KR20110061368A - Method and system for providing payment service using a terminal having usim - Google Patents

Abstract

PURPOSE: A service payment method and system thereof which uses a terminal having USIM are provided to simply supply a payment service through a wired/wireless and mobile service by using a security service based on USIM. CONSTITUTION: A payment system(200) requests payment from an external device(100). The payment system includes ID of a security key in an SMS module(320) in order to trigger a payment authentication module(420). The payment authentication module receives payment information through the payment system. The payment authentication module decodes the received payment information to data.

Description

Method and system for providing payment service using a terminal having USIM}

The present invention relates to a service payment method using a terminal having a USIM, and more particularly, to a service subscriber such as shopping and VOD provided from an external device such as an IPTV (Internet Protocol Television). The present invention relates to a service payment method and system using a terminal having a USIM for easy online authentication and payment using a module).

As the Internet develops, a case of performing a payment service using the Internet from a PC or a mobile terminal is increasing.

1 is a view showing an Internet payment service according to the prior art, as shown in the prior art Internet payment service, a card reader for credit card payment in order to receive the Internet payment service, and also active for payment You must install the -X program. However, due to the absence of a smart card reader, it is rarely used in practice and uses a weak and non-standard method such as credit card number input and SMS authentication.

Therefore, the Internet payment service according to the prior art has the following disadvantages.

(1) Active-X-based security method is international non-standard and payment service using mobile web that does not support Acitive-X cannot be provided.

(2) Maintenance is difficult because it is not independent of each device and operating system, and service cannot be provided on all devices and platforms.

(3) In addition to USB devices for banking services, there are inconveniences of possessing devices such as security cards and OTPs, and there is anxiety about leaking security contents.

(4) It uses PIN number or SMS authentication which is mainly used as authentication method between user and USB device. In this case, security is weak because it can be recognized by others through PIN number leakage and SMS authentication number hacking.

(5) There is a problem of compatibility by providing a non-standardized program for banking services, which does not provide a personalized user interface (UI) / user experience (UX).

(6) In order to pay the card using the Internet, it is inconvenient to carry a card reader separately, and non-standard payment methods such as card number input and SMS authentication are not used.

SUMMARY OF THE INVENTION In view of the disadvantages of the prior art as described above, the present invention provides a service cost such as shopping and VOD provided from an external device such as an IPTV (Internet Protocol Television) using a universal subscriber identity module (USIM) mounted in a mobile phone. An object of the present invention is to provide a service payment method and system using a terminal having USIM for online authentication and payment.

In order to achieve the above technical problem, the service payment method using a terminal having a USIM according to the present invention, the payment request from the external device to the payment system, receiving the payment information (S01); Sending (S02) an ID of the security key to the SMS module in order to trigger the payment authentication module on the USIM in the payment system; The payment authentication module is triggered through Secure SMS to receive payment information through a payment system and HTTPs (over TLS) communication (S03); The payment authentication module decrypts and verifies the payment information received from the payment system using the security key ID, and then stores the corresponding payment information in the payment information storage module of the USIM (S04); The payment authentication module triggers the browser of the terminal to call the personal authentication module via the SCWS (S05); Displaying a personal authentication input page (HTML) transmitted from the personal authentication module in a browser, receiving a personal authentication password from a user, and transmitting the received personal authentication password to the personal authentication module (S06); The personal authentication module performs a personal authentication by comparing and determining the password previously input to the personal authentication setting information storage module using the input password (S07); Acquiring payment information from the payment information storage module when the personal authentication succeeds in the personal authentication module (S08); Confirming by displaying the obtained payment information in a browser via SCWS (S09); And requesting approval from the payment system using the authentication information and payment information in the browser of the terminal, and completing the approval from the payment system (S10).

In step S02, the SMS module may send an SMS to SCWS on the USIM, and the SCWS may transmit a trigger URL to the payment system.

In step S03, the payment information may be transmitted by encrypting with a security key from the payment system.

In step S06, the user may check the personal authentication input page displayed on the browser of the terminal and then input a preset personal authentication password.

In step S10, the payment system notifies the completion of the payment to the external device, and may transmit the approval completion page to the browser of the terminal.

