KR20120095275A - Method and system for mapping payment tool, medium for number generator and communication - Google Patents

Abstract

PURPOSE: A payment method mapping method, a system thereof, a number generating medium, and a communication device medium for the same are provided to enable a user to perform a payment process without a complicated authentication procedure or inputting all sorts of information by mapping a disposable number with a user payment method. CONSTITUTION: An identification value receiving unit(110) receives identification value information from a user terminal(190). The identification value information identifies a number determining medium dynamically generating a disposable number of a numbering system mapped with a user payment method. A payment method receiving unit(160) receives payment method information from the user terminal. A payment method authenticating unit(165) authenticates whether the payment method is issued to the user or not. A payment method mapping unit(170) maps the payment method information with the disposable number.

Description

Method and system of payment method mapping and number generation medium and communication device medium therefor {Method and System for Mapping Payment Tool, Medium for Number Generator and Communication}

The present invention is to map the user's payment means and the one-time number dynamically generated through the number generation medium, the disposable number is N (N≥1) digit user payment means number and N-digit disposable payment means number, Disposable replacement number for replacing n (1≤n≤N) partial numbers among the N-digit payment means number that can be mapped to the user payment means number, and m (m≥1) digits that can be mapped to the user payment means number. At least one of the payment number.

To use online payments, you must use an online payment tool called secure click or secure payment. The online payment tool is intended to provide secure online payment by preventing the user's payment method information from being exposed to the shopping mall. On the other hand, when processing a predetermined amount (for example, 300,000 won) or more using the online payment tool, the user's non-face-to-face authentication is strengthened by using the user's official certificate or one-time password.

The authorized certificate or one-time password is to face-to-face authentication of the user in an institution capable of face-to-face authentication, such as financial institutions, and to issue the certificate or number generator to the user according to the results of the real name authentication, In addition to face-to-face financial transactions, it can be applied to various distributions that require non-face-to-face authentication of users.

However, since most certificates are stored in a user terminal requesting a non-face-to-face financial transaction, there is a problem that can be exposed at any time by hacking on the user terminal. On the other hand, the number generator is provided to the user in the form of a separate device, it can be said to be a more reliable non-face-to-face authentication means than the official certificate. In particular, most of the one-time passwords are used only at the final verification of the non-face-to-face transaction, whereas the accredited certificate is used at the beginning of the non-face-to-face transaction and the final verification time. It is used only for the purpose of preventing user's denial.

Recently, with the activation of smartphones, non-face-to-face financial transactions using the smartphones are gradually increasing. However, since a smartphone directly accesses the Internet unlike a conventional mobile phone, a non-face-to-face financial transaction through the smartphone must use an authorized certificate or a one-time password like the online payment. However, unlike a user's computer, it is very inconvenient to process non-face-to-face transactions by inputting all kinds of financial information and personal information as well as one-time passwords for non-face-to-face financial transactions in a smartphone operating with a touch screen.

An object of the present invention for solving the above problems, N (N ≥ 1) N-digit single-use payment means number that can be mapped to the user payment method number in the user terminal, N digits that can be mapped to the user payment means number Generate a disposable number of at least one of a one-time alternative number to replace the n (1≤n≤N) of the number of payment means of the number and the m (m≥1) single-use payment number that can be mapped to the user payment method number Identifying the number generation medium or transmitting the identification value information identifying the communication device medium of the user to which the number generation medium is connected and the payment means information of the user to be used for the user's payment, Payment method mapping method and system for mapping and storing the one-time number dynamically generated through the number generation medium and the user payment means information and the same To provide a number generation medium and a communication device medium.

The payment means mapping system according to the present invention includes an identification value receiver for receiving identification value information for identifying a number determination medium for dynamically generating a disposable number of a number system that can be mapped to a user payment means from a user terminal, and a user from the user terminal. A payment means receiving unit for receiving payment means information including N (N≥1) digit payment means number assigned to a payment means and at least one payment means configuration value, and a payment means issued to the user by the user payment means; A payment means authentication unit for authenticating authentication and a payment means mapping unit for mapping the user's payment means information and the disposable number dynamically generated through the number determination medium when the user payment means is authenticated, the disposable number of the present invention. The N-digit single-use payment means number that can be mapped to the N-digit payment method number, the payment At least one single-use alternative number replacing n (1≤n≤N) partial numbers among N-digit payment method numbers that can be mapped to a single number, and m (m≥1) single-use payment number that can be mapped to the payment method number. I include one.

In the payment method mapping method according to the present invention, in the payment method mapping method of the server connectable to the user terminal, identification for identifying a number determination medium for dynamically generating a disposable number of the number system that can be mapped with the user payment means from the user terminal An identification value receiving step of receiving value information, and receiving payment means information of the user including N (N≥1) digit payment means number and at least one payment means configuration value assigned to the user payment means from the user terminal; A payment means receiving step, a payment means authentication step of authenticating whether the user payment means is a payment means issued to the user, and if the user payment means are authenticated, the user through the payment means information and the number determination medium Payment means mapping step of mapping the generated disposable number.

The communication device medium according to the present invention is a communication device medium having a medium connection part, N (N ≥ 1) number of payment means number mapped to N (N≥1) digits through the medium connection, the payment means, the payment means At least one of a one-time alternative number replacing n (1≤n≤N) partial numbers among N-digit payment method numbers mapped to the number and a m (m≥1) single-use payment number mapped to the payment method number A media connection discrimination unit for determining whether a numbering medium capable of generating a disposable number of is connected, and if the numbering medium is identified, uniquely identifying the numbering medium or uniquely identifying the communication device medium. An identification value confirmation unit for confirming the above identification value information, an identification value transmission unit for transmitting the identified identification value information to the server side, and the number of N-digit payments to be mapped with the one-time number An interface output unit for outputting an interface for inputting payment means information of a user including a terminal number and at least one payment means configuration value, an information input unit for receiving payment means information of the user through the interface, And an information register for transmitting the payment means information of the user to the server side.

The payment method mapping method of a communication device medium according to the present invention, in the payment method mapping method of the communication device medium having a medium connection unit, N (N≥1) digits mapped to the payment means number of N (N≥1) digits through the medium connection unit; One-time single payment means number, N (1 ≤ n ≤ N) of the N number of payment means number mapped to the payment means number One-time replacement alternative number and m (m≥ mapped to the payment means number) 1) determining whether a numbering medium capable of generating at least one disposable number of digit disposable payment numbers is connected; and when the connection of the numbering medium is confirmed, uniquely identifying the numbering medium or the communication device. Identifying one or more identification value information that uniquely identifies a medium, transmitting the identified identification value information to a server side, and N characters to be mapped to the disposable number; Outputting an interface for inputting payment means information of a user including a payment means number and at least one payment means configuration value of the user; receiving input of payment means information of the user through the interface; And transmitting the payment means information of the server side.

The numbering medium according to the present invention is a numbering medium having a connection module connected to a medium connection portion provided in a communication device medium of a user provided with an output module (or communication module), the communication through the connection module N (1 ≤ n ≤ N) partial numbers of N-digit one-time payment means numbers mapped to N (N≥1) digit payment means numbers from the device medium, and N-digit payment means numbers mapped to the payment means number. A command receiving unit for receiving a command for requesting a disposable number to be used for payment using at least one of the disposable number and a one-time disposable number mapped to the payment means number and m (m≥1) digits mapped to the payment means number; A number system identification unit for identifying a number system including one or more digits and a number structure of a disposable number agreed upon with the server side that processes the payment, and a disposable number corresponding to the number system A seed determination unit for determining one or more seed values necessary for generating a number, and a number generation for dynamically generating a disposable number corresponding to the number system by assigning the determined seed value to a generating key generation function agreed with the server. And a chip on which an interface unit for processing the generated disposable number is transmitted to the communication device medium of the user through the connection module.

On the other hand, the payment method mapping system of the present invention, the server that can directly or indirectly refer to the ledger of the financial company that issued the payment means to the user and the number determination medium for the non-face-to-face transaction authentication of the payment means is issued to the user A payment method mapping system comprising: an information receiver configured to receive payment method information and user information input by a user and identification value information identifying a number determination medium for dynamically determining a disposable number to be mapped with the user's payment method; A unique ID determination unit for determining unique ID information for uniquely identifying a user, and an issuer of a payment means corresponding to the received payment means information using the user information is the same as the user and is provided with the received identification value information. An authentication process that processes that the issuer of the corresponding number determination medium is the same as the user. And an information mapping unit for connecting and storing payment means information for identifying the authenticated payment means and the unique ID information.

In addition, the payment method mapping method of the present invention, the server that can directly or indirectly refer to the ledger of the financial company that issued the payment means to the user and the number determination medium for the non-face-to-face transaction authentication of the payment means is issued to the user A payment method mapping method comprising: an information receiving step of receiving information about payment means input by a user and identification information identifying a number determining medium for dynamically determining a user number and a disposable number to be mapped with the user's payment means; A unique ID determining step of determining unique ID information uniquely identifying the user, and the issuer of the payment means corresponding to the received payment means information using the user information is the same as the user and the received identification value information Authentication to process that the issuer of the number determination medium corresponding to the authentication is the same as the user And a re-phase, and a map information storing connect the unique ID information and payment means information as identifying the authorized payment method.

According to the present invention, by mapping a one-time number used for authenticating a non-face-to-face transaction online with a user's payment means, the user inputs various kinds of information to process the payment requested by the user or complex authentication for non-repudiation. There is an advantage in that the payment requested by the user can be securely and conveniently processed online using the disposable number mapped with the user payment means without going through the procedure.

1 is a view showing a payment method mapping system configuration according to an embodiment of the present invention.
2 is a diagram showing the configuration of the numbering medium according to the method of the present invention.
3 is a diagram illustrating a communication device media function configuration according to an embodiment of the present invention.
4 is a diagram illustrating a process of transmitting identification value information according to an embodiment of the present invention.
5 is a diagram illustrating a process of transmitting identification value information according to another exemplary embodiment of the present invention.
6 is a diagram illustrating a process of transmitting identification value information according to another exemplary embodiment of the present invention.
7 is a diagram illustrating a process of converting a communication device medium into a user terminal according to an embodiment of the present invention.
8 is a diagram illustrating a process of mapping a disposable number to a user payment means according to an embodiment of the present invention.
9 is a diagram illustrating a process of providing an applet program to a number determination medium through a communication device medium according to one embodiment of the present invention.
10 is a diagram illustrating a process of providing an applet program to a number determination medium through a communication device medium according to another embodiment of the present invention.
11 is a diagram illustrating a payment method mapping system configuration according to another exemplary embodiment of the present invention.
12 is a diagram illustrating a payment method mapping process according to another embodiment of the present invention.
FIG. 13 is a diagram illustrating a payment method mapping system configuration according to another exemplary embodiment of the present invention. FIG.
14 is a diagram illustrating a payment method mapping process according to another embodiment of the present invention.

1 is a diagram showing a payment method mapping system configuration according to an embodiment of the present invention.

In more detail, Figure 1 illustrates a system configuration for mapping a disposable number that is dynamically determined through the user's number determination medium 200 and a user's payment means, and having ordinary skill in the art to which the present invention pertains. May be inferred from various embodiments of the payment method mapping system (e.g., some components may be omitted, subdivided, or combined). It is made to include all the implementation methods inferred, the technical features are not limited only to the implementation method shown in FIG.

Payment method mapping system according to the present invention, N (N ≥ 1) N-digit one-time payment means number mapped to the payment means number corresponding to the user payment means, N-digit payment means mapped to the payment means number Number determination to dynamically determine at least one of the disposable number replacing the number (1≤n≤N) of the number of the number and the m (m≥1) single-use payment number mapped to the payment method number Uniquely identifies the medium 200 and the numbering medium 200 (including program code provided in the numbering medium 200 to dynamically determine the disposable number) for determining the disposable number or the numbering medium. Identification value information uniquely identifying the communication device medium 300 (including a program module provided in the communication device and interworking with the number determination medium 200) of the user to which the 200 is connected and the number of payments of the user. After receiving the identification value information and the payment means information from the user terminal 190 and the user terminal 190 for registering information, and after authenticating the validity of the number determination medium 200 through the identification value information, It comprises a mapping management server 100 for connecting and storing the identification value information and payment means information. The mapping management server 100 may include at least one of a server of a payment agency, a server of a bansa, a server of a financial company (for example, a card company or a bank) that issued a payment method to the user, and a server of a service provider that relays the payment using the disposable number. It may include one.

