KR20110065814A - Method, system and apparatus for providing payment authentication - Google Patents

Abstract

PURPOSE: A method, system and apparatus for providing a payment authentication are provided to enhance the security of a mobile terminal by identifying the mobile communications identification number whether the number is possible to use and performing an authentication process for the PIN number, a message authentication, or one time password. CONSTITUTION: If one of the settlement request signal between the special goods and specific service is inputted through a mobile communication terminal(110), a franchise terminal(120) transmits an authentication request signal to authenticate the settlement request signal. An authentication server(150) transmits the results of the confirmation whether the mobile communications identification information included in the authentication request signal is available or not. If the mobile communications identification information is the available information, a membership server(130) confirms whether the PIN number included in the authentication request signal can be authenticated. The membership server transmits an authentication approval signal.

Description

Method, system and device for payment authentication {Method, System And Apparatus for Providing Payment Authentication}

The present invention relates to a payment authentication method, system and apparatus. More specifically, by using the subscriber identification module mounted in the mobile communication terminal to check whether the mobile communication identification number is available for payment authentication at the time of payment for a specific product or a specific service, and additionally PIN number, message authentication and one-time use The present invention relates to a payment authentication method, system, and device for strengthening security by performing authentication on any one of passwords.

As a payment method for general commerce or electronic commerce, a credit card, a debit card, or a deposit method through a bank account is commonly used. However, the conventional payment method has a problem such as inconvenience to carry cash when using cash, the risk of losing cash, the hassle of returning the balance. On the other hand, the use of credit cards as a way to increase the transparency of the taxation of commerce is recommended and many other payment methods are being developed. In particular, as the e-commerce using the Internet has been steadily growing, the payment and payment market is rapidly expanding. Until now, most of the payment methods on the Internet have been credit card and bankbook online payment. New payment methods have emerged, and their frequency of use is increasing rapidly.

However, in spite of the change of the payment method, when the credit card is lost, damage due to misuse may occur, and damage due to the leakage of personal information may occur.

In order to solve the above-mentioned problem, the present invention checks whether the mobile communication identification number is a usable number for payment authentication, and further strengthens security by performing authentication for any one of a PIN number, a message authentication, and a one-time password. The main purpose is to provide a payment authentication method, system and apparatus.

In order to achieve the above object, the present invention, if the payment request signal for any one of a specific product and a specific service is input through the mobile terminal, the merchant terminal for transmitting an authentication request signal for authenticating the payment request signal; An authentication server for transmitting a result of checking whether the mobile communication identification information included in the authentication request signal is usable information; If the verification result of the authentication server, the mobile communication identification information included in the authentication request signal is available information, check whether the PIN number included in the authentication request signal is authenticated, and if the verification result, the PIN number is authenticated, A membership server transmitting an authentication approval signal; And a payment server that receives the authentication approval signal and subtracts the cost corresponding to the payment request signal received from the merchant terminal from the prepaid payment cost or the preset postpaid payment cost charged in the subscriber identification device mounted in the mobile communication terminal. It provides a payment authentication system, characterized in that.

According to another object of the present invention, if a payment request signal for any one of a specific product and a specific service is input through a mobile communication terminal, the merchant terminal for transmitting an authentication request signal for authenticating the payment request signal; Check whether the mobile communication identification information included in the authentication request signal is available, and if the mobile communication identification information included in the authentication request signal is available information, a push message for requesting input of a PIN number to the mobile communication terminal; Authentication server for transmitting the; A membership server that receives a PIN number from a mobile communication terminal, checks whether the PIN number is authenticated, and transmits an authentication approval signal if the PIN number is authenticated; And a payment server that receives the authentication approval signal and subtracts the cost corresponding to the payment request signal received from the merchant terminal from the prepaid payment cost or the preset postpaid payment cost charged in the subscriber identification device mounted in the mobile communication terminal. It provides a payment authentication system, characterized in that.

According to another object of the present invention, if a payment request signal for any one of a specific product and a specific service is input through a mobile communication terminal, the merchant terminal for transmitting an authentication request signal for authenticating the payment request signal; Check whether the mobile communication identification information included in the authentication request signal is available, and if the mobile communication identification information included in the authentication request signal is available information, a push message for requesting input of a one-time password to the mobile communication terminal; An authentication server that transmits the data, receives a one-time password from the mobile communication terminal, and transmits an authentication approval signal when the one-time password is authenticated; And a payment server that receives the authentication approval signal and subtracts the cost corresponding to the payment request signal received from the merchant terminal from the prepaid payment cost or the preset postpaid payment cost charged in the subscriber identification device mounted in the mobile communication terminal. It provides a payment authentication system, characterized in that.