The external device is preferably an Internet Protocol Television (IPTV) providing shopping and VOD interactive services.

In addition, the service payment system using a terminal having a USIM according to the present invention, the external device for requesting payment to the payment system, and transmitting the payment information; Receives the payment request and the payment information from the external device, sends the SMS module including the security key ID to trigger the payment authentication module on the USIM, and sends the authentication information and payment information from the browser of the terminal. Payment system for completing the approval after receiving the approval request by using; Triggered through Secure SMS to receive payment information through the HTTPs (over TLS) communication with the payment system, and decrypts and validates the payment information received from the payment system using a security key ID and then confirms the payment information of the USIM. A payment authentication module for storing the payment information storage module and calling a personal authentication module via SCWS by triggering a browser of the terminal; A personal authentication module for performing personal authentication by comparing with the password previously inputted in the personal authentication setting information storage module using the input password, and obtaining payment information from the payment information storage module if the personal authentication is successful; Display the personal authentication input page (HTML) transmitted from the personal authentication module to the browser, receive the personal authentication password from the user and send it to the personal authentication module, and display the obtained payment information through the SCWS to confirm in the browser, It characterized in that it comprises a terminal for requesting approval to the payment system using the authentication information and payment information in the browser.

The SMS module may send an SMS to SCWS on the USIM, and the SCWS may send a trigger URL to the payment system.

The payment information may be transmitted by being encrypted with a security key from the payment system.

The user may input a preset personal authentication password after checking the personal authentication input page displayed in the browser of the terminal.

The payment system notifies the completion of the payment to the external device, and transmits the approval completion page to the browser of the terminal.

The external device is preferably an Internet Protocol Television (IPTV) providing shopping and VOD interactive services.

According to the service payment method and system using a terminal having a USIM according to the present invention, the following effects can be achieved.

(1) USIM-based authentication and security services installed in mobile phones are used, so payment services via wired, wireless and mobile are very simple and secure by using Internet security technology based on international standards that replaces Active-X-based security. Can provide.

(2) In the prior art, it is possible to provide financial services such as banking, payment, and securities using the mobile web as a USIM-based authentication and security service, which has been limited in security due to Active-X-based security.

(3) The USIM provides a web-based program to provide a payment service, so that the user's personal financial information is not stored in another device, thereby providing a security-enhanced service.

(4) Since USIM-based card payment service is provided, a card reader is not required and it is possible to provide a more convenient and security-enhanced service than the existing payment method.

(5) It is possible to provide customized shopping and VOD services for each individual from external devices such as IPTV (Internet Protocol Television) using USIM-based mobile phone subscriber information, and through this, target marketing data. Can be utilized as

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The terms or words used in this specification and claims are not to be construed as limiting in their usual or dictionary meanings, and the inventors may properly define the concept of terms in order to best explain their invention in the best way possible. It should be interpreted as meaning and concept corresponding to the technical idea of the present invention. Therefore, the embodiments described in the specification and the drawings shown in the drawings are only the most preferred embodiment of the present invention and do not represent all of the technical idea of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations. Here, like reference numerals in the drawings denote like elements.

2 is a control flowchart illustrating a service payment method using a terminal having a USIM according to the present invention, FIG. 3 is a block diagram showing a service payment system using a terminal having a USIM according to the present invention, and FIG. It is a figure which shows the platform of USIM and a terminal.

As shown, the overall system for implementing the present invention is an external device 100, IPTV (Internet Protocol Television) 110, payment system 200, terminal 300, browser (310), SMS (short message service) module 320, universal subscriber identity module (USIM) 400, smart card web server (SCWS) 410, payment authentication module 420, personal authentication module 430, payment information storage module 440 and the personal authentication setting information storage module 450 is configured.

The present invention supports an application-based service platform by consisting of a smart card web server (SCWS), a web-based application (Web Application), an application program (Applet), and the like. It can also transmit secure data over HTTPs over TLS secure sessions. And, by using SCWS-based mobile security module, it is possible to provide more secure payment service, and also to use USIM for mobile, so that it is possible to provide integrated UI / UX that is not dependent on the terminal platform. do.