The number determination medium 200 is a connection module 205 for connecting to the media connection unit 308 provided in the communication device medium 300 of the user and at least one of the one-time payment means number, one-time replacement number and one-time payment number Secure Digital (SD) memory card with a chip 210 that executes program code for dynamically determining a one-time number, SD memory card with an IC chip, micro SD memory card, USIM (Universal Subscriber Identity) module, removable At least one integrated circuit (IC) card module may be included.

According to an embodiment of the present invention, the number determination medium 200 is accessible to the communication device medium 300 and the user payment means mapped to the disposable number through a separate terminal device in addition to the communication device medium 300 When requesting the payment through the communication device medium 300 to which the number determination medium 200 is connected, the number determination for dynamically determining at least one of the one-time payment number of the one-time payment means number, one-time replacement number and one-time payment number Media 200 may be considered.

On the other hand, when the numbering medium 200 can be connected to and separated from the communication device medium 300, the numbering medium 200 and the communication device medium 300 is regarded as a separate medium to the communication device medium ( 300 may be regarded as a user terminal 190 requesting payment through a user payment means mapped to a disposable number dynamically determined through the number determination medium 200.

Alternatively, the number determination medium 200 is mounted on the user's communication device medium 300 and performs a given unique function, dynamically changing at least one disposable number of the one-time payment means number, one-time replacement number and one-time payment number. It may include a NFC (Near Field Communication) module having a chip 210 to execute the program code to determine.

Alternatively, the number determination medium 200 may include a user's smart phone equipped with a number generation program for dynamically determining at least one of the one-time payment number, one-time replacement number and one-time payment number.

Alternatively, the number determination medium 200 may include a number generation device issued to a user by a financial institution or the like to authenticate the user in a non-face-to-face manner, or a number generation card in which the configuration of the number generation device is embedded in the card. . The number generation device or the number generation card dynamically determines a disposable number corresponding to the one-time payment number, and may dynamically determine a one-time number corresponding to at least one of the one-time payment means number and one-time replacement number according to the intention of a person skilled in the art. have.

Alternatively, the number determination medium 200 may include a random number printing card issued to a user by a financial institution to authenticate the user in a non-face-to-face manner. The random number printing card is a card in which a plurality of random numbers are printed, and a combination of at least two or more random numbers of the plurality of printed random numbers is processed to dynamically determine the disposable number corresponding to the one-time payment number in a random number combination method, According to the intention of the one-time payment means number and one-time alternative number can be processed to determine more dynamic one-time number corresponding to at least one.

The user terminal 190 uniquely identifies the number determination medium 200 (including program code for dynamically determining the one-time number, collectively referred to as numbering medium 200 for convenience). The mapping management server receives input of identification value information uniquely identifying the communication device medium 300 (including a program module interoperating with the number determination medium 200. Hereinafter, for convenience, the communication device medium 300 will be referred to.) 100).

If the number determination medium 200 can be connected to and disconnected from the communication device medium 300 and the communication device medium 300 is regarded as the user terminal 190, the communication device medium 300 The mapping management server 100 checks identification value information that uniquely identifies the numbering medium 200 or uniquely identifies the communication device medium 300 when the numbering medium 200 is connected. Can be sent to.

The user terminal 190 receives payment means information including a payment means number corresponding to a user payment means to be mapped with a disposable number dynamically determined through the number determination medium 200 and at least one payment means configuration value. Transmission to the mapping management server 100.

If the number determination medium 200 can be connected to and disconnected from the communication device medium 300 and the communication device medium 300 is regarded as the user terminal 190, the communication device medium 300 May receive payment means information including payment means number and at least one payment means configuration value corresponding to the user payment means to be mapped to the disposable number and transmit the received payment means information to the mapping management server 100.

Referring to FIG. 1, the mapping management server 100 includes a user authentication unit 105 for authenticating a user connected through the user terminal 190, and a number system that can be mapped to a user payment means from the user terminal 190. An identification value receiving unit 110 for receiving identification value information for identifying the numbering medium 200 for dynamically determining the disposable number of the number and the numbering medium 200 corresponding to the identification value information is mapped with the user payment means. It is provided with a medium authentication unit 115 for authenticating whether or not the number determination medium 200 for generating a disposable number of possible number system, the disposable number is N (N ≥ 1) digits of N number disposables mappable Payment method number, a one-time replacement number to replace the n (1≤n≤N) some of the number of payment method number that can be mapped to the payment method number, and m (m≥1) digits that can be mapped to the payment method number Disposable texture It includes at least one number.

When the user terminal 190 connects through the number determination medium 200 to map the disposable number to be dynamically determined and the user payment means, the user authentication unit 105 connects the connection according to at least one non-face-to-face authentication procedure. Authenticate a user. For example, the user authentication unit 105 may authenticate the user through an authorized certificate of the user provided in the user terminal 190.

A media identification code and the numbering medium for uniquely identifying the numbering medium 200 for dynamically determining at least one of the one time payment number, the one time replacement number, and the one time payment number in the user terminal 190; When the identification value information is included in the 200 and transmits identification value information including at least one medium identification token for uniquely identifying the program code for dynamically determining the one-time number, the identification value receiving unit 110 from the user terminal 190 Receive identification value information that uniquely identifies the number determination medium 200.

The media authenticator 115 may uniquely identify the number determination medium 200 in which the program code for generating the disposable number may be mounted, or the number determination medium 200 in which the program code for generating the disposable number is mounted. Maintains identification value determination information that uniquely identifies, and if identification value information that uniquely identifies the numbering medium 200 is received, the medium authenticator 115 uniquely identifies the numbering medium 200. By determining whether the identification value information to be identified is included in the identification value determination information, it is possible to authenticate whether the number determination medium 200 is a number determination medium 200 for generating a disposable number mappable with the user payment means.

Alternatively, the identification value information for uniquely identifying the number determination medium 200 may include a flag value for determining whether the program code for generating the disposable number is mounted on the number determination medium 200. In this case, the medium authenticator 115 determines a flag value included in the identification value information for uniquely identifying the number determination medium 200 so that the number determination medium 200 can be mapped to the user payment means. It may be authenticated whether or not the numbering medium 200 to generate a.

If the numbering medium 200 is accessible to the communication device medium 300 of the user, the medium authentication unit 115 identifies to identify the numbering medium 200 accessible to the communication device medium 300. Retains value determination information, and if identification value information is received that uniquely identifies the number determination medium 200, the medium authenticator 115 determines whether the identification value information is included in the identification value determination information. It is possible to authenticate whether the number determination medium 200 generating the disposable number is accessible to the communication device medium 300.

Alternatively, the identification value information for uniquely identifying the number determination medium 200 may include a flag value for determining the number determination medium 200 accessible to the communication device medium 300. In this case, the medium authentication unit 115 determines whether the number determination medium 200 that generates the disposable number by determining a flag value included in the identification value information that uniquely identifies the number determination medium 200 is accessible to the communication device medium 300. You can authenticate.

On the other hand, when the number determination medium 200 is accessible to the user's communication device medium 300, the user terminal 190 uniquely identifies the communication device medium 300 or is provided in the communication device medium (300) And transmits identification value information including a device identification value for uniquely identifying a program module interoperating with the number determination medium 200, wherein the identification value receiving unit 110 sends the communication device medium from the user terminal 190. Receive identification value information that uniquely identifies 300.

When the numbering medium 200 is connectable to the communication device medium 300 of the user, the medium authentication unit 115 has a communication device medium having a medium connection unit 308 to which the numbering medium 200 is accessible. Maintains identification value discrimination information for identifying 300, and if identification value information for uniquely identifying the communication device medium 300 is received, the medium authentication unit 115 determines the communication device medium 300. By determining whether identification value information that uniquely identifies is included in the identification value determination information, it is possible to authenticate whether the number determination medium 200 for generating a disposable number to the communication device medium 300 is accessible.

Alternatively, the identification value information for uniquely identifying the communication device medium 300 determines the number determination medium 200 connectable to the communication device medium 300, and the medium connection unit to which the numbering medium 200 is accessible. 308 may include a flag value for determining the communication device medium 300, in which case the medium authentication unit 115 is included in the identification value information that uniquely identifies the communication device medium (300). By determining the flag value, it is possible to authenticate whether the number determination medium 200 for generating a disposable number to the communication device medium 300 is accessible.

Alternatively, the media authentication unit 115 provides identification value information for uniquely identifying the communication device medium 300 to a communication company server to which the communication device medium 300 is connected, thereby providing a one-time number to the communication device medium 300. It is possible to authenticate whether or not the numbering medium 200 for generating the connection is possible.

Referring to FIG. 1, when the numbering medium 200 is accessible to the communication device medium 300 of the user, the mapping management server 100 determines that the numbering medium 200 is the communication device medium 300. It may be provided with a medium connectivity authentication unit 120 for authenticating whether or not connected to.

When the number determination medium 200 is accessible to the communication device medium 300 of the user as a result of the authentication of the medium authentication unit 115, the medium connectivity authentication unit 120 uniquely identifies the communication device medium 300. Connecting the communication channel with the communication device medium 300 based on the identification value information to be identified, and requesting that the numbering medium 200 is connected to the communication device medium 300 through the communication channel. After receiving the result, it is authenticated that the number determination medium 200 is connected to the communication device medium 300. If the identification value information is extracted from the number determination medium 200 and received, the medium connectivity authentication unit 120 determines that the source of the identification value information is the number determination medium 200 and the communication device. It is possible to authenticate that the numbering medium 200 is connected to the medium 300.

Referring to FIG. 1, when the numbering medium 200 is accessible or connected to the communication device medium 300, the mapping management server 100 connects the numbering medium 200 to the communication device. A medium separability authentication unit 125 for authenticating whether the medium 300 is detachable from the medium 300 and the communication device medium 300 of the user when the number determination medium 200 is detachable from the communication device medium 300. It may be provided with a medium use switching unit 130 for switching the use to the user terminal 190 requesting payment using the user payment means mapped to the one-time number.

The media separability authentication unit 125 maintains the media discrimination information for determining the number determination medium 200 that can be connected to and separated from the communication device medium 300, and the number determination medium 200 corresponding to the identification value information. ) Is included in the medium discrimination information to authenticate whether the numbering medium 200 is detachable from the communication device medium 300.

If the number determination medium 200 is detachable from the communication device medium 300, the medium use switching unit 130 uses a user payment means mapped to the user's communication device medium 300 with the disposable number. It is regarded as a user terminal 190 requesting payment, and then the communication device medium 300 can request payment using a user payment means mapped to a disposable number dynamically determined through the number determination medium 200. .

Referring to FIG. 1, when the numbering medium 200 is connected to a user's communication device medium 300, the mapping management server 100 writes the data to the chip 210 of the numbering medium 200. The apparatus further includes a program providing unit 135 for processing the applet program package to be provided to the communication device medium 300 through the communication channel, wherein the applet program package includes one or more digits and a number structure of the disposable number. And a program code including a key generation function for generating a one-time number by identifying a number system, and generating at least one seed value (or seed generation rule) to be assigned to the key generation function, and generating the one-time number. One or more media identification tokens that uniquely identify the program code.

When the number determination medium 200 is connected to the communication device medium 300 of the user, the program providing unit 135 in response to the communication channel connection request from the communication device medium (300) 300) and the communication channel. If the communication device medium 300 and the communication channel are already connected, the communication channel connection process is omitted. The program providing unit 135 provides an applet program package recordable on the chip 210 of the number determination medium 200 to the communication device medium 300 through the communication channel. If the applet program package is provided to the communication device medium 300 through a program providing server 175 associated with the card mapping server, the program providing unit 135 sends the communication device medium 300 to the communication device medium 300. Providing information for receiving the applet program package from a program providing server 175 or providing information for requesting the program providing server 175 to provide the applet program package to the communication device medium 300. In this way, the applet program package is provided to the communication device medium 300.