In addition, according to another object of the present invention, an information receiving unit for receiving an authentication request signal for payment of any one of a specific product and a specific service from the mobile communication terminal via the merchant terminal; A mobile communication identification information authentication unit which transmits a result of checking whether the mobile communication identification information included in the authentication request signal is usable information by using the authentication server; A PIN number authentication unit for transmitting a result of checking whether the PIN number included in the authentication request signal is authenticated when the mobile communication identification information is usable information; And an authentication result transmission unit for transmitting the authentication approval signal for payment to the affiliated store terminal and the authentication server when the PIN is authenticated.

In addition, according to another object of the present invention, an authentication request signal receiving step of receiving an authentication request signal for payment of any one of a specific product and a specific service from the mobile communication terminal via the merchant terminal; A mobile communication identification information authentication step of confirming whether or not the mobile communication identification information included in the authentication request signal is usable information by using the authentication server; A PIN number authentication step of confirming whether or not the PIN number included in the authentication request signal is authenticated when the mobile communication identification information is usable information as a result of the confirmation of the mobile communication identification information authentication step; And an authentication approval signal transmission step of transmitting an authentication approval signal for payment to the affiliated store terminal and the authentication server when the PIN number is authenticated as a result of the confirmation of the PIN number authentication step.

As described above, according to the present invention, the mobile communication identification number is used to verify the payment number for authentication, and additionally authenticates any one of a PIN number, a message authentication, and a one-time password to enhance security. It works.

Hereinafter, some embodiments of the present invention will be described in detail through exemplary drawings. In adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are assigned to the same components as much as possible even though they are shown in different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

In addition, in describing the component of this invention, terms, such as 1st, 2nd, A, B, (a), (b), can be used. These terms are only for distinguishing the components from other components, and the nature, order or order of the components are not limited by the terms. If a component is described as being "connected", "coupled" or "connected" to another component, that component may be directly connected to or connected to that other component, but there may be another configuration between each component. It is to be understood that the elements may be "connected", "coupled" or "connected".

1 is a block diagram schematically illustrating a payment authentication system according to a first embodiment, a second embodiment, and a third embodiment of the present invention.

The payment authentication system according to the first, second and third embodiments of the present invention is a mobile communication terminal 110, subscriber identification device 112, merchant terminal 120, membership server 130, payment Server 140, authentication server 150 and a wired or wireless communication network 160.

The mobile communication terminal 110 refers to a terminal that performs normal voice call and data communication by wireless communication in conjunction with the wired / wireless communication network 160. In addition, the mobile communication terminal 110 refers to a terminal capable of receiving various web page data via the wired / wireless communication network 160 according to a user's key operation, and includes a personal computer (PC), a notebook computer, and a personal portable device. It may be one of a personal digital assistant (PDA) and a mobile communication terminal (PDA), and stores a web browser and a program for accessing the membership server 130 via the wired / wireless communication network 160. Means a terminal having a memory for, a microprocessor for executing and controlling the program.

Meanwhile, the mobile communication terminal 110 refers to a terminal equipped with the subscriber identification device 112, and performs electronic payment and RF communication with the affiliated store terminal 120 through tagging of the mounted subscriber identification device 112. Can be. That is, the mobile communication terminal 110 may be any terminal if the electronic payment and RF communication with the affiliated store terminal 120 is possible through the mounted subscriber identification device 112, and any computer such as a laptop computer, a mobile communication terminal, a PDA, etc. It is a broad concept that includes all one communication computing device.

When the mobile communication terminal 110 according to the third embodiment receives a push message for requesting input of a one-time password from the authentication server 150, the mobile terminal 110 checks whether the PIN number entered for transmitting the one-time password is authenticated and confirmed. As a result, when the input PIN number is authenticated, it generates a one-time password and transmits it to the authentication server 150.

Subscriber identification device 112 is preferably a SIM or USIM having a memory or a calculation module and stores subscriber identification information, but is not necessarily limited thereto. That is, the subscriber identification device 112 includes an RF tag including at least one or more of unique ID information, membership identification information, and subscriber identification information for identifying the RF tag, and a memory or an operation module capable of electronic payment. Any smart card that can be mounted in the mobile communication terminal 110 is possible. Here, the RF tag may be one of a Radio Frequency Intergrated Circuit (RFIC) and a Monolithic Microwave Integrated Circuit (MMIC) including unique ID information for identifying the RF tag, and the prepaid payment cost information charged in the memory may be set in advance. At least one or more of postpaid payment cost information and subscriber identification information may be stored.

The affiliated store terminal 120 is a terminal having an RF reader capable of recognizing an RF tag, a memory for electronic payment, and an operation module, and preferably a point of sales (POS) terminal, but is not necessarily limited thereto. Here, the POS terminal is a terminal that manages the products to be sold in real time, and connects the cash register of the merchant store and the computer of the affiliate store headquarters, and the data is immediately inputted upon sale so that the sales management, inventory management and product management can be performed. Say Here, the RF reader recognizes an RF tag existing in a radio frequency recognition region by using a wireless communication technology, converts a signal received from the RF tag into a digital signal, and recognizes identification information of the RF tag included in the digital signal. Perform the function of processing.