As is well known, the USIM combines subscriber identity module (SIM) card with subscriber information and universal IC card (UICC) to implement various functions such as user authentication, global roaming, and e-commerce on a single card. It is generally installed in a third generation mobile communication (WCDMA) terminal.

The terminal 300 defined in the present invention may be applied to all devices having the USIM 400. As an example, not only mobile phones. IPTV Set Top Box. USIM can be mounted on a terminal such as WiBro to implement the payment method and system of the present invention.

As shown in FIG. 3, the security key is shared with the USIM module 400 and the payment system 200 in advance. In addition, the payment authentication module 420 and the personal authentication module 430 is composed of a web application (Servlet) operating in the SCWS (410).

The terminal 300 includes a browser 310 and a short message service (SMS) module 320. In addition, the universal subscriber identity module (USIM) 400 is a smart card web server (SCWS) 410, payment authentication module 420, personal authentication module 430, payment information storage module 440 and personal authentication setting information It may include a storage module 450.

The external device 100 requests a payment to the payment system 200 and transmits the payment information. The external device 100 may be an IPTV (Internet Protocol Television) providing shopping and VOD interactive services.

The payment system 200 receives the payment request and the payment information from the external device 100 and transmits a security key to the SMS module 320 to trigger the payment authentication module 320 on the USIM 400. After the ID is sent, the browser 310 of the terminal 300 receives the approval request using the authentication information and the payment information, and the approval is completed. In addition, the payment system 200 notifies the completion of the payment to the external device 100, and transmits the approval completion page to the browser 310 of the terminal 300. The payment information is encrypted and transmitted from the payment system 200 with a security key.

The payment authentication module 420 of the USIM 400 is triggered through Secure SMS to receive payment information through the payment system 200 and HTTPs (over TLS) communication, and receives the payment information received from the payment system 200. After decrypting and verifying the data using the security key ID, the corresponding payment information is stored in the payment information storage module 440 of the USIM 400, and the browser 310 of the terminal 300 is triggered through the SCWS 410. Call the personal authentication module 420.

The personal authentication module 420 of the USIM 400 performs personal verification by comparing the password previously input to the personal authentication setting information storage module 450 using the input password, and if the personal authentication succeeds, the payment information. Obtain payment information from the storage module 440.

 The terminal 300 displays the personal authentication input page (HTML) transmitted from the personal authentication module 420 in the browser 310, receives a personal authentication password from the user, and transmits the personal authentication password to the personal authentication module 420. The payment information is displayed and confirmed in the browser 310 through the SCWS 410, and the browser 310 requests the approval of the payment system 200 using the authentication information and the payment information. The SMS module 320 transmits an SMS to the SCWS 410 on the USIM 400, and the SCWS 410 transmits a trigger URL to the payment system 200. The user checks the personal authentication input page displayed on the browser 310 of the terminal 300 and inputs a preset personal authentication password.

The operation of the present invention configured as described above will be described in more detail with reference to the accompanying drawings.

First, a payment request is made from the external device 100 to the payment system 200 and the payment information is received (S01).

Thereafter, in order to trigger the payment authentication module 320 on the USIM 400 in the payment system 200, the SMS module 320 sends the security key including the ID of the security key (S02).

At this time, the SMS module 320 transmits an SMS to the SCWS 410 on the USIM 400, and the SCWS 410 transmits a trigger URL to the payment system 200.

Thereafter, the payment authentication module 420 is triggered through Secure SMS to receive payment information through the payment system 200 and HTTPs (over TLS) communication (S03).

In this case, the payment information is encrypted by the security key from the payment system 200 and transmitted.

The payment authentication module 420 decrypts and verifies the payment information received from the payment system 200 using the security key ID, and then stores the payment information in the payment information storage module 440 of the USIM 400 ( S04).

The payment authentication module 420 triggers the browser 310 of the terminal 300 to call the personal authentication module 420 via the SCWS 410 (S05).

The personal authentication input page (HTML) transmitted from the personal authentication module 420 is displayed on the browser 310, and a personal authentication password is received from the user and transmitted to the personal authentication module 420 (S06).

At this time, the user checks the personal authentication input page displayed on the browser 310 of the terminal 300 and inputs a preset personal authentication password.