Referring to FIG. 1, the mapping management server 100 determines a media identification token that uniquely identifies a program code for generating a disposable number recorded on a chip 210 of the number determination medium 200, and A token allocating unit 140 may be further provided to process the media identification token to be recorded on the chip 210 of the number determination medium 200 through the communication device medium 300.

The program code is recorded on the chip 210 of the number determination medium 200 connected to the communication device medium 300 through the program providing unit 135, or the number determination medium 200 on which the program code is mounted. Is connected to the communication device medium 300, the token allocator 140 is recorded on the chip 210 of the number determination medium 200 to uniquely identify the program code for dynamically determining the disposable number. Determine the media identification token. The media identification token may be included in the applet program package and recorded on the chip 210 of the number determination medium 200. If the medium identification token is not included in the applet program package, the token allocator 140 transmits the medium identification token to the communication device medium 300 through a communication channel connected to the communication device medium 300. To be recorded on the chip 210 of the number determination medium 200.

Referring to FIG. 1, the mapping management server 100 determines at least one seed value (or a seed determination rule for dynamically generating seed values) required for the number determination medium 200 to generate the disposable number. Or a seed constitution unit 145 for identifying a server identification value for identifying an authentication server storing the seed value (or seed determination rule), and the payment method information and the seed value (or seed determination rule). Or store the seed storage unit 150 for storing the payment means information and the server identification value, and transmitting the seed value (or seed determination rule) to the communication device medium 300. A seed agreement unit 155 may be further included in the chip 210 of the number determination medium 200.

The program code is recorded on the chip 210 of the number determination medium 200 connected to the communication device medium 300 through the program providing unit 135, or the number determination medium 200 on which the program code is mounted. Is connected to the communication device medium 300, the seed constitution unit 145 dynamically generates at least one seed value (or seed value) required for the numbering medium 200 to generate the disposable number. Seed determination rule), and the seed storage unit 150 may store the payment means information and the seed value (or seed determination rule).

If the separate authentication server authenticates the disposable number dynamically determined through the number determination medium 200, the seed configuration unit 145 identifies a server storing the seed value (or seed determination rule). After confirming the identification value, the seed storage unit 150 may connect and store the payment means information and the server identification value.

Referring to FIG. 1, the mapping management server 100 receives payment means information including an N-digit payment means number and at least one payment means configuration value assigned to a user payment means from the user terminal 190. The payment means receiving unit 160, the payment means authentication unit 165 for authenticating whether the user payment means is a payment means issued to the user, and if the user payment means are authenticated, the payment means information and the number determination medium Payment means mapping unit 170 for mapping the disposable number is determined dynamically through the 200. Here, the user authentication unit 105, the identification value receiving unit 110 and the payment method receiving unit 160 may be implemented in the form of one information receiving unit.

The payment means receiving unit 160 receives payment means information including the N-digit payment means number and at least one payment means configuration value assigned to the user payment means from the user terminal 190. Here, the user payment means includes a card (for example, credit card, check card, prepaid card, etc.) issued to the user from the card company and the account of the user name opened in the bank, the payment method number is a card number or account number It may include. When the user payment means is a card, the payment means information may include at least one card number assigned to the card, card company information (BIN), expiration date, CVC / CVV, card holder English name. Alternatively, when the user payment means is an account, the payment means information may include one or more account number, bank information, account holder name.

The payment means authentication unit 165 is a payment means corresponding to the payment means information is issued to the user through the financial company server 185 provided in the financial company (eg, card company, bank, etc.) that issued the user payment means Verify that it is a payment method.

If the financial company corresponding to the payment method information is authenticated as a payment method issued to the user, the payment method mapping unit 170 dynamically determines the payment method information of the user and the number determination medium 200 of the user. To map the disposable number.

When the identification value information received by the identification value receiving unit 110 identifies the number determination medium 200 according to an exemplary embodiment of the present invention, the payment method mapping unit 170 may determine the payment means information of the user. The identification value information for identifying the number determination medium 200 may be connected and stored.

According to another exemplary embodiment of the present invention, the number determination medium 200 may be connected to the communication device medium 300, and the identification value information received by the identification value receiver 110 identifies the communication device medium 300. In this case, the payment means mapping unit 170 may connect and store the payment means information of the user and the identification value information identifying the communication device medium 300 of the user.

According to another embodiment of the present invention, the number determination medium 200 is accessible to the communication device medium 300 and the identification value information identifying the number determination medium 200 with the identification value receiving unit 110 and the When the identification value information for identifying the communication device medium 300 is received, the payment means mapping unit 170 identifies the payment means information of the user and the identification value information for identifying the number determination medium 200 and the communication device. The identification value information for identifying the medium 300 may be connected and stored.

2 is a diagram showing the configuration of the number determination medium 200 according to the embodiment of the present invention.

In more detail, Figure 2 shows a payment means number of N (N≥1) digits in the state of being connected to the media connection 308 provided in the communication device medium 300 of the user of the number determination medium 200 of the present invention. M number of one-time payment means mapped to the N-digit, one-time alternative number to replace the n (1≤n≤N) of the number of the number of payment means mapped to the number of payment method number and m mapped to the payment method number Function of the number determination medium 200 to generate a disposable number to be used for payment using at least one disposable number of the (m≥1) digit disposable payment number to provide the generated disposable number to the communication device medium 300 It is a figure which shows a structure.

According to FIG. 2, the number determination medium 200 connected to the communication device medium 300 of the user includes a connection module 205 connected to a medium connection part 308 provided in the communication device medium 300. , A medium having a chip 210 on which a program code for generating a one-time number is executed, a SD (Secure Digital) memory card, an SD memory card equipped with an IC chip, a micro SD memory card, and a USIM (Universal Subscriber Identity) Module), at least one NFC (Near Field Communication) module, removable IC (Integrated Circuit) card module.

If the numbering medium 200 is an SD memory card according to an embodiment of the present invention, the connection module 205 of the numbering medium 200 is an SD interface unit 308a provided in the communication device medium 300. The chip 210 of the numbering medium 200 corresponds to the SD interface provided in the SD memory card inserted into the medium connection unit 308 to connect the SD contacts. Can correspond to.

Alternatively, if the numbering medium 200 is an SD memory card having a separate IC chip in addition to the memory chip, the chip 210 of the numbering medium 200 corresponds to the IC chip provided in the SD memory card and The connection module 205 of the number determination medium 200 is provided in the SD memory card so as to correspond to the SD interface shared by the memory chip and the IC chip, or the SD memory card is provided in the communication device medium 300. It is separated from the SD interface while being inserted into the interface unit 308a (= medium connection unit 308) to connect the contact IC contact unit with the contact IC interface unit 308b provided in the communication device medium 300. It can correspond to a separate contact IC interface.

Alternatively, if the numbering medium 200 is a USIM, the connection module 205 of the numbering medium 200 is a contact IC interface unit 240 (= medium connection unit 308 provided in the communication device medium 300). The chip 210 of the numbering medium 200 may correspond to an IC chip provided in the USIM, corresponding to a contact IC interface provided in the USIM inserted into the ICIM.

Alternatively, if the number determination medium 200 is the NFC module 307, the connection module 205 of the number determination medium 200 is the NFC interface for connecting the NFC module 307 and the user's communication device medium 300 The chip 210 of the number determination medium 200 may correspond to an NFC chip provided in the NFC module 307.

Alternatively, if the numbering medium 200 is a removable IC card module, the connection module 205 of the numbering medium 200 is a contact IC interface unit 308b provided in the communication device medium 300 (= The chip 210 of the number determination medium 200 corresponds to the contact IC interface provided in the IC card module inserted into the medium connection unit 308 to connect the IC contacts, and the IC chip provided in the IC card module. Can correspond to.

According to the present invention, the chip 210 of the number determination medium 200 includes a controller 215 including a processor and execution memory (eg, RAM, registers, etc.), and a nonvolatile memory (eg, EEPROM, etc.). The memory unit 250 is included. The program code included in the memory unit 250 is loaded into the execution memory of the controller 215 and executed by the processor. Accordingly, FIG. 2 will be described with reference to the control unit 215 a functional component of the program code loaded into the execution memory for execution by the processor for convenience.

The memory unit 250 stores one or more program codes to be executed by the control unit 215, the program code is N (N ≥ 1) one-digit payment means number that can be connected to the payment means number, the Of the N-digit payment method number that can be connected to the payment method number Among the one-time replacement number to replace the n (1≤n≤N) some numbers and m (m≥1) one-time payment number that can be connected to the payment method number Program code for generating at least one disposable number.

The program code for generating the disposable number may be produced in a state in which the number determination medium 200 is recorded in the memory unit 250 at the time of manufacture of the number determination medium 200, or the number determination medium 200 may be a user's communication device medium ( In the connected state 300, it may be recorded in the memory unit 250 based on the applet program package received from the server side.

When the program code for generating the disposable number is recorded in the memory unit 250, the memory unit 250 stores at least one seed value necessary for the program code to generate the disposable number, or a seed value. You can store seed decision rules that dynamically determine Here, the seed value is a fixed input value to be assigned to a key generation function included in the program code for generating the disposable number, and the seed determination rule is a seed value dynamically determined among seed values to be assigned to the key generation function. It is the rule that decides. For example, when the seed value includes a current time value synchronized with the server side, the seed determination rule may include a rule for converting the time value into a value assignable to the key generation function. Meanwhile, the seed determination rule may be included in the key generation function.

According to the exemplary embodiment of the present invention, the seed value (or seed determination rule) is produced in the state recorded in the memory unit 250 at the time of manufacture of the number determination medium 200 or the number determination medium 200 Is recorded in the memory unit 250 or the program code is recorded in the memory unit 250 based on the applet program package received from the server in a state in which the user is connected to the communication device medium 300 of the user. Only the seed value (or seed determination rule) may be separately recorded in the memory unit 250.

The memory unit 250 stores a media identification code that uniquely identifies the number determination medium 200. The medium identification code is the numbering medium 200 (or chip 210) when the numbering medium 200 is manufactured, or when the chip 210 to be provided in the numbering medium 200 is manufactured. At least one serial number, unique code assigned to the number determining medium 200 (or chip 210) to uniquely identify.

The memory unit 250 may store a media identification token assigned to the number determination medium 200 (or the program code for generating the disposable number). The medium identification token is received from the server side in the state in which the number determination medium 200 is connected to the communication device medium 300 of the user and stored in the memory unit 250.

According to the present invention, the chip 210 of the numbering medium 200 executes program code corresponding to the chip operating unit 245 which performs a function and role set in the numbering medium 200. If the number determination medium 200 is an SD memory card, the chip operating unit 245 may perform a data storage function assigned to the SD memory card and a security function of the stored data. Alternatively, if the number determination medium 200 is a USIM, the chip operating unit 245 may perform a subscriber identification / management function and an applet operation / management function set in the USIM. Alternatively, if the number determination medium 200 is the NFC module 307, the chip operating unit 245 may perform the NFC communication function set in the NFC module 307. According to the exemplary embodiment of the present invention, the program code for generating the disposable number and the seed value (or seed determination rule) may be set by the chip operating unit 245 while the number determination medium 200 is connected to the communication device of the user. ) May be written to the memory unit 250.

Referring to FIG. 2, the number determination medium 200 uses the connection module 205 for N-digit one-time payments mapped to N (N≥1) digit payment means numbers from the communication device medium 300. A one-time replacement number for replacing a partial number of n (1≤n≤N) numbers among a means number, N-digit payment means number mapped to the payment means number, and m (m≥1) digits mapped to the payment means number One or more command receiving unit 220 for receiving a command for requesting a one-time number to be used for payment using at least one of the one-time payment number, and the number of digits and number structure of the one-time number agreed with the server processing the payment A number system identification unit 225 for identifying a number system that includes a number, a seed determination unit 230 for determining one or more seed values required for generating a one-time number corresponding to the number system, and a generation agreed upon with the server side. doing The number generation unit 235 for dynamically generating a disposable number corresponding to the numbering system by substituting the determined seed value into a generation function, and the generated disposable number through the connection module 205 is the user's communication device. The chip unit 210 on which the interface unit 240 is processed to be transferred to the medium 300 is provided.

