in the user mobile phone 170 to generate the OTP, or the user password. Or a second user password or user personal identification number extracted from the memory (or USIM) provided in the mobile phone through a user personal identification number (or decrypted when stored encrypted) or stored in the storage medium 160. It is preferable to include a separate user password or user identification number registered to verify generating the OTP to be compared with the OTP using the OTP generation information.

According to an embodiment of the present invention, the storage medium 160 preferably stores (not shown) the OTP agent information in association with the user mobile phone 170 number.

Referring to FIG. 1, the payment system 110 is for inputting a mobile phone number and OTP and OTP verification information corresponding to a user mobile phone 170 to a user wired terminal 100 connected to the small payment target website. Payment interface providing means for processing to provide a mobile phone payment interface 115, Information receiving means 120 for receiving a mobile phone number and OTP and OTP verification information corresponding to the user mobile phone 170 through the mobile phone payment interface, OTP validating means 140 for validating the OTP 'generation to be compared with the OTP by comparing the received OTP verification information and the OTP verification information previously stored in the storage medium 160, and if the OTP' generation validity is verified Confirm OTP generation information for generating OTP 'to be compared with the OTP, determine a fixed seed value and a dynamic seed value for generating OTP' from the OTP generation information, and A payment validity authentication means 145 for generating an OTP 'using the determined fixed seed value and the dynamic seed value, and comparing the received OTP with the generated OTP' to confirm the micropayment validity of the mobile number; It is characterized in that it comprises a information providing means 150 for transmitting the small payment validity verification result for the mobile number to the small payment target website.

According to an embodiment of the present invention, the mobile phone payment interface includes a user interface for inputting mobile phone company selection information corresponding to the user mobile phone 170 or user social security number information for the user to a mobile phone number and OTP and OTP verification information. It is preferable to further comprise.

According to the present invention, the payment system 110 further includes a user interface for inputting the mobile communication company selection information or user social security number information to the mobile phone payment interface, and selecting the mobile communication company through the information receiving means 120. When the information or user resident registration number information is further received, the user mobile phone 170 and the user resident registration number information are transmitted to the mobile communication company server 165 corresponding to the mobile carrier selection information, and the user mobile phone through the mobile communication company server 165. (170) It is preferable to further comprise a user authentication means 125 for authenticating the user by receiving and reading the user authentication results corresponding to the number and the user social security number verification results.

According to the present invention, the payment system 110, agent confirmation means 130 for confirming whether or not the OTP agent is already installed in the user mobile phone 170 corresponding to the user mobile phone 170 number, and the user If the OTP agent is not already installed in the mobile phone 170, the user mobile device 170 further includes an agent providing means 135 for processing a message including a callback URL for downloading the OTP agent to the user mobile phone 170. Characterized in that made.

According to the present invention, each means constituting the payment system 110 is implemented as a separate server for each step, or in the form of a predetermined authentication server (or relay server) including the means, or Two or more means are combined to be implemented as separate servers, or the means are implemented in the form of components in the web server 105, or the means are implemented in the form of components in the carrier server 165, or Some of the means are implemented as components in the web server 105 and some are implemented as components in the mobile carrier server 165, or some of the means are implemented as components in the web server 105 and the rest are Some may be implemented as components in the mobile carrier server 165, and others may be implemented in a separate server form, and the payment system 110 may be configured. It is apparent that the present invention is not limited by the present practice.

The user accesses the web server 105 to purchase tangible / intangible goods, and pays a mobile phone to pay a payment amount corresponding to the purchase price for the goods through a communication fee charged to the user's mobile phone 170. When the means is selected, the payment interface providing means 115 relays the web server 105 directly to the user wired terminal 100 or the web server 105 through a communication network to which the user wired terminal 100 is connected. The mobile terminal 100 is characterized in that the processing to provide a mobile phone payment interface for inputting a mobile phone number and OTP and OTP verification information corresponding to the user mobile phone 170.

When the mobile phone payment interface is provided to the user wired terminal 100 by the payment interface providing means 115, the information receiving means 120 is inputted from the user wired terminal 100 through the mobile payment interface. Connect a mobile phone number corresponding to the user mobile phone 170 and a communication session for receiving OTP and OTP verification information.

According to an embodiment of the present invention, the payment interface providing unit 115 connects the communication channel with the user wired terminal 100 and provides the mobile phone payment interface to the user wired terminal 100 through the communication channel. In one case, the information receiving means 120 checks the user wired terminal 100 information (eg, an IP address) from the communication channel provided with the mobile phone payment interface to the user wired terminal 100, and the communication channel. Communication session for receiving a mobile phone number and OTP and OTP verification information corresponding to the user mobile phone 170 from the user wired terminal 100 based on (for example, the mobile number and OTP from the user wired terminal 100) And a memory area allocated for receiving the OTP verification information and a communication thread code.

According to another embodiment of the present invention, when the payment interface providing means 115 provides the mobile phone payment interface to the user wired terminal 100 through the web server 105, the information receiving means 120 is Receiving the user wired terminal 100 information (for example, an IP address) from the web server 105, the mobile phone number and the OTP corresponding to the user mobile phone 170 from the user wired terminal 100 based on this And a communication session for receiving OTP verification information (for example, connecting the mobile phone number with a memory area allocated for receiving OTP and OTP verification information and a communication thread code) from the user wired terminal 100. desirable.

Here, the communication session is received by encrypting the mobile phone number and the OTP and OTP verification information corresponding to the user mobile phone 170, the mobile number and the OTP and OTP verification information corresponding to the encrypted user mobile phone 170 It is preferable to include a secure communication session for decryption.

When the communication session is connected to the user wired terminal 100, the information receiving means 120 verifies the mobile phone number and OTP and OTP corresponding to the user mobile phone 170 from the user wired terminal 100 through the communication session. And receiving information.

If the mobile phone number corresponding to the user mobile phone 170 and the OTP and OTP verification information are further received from the user wired terminal 100, the mobile communication company selection information or the user social security number information is received, the user authentication means 125, the mobile communication company The user mobile phone 170 and the user resident registration number information is transmitted to the mobile communication company server 165 corresponding to the selection information, and the user mobile phone 170 number and the user through the subscriber D / B from the mobile communication company server 165 When the user authentication result of the resident registration number information is configured and transmitted, the user authentication means 125 receives and reads the user authentication result to authenticate the user who has requested the mobile payment.

In addition, the agent confirming means 130 transmits the user mobile phone 170 number to a server providing and managing an OTP agent to the user mobile phone 170, and the OTP agent D / B (not shown) in the server. Check whether the user mobile phone 170 corresponding to the user mobile phone 170 number is provided with an OTP agent for generating an OTP for authenticating the mobile phone payment through the OTP agent confirmation result corresponding to the verification result. When configured and transmitted, the agent confirming means 130 receives and reads the OTP agent confirming result and checks whether the user mobile phone 170 has an OTP agent for generating an OTP for authenticating the small sum payment. It is characterized by.

According to an embodiment of the present invention, the payment system 110 provides the OTP agent to the user mobile phone 170, and the OTP agent information and the mobile phone number provided to the user mobile phone 170 are stored in the storage medium 160. If stored, it is possible to check whether the OTP agent is provided in the user mobile phone 170 through the storage medium 160.

If the check result of the agent confirming means 130, if the user mobile phone 170 is not provided with an OTP agent for generating the OTP for authenticating the mobile phone micropayment, the agent providing means 135 for processing, The user mobile phone 170 is characterized in that it is processed to transmit a message including a callback URL (CallBack URL) for downloading the OTP agent.