The affiliated store terminal 120 performs a function of receiving a payment request signal from the mobile communication terminal 110 in a non-contact manner. Here, the non-contact method is a method of transmitting data wirelessly without using an electrical contact (wired) when transmitting and receiving data between the subscriber identification device 112 and the RF reader of the merchant terminal 120, RF reader and subscriber Depending on the distance between the identification devices 112, there may be a contact within 2 mm, a reflection between 1 and 20 cm, about 1 m and about several m. Here, the non-contact method uses electromagnetic induction or microwave when transmitting data, and the proximity type is standardized to ISO 1443. On the other hand, the non-contact type does not cause contact failure because it does not use a contact point, and the internal circuit is less likely to be destroyed by static electricity, and is used in the replacement of commuter passes, tickets and highway passes, and electronic money cards.

That is, the merchant terminal 120 recognizes the RF tag of the subscriber identification device 112 mounted on the mobile communication terminal 110 as an RF reader, and uses the RF reader to request a payment request signal from the subscriber identification device 112. Is received in a non-contact manner. In addition, the affiliated store terminal 120 transmits the payment completion information received from the payment server 140 to the mobile communication terminal 110. In addition, when the affiliated store terminal 120 recognizes the RF tag of the subscriber identification device 112 mounted on the mobile communication terminal 110 as an RF reader, it transmits payment completion information to the mobile communication terminal 110 in a non-contact manner. Perform the function. In addition, when the merchant terminal 120 receives a payment request signal for any one of a specific product and a specific service from the mobile communication terminal 110, transmits an authentication request signal for authenticating the payment request signal to the membership server 130. It performs the function.

The membership server 130 is a payment authentication device that authenticates the PIN included in the authentication request signal for payment or determines whether the mobile communication identification information included in the authentication request signal is available through the authentication server 150. Perform the function of checking. Here, the mobile communication identification information is preferably a telephone number of the mobile communication terminal 110, but is not necessarily limited thereto, and may be a MIN or an ESN of the mobile communication terminal 110. Meanwhile, the membership server 130 basically accumulates points corresponding to the amount paid by the user to the user's identification information, or performs a function of subtracting the accumulated points from the amount to be paid, and to a specific merchant or a specific product. Provides or stores a coupon indicating a discount rate for the service.

The membership server 130 according to the first embodiment receives an authentication request signal from the affiliated store terminal 120, transmits mobile communication identification information included in the authentication request signal to the authentication server 150, and the authentication server 150. If the check result of the mobile communication identification information included in the authentication request signal is usable information, check whether the PIN number included in the authentication request signal received from the merchant terminal 120 is authenticated, and as a result of the confirmation, PIN When the number is authenticated, the authentication approval signal is transmitted to the merchant terminal 120 and the payment server 140. The PIN number may be composed of a combination of numbers of four to eight digits as the password of the subscriber identification device 112.

The membership server 130 according to the second embodiment receives an authentication request signal from the affiliated store terminal 120 and transmits mobile communication identification information included in the authentication request signal to the authentication server 150. In addition, the membership server 130 receives the PIN number from the mobile communication terminal 110, checks whether the PIN number is authenticated, and if the PIN number is authenticated as a result of the verification, the merchant terminal 120 receives an authentication approval signal. And transmits to the payment server 140. The membership server 130 according to the second embodiment sets the PIN number input from the user terminal as reference information, and controls to transmit a PIN number setting completion message to the mobile communication terminal 110 through the authentication server 150. Perform the function. The membership server 130 according to the second embodiment controls to transmit a push message for requesting input of a PIN number to the mobile communication terminal 110 through the authentication server 150, and the PIN number from the mobile communication terminal 110. Perform the function of receiving it.

The membership server 130 according to the first and second embodiments receives an authentication request signal for payment of one of a specific product and a specific service from the mobile communication terminal 110 via the affiliated store terminal 120. Confirms whether the mobile communication identification information included in the authentication request signal is usable information using the authentication server 150, and if the mobile communication identification information is available information, Check whether the included PIN number is authenticated, and if the PIN number is authenticated based on the verification result, transmits an authentication approval signal for payment to the merchant terminal 120 and the authentication server 150. do. The membership server 130 according to the first embodiment and the second embodiment transmits an authentication approval signal to the payment server 140, and the payment fee requested through the payment server 140 is mounted on the mobile communication terminal 110. It performs a function to be subtracted from the prepaid payment cost or the prepaid post-payment charges charged in the subscriber identification device. The membership server 130 according to the first and second embodiments performs a function of updating whether the mobile communication identification information is usable information and whether the PIN number is authenticated.