The command receiving unit 220 is an N-digit payment means from the communication device medium 300 via the connection module 205 while the number determination medium 200 is connected to the communication device medium 300 of the user. N-digit one-time payment means number mapped to the number, N-digit one-time payment method number mapped to the payment means number, and a one-time alternative number to replace the n number of one-time payment number and m-digit one-time payment number mapped to the payment means number Receive an instruction requesting at least one of the disposable numbers.

The occasional command may include a number identifier for identifying one of the one-time payment means number, one-time replacement number, and one time payment number, or identify a server side to process payment through the user payment means mapped to the one-time payment number. In this case, the number system identification unit 225 is a server side to process the payment of the one-time payment means number, one-time replacement number and one-time payment number based on the number identifier or server identifier. Identify a numbering system that includes one or more digits and a number structure of agreed-upon one-time numbers. On the other hand, according to the embodiment of the present invention, the disposable number may be fixed to any one of the one-time payment means number, one-time replacement number and one-time payment number, in this case, the number system identification unit 225 is fixed fixed number Identifies the numbering system of

When the number system of the disposable number is identified, the seed determination unit 230 determines one or more seed values required to generate the disposable number corresponding to the number system. Here, the seed value may include a fixed seed value stored in the memory unit 250, in which case the seed determination unit 230 is a fixed seed value required to generate the disposable number from the memory unit 250 Check. Alternatively, the seed value may include a dynamic seed value that is dynamically determined by the seed determination rule. In this case, the seed determination unit 230 obtains a robber seed value required to generate the disposable number according to the seed determination rule. Decide

According to an embodiment of the present invention, the number determination medium 200 is a timer unit 255 for counting a current time value using a power applied from the communication device medium 300 of the user through the connection module 205. In this case, the seed determination unit 230 may dynamically determine the dynamic seed value according to the seed determination rule based on the time value counted by the timer module.

Alternatively, the seed determination unit 230 may dynamically determine the dynamic seed value according to the seed determination rule based on a current time value or a random number value provided from the communication device medium 300 of the user through the connection module 205. Can be.

If one or more seed values necessary to generate the disposable number of the determined numbering system are determined, the number generator 235 substitutes the determined one or more seed values into a key generation function agreed upon with the server to determine the one-time seed value. Dynamically generate a one-time number corresponding to the determined number system of the payment means number, one-time replacement number and one-time payment number.

According to one embodiment of the present invention, if the disposable number is an N-digit disposable payment means number, the number generator 235 may dynamically determine the N-digit number. For example, if the one-time payment means number is a 16-digit payment means number, the number generator 235 may dynamically determine the 16-digit number.

On the other hand, when the disposable number is an N-digit one-time payment means number, the number generation unit 235 may dynamically determine a serial number area excluding some fixed number area of the N-digit payment means number. For example, if the one-time number is a 16-digit payment means number combining a 4-digit (or 6-digit) bank identification number (BIN), a 9-digit (or 11-digit) serial number, and a 1-digit check number, The number generator 235 dynamically determines a 9-digit (or 11-digit) serial number while maintaining the 4-digit BIN as a fixed number, and then combines the fixed BIN and the dynamically determined serial number. After the 15-digit number is configured, the remaining 1-digit check number is determined by performing the verification operation on the 15-digit number, and combining the 15-digit number and the 1-digit check number to dynamically convert the 16-digit disposable payment means number. You can decide. Here, the four-digit (or six-digit) BIN preferably includes a BIN assigned to the one-time payment means number.

According to another embodiment of the present invention, if the one-time replacement number is replaced by a partial number of the n-digit payment means number, the number generation unit 235 of the n-digit payment means number of the specified n-digit You can dynamically determine n numbers to replace some numbers. For example, if the payment method number is a 16-digit payment method number and the disposable replacement number replaces six numbers from the seventh to twelfth digits of the 16-digit payment method number, the number generation unit 235 May dynamically determine six numbers replacing the payment means numbers of the seventh to twelfth digits. Or if the payment means number is a 16-digit payment means number and the one-time substitute number replaces an odd number from the seventh to thirteenth digits of the 16-digit payment means number, the number generator 235 Four numbers that replace the seventh, ninth, eleventh, and thirteenth digits of the digit payment means number can be dynamically determined. The seat of the payment means number replaced by the one-time replacement number can be variously modified, whereby the present invention is not limited.

According to another exemplary embodiment of the present invention, if the m-digit disposable payment number is used, the number generator 235 may dynamically generate the m-digit number. For example, the m-digit disposable number may be a six-digit number.

When the disposable number of the number system is dynamically determined through the number generator 235, the interface unit 240 generates the disposable number through the connection module 205 and the user's communication device medium 300. To be delivered to

If the medium identification code or the medium identification token is stored in the memory unit 250, the interface unit 240 may identify the identification value information of the numbering medium 200 including the medium identification code or the medium identification token. It may be processed to be delivered to the communication device medium 300 of the user through the connection module 205.

3 is a diagram illustrating a functional configuration of a communication device medium 300 according to an embodiment of the present invention.

In more detail, FIG. 3 illustrates a configuration of a communication device medium 300 for a user to which the numbering medium 200 shown in FIG. 2 is connected. For convenience, the communication device medium 300 may be configured to include the numbering medium 200. The configuration of the communication device medium 300 will be described as a smartphone having a medium connection 308 capable of connection. Those skilled in the art to which the present invention pertains may refer to and / or modify the drawing 3 and include an output module 302 (or a communication module 306) and a medium connection unit 308 in addition to the smartphone. One various communication device medium 300 may be inferred, but the present invention includes all the inferred implementation methods, the communication device medium 300 is not limited to the smart phone shown in FIG. It is clear that no.

Referring to FIG. 3, the communication device medium 300 includes a control unit 301, a memory unit 309, and a key input unit 303 for receiving a user key operation, and communicates with one or more output modules 302. A battery 305 having a module 306 and having at least one medium connecting portion 308 to which the numbering medium 200 shown in FIG. 2 is connected, and for supplying power to the communication device medium 300. Include. The medium connection unit 308 includes at least one SD interface unit 308a and an IC interface unit 308b that match the connection module 205 of the number determination medium 200 shown in FIG. If the communication device medium 300 is a user's smartphone, the smartphone further includes a sound processing unit 304 for voice communication, and the medium connection unit 308 is an IC interface unit 308b to which a USIM is connected. It includes.

The control unit 301 is a generic term for the configuration of controlling the operation of the communication device medium 300, and includes at least one processor and an execution memory, and includes each component part provided in the communication device medium 300. It is connected via a bus. According to the present invention, the controller 301 loads and computes at least one program module included in the communication device medium 300 into the execution memory through the processor, and calculates at least one result through the bus. Transfer to a component to control the operation of the communication device medium (300). Hereinafter, for convenience, a functional component implemented in the form of a program module will be described in the control unit 301 of FIG. 3.

The memory unit 309 is a generic term for a nonvolatile memory provided in the communication device medium 300, and includes at least one program module executed through the control unit 301 and at least one data set used by the program module. Save it and keep it. The memory unit 309 basically includes a system program module and a system data set corresponding to an operating system of the communication device medium 300, a communication program module and a communication data set for processing a wireless communication connection of the communication device medium 300. And at least one application program and application data set, and a program module and data set for implementing the present invention are also stored in the memory unit 309.

The output module 302 is composed of a screen output device (for example, a liquid crystal display (LCD) device) and an output module for driving the output module 302. The calculation result corresponding to the screen output is output to the screen output device.

The key input unit 303 is composed of a key input device (or a touch screen device interlocked with the output module 302) having at least one key button and an input module for driving the same, and the bus with the control unit 301. Is connected to input a command to command the various operations of the control unit 301, or input data required for the operation of the control unit 301.

The sound processor 304 includes a speaker for outputting a sound signal and a sound module for driving the speaker. The sound processor 304 is connected to the bus by the controller 301 to correspond to a sound output among various calculation results of the controller 301. The calculation result is output through the speaker. The sound module decodes sound data to be output through the speaker and converts the sound data into a sound signal. In addition, the sound processor 304 includes a microphone for receiving a sound signal and a sound module for driving the microphone, and transmits sound data input through the microphone to the controller 301. The sound module encodes and encodes a sound signal input through the microphone.

The communication module 306 connects the communication device medium 300 to a data communication network or a voice call network. When the communication device medium 300 is a smartphone, the communication module 306 connects the smartphone to a data communication network and a voice call network. Wireless network communication module 306b and a short-range wireless communication module 306a for connecting the smart phone to the data communication network. The communication module 306 includes any one of the servers on the system for mapping the one-time number and the payment means information of the user and providing a payment using the user payment means corresponding to the one-time number and the payment means information mapped. Connect the communication channel using the data network.

The wireless network communication module 306b is a general term for a communication configuration for connecting wireless communication, and includes at least one antenna, an RF module, a baseband module, and a signal processing module for transmitting and receiving radio frequency signals of a specific frequency band. It is connected to the control unit 301 by a bus and transmits a calculation result corresponding to wireless communication among various calculation results of the control unit 301 through wireless communication, or receives data through wireless communication to the control unit 301. At the same time as the transmission, the procedure of connection, registration, communication, handoff of the wireless communication is maintained.

The short range wireless communication module 306a is configured as a short range communication module 306 for connecting a communication session using a radio frequency signal as a communication medium within a predetermined distance, and preferably, RFID communication, Bluetooth communication of ISO 18000 series standard. It may include at least one of, Wi-Fi communication, public wireless communication. According to an embodiment of the present invention, the short range wireless communication module 306a may be integrated with the wireless network communication module 306b.

The medium connection unit 308 includes a contact IC interface unit 308b to which a USIM or IC card module is connected, and an SD interface unit 308a to which an SD memory card or a micro SD memory card is connected. 308b) and an SD / IC interface unit fused with the SD interface unit 308a (eg, when both the SD interface and the IC interface are provided in the number determination medium 200).

The IC interface unit 308b is connected to a number determination medium 200 corresponding to a USIM or IC card module based on the ISO / IEC 7816 standard, and based on the number determination medium 200 and an application protocol data unit (APDU). Exchange at least one data set based on half-duplex communication. Here, the data set exchanged through the IC interface unit 308b includes a portion of n number of single-digit payment means number mapped to N-digit payment means number and N-digit payment means number mapped to the payment means number. At least one one-time use number of the one-time replacement number to replace the number and the m-digit one-time payment number mapped to the payment means number.

The SD interface unit 308a is connected to a number determination medium 200 corresponding to an SD memory card or a micro SD memory card based on an SD memory standard, and has at least one based on serial communication with the number determination medium 200. Exchange data sets. Here, the data set exchanged through the SD interface unit 308a includes a portion of n number of single-digit payment means number mapped to N-digit payment means number and N-digit payment means number mapped to the payment means number. At least one one-time use number of the one-time replacement number to replace the number and the m-digit one-time payment number mapped to the payment means number.

Referring to FIG. 3, the communication device medium 300 includes an N-digit one-time payment means number and the payment means number mapped to N (N ≧ 1) digit payment means numbers through the medium connection unit 308. Disposable alternative number replacing n (1≤n≤N) partial numbers of the mapped N-digit payment method number and at least one disposable number of m (m≥1) single-use payment number mapped to the payment method number And a medium connection determination unit 310 for determining whether a number generation medium 200 capable of generating a number is connected. When the connection of the numbering medium 200 is confirmed, the chip of the numbering medium 200 may be connected. And a medium configuration determining unit 315 for determining whether the program code for generating the disposable number is provided in the 210, and for transmitting the connection state authentication information of the number determination medium 200 to the server. 320 may be further provided.

The medium access determination unit 310 is a one-time replacement number for replacing the n partial number of payment means number mapped to the N-digit payment means number, N number of the payment means number mapped to the payment means number N-digit number And a number determination medium 200 capable of generating at least one disposable number of m-digit one-time payment numbers mapped to the payment means number is connected to the communication device medium 300 through the medium connection unit 308. do.