According to an embodiment of the present invention, when it is confirmed that the OTP agent is not provided in the user mobile phone 170, the agent providing means 135 outputs a pop-up through a mobile phone payment interface provided to the user wired terminal 100. The OTP agent download request requested by the user through an OTP agent download interface (or a menu) included in the mobile phone payment interface or outputted, and in response to the OTP agent download request, the user mobile phone 170. As a result, it is preferable to process a message including a callback UEL for OTP agent download.

Here, the callback UEL for downloading the OTP agent includes a URL information of the mobile communication company server 165, or a predetermined OTP server (shown or set up to manage the OTP agent in the mobile communication company server 165) (Omitted), and the user mobile phone 170 receiving the message including the callback UEL downloads the OTP agent according to an OTP agent download procedure using a preset mobile communication network. It is mounted on the mobile phone 170.

After the OTP agent is downloaded to the user mobile phone 170, the mobile communication company server 165 (or OTP server) provided by the OTP agent to the user mobile phone 170 is an OTP agent provided in the user mobile phone 170. Provides OTP generation information for generating OTP to the user mobile phone (170).

According to an embodiment of the present invention, the mobile telecommunication company server 165 (or OTP server) allocates one or more fixed seed values for generating an OTP through an OTP agent provided in the user mobile phone 170, Generating OTP generation information (or extracting from a database storing OTP generation information) comprising one or more fixed seed values assigned and parameters for determining one or more dynamic seed values required to generate an OTP via the OTP agent, Preferably, the generated OTP generation information is provided to the user mobile phone 170 through a mobile communication network, and the mobile communication company server 165 (or OTP server) is provided to provide the OTP generation information to the user mobile phone 170. ) Connects a secure communication channel with the user mobile phone 170.

According to the method of the present invention, the mobile communication company server 165 (or OTP server) is the first after the OTP agent is downloaded to the user mobile phone 170, or the OTP agent downloaded to the user mobile phone 170 first In execution, the OTP generation information may be generated (or extracted) and provided to the user mobile phone 170, and the OTP generation information may be encrypted and stored in a memory provided in the user mobile phone 170, or It is preferably stored in a Universal Subscriber Identity (USIM) module provided in the user mobile phone 170.

According to the method of the present invention, after the OTP agent is downloaded to the user mobile phone 170 or when the OTP agent downloaded to the user mobile phone 170 is first executed, the user mobile phone 170 is the OTP agent. Input a user password or a user personal identification number for generating an OTP through, and encrypts the input user password or user personal identification number and store it in the memory provided in the mobile phone, or provided in the user mobile phone 170 It is preferable to store in the USIM, and when the OTP agent is generated to generate the OTP afterwards, the OTP agent outputs an interface for inputting a user password or a user identification number, and the user password or user personal input through the interface Identification number and company stored in the memory (or USIM) It is preferable to authenticate the validity of the OTP generation by comparing the user password or the user identification number.

According to an embodiment of the present invention, when the user password or the personal identification number is used as OTP verification information, the OTP agent communicates with the payment system 110 through the user mobile phone 170 (eg, Encryption and decryption based secure communication channel), and transmits the user password or user identification number to the payment system 110, and the payment system 110 transmits the user password or user identification number. Confirm the mobile phone number corresponding to the user mobile phone 170 (or receive the user social security number information in the user password or user personal identification number), and OTP verification including the mobile phone number and the user password or user personal identification number Information is stored in the storage medium 160 in association.

According to another embodiment of the present invention, a second user password or user personal identification number corresponding to the OTP verification information is stored in a memory (or USIM) provided in the user mobile phone 170 in addition to the user password or user personal identification number. In the case of registration, the OTP agent outputs an interface for registering the OTP verification information, and the memory (or the second user password or user identification number inputted through the interface) provided in the user mobile phone 170 (or After storing (or encrypted storage) in the USIM, the payment system 110 and the communication channel (for example, encryption and encryption-based secure communication channel) are connected through the user mobile phone 170, and the payment system 110 ) Transmits a second user password or user identification number stored in the memory (or USIM), the payment system ( 110 confirms the mobile phone number corresponding to the user mobile phone 170 that has transmitted the second user password or user personal identification number (or including user resident registration number information in the second user password or user personal identification number); And OTP verification information including the mobile phone number and the second user password or the user's personal identification number to be stored in the storage medium 160. When the user password or user identification number of 2 is stored in the memory (or USIM), when generating or outputting OTP through the OTP agent, the second user password or user identification number stored in the memory (or USIM) It is also preferable to output.

According to another embodiment of the present invention, when registering a user password or user identification number other than the user password or user identification number, the OTP agent outputs an interface for registering the OTP verification information, the interface When a separate user password or user identification number is input through the user, the mobile phone 170 connects the communication channel with the communication channel (eg, encryption / decryption-based secure communication channel), and the payment The system 110 transmits the separate user password or user personal identification number, and the payment system 110 transmits the mobile phone number corresponding to the user mobile phone 170 which has transmitted the separate user password or user personal identification number. Confirmation (or separate user password or user identification number above) Receiving information including a user social security number) and, in conjunction the OTP verification information including the separate user password or the user's personal identification number and the mobile phone number is stored in the storage medium 160.

The OTP validating means 140 checks the user wired terminal 100 information or the communication session information corresponding to the user wired terminal 100, and the user wired terminal 100 information or the information from the storage medium 160. And verifying the OTP verification information connected to the communication session information, and comparing the received OTP verification information with the checked OTP verification information to verify the validity of generating OTP 'to be compared with the OTP.

If the validity of generating OTP 'to be compared with the OTP is verified through the OTP verification information, the payment validity authentication means 145 may generate the OTP' to be compared with the OTP from the storage medium 160. Confirm the required OTP generation information, determine a fixed seed value and a dynamic seed value for generating OTP 'from the OTP generation information, and use the determined fixed seed value and the dynamic seed value to compare the received OTP' with the OTP '; It characterized in that to generate.

If the OTP 'is generated, the payment validity authentication means 145 confirms the payment validity of the mobile number by comparing the received OTP and the generated OTP', and the information providing means. 150, the micropayment validity verification result for the mobile phone number is transmitted to the web server 105 operating the micropayment target website.

Referring to FIG. 1, when the payment validity is authenticated by the payment validity authentication means 145, the payment processing means processes the payment amount to be settled through a communication fee charged to the mobile phone. It is preferable to further comprise 155.

According to the exemplary embodiment of the present invention, the payment processing unit 155 checks the payment amount to be charged on the communication fee of the user mobile phone 170 from the web server 105 and associates with the mobile communication company server 165. By querying the payment limit for the user's mobile phone 170 number, and comparing the payment amount and the payment limit, it is preferable to approve payment through the communication charges imposed on the mobile phone.

According to another exemplary embodiment of the present invention, the payment processing means 155 may store and manage the user mobile phone 170 number and payment limit information corresponding thereto through a separate database, in which case the payment The processing means 155 may inquire the payment limit for the user mobile phone 170 number through the database, compare the payment amount with the payment limit, and approve the payment through the communication fee charged to the mobile phone. Do.

When the payment using the communication fee charged to the mobile phone is approved, the payment processing means 155 processes the payment amount to be charged to the communication fee for the user mobile phone 170 through the mobile communication company server 165. And, payment approval information for the payment amount is transmitted to the web server 105.