The payment server 140 is a concept of a device including at least one server of a card company server, a financial institution server, a transportation institution server, and a mobile payment server that performs electronic payment. Of course, the payment server 140 may be implemented as any one of the card company server, financial institution server, transportation institution server and mobile payment server. The payment server 180 performs a function of subtracting the cost corresponding to the payment request signal from the prepaid payment cost or the preset postpaid payment cost charged in the subscriber identification device mounted in the mobile communication terminal 110. The payment server 140 according to the first embodiment, the second embodiment, and the third embodiment receives an authentication approval signal, and spends the cost corresponding to the payment request signal received from the affiliated store terminal 120. It performs a function of subtracting from the prepaid payment cost or the preset postpaid payment cost charged in the subscriber identification device mounted on 110.

The authentication server 150 is provided at the mobile communication provider and performs a function of authenticating the mobile communication identification information received from the membership server 130 using the information of the mobile communication subscriber. The authentication server 150 checks whether the mobile communication identification information received from the membership server 130 is an available number, and transmits the confirmation result to the membership server 130. The authentication server 150 according to the first embodiment receives the mobile communication identification information included in the authentication request signal from the membership server 130, checks whether the mobile communication identification information is usable information, and checks the result of the confirmation. Performs a function of transmitting to the membership server (130). The authentication server 150 according to the second embodiment confirms whether or not the mobile communication identification information included in the authentication request signal received from the membership server 130 is available, and confirms the mobile communication identification information included in the authentication request signal. If is available information, the mobile communication terminal 110 performs a function of transmitting a push message for requesting the input of the PIN number. The authentication server 150 according to the third embodiment confirms whether or not the mobile communication identification information included in the authentication request signal received from the membership server 130 is available, and confirms the mobile communication identification information included in the authentication request signal. Is a usable information, a push message for requesting input of a one-time password to the mobile communication terminal 110 is received, a one-time password is received from the mobile communication terminal 110, and the one-time password is authenticated, an authentication approval signal. It performs the function of transmitting to the merchant terminal 120 and the payment server 140 for transmitting the.

The wired / wireless communication network 160 refers to a network capable of transmitting and receiving data using Internet protocols using various wired / wireless communication technologies such as an internet network, an intranet network, a mobile communication network, and a satellite communication network. The wired / wireless communication network 160 is a network connecting the authentication server 150 or the membership server 130 and the mobile communication terminal 110 to a closed network such as a local area network (LAN) and a wide area network (WAN). It may be, but the open type such as the Internet (Internet) is preferred. The Internet has many services in the TCP / IP protocol and its upper layers: HyperText Transfer Protocol (HTTP), Telnet, File Transfer Protocol (FTP), Domain Name System (DNS), Simple Mail Transfer Protocol (SMTP), and SNMP ( The global open computer network architecture that provides the Simple Network Management Protocol (NFS), Network File Service (NFS), and Network Information Service (NIS). Here, since the technology for the wired / wireless communication network 160 is already known, a detailed description thereof will be omitted.

2 is a block diagram schematically illustrating a payment authentication device according to a first embodiment and a second embodiment of the present invention.

The membership server 130 according to the first and second embodiments of the present invention includes an information receiving unit 210, a mobile communication identification information authenticating unit 220, a PIN number authenticating unit 230, and an authentication result transmitting unit 240. ), The authentication status update unit 250, the payment processing unit 260 and PIN number setting unit 270 is configured. Meanwhile, in the first and second embodiments of the present invention, the membership server 130 may include the information receiving unit 210, the mobile communication identification information authenticating unit 220, the PIN number authenticating unit 230, and the authentication result transmitting unit ( 240, the authentication status update unit 250, the payment processing unit 260, and the PIN number setting unit 270 are described as being configured, but this is a technical idea of the first and second embodiments of the present invention. It is merely an example and described as one of ordinary skill in the art to which the first and second embodiments of the present invention pertain without departing from the essential characteristics of the first and second embodiments of the present invention. In the will be applicable to various modifications and variations to the components included in the membership server 130.

The information receiving unit 210 according to the first and second embodiments receives an authentication request signal for payment of one of a specific product and a specific service from the mobile communication terminal 110 via the affiliated store terminal 120. Perform the function. The information receiving unit 210 according to the second embodiment controls to transmit a push message for requesting input of a PIN number to the mobile communication terminal 110 through the authentication server 150, and the PIN number from the mobile communication terminal 110. Perform the function of receiving it.

The mobile communication identification information authentication unit 220 according to the first embodiment and the second embodiment checks whether the mobile communication identification information included in the authentication request signal is available information by using the authentication server 150, The verification result is transmitted to the PIN number authenticator 230. When the mobile communication identification information is usable information, the PIN number authentication unit 230 according to the first and second embodiments transmits a result of checking whether the PIN number included in the authentication request signal is authenticated. Do this.

When the PIN is authenticated, the authentication result transmitter 240 according to the first and second embodiments performs a function of transmitting an authentication approval signal for payment to the affiliated store terminal 120 and the authentication server 150. do. The authentication status updater 250 according to the first and second embodiments performs a function of updating whether the mobile communication identification information is usable information and whether the PIN number is authenticated.