According to an embodiment of the present invention, when the number determination medium 200 is at least one of a SD (Secure Digital) memory card, an SD memory card equipped with an IC chip, and a micro SD memory card, the medium connection determining unit 310 ) May determine whether the number determination medium 200 is connected to the SD interface unit 308a according to the SD memory card detection protocol through the SD interface unit 308a.

According to another exemplary embodiment of the present invention, when the number determination medium 200 is at least one of a universal subscriber identity (USIM) module and a removable integrated circuit (IC) card module, the medium connection determination unit 310 The IC interface unit 308b may determine whether the number determination medium 200 is connected to the IC interface unit 308b according to a contact IC detection protocol.

According to another exemplary embodiment of the present invention, when the number determination medium 200 is an SD memory card having an IC interface separate from an IC chip, the medium connection determining unit 310 may contact the IC contact of the SD / IC interface unit. Through the contact IC detection protocol, it is possible to determine whether the number determination medium 200 is connected to the IC interface unit 308b.

On the other hand, when the server side and the communication channel is connected through the communication module 306 is requested from the server side to check whether the number determination medium 200 is connected to the communication device medium 300, the medium connection authentication The server 320 configures the connection state authentication information for authenticating the state in which the number determination medium 200 is connected to the communication device medium 300 based on the determination result of the medium connection determination unit 310. Can be sent to the side.

When it is confirmed that the numbering medium 200 is connected through the medium connecting unit 308, the medium configuration determining unit 315 is the disposable payment means number to the chip 210 of the numbering medium 200. It is determined whether the program code for generating at least one disposable number of one-time replacement number and one-time payment number is provided.

When the program detection protocol is defined on the chip 210 of the number determination medium 200 according to the method of the present invention (for example, an ATR signal corresponding to the RST signal of the IC chip), the medium configuration determination unit 315 The processor may determine whether a program for generating the disposable number is provided on the chip 210 of the number determination medium 200 based on the program detection protocol. Alternatively, when the program detection protocol is not defined in the chip 210 of the number determination medium 200, the medium configuration determination unit 315 may use the number determination medium 200 loaded with the program code for generating the disposable number. Maintain a group of uniquely identified identification values, determine whether the media identification code identified from the numbering medium 200 is included in the identification value group, and then dispose of the disposable value on the chip 210 of the numbering medium 200. It is possible to determine whether a program for generating a number is provided.

On the other hand, is the program generating the disposable number mounted on the number determination medium 200 connected to the communication device medium 300 from the server side while the communication channel is connected to the server side through the communication module 306 is mounted? When requested to confirm, the medium access authentication unit 320 authenticates whether the program for generating the disposable number is mounted on the number determination medium 200 based on the determination result of the medium configuration determination unit 315. The connection status authentication information may be configured and transmitted to the server side.

Referring to FIG. 3, when the connection of the numbering medium 200 is confirmed, the communication device medium 300 uniquely identifies the numbering medium 200 or the communication device medium 300 (or the program). An identification value confirming unit 325 for identifying one or more identification value information for uniquely identifying the module) and an identification value transmitting unit 330 for transmitting the identified identification value information to the server side.

When it is confirmed that the number determining medium 200 is connected to the medium connecting unit 308 through the medium connection determining unit 310, the identification value checking unit 325 uniquely identifies the number determining medium 200. Identifying identification value information comprising one or more identifying media identification values and one or more device identification values that uniquely identify the communication device medium 300 (or program module).

The medium identification value is the number identification in the process of recording a medium identification code for uniquely identifying the numbering medium 200 and a program code for generating the disposable number on the chip 210 of the numbering medium 200. At least one medium identification token recorded on the chip 210 of the medium 200 may be included.

The device identification value is a device token assigned to the communication device medium 300 (or a program module) (e.g., a token assigned according to the APNS standard when the communication device medium 300 is an Apple smartphone), Telephone number assigned to the communication device medium 300, Electronic Serial Number, USIM Serial Number (UICC ID), MAC Address (Media Access Control Address), Network Identification Value, Switch Assignment Value, Subscriber Number, Contract It may include at least one of the numbers.

When one or more identification value information for uniquely identifying the number determination medium 200 or uniquely identifying the communication device medium 300 (or program module) is identified, the identification value transmitter 330 may be configured to communicate with the communication module. The identification value information identified through the server 306 connected to the communication channel is transmitted.

Referring to FIG. 3, the communication device medium 300 outputs an interface for inputting payment means information of a user including an N-digit payment means number to be mapped with the disposable number and at least one payment means configuration value. An interface output unit 335, an information input unit 340 for receiving the payment means information of the user through the interface, and an information registration unit 345 for transmitting the input payment means information to the server side.

The interface output unit 335 includes an N-digit payment means number and at least one payment means configuration value to be mapped to a one-time number to be generated by a program code provided or to be provided in the number determination medium 200. An interface for inputting payment means information of a user is output through the output module 302. For example, the payment means number may include a 16-digit credit card number, in this case, the payment means configuration value is the card company information that issued the credit card, the expiration date of the credit card, CVC / CVV, cardholder It can contain one or more English names.

According to the exemplary embodiment of the present invention, the interface output unit 335 may further output an interface for inputting personal information of the user. Here, the user's personal information may include one or more of the Hangul name, resident registration number (or part number of the resident registration number) of the user.

The information input unit 340 receives the payment means information of the user including the payment means number and at least one payment means configuration value based on the interface through the key input unit 303. If the personal information of the user can be input through the interface, the information input unit 340 may receive the personal information of the user through the key input unit 303.

When the payment means information of the user is input, the information registration unit 345 transmits the payment means information input to the server side through which the communication channel is connected through the communication module 306. If the user's personal information is input, the information registration unit 345 further transmits the user's personal information to the server.

According to the exemplary embodiment of the present invention, the identification value transmitter 330 may be omitted, and the information register 345 may transmit the identification value information and the payment means information of the user together. It is not limited.

Referring to FIG. 3, when the numbering medium 200 is connected, the communication device medium 300 may be executed on the chip 210 of the numbering medium 200 from the server side, and the disposable number may be used. A program receiving unit 350 for receiving an applet program package to be generated, and a program loading unit 355 for recording the program code for generating the disposable number based on the applet program package on the chip 210 of the number determination medium 200. And the seed value (or seed determination rule) required for generating the disposable number in the applet program package, the server side agrees with the seed value (or seed determination rule). It further includes a dynamic consensus unit 360 to write to the chip 210 of (200).

Although it is confirmed that the numbering medium 200 is connected to the communication device medium 300, the program code for generating the disposable number is mounted on the numbering medium 200 by the medium configuration determining unit 315. If it is not confirmed, the program receiving unit 350 can be executed in the chip 210 of the number determination medium 200 from the server side connected to the communication channel through the communication module 306, the one-time payment means number Receive an applet program package including program code for dynamically determining at least one of the one time replacement number and the one time payment number.

Here, the applet program package may be executed through an operating system of the chip 210 of the number determination medium 200 and includes program code to which a key generation function for generating the disposable number is applied.

According to an embodiment of the present invention, the applet program package further includes a seed determination rule that further includes a seed value agreed with the server side to be assigned to the key generation function or dynamically determines a seed value to be assigned to the key generation function. It may further include. The applet program package may further include a media identification token that uniquely identifies the program code for generating the disposable number or uniquely identifies the number determination medium 200 on which the program code is mounted.

When the applet program package is received, the program loading unit 355 extracts the program code for generating the disposable number from the applet program package, and then, via the medium connection unit 308, the chip 210 of the number determination medium 200. ).

If the applet program package includes a seed value (or seed determination rule) necessary to be assigned to the key generation function to generate a one-time number, the program loading unit 355 may agree with the server side together with the program code. The seed value (or seed determination rule) may be recorded in the chip 210 of the number determination medium 200.

On the other hand, if the seed value (or seed determination rule) necessary for generating the one-time number is not included in the applet program package, the dynamic agreement unit 360 is promised to the server side to which the communication channel is connected through the communication module 306. Agree the seed values (or seed determination rules) required to generate a one-time number assigned to the key generation function through at least one data exchange according to a seed agreement protocol, and the agreed seed values (or seed determination rules) The chip 210 of the number determination medium 200 may be recorded. Here, the seed agreement protocol includes a protocol for exchanging key values through a communication network, and is not limited by a specific protocol standard.

If the applet program package includes a media identification token that uniquely identifies the program code for generating the disposable number or uniquely identifies the number determination medium 200 on which the program code is mounted, the media identification token includes: The program mounting unit 355 may record the media identification token included in the applet program package on the chip 210 of the number determination medium 200.

On the other hand, if the medium identification token is not included in the applet program package, the dynamic agreement unit 360 transmits the medium to the server side according to the token allocation protocol promised with the server side to which the communication channel is connected through the communication module 306. After authenticating the validity of the numbering medium 200 connected to the connection unit 308 and the program code mounted on the chip 210 of the numbering medium 200, the authenticated numbering medium ( The media identification token assigned to the 200 (or the program code for generating the one-time number) may be received and recorded on the chip 210 of the number determination medium 200. Here, the token allocation protocol includes a protocol for authenticating the program code through a certificate of the manufacturer of the program code, such as Apple's APNS, and authenticating the medium through the identification value of the medium on which the program code is mounted. It is not limited by protocol standard.

Referring to FIG. 3, when the program code for generating a disposable number is mounted on the number determination medium 200 connected to the medium connection unit 308, the communication device medium 300 includes the number determination medium 200. Replaces N (1≤n≤N) partial numbers of N-digit one-time payment means number mapped to N (N≥1) digit payment means number, and N-digit payment means number mapped to the payment means number A disposable number request unit 365 for requesting a disposable number to be used for payment using at least one disposable number of one-time replacement number and m (m≥1) digit disposable payment number mapped to the payment means number; And a disposable number receiver 370 for receiving the disposable number determined dynamically from the determination medium 200, and a disposable number output unit 380 for outputting the received disposable number, wherein the received disposable number is the payment means. With numbers And further comprising a one-time mapped code number system authentication unit 375 to authenticate that corresponds to the numbering of.

The program code for generating the disposable number is mounted on the chip 210 of the numbering medium 200 at the time of manufacture of the numbering medium 200, or by the program mounting unit 355. When the program code for generating the first number is mounted on the 200, the one-time number request unit 365 generates the one-time number through the media access unit 308 in response to a payment request through the user's one-time number. N number of the number of one-time payment means number mapped to the N-digit payment means number, and the number of payment means number mapped to the N-digit payment means number mapped to the N-digit payment means number 200 to the program determination code 200 is mounted Request for a disposable number to be used for payment using at least one disposable number of a replacement disposable number to replace and the one-time disposable number of m digits mapped to the payment means number It sends a command. If user authentication (eg, PIN (Personal Identification Number) authentication, password authentication, etc.) is required to access the number determination medium 200, the one-time number request unit 365 is connected to the number determination medium 200. The user authentication procedure can be performed.

When the number determination medium 200 can generate two or more disposable numbers of the one-time payment means number, one-time replacement number and one-time payment number according to the embodiment of the present invention, the one-time number request unit 365 is the The number determination medium 200 requests the disposable number of the number system necessary for the payment among the one-time payment means number, one-time replacement number and one-time payment number.

The one-time number receiving unit 370 is a one-time payment means number, one-time replacement number and one-time payment number that can be dynamically determined through the program code provided on the chip 210 of the number determination medium 200 through the medium connection unit 308 The disposable number request unit 365 receives a disposable number corresponding to the requested number system.

According to the method of the present invention, the number determination medium 200 may generate two or more disposable numbers of the one-time payment means number, one-time replacement number and one-time payment number, the one-time number request unit 365 is the one-time When requesting a disposable number of a specific numbering system among payment means number, one-time replacement number and one-time payment number, the number system authentication unit 375 is a one-time number received from the number determination medium 200 is the one-time number request unit ( 365 can be authenticated as a one-time number of the number system requested.

When the disposable number of the fixed number system is received from the numbering medium 200 or the number system of the disposable number received from the numbering medium 200 is authenticated by the number system authentication unit 375, The disposable number output unit 380 outputs the disposable number through the output module 302.