2 is a diagram illustrating a mobile phone payment process using OTP verification information according to the first embodiment of the present invention.

In more detail, Figure 2 is a user wired terminal 100 connected to a small payment target website, a user mobile phone 170 number and an OTP (One Time Password) generated by an OTP agent provided in the user mobile phone 170. And a process for providing an interface for inputting OTP verification information for generating an OTP 'to be compared with the OTP, and then a mobile phone number and an OTP corresponding to the user's mobile phone 170 from the user wired terminal 100 through the interface. As a process of receiving OTP verification information, those of ordinary skill in the art to which the present invention pertains, various implementations of the mobile phone payment process using the OTP verification information by referring to and / or modified in the Figure 2 It is possible to infer a method (e.g., an implementation method in which some steps have been omitted or reordered), but the present invention is directed to all implementations that are inferred. It becomes to include the place, to which the technical feature that is not limited to the exemplary method shown in the figure 2.

Hereinafter, in FIG. 2, the payment system 110 shown in FIG. 1 is referred to as a “server” for convenience.

Referring to FIG. 2, a user accesses the web server 105 to purchase tangible / intangible goods, and a communication fee charged to the user's mobile phone 170 for a payment amount corresponding to a purchase price for the goods. When a mobile phone payment means is selected to make a payment (200), the server relays the web server 105 directly to the user wired terminal 100 or through the communication network to which the user wired terminal 100 is connected. The mobile phone payment interface for inputting a mobile phone number and OTP and OTP verification information corresponding to the user mobile phone 170 to the user wired terminal 100 is processed (205), and the mobile phone payment interface from the user wired terminal 100 Check that the inputted mobile number and OTP and OTP verification information is received through 210.

According to an embodiment of the present invention, the mobile phone payment interface comprises a user interface for inputting mobile phone company selection information corresponding to the user mobile phone 170 or user resident registration number information for the user to a mobile phone number and OTP and OTP verification information. It is preferable to comprise more.

If the mobile phone number and OTP and OTP verification information are received from the user wired terminal 100 (215), and the mobile carrier selection information and the user social security number information are further received (220), the server corresponds to the mobile carrier selection information. The user's mobile phone 170 and the user's resident registration number information is transmitted to the mobile communication company server 165 to request user authentication, and the user's mobile phone 170 and the user through the subscriber D / B from the mobile communication company server 165 When the user authentication result of the user social security number information is configured and transmitted, the user authentication result is received and read to authenticate the user who has requested the mobile payment.

If the user is not authenticated (230), the server generates a user authentication error and transmits to the user wired terminal 100 (or user mobile phone 170) and the web server 105 (235).

On the other hand, if the user is authenticated (225), or receives only the mobile phone number and OTP and OTP verification information from the user wired terminal 100 (215), the server via the user mobile phone 170, the user mobile phone ( In step 170, it is checked whether an OTP agent for generating an OTP for authenticating the mobile phone payment is provided.

If the OTP agent is not installed in the user mobile phone 170 (245), the server processes the OTP agent to be provided to the user mobile phone 170 through the process illustrated in FIG. 3.

On the other hand, if the user mobile phone 170 is equipped with the OTP agent (245), the server verifies the validity of generating the OTP 'to be compared with the OTP through the process shown in Figure 4, and generates the OTP' If the validity is verified, payment validity is verified by comparing the OTP and OTP '.

3 is a diagram illustrating a process of providing an OTP agent to a user mobile phone 170 according to the first embodiment of the present invention.

In more detail, FIG. 3 includes a callback UEL for providing the OTP agent to the user mobile phone 170 when the user mobile phone 170 is not equipped with the OTP agent in the process shown in FIG. 2. A process of processing a message to be transmitted to the user mobile phone 170, and showing the process of providing the OTP agent to the user mobile phone 170 through the message, a person having ordinary knowledge in the art to which the present invention belongs If so, various implementation methods (for example, some steps may be omitted or the order may be changed) may be inferred from the process of providing an OTP agent to the user mobile phone 170 by referring to and / or modifying the drawing 3. However, the present invention includes all the implementation methods inferred from the above, and only the implementation method shown in FIG. The technical features are not limited.

Hereinafter, in FIG. 3, the payment system 110 shown in FIG. 1 is referred to as a “server” for convenience.

Referring to FIG. 3, when the OTP agent is not mounted on the user mobile phone 170 in the process illustrated in FIG. 2, the server includes a callback UEL for downloading the OTP agent to the user mobile phone 170. The user's mobile phone 170 receives the message and transmits the message to the mobile communication company server 165 (or the OTP server) corresponding to the callback UEL. Ask.

The mobile telecommunication company server 165 (or OTP server) corresponding to the callback UEL provides the OTP agent to the user mobile phone 170 (305).

If the OTP agent is provided to the user mobile phone 170 (310), the user mobile phone 170 inputs a user password or a user personal identification number for generating an OTP through the OTP agent, the input user The password or user identification number may be encrypted and stored in the memory provided in the mobile phone, or stored in the USIM provided in the user mobile phone 170, registered (315), and compared with the OTP generated by the OTP agent. Input (or confirm) OTP verification information for verifying the validity of generating OTP 'and transmit it to the server (320), and the server checks the user's mobile phone 170 number that transmitted the OTP verification information, and The user's mobile phone 170 and the OTP verification information are stored in the storage medium 160 in operation 325.

4 is a diagram illustrating a mobile phone payment approval process using OTP verification information according to the first embodiment of the present invention.

In more detail, Figure 4 shows that after receiving the user's mobile phone 170 number and OTP and OTP verification information from the user wired terminal 100 in the process shown in Figure 2, the OTP verification information is read and the OTP ' When the generation validity is confirmed, it shows the process of authenticating payment validity by comparing with the received OTP after the generation of the OTP ', and if the person of ordinary skill in the art to which the present invention belongs Although various implementation methods (for example, some steps may be omitted or the order may be changed) may be inferred by referring to and / or modifying the mobile phone payment process using the OTP verification information. It is made to include all the implementation methods inferred, the technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in FIG. 4, the payment system 110 shown in FIG. 1 is referred to as a “server” for convenience.

Referring to FIG. 4, after the user mobile phone 170 number and the OTP and OTP verification information are received from the user wired terminal 100 in the process shown in FIG. 2, the server receives the received OTP verification information and the The OTP verification information stored in the storage medium 160 is compared (400) to check the validity of OTP 'generation.

If the validity of the OTP 'generation is not confirmed (405), the server generates payment error information and transmits the information to the user wired terminal 100 (or user mobile phone 170) and the web server 105 (410). .

On the other hand, if the validity of the OTP 'generation is confirmed (405), the server checks the OTP generation information for generating OTP' to be compared with the received OTP (415), the fixed seed for generating OTP 'from the OTP generation information A value and a dynamic seed value are determined (420), an OTP 'is generated using the determined fixed seed value and the dynamic seed value, and the payment validity is verified by comparing with the received OTP (425).

If the payment validity is not authenticated (430), the server generates payment error information and transmits to the user wired terminal 100 (or user mobile phone 170) and the web server 105 (440).

If the payment validity is authenticated (430), the server generates the payment validation result and transmits to the user wired terminal 100 (or user mobile phone 170) and the web server 105 (435), In response to the payment validity check result, the payment approval through the communication fee of the user mobile phone 170 is processed (440).