The personal authentication module 420 performs personal verification by comparing and determining the password with the password previously input to the personal authentication setting information storage module 450 using the input password (S07).

If the personal authentication is successful in the personal authentication module 420 to obtain payment information from the payment information storage module 440 (S08).

Thereafter, the obtained payment information is displayed on the browser 310 via the SCWS 410 to confirm it (S09).

In addition, the browser 310 of the terminal 300 requests approval to the payment system 200 using the authentication information and payment information, and completes the approval from the payment system 200 (S10).

At this time, the payment system 200 notifies the completion of the payment to the external device 100, and transmits the approval completion page to the browser 310 of the terminal 300.

Therefore, the present invention uses the USIM-based authentication and security services installed in the mobile phone, and very simple and secure payment using wired / wireless and mobile using international standard-based Internet security technology that replaces Active-X-based security. Can provide services. In addition, in the prior art, it is possible to provide financial services such as banking, payment, and securities using the mobile web, which are limited in security due to Active-X-based security, as USIM-based authentication and security services. USIM provides a web-based program to provide a payment service, so that the user's personal financial information is not stored in other devices, thereby providing a security-enhanced service. By providing a USIM-based card payment service, a card reader is not required and it is possible to provide a service that is more convenient and secured than a conventional payment method.

5 is a control block diagram illustrating a process of receiving an IPTV service and performing authentication and payment using a mobile phone having a USIM according to an embodiment of the present invention.

In the exemplary embodiment of the present invention, the terminal 300 is limited to a mobile phone, but the present invention is not limited thereto, and as described above, the terminal 300 may be applied to all devices equipped with the USIM 400.

As shown, a system for implementing one embodiment of the present invention includes an IPTV 110, a payment system 200, a terminal 300 and a USIM 400 as an example of the external device 100. It is composed. Of course, the terminal 300 and the USIM 400 are not shown in FIG. 5, but as shown in FIG. 4, the browser 310, the SMS module 320, the SCWS 410, the payment authentication module 420, The personal authentication module 430, the payment information storage module 440, and the personal authentication setting information storage module 450 are included.

As shown, the present invention transmits user information of any mobile communication user to the IPTV 110 through a personal area network. Here, the remote control application of the terminal 300 or an infrared communication module, Bluetooth, Zigbee, Dedicated Short Range Communication (DSRC), etc. may be used for the personal area network. In addition, the user information may include a mobile phone number, mobile phone memory information, credit card information, billing information.

Subsequently, through the process of the payment system of the present invention described above in detail, service costs such as shopping and VOD provided from an external device such as an IPTV (Internet Protocol Television) using a universal subscriber identity module (USIM) mounted in a mobile phone You can easily verify and pay online.

According to such a configuration, it is possible to provide customized shopping and VOD services such as personalized shopping from an external device such as Internet Protocol Television (IPTV) using USIM-based mobile phone subscriber information, and through this, target marketing (target) marketing) data.

The present invention is not limited to the above-described specific preferred embodiments, and various modifications can be made by any person having ordinary skill in the art without departing from the gist of the present invention claimed in the claims. Of course, such changes will fall within the scope of the claims.

1 is a view showing an Internet payment service according to the prior art.

2 is a control flowchart illustrating a service payment method using a terminal having a USIM according to the present invention.

3 is a block diagram showing a service payment system using a terminal having a USIM according to the present invention.

4 is a diagram showing a platform of the USIM and the terminal of FIG.

5 is a control block diagram illustrating a process of receiving an IPTV service and performing authentication and payment using a mobile phone having a USIM according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

100: external device 110: IPTV

200: payment system 300: terminal

310: browser 320: SMS module

400: USIM 410: SCWS

420: payment authentication module 430: personal authentication module

440: payment information storage module 450: personal authentication setting information storage module

Claims (12)