When the disposable number received from the number determining medium 200 is the disposable payment means number according to the exemplary embodiment of the present invention, the disposable number output unit 380 has at least one payment corresponding to the disposable payment means number. The means configuration value may be maintained, and in this case, the disposable number output unit 380 may output the disposable payment means information including the disposable payment means number and the payment means configuration value.

According to another exemplary embodiment of the present invention, when the disposable number received from the number determination medium 200 is the disposable replacement number, the disposable number output unit 380 may have the remaining numbers except for the number to be replaced by the disposable replacement number. It is possible to maintain a payment means number fixed value, including, in this case, the disposable number output unit 380 may be configured to output a single payment means number by combining the retained payment means number fixed value and the one-time replacement number. have. Meanwhile, the disposable number output unit 380 may maintain the payment means number fixed value and at least one payment means configuration value, and in this case, the disposable number output unit 380 may substitute the payment means number fixed value and the disposable value. One-time payment means information including the one-time payment means number and payment means configuration value configured by combining the number can be output.

Referring to FIG. 3, when the numbering medium 200 connected to the medium connecting unit 308 is detachable from the communication device medium 300, the communication device medium 300 includes the numbering medium 200. Disposable payment processing unit 385 for uniquely identifying the one-time number received from the numbering medium 200 and one or more identification value information uniquely identifying the communication device medium 300 (or program module) to the server side. ).

When the number determination medium 200 connected through the medium connection unit 308 is detached from the communication device medium 300 by being separated from the medium connection unit 308, the disposable payment processing unit 385 may be a communication device medium ( 300 may automatically acquire the authority of the user terminal 190 requesting payment through the user payment means mapped to the one-time number (or based on the media separation possibility authentication result from the server side). When the communication device medium 300 acquires the authority of the user terminal 190, the one-time payment processor 385 receives the disposable number and the number received from the number determination medium 200 through the communication module 306. Payment using the user payment means mapped to the one-time number by uniquely identifying the number determination medium 200 or by transmitting one or more identification value information that uniquely identifies the communication device medium 300 (or program module) to the server side. You can request

4 is a diagram illustrating a process of transmitting identification value information according to an embodiment of the present invention.

In more detail, FIG. 4 illustrates identification value information for uniquely identifying the numbering medium 200 in the communication device medium 300 when the numbering medium 200 is accessible to the user's communication device medium 300. And a process of sequentially transmitting identification value information for uniquely identifying the communication device medium 300 to the mapping management server 100, the person having ordinary skill in the art to which the present invention pertains. By referring to and / or modifying 4, it is possible to infer various implementation methods (e.g., implementation steps in which some steps have been omitted or changed in order) for the process of transmitting the identification value information, but the present invention is directed to all implementations inferred from the above. It is made, including the method, the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 4, the communication device medium 300 of the user accesses the mapping management server 100 and requests a designated non-face-to-face user authentication (eg, user authentication using an accredited certificate) (400), and the mapping management. After authenticating the user at the server 100 (405), and transmitting the user authentication result (410), the communication device medium 300 determines whether the number determination medium 200 is connected (415).

If the number determination medium 200 is connected to the communication device medium 300, the communication device medium 300 requests a media identification value from the number determination medium 200 (425), and determines the number. The medium 200 receives the medium identification value (430). If the program code for generating the disposable number is not loaded in the numbering medium 200 at the time of requesting the medium identification value, the medium identification value is stored in the chip 210 of the numbering medium 200. It may include a recorded medium identification code. On the other hand, if the program code for generating the disposable number is loaded on the numbering medium 200 at the time of requesting the medium identification value, the medium identification value is recorded on the chip 210 of the numbering medium 200. It may include any one of a media identification code and a media identification token. Meanwhile, the communication device medium 300 may receive the medium identification value through a key input even if the number determination medium 200 is not connected.

The communication device medium 300 transmits identification value information including the medium identification value to the mapping management server 100 (435), and according to the intention of the person skilled in the art, the communication device medium 300 is the identification value information. After transmitting the user's payment means information including a payment means number and at least one payment means configuration value before transmitting (905), the payment management information with the identification value information and the mapping management server 100 (910).

The mapping management server 100 authenticates whether the number determination medium 200 corresponding to the received identification value information is the number determination medium 200 for generating a disposable number that can be mapped with the user payment means (440).

If the numbering medium 200 is not a numbering medium 200 for generating a disposable number that can be mapped to the user payment means, the mapping management server 100 is connected to the communication device medium 300 to the numbering medium. In operation 445, a mapping error indicating that the disposable number generated through 200 and the user payment method cannot be mapped is provided (445).

On the other hand, if the number determination medium 200 is a number determination medium 200 for generating a disposable number that can be mapped to the user payment means, the mapping management server 100 is a number determination medium corresponding to the received identification value information ( 200 is authenticated if it is possible to connect to the communication device medium 300 having the medium connection 308 (450).

If the number determination medium 200 is accessible to the communication device medium 300, the mapping management server 100 requests the communication device medium 300 for information identifying the communication device medium 300 ( 455). On the other hand, if the numbering medium 200 is not accessible to the communication device medium 300, the numbering medium 200 is disposable that can be mapped to the user payment means in a state that is not connected to the communication device medium (300) Since it will be a medium for generating a number, the mapping management server 100 ignores the identification value information that uniquely identifies the communication device medium 300 and the disposable number generated through the number determination medium 200 and the user. The process of mapping the payment method may be performed.

The communication device medium 300 checks a device identification value for identifying itself (460). If the device identification value is confirmed, the communication device medium 300 transmits identification value information including the identified device identification value to a mapping management server. In operation 465, the communication device medium 300 receives the payment means information of the user including a payment means number and at least one payment means configuration value before transmitting the identification value information (905). In operation 910, the input payment means information together with the identification value information may be transmitted to the mapping management server 100. Meanwhile, the mapping management server 100 maps the communication device medium 300 with the disposable number dynamically determined through the number determination medium 200 based on the identification value information for identifying the communication device medium 300. It can be switched to the user terminal 190 requesting the payment using the user payment means.

5 is a diagram illustrating a process of transmitting identification value information according to another exemplary embodiment of the present invention.

In more detail, FIG. 5 illustrates identification value information for uniquely identifying the numbering medium 200 in the communication device medium 300 when the numbering medium 200 is accessible to the user's communication device medium 300. And a process of collectively transmitting the identification value information uniquely identifying the communication device medium 300 to the mapping management server 100, the person having ordinary skill in the art to which the present invention pertains. Reference may be made to and / or modified 5 to infer various implementation methods (e.g., implementation steps with some steps omitted or reordered) for the identification value information transmission process. It is made, including the method, the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 5, the communication device medium 300 of the user connects to the mapping management server 100 and requests a designated non-face-to-face user authentication (eg, user authentication using an accredited certificate) (500). After authenticating the user in the server 100 (505), if the user authentication result is transmitted (510), the communication device medium 300 determines whether the number determination medium 200 is connected (515).

If the number determination medium 200 is connected to the communication device medium 300, the communication device medium 300 requests a medium identification value from the number determination medium 200 (525), and determines the number. The medium identification value is received by the medium 200 (530). If the program code for generating the disposable number is not loaded in the numbering medium 200 at the time of requesting the medium identification value, the medium identification value is stored in the chip 210 of the numbering medium 200. It may include a recorded medium identification code. On the other hand, if the program code for generating the disposable number is loaded on the numbering medium 200 at the time of requesting the medium identification value, the medium identification value is recorded on the chip 210 of the numbering medium 200. It may include any one of a media identification code and a media identification token. Meanwhile, the communication device medium 300 may receive the medium identification value through a key input even if the number determination medium 200 is not connected.

In addition, the communication device medium 300 checks a device identification value for identifying itself (535), and if the device identification value is confirmed, the identification value information including the medium identification value and the device identification value is mapped and managed. Transmitting to a server (540), and according to the intention of the person skilled in the art, the communication device medium 300 inputs payment means information of the user including a payment means number and at least one payment means configuration value before transmitting the identification value information. After receiving 905, the input payment means information together with the identification value information may be transmitted to the mapping management server 100 (910).

The mapping management server 100 authenticates whether the number determination medium 200 corresponding to the received identification value information is the number determination medium 200 for generating a disposable number that can be mapped with the user payment means (545).

If the numbering medium 200 is not a numbering medium 200 for generating a disposable number that can be mapped to the user payment means, the mapping management server 100 is connected to the communication device medium 300 to the numbering medium. In operation 550, a mapping error indicating that the one-time number generated through operation 200 and the user payment method cannot be mapped is provided.

On the other hand, if the number determination medium 200 is a number determination medium 200 for generating a disposable number that can be mapped to the user payment means, the mapping management server 100 is a number determination medium corresponding to the received identification value information ( 200 authenticates whether or not the connection to the communication device medium 300 having the medium connection 308 is possible (555).

If the number determination medium 200 is accessible to the communication device medium 300, the mapping management server 100 is based on the identification value information identifying the communication device medium 300, the communication device medium 300 May be converted into a user terminal 190 for requesting payment using a user payment means mapped to a disposable number dynamically determined through the number determination medium 200. On the other hand, if the numbering medium 200 is not accessible to the communication device medium 300, the numbering medium 200 is disposable that can be mapped to the user payment means in a state that is not connected to the communication device medium (300) Since it will be a medium for generating a number, the mapping management server 100 ignores the identification value information that uniquely identifies the communication device medium 300 and the disposable number generated through the number determination medium 200 and the user. The process of mapping the payment method may be performed.

6 is a diagram illustrating a process of transmitting identification value information according to another exemplary embodiment of the present invention.

In more detail, FIG. 6 illustrates a process of transmitting identification value information for uniquely identifying the number determination medium 200 to the mapping management server 100 through the user terminal 190. If one of ordinary skill in the art can refer to and / or modify this figure, various implementation methods (for example, some steps may be omitted or the order may be changed) may be inferred for the identification value information transmission process. Although there will be, the present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 6, the user terminal 190 accesses the mapping management server 100 and requests a designated non-face-to-face user authentication (for example, user authentication using an accredited certificate) (600), and the mapping management server 100. After authenticating the user at 605, and transmitting the user authentication result at 610, the user terminal 190 uniquely identifies the number determination medium 200 for dynamically determining the disposable number. Input a value (615), and transmit identification value information including the input medium identification value to the mapping management server (100) (620), and the communication device medium (300) according to the intention of the skilled person After receiving the payment means information of the user including the payment means number and at least one payment means configuration value before transmitting the value information (905), the mapping management server to the input payment means information along with the identification value information ( 100).

The mapping management server 100 authenticates whether the number determination medium 200 corresponding to the received identification value information is the number determination medium 200 for generating a disposable number that can be mapped with the user payment means (625).

If the numbering medium 200 is not a numbering medium 200 for generating a disposable number that can be mapped to the user payment means, the mapping management server 100 is connected to the communication device medium 300 to the numbering medium. In operation 630, a mapping error indicating that the one-time number generated through 200 and the user payment method cannot be mapped is provided.

On the other hand, if the numbering medium 200 is a numbering medium 200 for generating a disposable number that can be mapped with the user payment means, the mapping management server 100 is a disposable number generated through the numbering medium 200 And mapping the user payment means.

7 is a diagram illustrating a process of converting a communication device medium 300 into a user terminal 190 according to an embodiment of the present invention.

In more detail, FIG. 7 illustrates identification value information uniquely identifying the number determination medium 200 from the communication device medium 300 and the communication device medium 300 through the process shown in FIG. 4 or FIG. 5. When identification value information that uniquely identifies is received and the numbering medium 200 is accessible to the communication device medium 300, the communication device medium 300 is referred to as the numbering medium based on the identification value information. As shown in the process of switching to the user terminal 190 requesting the payment through the user payment means mapped to the one-time number is dynamically determined through the (200), a person having ordinary skill in the art If so, various implementation methods (e.g., some steps may be omitted or changed in order) for the process of using the communication device medium 300 to the user terminal 190 by referring to and / or modifying the drawing of FIG. Would be able to infer how the embodiment), the present invention is made, including any exemplary way in which the inference, to which the technical feature that is not limited to the exemplary method shown in the figure 7.