According to the embodiment of the present invention, the server confirms the payment amount to be charged to the user mobile phone 170 communication fee from the web server 105, the user mobile phone 170 in conjunction with the mobile communication company server 165 It is preferable to approve the payment through the communication charges imposed on the mobile phone by querying the payment limit for the number and comparing the payment amount with the payment limit.

5 is a diagram showing the configuration of a mobile phone micropayment processing system using OTP verification information according to a second embodiment of the present invention.

In more detail, Figure 5 is a user wired terminal 500 connected to a small payment target website, the user's mobile phone 575 number and OTP (One Time Password) generated by the OTP agent provided in the user's mobile phone 575 And a process for providing an interface for inputting OTP verification information for generating an OTP 'to be compared with the OTP, and then a mobile phone number and an OTP corresponding to the user mobile phone 575 through the interface from the user wired terminal 500. Receiving OTP verification information, and transmits the mobile phone number and OTP and OTP verification information to the OTP server 560 of the OTP agent provider provided in the user's mobile phone 575, OTP 'generation validity in the OTP server 560 and As shown in FIG. 5, a system configuration for processing a micro payment of a mobile phone by authenticating a payment validity is described. And / or modified to infer various implementation methods (e.g., implementation methods in which some components are omitted, subdivided, or combined) for the mobile phone payment processing system using the OTP verification information. It is made to include all the inferred implementation method, the technical features are not limited only to the implementation method shown in FIG.

For example, the mobile phone micropayment processing system shown in FIG. 5 can be applied to a system for processing payment using a customer's payment means, except that the payment amount is added to the communication fee of the user's mobile phone 575. The present invention naturally includes all payment processing systems that can be inferred as described above.

Referring to FIG. 5, the cellular phone micropayment processing system includes a user wired terminal 500 used by a user who accesses a website for micropayment and a user mobile phone 575 possessed by the user. Small payment target web that sells tangible / intangible goods to the user through the terminal 500 and makes payment through a mobile phone payment means that charges the amount of payment for the sold goods to the user's mobile phone 575 communication fee At least one web server 505 that operates a site, a payment system 510 for processing a micro phone payment using OTP verification information in association with the user wired terminal 500 and the user mobile phone 575, and the user mobile phone. An OTP server 560 for authenticating payment validity through an OTP generated by an OTP agent provided at 575 and a mobile communication network connected to the user's mobile phone 575. The gentleman server 570, characterized in that made, the payment system 510 is implemented in the form of an authentication server (or relay server) connected to the web server 505 and the mobile communication company server 570, Or it may be implemented in the form of the internal component of the web server 505, or in the form of the internal component of the mobile communication server server 570, it will be apparent that the present invention is not limited thereby. .

The user wired terminal 500 includes one or more personal computers and laptops having a browser that can access a web server 505 that operates the micropayment target website, and the web server 505 or a payment system. 510 receives a mobile phone number corresponding to the user's mobile phone 575 and a mobile phone payment interface for inputting OTP and OTP verification information and outputs it to a screen output means, and the user mobile phone to the mobile phone payment interface through a key input means. The mobile phone number and the OTP and OTP verification information corresponding to 575 may be input and transmitted to the web server 505 or the payment system 510.

The web server 505 sells tangible / intangible goods to the user through the user wired terminal 500, and the mobile phone payment means for imposing a payment amount for the sold goods on the user mobile phone 575 communication fee. As a generic term for a server that operates a small payment target website that can be paid through, when the user wired terminal 500 selects the mobile phone payment means as the payment means for the payment amount, the user wired terminal 500 ) To provide the mobile phone payment interface or to provide the mobile phone payment interface to the user wired terminal 500 through the payment system 510.

The user mobile phone 575 is a mobile phone possessed by a user who purchases tangible / intangible goods sold by the web server 505 and authenticates a payment validity using a communication fee charged to the user mobile phone 575. A function of downloading an OTP agent, and a function of generating an OTP by driving the OTP agent and outputting the generated OTP (for example, a screen output or a user through a short range communication means such as Bluetooth, Wi-Fi, or RF communication). It is possible to output to the wired terminal (500).

According to the present invention, the user wired terminal 500 is an embodiment of a first terminal in which a user connects to a server through a communication network and purchases tangible / intangible goods sold by the server. It is possible to carry out various modifications according to the communication network and server type and characteristics.

According to the present invention, the user mobile phone 575 is an embodiment of a second terminal equipped with an OTP agent to authenticate the payment validity for the purchase price of the goods purchased through the first terminal, the second The terminal may include all communication terminals except for the first terminal.

For example, when the server to which the first terminal is connected is a home shopping server, the first terminal may include a user's IPTV, and the second terminal includes a wired telephone / VoIP phone provided near the IPTV. can do.

Alternatively, when the server to which the first terminal is connected is an ARS server, the first terminal may include a user's landline phone / mobile phone / VoIP phone, and the second terminal is another voice call except for the first terminal. Terminal (e.g., if the first terminal is a landline phone, the second terminal includes a mobile phone / VoIP phone; if the first terminal is a mobile phone, the second terminal includes a landline phone / VoIP phone, and the first terminal If the VoIP phone, the second terminal may include a landline / mobile phone).

That is, the user wired terminal 500 of the present application is not limited to the above-described wired terminal, and it will be apparent that the user mobile phone 575 of the present application is also not limited to the mobile phone.

The mobile telecommunication company server 570 is a generic term for a mobile telecommunication company side server provided on the mobile communication network to which the user mobile phone 575 is connected to interface with the mobile phone. In the payment system 510, the user mobile phone 575 is used. Message server, data exchange server, WAP (WAP) for transmitting the information (or data) requesting to be provided to the user's mobile phone 575 through a mobile communication system (eg, exchange, base station, etc.) according to a preset communication protocol. It is preferable to include one or more servers.

According to an exemplary embodiment of the present invention, the mobile telecommunication company server 570 functions to authenticate a user by querying a subscriber D / B (not shown) through the user mobile phone 575 number and user social security number information, and the user mobile phone ( It is preferable to have a function of managing the OTP agent provided to the user mobile phone 575 through the OTP server 560 providing the OTP agent to 575.

According to the embodiment of the present invention, the mobile telecommunication company server 570 is provided with the OTP agent in the user mobile phone 575, or when the OTP agent is provided to the user mobile phone 575, the user mobile phone 575 It is preferable to store the corresponding mobile phone number and OTP agent information corresponding to the OTP agent provided in the user mobile phone 575 in association.

Here, the OTP agent information, it is preferable that the OTP agent version information, OTP generation algorithm and OTP generation method provided in the user mobile phone 575 corresponding to the mobile phone number preferably comprises at least one.

Here, the OTP generation algorithm and the OTP generation method may use different algorithms and generation methods for each OTP agent, and thus the present invention is not limited thereto.

The OTP server 560 is characterized in that to authenticate the payment via the OTP generated by the OTP agent provided in the user's mobile phone 575, the OTP agent for generating the OTP for the payment validity authentication is provided To determine a mobile number corresponding to the user's mobile phone 575 and one or more fixed seed and dynamic seed values for generating an OTP 'to be compared with an OTP generated by the OTP agent provided in the mobile phone. A storage medium 565 for storing the OTP generation information including parameters and OTP verification information for validating the OTP verification information for generating the OTP 'through the OTP generation information, or connected through a communication network. It is characterized by.