The payment processing unit 260 according to the first and second embodiments transmits an authentication approval signal to the payment server 140, and the payment fee requested through the payment server 140 is mounted on the mobile communication terminal 110. It performs a function to be subtracted from the prepaid payment cost or the prepaid post-payment charges charged in the subscriber identification device 112. The PIN number setting unit 270 according to the second embodiment sets the PIN number input from the user terminal as reference information and transmits a PIN number setting completion message to the mobile communication terminal 110 through the authentication server 150. Function to control.

3 is a flowchart illustrating a method of performing payment authentication using mobile communication identification information and a PIN number according to the first embodiment of the present invention.

The user accesses the membership server 130 using the user terminal and inputs a PIN number (S310). The membership server 130 sets the PIN number input from the user terminal as reference information, and transmits a PIN number setting confirmation signal to the authentication server 150 (S312). When the authentication server 150 receives the PIN number setting confirmation signal from the membership server 130, the authentication server 150 transmits a PIN number setting completion message to the mobile communication terminal 110 corresponding to previously stored subscriber information (S314).

When a user visits a specific merchant and uses the subscriber identification device 112 mounted on the mobile terminal 110 as a payment method for one of a specific product and a specific service, the affiliated terminal 120 is connected to the mobile terminal 110. A payment request signal for any one of a specific product and a specific service is received from the mobile terminal, and mobile communication identification information for authenticating the payment request signal is received from the user (S320). At this time, the affiliated store terminal 120 receives the mobile communication identification information and PIN number to authenticate the payment, and transmits an authentication request signal including the input mobile communication identification information and PIN number to the membership server 130. Here, when the user orally transmits the mobile communication identification information and the PIN number to the affiliated store, the clerk inputs the mobile communication identification information and the PIN number to the affiliated store terminal 120 or, like the cash receipt input, the user enters the merchant terminal ( 120, mobile communication identification information and PIN number may be directly input. The affiliated store terminal 120 transmits an authentication request signal for authenticating the payment request signal to the membership server 130 (S322).

The membership server 130 transmits the mobile communication identification information included in the authentication request signal received from the affiliated store terminal 120 to the authentication server 150 (S324). The authentication server 150 checks whether the mobile communication identification information included in the authentication request signal received from the membership server 130 is usable information (S330). The authentication server 150 transmits a confirmation result confirming whether the mobile communication identification information included in the authentication request signal is usable information to the membership server 130 (S332). The membership server 130 checks whether the PIN number included in the authentication request signal received from the affiliated store terminal 120 is authenticated when the mobile communication identification information included in the authentication request signal is usable information (S334). .

The membership server 130 updates whether the mobile communication identification information is usable information and whether the PIN number is authenticated (S340). The membership server 130 generates an authentication approval signal in which the PIN number included in the authentication request signal is authenticated, transmits the authentication approval signal to the affiliated store terminal 120 (S342), and transmits the authentication approval signal to the authentication server 150 (S344). The authentication server 150 transmits an authentication approval signal to the mobile communication terminal 110 (S350). On the other hand, when the payment server 140 receives the authentication approval signal from the membership server 130, the subscriber identification device mounted on the mobile communication terminal 110 by the cost corresponding to the payment request signal received from the merchant terminal 120 ( It is deducted from the prepaid settlement fee or the prepaid postpayment settlement fee charged in 112).

In FIG. 3, the mobile communication terminal 110, the affiliated store terminal 120, the membership server 130, and the authentication server 150 sequentially execute steps S310 to S350, but this is the first embodiment of the present invention. As merely illustrative of the technical spirit of the example, those skilled in the art to which the first embodiment of the present invention belongs, the mobile communication terminal 110 without departing from the essential characteristics of the first embodiment of the present invention The merchant terminal 120, the membership server 130, and the authentication server 150 may be executed by changing the order described in FIG. 3 or by executing one or more steps in steps S310 to S350 in parallel. 3 is not limited to the time series.

As described above, a method of performing payment authentication using mobile communication identification information and PIN number according to the first embodiment of the present invention described in FIG. 3 may be implemented in a program and recorded in a computer-readable recording medium. . A program for implementing a method of performing payment authentication using mobile communication identification information and a PIN number according to the first embodiment of the present invention is recorded and a computer-readable recording medium includes data that can be read by a computer system. It includes all kinds of recording devices that are stored. Examples of such computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and are implemented in the form of a carrier wave (for example, transmission over the Internet). It includes being. The computer readable recording medium may also be distributed over a networked computer system so that computer readable code is stored and executed in a distributed manner. Also, functional programs, codes, and code segments for implementing the first embodiment of the present invention may be easily inferred by programmers in the art to which the first embodiment of the present invention belongs.