Referring to FIG. 7, the identification value information for uniquely identifying the number determination medium 200 from the communication device medium 300 and the communication device medium 300 are unique through the process illustrated in FIG. 4 or FIG. 5. When identification value information for identification is received and the number determination medium 200 is accessible to the communication device medium 300, the mapping management server 100 corresponds to the communication device medium 300 corresponding to the identification value information. ) Also authenticates whether the numbering medium 200 can be connected (700).

If the number determination medium 200 cannot be connected to the communication device medium 300, the mapping management server 100 is a disposable device generated through the number determination medium 200 to the communication device medium 300. A mapping error indicating that the number and the user payment method cannot be mapped is provided (705).

On the other hand, if the numbering medium 200 can be connected to the communication device medium 300, the mapping management server 100 authenticates whether the numbering medium 200 is connected to the communication device medium 300. (710).

If the number determination medium 200 is connected to the communication device medium 300, the mapping management server 100 maps the disposable number generated through the number determination medium 200 to the user payment means. Do this.

On the other hand, the numbering medium 200 may be connected to the communication device medium 300, or if the numbering medium 200 is connected to the communication device medium 300, the mapping management server 100 The authentication authenticates that it is possible to completely separate the numbering medium 200 from the communication device medium 300 and regard it as a separate medium (715).

If the number determination medium 200 can be separated from the communication device, the mapping management server 100 maps the communication device medium 300 with a disposable number dynamically determined through the number determination medium 200. The use of the user payment means is switched to the user terminal 190 requesting the payment (720).

On the other hand, if the numbering medium 200 cannot be separated from the communication device, the mapping management server 100 shows the communication device medium 300 itself connected to the numbering medium 200 in FIG. In operation 725, the number determination medium 200 may be determined.

8 is a diagram illustrating a process of mapping a disposable number to a user payment means according to an embodiment of the present invention.

In more detail, in FIG. 8, the identification value information received by the mapping management server 100 is stored in connection with user payment means information through the process illustrated in FIGS. A process of mapping a disposable number to be generated through the number determination medium 200 corresponding to the identification value information is illustrated. According to an embodiment of the present invention, the process of mapping the disposable number shown in FIG. 8 to the user payment means may be performed either before or after the applet program providing process shown in FIG. 9 or FIG. 10. It is apparent that the present invention is not limited by the sequence of mapping the disposable number to the user payment means and the applet program providing process.

Referring to FIG. 8, when identification value information received by the mapping management server 100 is received through the process illustrated in FIGS. 4 to 6, the mapping management server 100 is illustrated in FIG. 4 or 5. Request the payment means information of the user to the communication device medium 300 or the user terminal 190 shown in FIG. 6 (800), and correspondingly, the communication device medium 300 or the user terminal 190 After receiving the payment means information of the user including the means number and at least one payment means configuration value (805), and transmits the input payment means information with the identification value information to the mapping management server 100 ( 810). Meanwhile, the payment means information of the user may be received together with the identification value information through the process illustrated in FIGS. 4 to 6, whereby the present invention is not limited thereto.

The mapping management server 100 provides the received payment method information and the user authentication result to the financial institution server 185 to request that the user authenticate whether a user payment method corresponding to the payment method information of the user is issued. In operation 815, the financial institution server 185 receives an issuance authentication result of the user payment means (820).

If the issuance of the user payment means is not authenticated, the mapping management server 100 may map the disposable number generated through the number determination medium 200 to the communication device medium 300 and the user payment means. Provide a mapping error indicating no (825).

If the issuance of the user payment means is authenticated, the mapping management server 100 maps and stores the disposable number to be generated through the number determination medium 200 corresponding to the payment means information of the user and the identification value information. (830).

9 is a diagram illustrating a process of providing an applet program to the number determination medium 200 through the communication device medium 300 according to one embodiment of the present invention.

In more detail, FIG. 9 illustrates a method for generating a disposable number in the numbering medium 200 when the numbering medium 200 is connected to the communication device medium 300 through the process shown in FIG. 4 or FIG. 5. Checking whether a program code exists, and if the program code is not mounted on the number determining medium 200, mounting the program code to the number determining medium 200 through the communication device medium 300. As illustrated, those of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 9 to implement various methods of the applet program providing process (for example, some steps may be omitted or may be omitted). May be inferred, but the present invention includes all the implementation methods inferred, and only the implementation method shown in FIG. This technical feature is not limited.

Referring to FIG. 9, when the number determination medium 200 is connected to the communication device medium 300 through the process illustrated in FIG. 4 or FIG. 5, the mapping management server 100 transmits the communication device medium 300. It is determined whether or not the program code for generating a one-time number is mounted on the number determination medium 200 connected thereto.

If the program code is mounted on the numbering medium 200, the mapping management server 100 determines the seed value (or seed determination rule) necessary for the numbering medium 200 to generate the disposable number ( 905) The identification value information identifying the number determination medium 200 and the seed value (or seed determination rule) are concatenated and stored (910a). If the seed value (or seed determination rule) is managed through a separate number authentication server 180, the mapping management server 100 sets a server identification value identifying the number authentication server 180 to the number determination medium. In operation 910b, the connection information 200 may be stored in connection with identification value information for identifying the 200 (or the communication device medium 300).

Meanwhile, when a media identification token is assigned to the program code for generating the one-time number, the mapping management server 100 may determine a media identification token for identifying the program code to be mounted on the number determination medium 200 (915). ).

The mapping management server 100 configures an applet program package including the program code, a seed value (or a seed determination rule), and the media identification token (920), and the applet program package to the communication device medium (300). In response thereto, the communication device medium 300 writes the program code to the chip 210 of the number determination medium 200 (930), and the seed value (or seed determination rule). In step 935, the media identification token is set (940), and the loading result of the applet program package is transmitted to the mapping management server 100 (945).

FIG. 10 illustrates a process of providing an applet program to the number determination medium 200 through the communication device medium 300 according to another exemplary embodiment of the present invention.

In more detail, FIG. 10 illustrates another embodiment that can be extended from the applet program providing process illustrated in FIG. 9, and a person having ordinary knowledge in the art to which the present invention pertains, FIG. Although various implementation methods for providing an applet program to the number determination medium 200 may be inferred by combining the implementation methods illustrated in FIG. 10, the present invention may include all the implementation methods inferred, as shown in FIG. The technical features are not limited only to the implementation method illustrated in FIG. 9.

Referring to FIG. 10, when the number determination medium 200 is connected to the communication device medium 300 through the process illustrated in FIG. 4 or FIG. 5, the mapping management server 100 transmits the communication device medium 300. It is determined whether or not the program code for generating the disposable number is mounted in the number determination medium 200 connected to the control unit 1000.

If the program code is mounted on the number determination medium 200, the mapping management server 100 configures an applet program package including the program code (1005a), and then transmits the applet program to the communication device medium (300). The package may be transmitted (1010a). Alternatively, the mapping management server 100 may request an affiliated program providing server 175 to mount the program code on the number determination medium 200 through the communication device medium 300 (1005b). The program providing server 175 may transmit an applet program package including the program code to the communication device medium 300 (1010b). The communication device medium 300 records the program code on the chip 210 of the number determination medium 200 based on the applet program package (1015), and then loads the program code into the mapping management server 100. (1020).

The mapping management server 100 determines a seed value (or seed determination rule) necessary for the program code mounted in the number determination medium 200 to generate the disposable number (1025), and the number determination medium 200. The identification value information for identifying the seed value (or seed determination rule) is concatenated and stored (1030a). If the seed value (or seed determination rule) is managed through a separate number authentication server 180, the mapping management server 100 sets a server identification value identifying the number authentication server 180 to the number determination medium. It may be stored in connection with the identification value information identifying the 200 (or the communication device medium 300) (1030b). The mapping management server 100 transmits the determined seed value (or seed determination rule) to the communication device medium 300 (1040), and the communication device medium 300 transmits the seed value (or seed determination rule). After recording to the chip 210 of the numbering medium 200 (1045), the result of the agreement of the seed value (or seed determination rule) is transmitted to the mapping management server 100 (1050).

Meanwhile, when a media identification token is assigned to the program code for generating the one-time number, the mapping management server 100 may determine a media identification token for identifying the program code to be mounted on the number determination medium 200 (1055). ). In this case, the mapping management server 100 transmits the media identification token to the communication device medium 300 (1060), and the communication device medium 300 transmits the media identification token to the number determination medium 200. After writing to the chip 210 (1065), the allocation result of the medium identification token is transmitted to the mapping management server 100 (1070).

11 is a diagram showing a payment method mapping system configuration according to another embodiment of the present invention.

In more detail, FIG. 11 illustrates that the number determination medium 200 for dynamically determining the disposable number to be mapped with the user payment means establishes the media connectivity and the media separability among the various number determination media 200 shown in FIG. By including at least one of a number generation device, a number generation card, a random number printing card, and a smart phone equipped with a number generation program, the one-time number to be mapped to the payment means of the user in the payment process of the user using the one-time number If the number determination medium 200 of the user for dynamically determining the disposable number is not automatically determined, unless the identification value information for identifying the numbering medium 200 for determining is keyed, the user is uniquely identified. Determine unique ID information to be dynamically determined through the user's payment means and the number determination medium 200 A system configuration for mapping a private number is shown. On the other hand, when the number determination medium 200 is at least one of the number generation device, number generation card, random number printing card and a smart phone equipped with a number generation program, the mapping management server 100 shown in FIG. Mapping between the payment means and the one-time number and the relay server 1100 relaying the user's payment, or any one of the financial company server 185 that issued the payment method to the user is selected, or the relay server 1100 The financial company server 185 may be all of the mapping management server 100. In order to include the method of implementing the present invention as described above, FIG. 11 provides a server corresponding to the mapping management server 100 of FIG. The relay server 1100 or the financial company server 185 will be described.

The payment method mapping system of the present invention may correspond to the user terminal 190 requesting the user's payment means and the disposable number mapping, and the mapping management server 100 of FIG. 1, and issue a payment means to the user. A financial company server 185 that is provided at a financial company that processes a number determination medium 200 to be issued to the user, and which can directly refer to the financial company ledger for maintaining information related to the user payment means, and the mapping management server 100 of FIG. And a relay server 1100 which relays the user terminal 190 and the financial institution server 185. Here, the relay server 1100 is a server that does not directly refer to the financial institution ledger and can process user authentication, payment means authentication, and number determination medium 200 authentication only through the financial company server 185. (PG) may include at least one server of the server provided in the company, the server provided in the bansa, the server provided in the shopping mall, the operator relaying the mapping of the payment means and the disposable number. The relay server 1100 and the financial company server 185 are names for identifying a subject of the present invention which is provided and operated in each institution participating in the present invention. The subject of the present invention is provided in a financial company that can directly refer to the ledger of a financial company that maintains and operates information, and the relay server 1100 may refer to the head of the financial company indirectly through the financial company server 185. It is only meant that the subject matter of the invention, it will be apparent that the relay server 1100 and the financial institution server 185 is not limited by a specific server that is physically identified.

The user terminal 190 is a generic term for a terminal for requesting the user's payment means and one-time number mapping, and includes all kinds of wired terminals (eg, computer terminals, etc.) that can be connected to a wired communication network and all kinds of wires that can be connected to a wireless communication network. It includes a wireless terminal (eg, a mobile phone, a smartphone, etc.), and is equipped with a browser program or a separate dedicated program connected to the relay server 1100.

Referring to FIG. 11, the relay server 1100 connects a communication channel with the user terminal 190 according to a connection request of the user terminal 190, and to the user terminal 190 through the communication channel. And a terminal interface unit 1105 which provides at least one interface for inputting and transmitting information necessary for the user registration and authentication, and the user's payment means and one-time number mapping. The terminal interface unit 1105 includes the relay. It may be implemented in a separate web server form associated with the server 1100. If a separate program is mounted on the user terminal 190, the interface may be omitted.