The mobile phone number is a generic name of information that can identify the user mobile phone 575, and includes one or more telephone numbers, serial numbers (ESNs), and subscriber identification numbers assigned to the user mobile phone 575, or the user. At least one unique number (or unique code) stored encrypted in the memory of the mobile phone 575, USIM serial number assigned to the USIM provided in the user mobile phone 575, the unique number (or unique code) recorded in the USIM It is preferable to comprise.

The OTP generation information may include one or more fixed seed values used to generate an OTP according to the OTP generation algorithm and the OTP generation method, and a parameter for determining the dynamic seed value. It is preferable to comprise.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm in a time-synchronization manner, wherein the parameter of the OTP generation information is It is preferable to include synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation information includes a seed fixed to assign to an OTP generation algorithm of a challenge-response manner, and the parameter of the OTP generation information is the challenge- It is preferable to include a random number generating seed for generating a random number corresponding to the dynamic seed value of the response type OTP.

According to an exemplary embodiment of the present invention, the OTP generation information is stored in the user mobile phone 575 memory in association with the OTP agent downloaded to the user mobile phone 575 or stored in the user mobile phone 575. It is preferable to be stored in the USIM (encryption storage possible).

When the OTP verification information is received from the user wired terminal 500, the OTP generated through the OTP agent provided in the user mobile phone 575 and the OTP generation information, the OTP generation information stored in the storage medium 565 is received. It is preferably made by including one or more user password or user identification number to verify that generates the OTP to be compared with the OTP using.

According to an embodiment of the present invention, the OTP verification information includes a user password or a user personal identification number input to drive the OTP agent in the user mobile phone 575 to generate the OTP, or the user password. Or a second user password or user personal identification number which is extracted (or decrypted if encrypted and stored) from the memory (or USIM) included in the mobile phone through a user personal identification number, or stored in the storage medium 565. It is preferable to include a separate user password or user identification number registered to verify generating the OTP to be compared with the OTP using the OTP generation information.

When the OTP and OTP verification information are provided from the payment system 510, the OTP server 560 compares the OTP verification information with the OTP verification information previously stored in the storage medium 565 to be compared with the OTP '. When the generation validity is verified and the OTP 'generation is validated, the OTP generation information for generating the OTP' to be compared with the OTP is checked, and the fixed seed value and the dynamic seed value for generating the OTP 'from the OTP generation information. Determine, generate an OTP 'using the determined seed value and the dynamic seed value, compare the received OTP with the generated OTP', and confirm the micropayment validity of the mobile number to determine the payment system ( 510) characterized in that provided.

Referring to FIG. 5, the payment system 510 is for inputting a mobile phone number corresponding to the user mobile phone 575 and OTP and OTP verification information to the user wired terminal 500 connected to the small payment target website. A payment interface providing means 515 for processing a mobile payment interface to be provided; information receiving means 520 for receiving a mobile phone number and OTP and OTP verification information corresponding to the user mobile phone 575 through the mobile payment interface; OTP providing means 540 for transmitting the received mobile number and OTP and OTP verification information to the OTP server 560 of the OTP agent provider provided in the user's mobile phone 575, and the OTP from the OTP server 560 Authentication result receiving means 545 for receiving a comparison result of the OTP 'generated on the basis of the verification information and the OTP generated by the user mobile phone 575, and the OTP generated by the OTP' and the user mobile phone 575 Provided by the information providing gongsudan 550 for transmitting the validation result to the micropayments micropayments the website corresponding to the comparison results characterized in that formed.

According to an embodiment of the present invention, the mobile phone payment interface comprises a user interface for inputting mobile phone company selection information corresponding to the user mobile phone 575 or user resident registration number information for the user to a mobile phone number and OTP and OTP verification information. It is preferable to comprise more.

According to the present invention, the payment system 510 further includes a user interface for inputting the mobile communication company selection information or user social security number information to the mobile phone payment interface, and selecting the mobile communication company through the information receiving means 520. When the information or user resident registration number information is further received, the user mobile phone 575 number and user resident registration number information is transmitted to the mobile communication company server 570 corresponding to the mobile communication company selection information, and the user mobile phone through the mobile communication company server 570. And a user authentication means 525 for authenticating the user by receiving and reading a user authentication result corresponding to the number and the user social security number verification result (575).

According to the present invention, the payment system 510, the agent confirmation means 530 for confirming whether the OTP agent is already installed in the user mobile phone 575 corresponding to the user mobile phone 575 number, and the user If the OTP agent is not already installed in the mobile phone 575, the mobile phone 575 further includes an agent providing means 535 for processing a message including a callback URL for downloading the OTP agent to the user mobile phone 575. Characterized in that made.

According to the present invention, each means constituting the payment system 510 is implemented as a separate server for each means, or in the form of a predetermined authentication server (or relay server) including the means, or two The above means are combined to be implemented as a separate server, or the means are implemented in the form of components in the web server 505, or the means are implemented in the form of components in the mobile communication server server 570, or Some of the means are implemented as components in the web server 505 and some are implemented as components in the carrier server 570, or some of the means are implemented as components in the web server 505 and some are Is implemented as a component in the mobile carrier server 570 and the other part can all be implemented in a separate server form, the billing system 510 Bayida put out to clarify SHALL not limited by the embodiment to which the present invention method.

The user accesses the web server 505 to purchase tangible / intangible goods, and pays a mobile phone to pay a payment amount corresponding to the purchase price of the goods through a communication fee imposed on the user's mobile phone 575. When the user selects a means, the payment interface providing means 515 relays the web server 505 directly to the user wired terminal 500 or directly through the communication network to which the user wired terminal 500 is connected. The mobile terminal 500 may be configured to process a mobile phone payment interface for inputting a mobile phone number corresponding to the user mobile phone 575 and OTP and OTP verification information.

When the mobile phone payment interface is provided to the user wired terminal 500 by the payment interface providing means 515, the information receiving means 520 is input through the mobile phone payment interface from the user wired terminal 500. Connect a mobile phone number corresponding to the user mobile phone 575 and a communication session for receiving OTP and OTP verification information.

According to an embodiment of the present invention, the payment interface providing means 515 connects the communication channel with the user wired terminal 500 and provides the mobile phone payment interface to the user wired terminal 500 through the communication channel. In one case, the information receiving means 520 checks the user wired terminal 500 information (for example, an IP address) from the communication channel provided with the mobile phone payment interface to the user wired terminal 500, and the communication channel. Communication session for receiving the mobile phone number and OTP and OTP verification information corresponding to the user mobile phone 575 from the user wired terminal 500 based on (for example, the mobile number and OTP from the user wired terminal 500) And a memory area allocated for receiving the OTP verification information and a communication thread code.

According to another embodiment of the present invention, when the payment interface providing means 515 provides the mobile phone payment interface to the user wired terminal 500 through the web server 505, the information receiving means 520 is Receiving the user wired terminal 500 information (for example, an IP address) from the web server 505, the mobile phone number and the OTP corresponding to the user mobile phone 575 from the user wired terminal 500 based on this It is preferable to connect a communication session for receiving OTP verification information (for example, the mobile phone number from the user wired terminal 500, a memory area allocated for receiving OTP and OTP verification information, and a communication thread code). Do.

Here, the communication session is received by encrypting the mobile phone number and the OTP and OTP verification information corresponding to the user mobile phone 575, and the mobile phone number and OTP and OTP verification information corresponding to the encrypted user mobile phone 575 It is preferable to include a secure communication session for decryption.

When the communication session is connected to the user wired terminal 500, the information receiving means 520 verifies the mobile phone number and the OTP and OTP corresponding to the user mobile phone 575 from the user wired terminal 500 through the communication session. And receiving information.