4 is a flowchart illustrating a method of performing payment authentication using mobile communication identification information and message authentication according to a second embodiment of the present invention.

When a user visits a specific merchant and uses the subscriber identification device 112 mounted on the mobile terminal 110 as a payment method for one of a specific product and a specific service, the affiliated terminal 120 is connected to the mobile terminal 110. A payment request signal for any one of a specific product and a specific service is received from the mobile terminal, and mobile communication identification information for authenticating the payment request signal is received from the user (S410). Here, when the user orally transmits the mobile communication identification information to the affiliated store, the corresponding clerk inputs the mobile communication identification information to the affiliated store terminal 120 or, like the cash receipt input, the user identifies the mobile communication to the affiliated store terminal 120. You can enter the information directly. The affiliated store terminal 120 receives mobile communication identification information to authenticate payment, and transmits an authentication request signal including the input mobile communication identification information to the membership server 130 (S412).

The membership server 130 transmits the mobile communication identification information included in the authentication request signal received from the affiliated store terminal 120 to the authentication server 150 (S414). The authentication server 150 checks whether the mobile communication identification information included in the authentication request signal received from the membership server 130 is usable information (S420). The authentication server 150 confirms whether the mobile communication identification information included in the authentication request signal is available information, and when the mobile communication identification information included in the authentication request signal is available information, corresponds to the mobile communication identification information. The push message for requesting input of a PIN number is transmitted to the mobile communication terminal 110 (S422).

The mobile communication terminal 110 transmits the PIN number input from the user to the membership server 130 after receiving the push message for requesting input of the PIN number (424). The membership server 130 receives a PIN number from the mobile communication terminal 110 and checks whether the PIN number is authenticated (S430). The membership server 130 updates whether the mobile communication identification information is usable information and whether the PIN number is authenticated (S432). The membership server 130 generates an authentication approval signal in which the PIN number included in the authentication request signal is authenticated, transmits the authentication approval signal to the affiliated store terminal 120 (S434), and transmits the authentication approval signal to the authentication server 150 (S440). The authentication server 150 transmits an authentication approval signal to the mobile communication terminal 110 (S442). On the other hand, when the payment server 140 receives the authentication approval signal from the membership server 130, the subscriber identification device mounted on the mobile communication terminal 110 by the cost corresponding to the payment request signal received from the merchant terminal 120 ( It is deducted from the prepaid settlement fee or the prepaid postpayment settlement fee charged in 112).

In FIG. 4, the mobile communication terminal 110, the affiliated store terminal 120, the membership server 130, and the authentication server 150 sequentially execute steps S410 to S442, but this is the second embodiment of the present invention. As merely illustrative of the technical spirit of the example, those skilled in the art to which the second embodiment of the present invention belongs, the mobile communication terminal 110 without departing from the essential characteristics of the second embodiment of the present invention The merchant terminal 120, the membership server 130, and the authentication server 150 may be executed by changing the order described in FIG. 4 or by executing one or more steps of steps S410 to S442 in parallel. Since it will be applicable to, Figure 4 is not limited to the time series order.

As described above, a method of performing payment authentication using mobile communication identification information and message authentication according to the second embodiment of the present invention described in FIG. 4 may be implemented in a program and recorded in a computer-readable recording medium. . A program for implementing a method of performing payment authentication using mobile communication identification information and message authentication according to a second embodiment of the present invention is recorded and the computer-readable recording medium includes data that can be read by a computer system. It includes all kinds of recording devices that are stored. Examples of such computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, etc., and also implemented in the form of a carrier wave (e.g., transmission over the Internet) . The computer readable recording medium may also be distributed over a networked computer system so that computer readable code is stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the second embodiment of the present invention may be easily inferred by programmers in the art to which the second embodiment of the present invention belongs.

5 is a flowchart illustrating a method of performing payment authentication using mobile communication identification information and a one time password according to a third embodiment of the present invention.

When a user visits a specific merchant and uses the subscriber identification device 112 mounted on the mobile terminal 110 as a payment method for one of a specific product and a specific service, the affiliated terminal 120 is connected to the mobile terminal 110. A payment request signal for any one of a specific product and a specific service is received from the mobile terminal, and mobile communication identification information for authenticating the payment request signal is received from the user (S510). Here, when the user orally transmits the mobile communication identification information to the affiliated store, the corresponding clerk inputs the mobile communication identification information to the affiliated store terminal 120 or, like the cash receipt input, the user identifies the mobile communication to the affiliated store terminal 120. You can enter the information directly. The affiliated store terminal 120 receives mobile communication identification information to authenticate payment, and transmits an authentication request signal including the input mobile communication identification information to the membership server 130 (S512).

The membership server 130 transmits the mobile communication identification information included in the authentication request signal received from the affiliated store terminal 120 to the authentication server 150 (S514). The authentication server 150 checks whether the mobile communication identification information included in the authentication request signal received from the membership server 130 is usable information, and as a result of the check, the mobile communication identification information included in the authentication request signal is used. In the case of the available information, a push message for requesting input of a one time password is transmitted to the mobile communication terminal 110 corresponding to the mobile communication identification information (S520).