Requesting a payment from the external device 100 to the payment system 200 and receiving the payment information (S01); In step S02, the payment system 200 includes the ID of the security key in the SMS module 320 to trigger the payment authentication module 320 on the USIM 400; The payment authentication module 420 is triggered through Secure SMS to receive payment information through payment system 200 and HTTPs (over TLS) communication (S03); The payment authentication module 420 decrypts and verifies the payment information received from the payment system 200 using the security key ID, and then stores the payment information in the payment information storage module 440 of the USIM 400. (S04); The payment authentication module 420 triggers the browser 310 of the terminal 300 to call the personal authentication module 420 via the SCWS 410 (S05); Displaying a personal authentication input page (HTML) transmitted from the personal authentication module 420 in the browser 310, receiving a personal authentication password from the user, and transmitting the received personal authentication password to the personal authentication module 420 (S06); The personal authentication module 420 performs a personal authentication by comparing and determining the password with the password previously input to the personal authentication setting information storage module 450 by using the input password (S07); Acquiring payment information from the payment information storage module 440 when the personal authentication is successful in the personal authentication module 420 (S08); Displaying the obtained payment information on the browser 310 via the SCWS 410 and confirming (S09); And USIM characterized in that it comprises a step (S10) of requesting approval to the payment system 200 using the authentication information and payment information in the browser 310 of the terminal 300, and completes the approval from the payment system 200. Service payment method using a terminal having. The method of claim 1, In step S02, the SMS module 320 transmits an SMS to the SCWS 410 on the USIM 400, the SCWS 410 has a USIM, characterized in that for transmitting the trigger URL to the payment system 200 Service payment method using the terminal. The method of claim 1, In the step S03, the payment information is a service payment method using a terminal having a USIM, characterized in that the encrypted transmission with a security key from the payment system (200). The method of claim 1, In the step S06, the user checks the personal authentication input page displayed on the browser 310 of the terminal 300, and then input a preset personal authentication password, characterized in that the service payment method using a terminal having a USIM. The method of claim 1, In step S10, the payment system 200 notifies the completion of the payment to the external device 100, the terminal having a USIM, characterized in that for transmitting the approval completion page to the browser 310 of the terminal 300 Service billing method using. The method of claim 1, The external device (100) is a service payment method using a terminal having a USIM, characterized in that the Internet Protocol Television (IPTV) for providing shopping and VOD interactive services. An external device 100 for requesting payment to the payment system 200 and transmitting the payment information; Receives the payment request and its payment information from the external device 100, and sends the security module ID including the security key to the SMS module 320 to trigger the payment authentication module 320 on the USIM (400) A payment system 200 which completes the approval after receiving the approval request using the authentication information and the payment information from the browser 310 of the terminal 300; Triggered through Secure SMS to receive payment information through the payment system 200 and HTTPs (over TLS) communication, and decrypts and validates the payment information received from the payment system 200 using a security key ID. The payment authentication module stores the payment information in the payment information storage module 440 of the USIM 400 and triggers the browser 310 of the terminal 300 to call the personal authentication module 420 via the SCWS 410. 420; The personal authentication is performed by comparing the previously input password to the personal authentication setting information storage module 450 by using the input password, and if the personal authentication is successful, the individual who obtains the payment information from the payment information storage module 440 Authentication module 420; Display the personal authentication input page (HTML) transmitted from the personal authentication module 420 in the browser 310, receive a personal authentication password from the user and send it to the personal authentication module 420, and the obtained payment information SCWS ( USIM characterized in that it is displayed on the browser 310 via the 410, and the terminal 300 for requesting approval to the payment system 200 using the authentication information and payment information in the browser (310). Service payment system using a terminal having a. The method of claim 7, wherein The SMS module 320 transmits an SMS to the SCWS 410 on the USIM 400, and the SCWS 410 transmits a trigger URL to the payment system 200. system. The method of claim 7, wherein The payment information is a service payment system using a terminal having a USIM, characterized in that the encrypted transmission with a security key from the payment system (200). The method of claim 7, wherein The user checks the personal authentication input page displayed in the browser (310) of the terminal 300 and then inputs a preset personal authentication password, characterized in that the service payment system using a terminal having a USIM. The method of claim 7, wherein The payment system 200 notifies the payment completion to the external device 100, and transmits the approval completion page to the browser 310 of the terminal 300, the service payment system using a terminal having a USIM . The method of claim 7, wherein The external device (100) is a service payment system using a terminal having a USIM, characterized in that the Internet Protocol Television (IPTV) providing shopping and VOD interactive services.

Images