When the mobile communication company selection information or the user social security number information is further received from the user wired terminal 500 and the mobile phone number corresponding to the user mobile phone 575 and OTP and OTP verification information, the user authentication means 525 is connected to the mobile communication company. The user mobile phone 575 number and user social security number information is transmitted to the mobile communication company server 570 corresponding to the selection information, and the user mobile phone 575 number and the user through the subscriber D / B in the mobile communication company server 570 When the user authentication result of the resident registration number information is configured and transmitted, the user authentication means 525 may receive and read the user authentication result to authenticate the user who has requested the micro payment.

In addition, the agent identification means 530 transmits the user mobile phone 575 number to the OTP server 560 for providing and managing an OTP agent to the user mobile phone 575, the OTP server 560 in the OTP Check whether the OTP agent for generating an OTP for authenticating the mobile phone micropayment is provided in the user mobile phone 575 corresponding to the user mobile phone 575 number through an agent D / B (not shown). After configuring and transmitting an OTP agent verification result corresponding to the agent verification means 530, the agent verification means 530 receives and reads the OTP agent verification result to generate an OTP for authenticating the mobile phone micropayment to the user cellular phone 575. It is characterized by checking whether the OTP agent is provided.

According to an embodiment of the present invention, the payment system 510 provides the OTP agent to the user mobile phone 575, and the OTP agent information and the mobile number provided to the user mobile phone 575 in the storage medium 565 When stored, it is possible to check whether the OTP agent is provided in the user mobile phone 575 through the storage medium 565.

If the agent confirming means 530 confirms that the user's mobile phone 575 is not provided with an OTP agent for generating the OTP for authenticating the mobile payment, the agent providing means for processing 535, The user mobile phone 575 is characterized in that it is processed to transmit a message including a callback URL (CallBack URL) for downloading the OTP agent.

According to the embodiment of the present invention, when it is confirmed that the OTP agent is not provided in the user mobile phone 575, the agent providing means 535 outputs a pop-up through a mobile phone payment interface provided to the user wired terminal 500. The OTP agent download request requested by the user through an OTP agent download interface (or menu) included in the mobile phone payment interface or outputted, and in response to the OTP agent download request, the user mobile phone 575. As a result, it is preferable to process a message including a callback UEL for OTP agent download.

Here, the callback UEL for downloading the OTP agent is preferably made, including the URL information of the OTP server 560 providing the OTP agent to the user's mobile phone 575, receiving the message containing the callback UEL The user mobile phone 575 downloads the OTP agent and mounts it on the user mobile phone 575 according to an OTP agent download procedure using a preset mobile communication network.

After the OTP agent is downloaded to the user mobile phone 575, the OTP server 560 provided by the OTP agent to the user mobile phone 575 generates an OTP through the OTP agent provided in the user mobile phone 575. Provides OTP generation information for the user mobile phone (575).

According to an embodiment of the present invention, the OTP server 560 assigns one or more fixed seed values for generating an OTP through an OTP agent provided in the user's mobile phone 575, and the assigned one or more fixed seed values. Generating OTP generation information (or extracting from a database storing OTP generation information) including a value and a parameter for determining one or more dynamic seed values required to generate an OTP via the OTP agent, and generating the OTP generation information It is preferable to provide to the user mobile phone 575 through a mobile communication network, the OTP server 560 secure communication with the user mobile phone 575 to provide the OTP generation information to the user mobile phone 575. Connect the channel.

According to an embodiment of the present invention, the OTP server 560 generates the OTP after the OTP agent is downloaded to the user mobile phone 575 or when the OTP agent downloaded to the user mobile phone 575 is first executed. It is preferable to generate (or extract) information and provide the information to the user mobile phone 575. The OTP generation information is encrypted and stored in a memory provided in the user mobile phone 575, or to the user mobile phone 575. It is preferably stored in the provided Universal Subscriber Identity (USIM) Module.

According to the method of the present invention, after the OTP agent is downloaded to the user mobile phone 575 or when the OTP agent downloaded to the user mobile phone 575 is first executed, the user mobile phone 575 is the OTP agent. Input a user password or a user personal identification number for generating an OTP through, and encrypts the input user password or user personal identification number to store in the memory provided in the mobile phone, or provided in the user mobile phone 575 It is preferable to store in the USIM, and when the OTP agent is generated to generate the OTP afterwards, the OTP agent outputs an interface for inputting a user password or a user identification number, and the user password or user personal input through the interface Identification number and company stored in the memory (or USIM) It is desirable to authenticate the validity of the OTP generation by comparing the user password or user identification number.

According to an embodiment of the present invention, when the user password or the personal identification number is used as OTP verification information, the OTP agent communicates with the payment system 510 through the user mobile phone 575 (eg, cancer). And a decryption-based secure communication channel), and transmit the user password or user identification number to the payment system 510, and the payment system 510 transmits the user password or user identification number. Check the mobile phone number corresponding to the mobile phone 575 (or received including the user social security number information in the user password or user personal identification number), OTP verification information including the mobile phone number and the user password or user personal identification number In conjunction with the stored in the storage medium 565.

According to another embodiment of the present invention, a second user password or user personal identification number corresponding to the OTP verification information is stored in a memory (or USIM) provided in the user mobile phone 575 in addition to the user password or user personal identification number. When registering, the OTP agent outputs an interface for registering the OTP verification information, and stores a second user password or user identification number inputted through the interface in the user mobile phone 575 (or After storing (or encrypted storage) in the USIM, the payment system 510 is connected to the communication channel (for example, encryption / decryption-based secure communication channel) through the user mobile phone 575, and the payment system ( 510 transmits a second user password or user identification number stored in the memory (or USIM), the payment system 510 confirms the mobile phone number corresponding to the user mobile phone 575 that has transmitted the second user password or user personal identification number (or including user resident registration number information in the second user password or user personal identification number); And OTP verification information including the mobile phone number and the second user password or user personal identification number and store the information in the storage medium 565. When the user password or user identification number of 2 is stored in the memory (or USIM), when generating or outputting OTP through the OTP agent, the second user password or user identification number stored in the memory (or USIM) It is also preferable to output.

According to another embodiment of the present invention, when registering a user password or user identification number other than the user password or user identification number, the OTP agent outputs an interface for registering the OTP verification information, the interface When a separate user password or a user personal identification number is input through the mobile phone 575, the payment system 510 connects a communication channel (e.g., encryption and decryption based secure communication channel), and the payment The separate user password or user identification number is transmitted to the system 510, and the payment system 510 is a mobile phone number corresponding to the user mobile phone 575 which transmitted the separate user password or user identification number. Confirm (or the separate user password or user identification number Receiving information including a user social security number) and, in conjunction the OTP verification information including the separate user password or the user's personal identification number and the mobile phone number is stored in the storage medium 565.

When the OTP verification information for verifying the validity of generating the user mobile phone 575 number and the OTP and the OTP 'to be compared with the OTP is received from the user wired terminal 500, the OTP providing means 540 receives the reception. The mobile phone number and the OTP and OTP verification information are transmitted to the OTP server 560 of the OTP agent provider provided in the user mobile phone 575.

The OTP server 560 is provided with the mobile phone number and OTP and OTP verification information from the payment system 510, and checks the OTP verification information associated with the mobile phone number from the storage medium 565, and receives the received information. The OTP verification information and the checked OTP verification information is compared to verify the validity of generating OTP 'to be compared with the OTP.