When the mobile communication terminal 110 receives the push message for requesting the input of the one-time password, the mobile terminal 110 checks whether the PIN number inputted to transmit the one-time password is authenticated (S522). When the inputted PIN number is authenticated, the mobile communication terminal 110 generates a one-time password (S524), and transmits the generated one-time password to the authentication server 150 (S530). The authentication server 150 receives the one-time password from the mobile communication terminal 110 and transmits a result of confirming whether the one-time password is authenticated to the membership server 130 (S534).

When the one-time password is authenticated, the membership server 130 generates an authentication approval signal and transmits it to the affiliated store terminal 120 (S540) and transmits it to the authentication server 150 (S542). The authentication server 150 transmits an authentication approval signal to the mobile communication terminal 110 (S544). On the other hand, when the payment server 140 receives the authentication approval signal from the membership server 130, the subscriber identification device mounted on the mobile communication terminal 110 by the cost corresponding to the payment request signal received from the merchant terminal 120 ( It is deducted from the prepaid settlement fee or the prepaid postpayment settlement fee charged in 112).

In FIG. 5, the mobile communication terminal 110, the affiliated store terminal 120, the membership server 130, and the authentication server 150 sequentially execute steps S510 to S544, but this is the third embodiment of the present invention. As merely illustrative of the technical spirit of the example, those of ordinary skill in the art to which the third embodiment of the present invention belongs, the mobile communication terminal 110 without departing from the essential characteristics of the third embodiment of the present invention And the merchant terminal 120, the membership server 130, and the authentication server 150 by changing the order described in FIG. 5, or various modifications by executing one or more steps in steps S510 to S544 in parallel. 5 is not limited to the time-series order because it will be applicable to the modification.

As described above, a method of performing payment authentication using mobile communication identification information and one-time password according to the third embodiment of the present invention described in FIG. 5 may be implemented in a program and recorded in a computer-readable recording medium. . A program for implementing a method of performing payment authentication using mobile communication identification information and a one-time password according to a third embodiment of the present invention is recorded and the computer-readable recording medium includes data that can be read by a computer system. It includes all kinds of recording devices that are stored. Examples of such computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, etc., and also implemented in the form of a carrier wave (e.g., transmission over the Internet) . The computer readable recording medium may also be distributed over a networked computer system so that computer readable code is stored and executed in a distributed manner. Also, functional programs, codes, and code segments for implementing the third embodiment of the present invention may be easily inferred by programmers in the art to which the third embodiment of the present invention belongs.

In the above description, all elements constituting the embodiments of the present invention are described as being combined or operating in combination, but the present invention is not necessarily limited to the embodiments. In other words, within the scope of the present invention, all of the components may be selectively operated in combination with one or more. In addition, although all of the components may be implemented in one independent hardware, each or all of the components may be selectively combined to perform some or all functions combined in one or a plurality of hardware. It may be implemented as a computer program having a. Codes and code segments constituting the computer program may be easily inferred by those skilled in the art. Such a computer program may be stored in a computer readable storage medium and read and executed by a computer, thereby implementing embodiments of the present invention. The storage medium of the computer program may include a magnetic recording medium, an optical recording medium, a carrier wave medium, and the like.

In addition, the terms "comprise", "comprise" or "having" described above mean that the corresponding component may be included, unless otherwise stated, and thus excludes other components. It should be construed that it may further include other components instead. All terms, including technical and scientific terms, have the same meanings as commonly understood by one of ordinary skill in the art unless otherwise defined. Terms commonly used, such as terms defined in a dictionary, should be interpreted to coincide with the contextual meaning of the related art, and shall not be construed in an ideal or excessively formal sense unless explicitly defined in the present invention.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, the present invention checks whether a mobile communication identification number is a usable number for payment authentication, and additionally performs authentication for any one of a PIN number, a message authentication, and a one-time password to enhance security. Applied to, it is a useful invention for generating the effect of enhancing the security for payment authentication.

1 is a block diagram schematically illustrating a payment authentication system according to a first embodiment, a second embodiment, and a third embodiment of the present invention;

2 is a block diagram schematically illustrating a payment authentication device according to a first embodiment and a second embodiment of the present invention;

3 is a flowchart illustrating a method of performing payment authentication using mobile communication identification information and a PIN number according to the first embodiment of the present invention;

4 is a flowchart illustrating a method of performing payment authentication using mobile communication identification information and message authentication according to a second embodiment of the present invention;

5 is a flowchart illustrating a method of performing payment authentication using mobile communication identification information and a one time password according to a third embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

110: mobile communication terminal 112: subscriber identification device

120: merchant terminal 130: membership server

140: payment server 150: authentication server

160: wired and wireless communication network 210: information receiving unit

220: mobile communication identification information authentication unit 230: PIN number authentication unit

240: authentication result transmission unit 250: authentication status update unit

260: payment processing unit 270: PIN number setting unit

Claims (10)

An affiliated store terminal transmitting an authentication request signal for authenticating the payment request signal when a payment request signal for one of a specific product and a specific service is input through a mobile communication terminal; An authentication server for transmitting a result of checking whether the mobile communication identification information included in the authentication request signal is usable information; When the authentication result of the authentication server, the mobile communication identification information included in the authentication request signal is usable information, check whether the PIN number included in the authentication request signal is authenticated, and as a result of the confirmation, the PIN number A membership server for transmitting an authentication approval signal when the authentication is authenticated; And The payment server receiving the authentication approval signal and subtracting the amount corresponding to the payment request signal received from the affiliated store terminal from the prepaid payment cost or the preset postpaid payment cost charged in the subscriber identification device mounted in the mobile communication terminal. Payment authentication system comprising a. An affiliated store terminal transmitting an authentication request signal for authenticating the payment request signal when a payment request signal for one of a specific product and a specific service is input through a mobile communication terminal; Check whether the mobile communication identification information included in the authentication request signal is available, and if the mobile communication identification information included in the authentication request signal is available information, request to input a PIN number to the mobile communication terminal. Authentication server for transmitting a push message for; A membership server that receives the PIN number from the mobile communication terminal, checks whether the PIN number is authenticated, and transmits an authentication approval signal when the PIN number is authenticated; And The payment server receiving the authentication approval signal and subtracting the amount corresponding to the payment request signal received from the affiliated store terminal from the prepaid payment cost charged in the subscriber identification device mounted in the mobile communication terminal or the preset postpaid payment cost. Payment authentication system comprising a. An affiliated store terminal transmitting an authentication request signal for authenticating the payment request signal when a payment request signal for one of a specific product and a specific service is input through a mobile communication terminal; Check whether the mobile communication identification information included in the authentication request signal is available, and if the mobile communication identification information included in the authentication request signal is available information, request for input of a one-time password to the mobile communication terminal. An authentication server for transmitting a push message for receiving the one-time password from the mobile communication terminal and transmitting an authentication approval signal when the one-time password is authenticated; And The payment server receiving the authentication approval signal and subtracting the amount corresponding to the payment request signal received from the affiliated store terminal from the prepaid payment cost charged in the subscriber identification device mounted in the mobile communication terminal or the preset postpaid payment cost. Payment authentication system comprising a. The method of claim 3, wherein The mobile communication terminal, Upon receiving the push message, confirming whether or not to authenticate the input PIN number for transmitting the one-time password, and if the PIN number is authenticated, generates the one-time password and transmits it to the authentication server. Payment verification system. An information receiving unit receiving an authentication request signal for paying any one of a specific product and a specific service from the mobile communication terminal via the merchant terminal; A mobile communication identification information authentication unit which transmits a result of checking whether the mobile communication identification information included in the authentication request signal is usable information by using an authentication server; A PIN number authentication unit for transmitting a result of checking whether the PIN number included in the authentication request signal is authenticated when the mobile communication identification information is usable information; And When the PIN number is authenticated, an authentication result transmission unit for transmitting an authentication approval signal for payment to the merchant terminal and the authentication server. Payment authentication device comprising a. The method of claim 5, The payment processing unit transmits the authentication approval signal to a payment server, and the payment fee requested through the payment server is subtracted from a prepaid payment cost or a predetermined postpaid payment cost charged in the subscriber identification device mounted in the mobile communication terminal. Payment authentication device comprising a. The method of claim 5, Authentication status update unit for updating whether or not the mobile communication identification information is available information and whether the PIN number is authenticated Payment authentication device, characterized in that it further comprises. The method of claim 5, PIN number setting unit for setting the PIN number input from the user terminal as the reference information and controlling the PIN number setting completion message to be transmitted to the mobile terminal through the authentication server. Payment authentication device, characterized in that it further comprises. The method of claim 5, The information receiver, And transmitting the push message for requesting input of the PIN number to the mobile communication terminal through the authentication server, and receiving the PIN number from the mobile communication terminal. An authentication request signal receiving step of receiving an authentication request signal for payment of one of a specific product and a specific service from the mobile communication terminal via the affiliated store terminal; A mobile communication identification information authentication step of confirming whether or not the mobile communication identification information included in the authentication request signal is usable information by using an authentication server; A PIN number authentication step of confirming whether or not the PIN number included in the authentication request signal is authenticated when the mobile communication identification information is usable information as a result of the checking of the mobile communication identification information authentication step; And As a result of confirming the PIN number authentication step, when the PIN number is authenticated, an authentication approval signal transmission step of transmitting an authentication approval signal for payment to the affiliated store terminal and the authentication server. Payment verification method comprising a.

Images