If the validity of generating OTP 'to be compared with the OTP is verified through the OTP verification information, the OTP server 560 may generate an OTP necessary to generate the OTP' to be compared with the OTP from the storage medium 565. Confirm the generation information, determine a fixed seed value and a dynamic seed value for generating OTP 'from the OTP generation information, and use the determined fixed seed value and the dynamic seed value to compare the received OTP with the OTP'; It characterized in that to generate.

If the OTP 'is generated, the OTP server 560 compares the received OTP and the generated OTP' to check the validity of the payment for the mobile number, and the payment validity result is determined by the payment system 510. And the authentication result receiving means 545 is characterized by receiving and reading the payment validity results from the OTP server 560 to confirm the payment validity.

The information providing means 550 transmits a micropayment validity verification result corresponding to a comparison result of the OTP 'and the OTP generated by the user's mobile phone 575 to the web server 505 operating the micropayment target website. It is characterized by.

Referring to FIG. 5, when the payment validity is authenticated by the OTP server 560, the payment system 510 processes the payment amount to be settled through a communication fee charged to the mobile phone. It is preferable to further comprise 555).

According to the method of the present invention, the payment processing means 555 confirms the payment amount to be charged to the communication fee of the user mobile phone 575 from the web server 505, and is connected with the mobile communication company server 570. By querying the payment limit for the user's mobile phone 575 number, and comparing the payment amount and the payment limit, it is preferable to approve payment through the communication charges imposed on the mobile phone.

According to another exemplary embodiment of the present invention, the payment processing means 555 may store and manage the user mobile phone 575 number and payment limit information corresponding thereto through a separate database, in which case the payment The processing means 555 inquires the payment limit for the user mobile phone 575 number through the database, and compares the payment amount and the payment limit to approve payment through the communication fee charged to the mobile phone. Do.

When the payment using the communication fee charged to the mobile phone is approved, the payment processing means 555 processes the payment amount to be charged to the communication fee for the user mobile phone 575 through the mobile communication company server 570. In addition, payment approval information for the payment amount is transmitted to the web server 505.

6 is a diagram illustrating a mobile phone payment process using OTP verification information according to a second embodiment of the present invention.

In more detail, Figure 6 is a user wired terminal 500 accessing a small payment target website, a user mobile phone 575 number and an OTP (One Time Password) generated by an OTP agent provided in the user mobile phone 575. And a process for providing an interface for inputting OTP verification information for generating an OTP 'to be compared with the OTP, and then a mobile phone number and an OTP corresponding to the user mobile phone 575 through the interface from the user wired terminal 500. As a process of receiving OTP verification information, those of ordinary skill in the art to which the present invention pertains, various implementations of the mobile phone payment process using the OTP verification information by referring to and / or modifying the present Figure 6 It is possible to infer a method (e.g., an implementation method in which some steps have been omitted or reordered), but the present invention is directed to all implementations inferred from the above. It becomes to include the place, to which the technical feature that is not limited to the exemplary method shown in the figure 6.

Hereinafter, in FIG. 6, the payment system 510 illustrated in FIG. 5 is referred to as a “server” for convenience.

Referring to FIG. 6, a user accesses the web server 505 to purchase tangible / intangible goods, and a communication fee charged to the user's mobile phone 575 for a payment amount corresponding to the purchase price of the goods. When the mobile phone payment means is selected to make a payment (600), the server relays the web server 505 directly to the user wired terminal 500 or through the communication network to which the user wired terminal 500 is connected. The mobile phone payment interface for inputting a mobile phone number and OTP and OTP verification information corresponding to the user mobile phone 575 to the user wired terminal 500 is processed (605), and the mobile phone payment interface from the user wired terminal 500. Check whether the received mobile phone number and OTP and OTP verification information are received through 610.

According to an embodiment of the present invention, the mobile phone payment interface comprises a user interface for inputting mobile phone company selection information corresponding to the user mobile phone 575 or user resident registration number information for the user to a mobile phone number and OTP and OTP verification information. It is preferable to comprise more.

If the mobile phone number and OTP and OTP verification information are received from the user wired terminal 500 (615), and the mobile communication company selection information and the user social security number information are further received (620), the server corresponds to the mobile communication company selection information. The user's mobile phone 575 number and the user's resident registration number information is transmitted to the mobile telecommunication company server 570 to request user authentication, and the user's mobile phone 575 number and the user through the subscriber D / B in the mobile telecommunication company server 570 When the user authentication result of the user social security number information is configured and transmitted, the user authentication result is received and read to authenticate the user who has requested the mobile payment.

If the user is not authenticated (630), the server generates a user authentication error and transmits to the user wired terminal 500 (or user mobile phone 575) and the web server 505 (635).

On the other hand, if the user is authenticated (625) or only the mobile phone number and OTP and OTP verification information from the user wired terminal 500 (615), the server via the user mobile phone (575) number through the user mobile phone ( In operation 640, it is checked whether an OTP agent for generating an OTP for authenticating the mobile payment is provided.

If the user mobile phone 575 is not equipped with the OTP agent (645), the server processes the OTP agent to be provided to the user mobile phone 575 through the process shown in FIG.

On the other hand, if the user mobile phone 575 is equipped with the OTP agent (645), the server verifies the validity of generating the OTP 'to be compared with the OTP through the process shown in Figure 8, the validity of the OTP' generation If this is verified, payment validity is verified by comparing the OTP and OTP '.

7 is a diagram illustrating a process of providing an OTP agent to a user mobile phone 575 according to the second embodiment of the present invention.

In more detail, FIG. 7 includes a callback UEL for providing the OTP agent to the user mobile phone 575 when the user mobile phone 575 is not equipped with the OTP agent in the process illustrated in FIG. 6. A process of processing a message to be transmitted to the user mobile phone 575 and showing the process of providing the OTP agent to the user mobile phone 575 through the message, a person having ordinary skill in the art to which the present invention pertains. If so, various implementation methods (e.g., some steps may be omitted or reordered) may be inferred by referring to and / or modifying the drawing 7 to provide the OTP agent to the user mobile phone 575. However, the present invention includes all the implementation methods inferred from the above, and only the implementation method shown in FIG. The technical features are not limited.

Hereinafter, in FIG. 7, the payment system 510 shown in FIG. 5 is referred to as a “server” for convenience.

Referring to FIG. 7, when the OTP agent is not mounted on the user mobile phone 575 in the process illustrated in FIG. 6, the server includes a callback UEL for downloading the OTP agent to the user mobile phone 575. The mobile phone 575 receives the message and requests the OTP agent from the OTP server 560 corresponding to the callback UEL.

The OTP server 560 corresponding to the callback UEL provides the OTP agent to the user mobile phone 575 (705).

If the OTP agent is provided to the user mobile phone 575 (710), the user mobile phone 575 inputs a user password or a user personal identification number for generating an OTP through the OTP agent, the input user The password or user identification number may be encrypted and stored in the memory provided in the mobile phone, or stored in the USIM provided in the user mobile phone 575, registered (715), and compared with the OTP generated by the OTP agent. Input (or verify) OTP verification information for verifying the validity of generating OTP 'and transmit it to the server (720), and the server checks the user's mobile phone 575 number that transmitted the OTP verification information, and The user's mobile phone 575 and the OTP verification information are stored in the storage medium 565 in operation 725.

8 is a diagram illustrating a mobile phone payment approval process using OTP verification information according to a second embodiment of the present invention.

In more detail, FIG. 8 illustrates that after the user mobile phone 575 number and OTP and OTP verification information are received from the user wired terminal 500 in the process shown in FIG. 6, the mobile phone number in the payment system 510. And OTP and OTP verification information to the OTP server 560, and generates the OTP 'by checking the OTP' generation validity in the OTP server 560, and then authenticates the payment validity by comparing the OTP with the payment system 510. In this case, the payment system 510 illustrates a payment approval process based on the validity of the payment, and a person having ordinary knowledge in the art to which the present invention pertains refers to FIG. 8 and / or Alternatively, it may be modified to infer various implementation methods (e.g., implementation steps with some steps omitted or changed in order) for the mobile phone payment approval process using the OTP verification information. The present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in FIG. 8, the payment system 510 shown in FIG. 5 is referred to as a “server” for convenience.

Referring to FIG. 8, after receiving the user mobile phone 575 number and the OTP and OTP verification information from the user wired terminal 500 in the process shown in FIG. 6, the server verifies the mobile phone number and the OTP and OTP verification. Information is provided to the OTP server 560 (800), and the OTP server 560 checks the validity of OTP 'generation by comparing the OTP verification information and the OTP verification information stored in the storage medium 565 (805). .

If the validity of the OTP 'generation is not confirmed (810), the OTP server 560 generates payment error information and transmits it to the server (815), and the server transmits the payment error information to the user wired terminal 500. (Or the user mobile phone 575) and transmits to the web server 505 (820).

On the other hand, if the validity of the OTP 'generation is confirmed (810), the OTP server 560 checks OTP generation information for generating OTP' to be compared with the received OTP (825), and OTP 'from the OTP generation information The fixed seed value and the dynamic seed value to be generated are determined (830). The OTP 'is generated using the determined seed value and the dynamic seed value, and the payment validity is verified by comparing with the received OTP (835).

If the payment validity is not authenticated (840), the OTP server 560 generates and transmits payment error information to the server (815), and the server transmits the payment error information to the user wired terminal 500 (or The mobile phone 575 is transmitted to the web server 505 (820).

If the payment validity is authenticated (840), the OTP server 560 generates and transmits the payment validation result to the server (845), and the server transmits the payment validation result to the user wired terminal (500). (Or the user's mobile phone 575) and the web server 505 is transmitted (850), and in response to the payment validation result of the payment approval through the communication charge of the user's mobile phone 575 (855).

According to the embodiment of the present invention, the server confirms the payment amount to be charged to the communication fee of the user mobile phone 575 from the web server 505, and for the user mobile phone 575 number in connection with FIG. It is preferable to approve a payment through a communication fee imposed on the mobile phone by inquiring a payment limit and comparing the payment amount with the payment limit.

According to the present invention, an interface for inputting a user's mobile phone number and an OTP (One Time Password) generated by an OTP agent provided in the user's mobile phone and OTP verification information for generating an OTP 'to be compared with the OTP is provided. If the user's mobile phone number and OTP and OTP verification information is received from the user wired terminal, the OTP 'to be compared with the OTP is verified through the OTP verification information, and the OTP' generation validity is authenticated. Only when the mobile phone number is generated, the OTP 'is generated through the OTP generation information associated with the user's mobile phone number, and the mobile phone payment is approved by comparing with the OTP received from the user's wired terminal. Even if you know the Authenticator is equipped with a password (or personal identification number) If you can not drive the agent has the advantage of blocking the advance that makes the mobile payment fraud approval not to offer mobile payments.

According to the present invention, by inputting the OTP verification information preset in the mobile phone payment process, if the OTP 'generation validity is not confirmed through the OTP verification information so as not to generate the OTP' to be compared with the received OTP Therefore, there is an advantage in blocking the unauthorized payment of the mobile phone in advance.

Claims (8)

Input the user's mobile number, OTP (One Time Password) generated by the OTP agent provided in the user's mobile phone and OTP verification information for generating OTP 'to be compared with the OTP. Processing to provide an interface; Receiving a mobile number and OTP and OTP verification information input through the interface from the user wired terminal; Verifying OTP 'generation to be compared with the OTP by comparing the received OTP verification information with previously stored OTP verification information in a storage medium; Confirming OTP generation information for generating OTP 'to be compared with the OTP when the OTP' generation is verified; The fixed seed value and the dynamic seed value for generating OTP 'are determined from the OTP generation information. The OTP' is generated using the determined seed value and the dynamic seed value, and the received OTP and the generated OTP 'are generated. Confirming the micropayment validity for the mobile number by comparing;  And transmitting the micropayment validity verification result for the mobile phone number to the micropayment target website. Input the user's mobile number, OTP (One Time Password) generated by the OTP agent provided in the user's mobile phone and OTP verification information for generating OTP 'to be compared with the OTP. Processing to provide an interface; Receiving a mobile number and OTP and OTP verification information input through the interface from the user wired terminal; Reading the received mobile phone number and transmitting the mobile phone number and OTP and OTP verification information to an OTP server providing an OTP agent to the user mobile phone; Receiving a comparison result of an OTP 'generated based on the OTP verification information from the OTP server and an OTP generated in a user's mobile phone; And transmitting the micropayment validity verification result corresponding to the comparison result of the OTP 'and the OTP generated by the user's mobile phone to the micropayment target website. The method according to any one of claims 1 to 2, Receiving user social security number information from the user wired terminal; And And a step of authenticating the user using the received user social security number information and the user mobile phone number information. The method according to any one of claims 1 to 2, Querying a micropayment limit for the user's mobile number; And And processing the approval for the micropayment in response to the micropayment limit inquiry result. The method according to any one of claims 1 to 2, And processing the small payment amount so as to be charged to the user's mobile phone usage fee. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 1 to 2. A storage medium for storing the user's mobile phone number, OTP generation information, and OTP verification information in association with each other; And Input the user's mobile number, OTP (One Time Password) generated by the OTP agent provided in the user's mobile phone and OTP verification information for generating OTP 'to be compared with the OTP. Process to provide an interface to receive a mobile phone number and OTP and OTP verification information input through the interface, and compares the received OTP verification information and OTP verification information stored in the storage medium to be compared with the OTP When the generation is verified and the generation of the OTP is verified, the OTP generation information for generating the OTP to be compared with the OTP is checked, and the fixed seed value and the dynamic seed value for generating the OTP 'are generated from the OTP generation information. And generate an OTP 'using the determined fixed seed value and the dynamic seed value, and compare the received OTP with the generated OTP'. DCB processing system comprising the; server to determine the validity micropayments for the mobile phone number. An OTP server for providing and managing an OTP agent to a user's mobile phone; And Input the user's mobile number, OTP (One Time Password) generated by the OTP agent provided in the user's mobile phone and OTP verification information for generating OTP 'to be compared with the OTP. And a server for receiving a mobile phone number and OTP and OTP verification information input through the interface, and transmitting the mobile number and OTP and OTP verification information to the OTP server. , The OTP server, Comparing OTP verification information stored in a storage medium to verify OTP 'generation to be compared with the OTP, and when the OTP' generation is verified, confirming OTP generation information for generating OTP 'to be compared with the OTP, and The fixed seed value and the dynamic seed value for generating the OTP 'are determined from the OTP generation information, the OTP' is generated using the determined seed value and the dynamic seed value, and the received OTP is compared with the generated OTP '. Confirming the micropayment validity of the mobile phone number, and transmitting the comparison result of the OTP to the server.

Images