Referring to FIG. 11, the relay server 1100 identifies the number determination medium 200 for dynamically determining the payment means information and the user information input by the user and the disposable number to be mapped with the payment means of the user. An information receiving unit 1110 for receiving value information and a unique ID determining unit 1115 for determining unique ID information for uniquely identifying the user, and a financial company that can directly refer to the ledger by reading the payment means information. The financial company identification unit 1120 identifying the server 185 is provided. Here, the disposable number dynamically determined by the number determination medium 200 is a one-time replacement number for replacing the partial number of n (1 ≤ n ≤ N) of the payment means number of N (N ≥ 1) and the payment means At least one disposable payment number of m (m≥1) digits that can be mapped to the number may be included.

The information receiving unit 1110 receives payment means information, user information, and identification value information input by the user from the user terminal 190 through the terminal interface unit 1105. The payment means information may be omitted (for example, if the payment server does not store the payment means information for identifying the user's payment means in the relay server 1100) according to the intention of a person skilled in the art for carrying out the present invention, or the identification The value information may be omitted (eg, the identification value information may be omitted when the user terminal 190 is directly provided to the financial institution server 185).

The payment means information may include account information corresponding to an account of a user name opened to a user by a bank (= financial company), and the account information may include one or more of an account number, a bank code, and an account holder's name. According to an embodiment of the present invention, the payment means information may include card information corresponding to a card issued to a user by a card company (= financial company), and the card information includes a card number, card company information (BIN), an expiration date, It may include one or more CVC / CVV and cardholder names. According to the method of the present invention, the payment means information preferably comprises information (for example, bank code or BIN) that can identify the financial company that issued the payment means.

The user information is information capable of authenticating the real name of the user and matching information with the issuer information of the payment means provided in the ledger of the financial company. (Eg, a telephone number, an e-mail address, etc.) and an address may be further included.

The numbering medium 200 determines a disposable number in the form of a disposable number generated by substituting one or more fixed seed values and at least one dynamic seed value (eg, a current time value or a random random value) into a designated key generation rule. A medium, or a plurality of random numbers, is a medium in which at least two or more random numbers of the printed plurality of random numbers are combined to determine a disposable number in a random number combining manner. For example, the number determination medium 200 is a number generating device (eg, matchbox size number generator) and the number is processed so that the financial company is issued to the user in order to prevent non-face-to-face transactions using the payment means of the user and the At least one number generation card that implements the number generation device in the form of a plastic card with an ultra-thin display and at least one wireless terminal (eg, a smartphone) equipped with a number generation program, or a plurality of four-digit random numbers It may include a random number printing card.

The identification value information uniquely identifies the number determination medium 200 of the user, and may include a device serial number of the number generation device, a card serial number of the number generation card, or a random number printing card. If the number determination medium 200 is a wireless terminal of a user provided with a number generation program, the identification value information may be a communication number (eg, a phone number) or a device number (eg, UICC ID, MAC) assigned to the wireless terminal. Address, etc.) or a program identification value assigned to the number generation program (eg, Apple's APNS standard token value, app identification key value, etc.).

The unique ID determining unit 1115 determines unique ID information of a user that uniquely identifies a user corresponding to the user information. Here, the unique ID information is replaced with a payment means number (for example, account number, card number) of the payment means or a one-time number dynamically determined through the number determination medium 200 or a part of the payment means number. At least one of information identifiable on the basis of a user login, information input by the user in the payment request process, or information provided to the user terminal 190 by being included in the user's payment interface when the payment is requested instead. It may include.

According to the first unique ID determining method of the present invention, the unique ID determining unit 1115 is included in the user information to check the ID information of the user received or input by the user through a separate user registration interface, The identified ID information may be determined as unique ID information uniquely identifying the user.

According to the second unique ID determining method of the present invention, the unique ID determining unit 1115 checks the only information uniquely identifiable to the user among the information received through the information receiving unit 1110 by the user input and The identification information may be determined as unique ID information that uniquely identifies the user. For example, the unique ID determining unit 1115 may determine the resident registration number included in the user information as the unique ID information of the user.

According to the third unique ID determining method of the present invention, the unique ID determining unit 1115 partially combines two or more pieces of information received through the information receiving unit 1110 by the user input to uniquely identify the user. A combination of identifiable information can be identified, and the combined information can be determined as unique ID information uniquely identifying the user. For example, the unique ID determining unit 1115 may determine the unique ID information by combining a part of the user's name and social security number included in the user information. Alternatively, the unique ID information may be determined by combining a part of the user's name and payment means information (for example, a part of the account number).

According to the fourth unique ID determining method of the present invention, the unique ID determining unit 1115 generates a unique key by using at least one piece of information input by the user as a key generation value and assigning it to a designated key generation rule. A value may be determined as the unique ID information.

The financial company identification unit 1120 reads the payment means information to identify the financial company that issued the payment means to the user. For example, the financial company identification unit 1120 may identify a financial company that issued the payment method by reading a bank code or a BIN included in the payment method information.

Referring to FIG. 11, the relay server 1100 determines that the issuer of the payment means corresponding to the received payment means information is identical to the user and that the number corresponds to the received identification value information using the user information. An authentication processing unit 1125 for processing the issuer of the medium 200 to be authenticated as the user, and an information mapping unit 1130 for storing the authenticated payment means by linking the payment means information and the unique ID information. It is provided.

When the financial company that has issued the payment means is identified to the user, the authentication processor 1125 provides the user information, payment means information, and identification value information to the financial company server 185 included in the identified financial company. The issuer of the number determination medium 200 corresponding to the user and the issuer of the payment means corresponding to the payment means information based on the user information by the financial company server 185 by referring to the ledger of the finance company Process to be authenticated as the user.

According to the exemplary embodiment of the present invention, the authentication processing unit 1125 may authenticate the real name of the user based on the user information, in which case the authentication processing unit 1125 may use the financial company when the user real name is authenticated. Preferably, the server 185 requests authentication by providing the user information, payment means information, and identification value information.

According to an embodiment of the present invention, the authentication processing unit 1125 is configured to receive the unique ID information of the user determined by the unique ID determining unit 1115 in the process of requesting the identity authentication of the payment means and the number determination medium 200, the financial company server. 185 can share forwards.

The authentication processor 1125 receives an authentication result of the identity of the issuer and the user of the payment means and the number determination medium 200 from the financial company server 185.

If the issuer of the payment means and the number determination medium 200 and the user are the same, the information mapping unit 1130 connects and stores the identifiable payment means information of the authenticated payment means and the unique ID information of the user. The user information is mapped and stored with the unique ID information.

Here, the payment means information stored by the information mapping unit 1130 of the relay server 1100 may include the incomplete payment means information that can identify the financial company that issued the payment means, but only a part of the user's payment means can be identified. Preferably, according to the intention of the person skilled in the art, the payment means information includes only the information identifying the financial company, or if the security issue for storing the payment means by the relay server 1100 of the payment means of the It is possible to include information that can be identified in its entirety.

On the other hand, when the relay server 1100 can authenticate the disposable number dynamically determined by the number determining medium 200 in the payment process of the present invention, the information mapping unit 1130 is the authenticated number determining medium 200. It is possible to connect and store the identification value information uniquely identifying the unique ID information, and thereby the present invention is not limited thereto.

According to the method of the present invention, the information mapping unit 1130 sends the unique ID information of the user determined by the unique ID determining unit 1115 to the financial company server 185 in the process of mapping the payment means and the unique ID. You can forward sharing.

Referring to FIG. 11, the financial institution server 185 may include an information receiver 1110 for receiving payment means information, user information, and identification value information input by the user, and unique ID information for uniquely identifying the user. The issuer of the payment means corresponding to the received payment means information using the unique ID determiner 1115 and the user information to determine the number determination medium 200 is the same as the user and corresponding to the received identification value information. An authentication processing unit 1125 for processing the issuer of the same as the user to be authenticated, and transmitting an authentication result of the identity of the payment means and the number determination medium 200 to the relay server 1100 ( 1135 is further provided.

The information receiver 1110 receives payment means information, user information, and identification value information input by the user from the relay server 1100, and the unique ID determiner 1115 corresponds to the received user information. The unique ID information uniquely identifying the user is determined in association with the relay server 1100.

According to the fifth unique ID determining method of the present invention, the unique ID determining unit 1115 may receive unique ID information determined by the first to fourth unique ID determining methods from the relay server 1100. The unique ID information determined by the relay server 1100 according to the first to fourth unique ID determination methods may be shared from the relay server 1100 or may be input and shared through the user terminal 190.

Meanwhile, the unique ID determining unit 1115 may determine the unique ID information by the first to fourth unique ID determining methods, in which case the unique ID information is shared and forwarded to the relay server 1100. Can be.

When the payment means information, the user information and the identification value information of the user is received through the information receiving unit 1110, the authentication processing unit 1125 maintains a ledger for maintaining the ledger registration value corresponding to the user information and payment means information. By referring to the issuer information of the payment means corresponding to the payment means information, and verifying whether the issuer information and the user information of the confirmed payment means is the same. In addition, the authentication processing unit 1125 checks the issuer information of the number determination medium 200 corresponding to the identification value information by referring to the ledger maintaining the ledger registration value corresponding to the user information and the identification value information, and confirming The issuer information of the number determination medium 200 is compared with the user information, and authentication is performed.

According to the exemplary embodiment of the present invention, the authentication processing unit 1125 may authenticate the real name of the user based on the user information, in which case the authentication processing unit 1125 may settle the payment when the user real name is authenticated. It is possible to authenticate whether the issuer of the means and the issuer of the number determination medium 200 are the same as the user information.

If the issuer of the payment means and the issuer of the number determination medium 200 are the same as the user information, the authentication result transmission unit 1135 sends the issuer of the payment means and the number determination medium 200 to the relay server 1100. And transmits the authentication result for the identity of the user.

Referring to FIG. 11, when the issuer of the payment means and the number determining medium 200 and the user are authenticated, the financial company server 185 may identify the authenticated payment means and the unique payment means information. An information mapping unit 1130 for connecting and storing ID information, and the information mapping unit 1130 connects identification value information uniquely identifying the authenticated number determination medium 200 with the unique ID information. The user information is mapped and stored with the unique ID information.

Here, the payment means information stored in the information mapping unit 1130 of the financial company server 185 may not only identify the entire payment means of the user, but also may include information capable of non-face-to-face payment using the payment means of the user. It is desirable to.

12 is a diagram illustrating a payment method mapping process according to another embodiment of the present invention.

More specifically, FIG. 12 illustrates a disposable number to be dynamically determined through the user's payment means and the user's number determination medium 200 based on the payment means mapping system for mapping the user's payment means and the disposable number shown in FIG. As one of various embodiments of the present invention, the present invention is illustrated. Various implementation methods (e.g., some configurations may be omitted or changed in order) may be inferred from the configuration shown in FIG. 11, but the present invention includes all the implementation methods inferred. It is made clear that the technical features are not limited only to the implementation method shown in FIG. to be.

Referring to FIG. 12, the user terminal 190 accesses the relay server 1100 to identify the number determination medium 200 for dynamically determining payment means information and user information and a disposable number to be mapped with the user's payment means. When the identification value information is input and transmitted (1200), the relay server 1100 receives the payment means information, the user information and the identification value information input by the user from the user terminal 190 (1205), the user The unique ID information that uniquely identifies is determined 1210.

The relay server 1100 identifies a financial company corresponding to the received payment means information (1215), and then transmits the user information, payment means information, and identification value information to the financial company server 185 to transmit the user information. On the basis of the request to authenticate the identity of the issuer and the user of the payment means and the number determination medium 200 (1220), the financial company server 185 from the relay server 1100 and the user information and payment means information and identification Receive value information (1225). The relay server 1100 may further transmit the unique ID information of the user. In this case, the financial institution server 185 receives the unique ID information from the relay server 1100.

The financial company server 185 uses the user information to determine that the issuer of the payment means corresponding to the received payment means information is the same as the user and the issuer of the number determination medium 200 corresponding to the received identification value information. It is authenticated whether the same as the user (1230).

If the identity of the issuer of the payment means and the number determination medium 200 and the user is authenticated, the financial institution server 185 provides the payment means information and the identification value information and the user information identifying the whole of the authenticated payment means. It is stored in connection with the unique ID information of the user (1235).

The financial company server 185 transmits the authentication result of the identity of the user and the issuer of the authenticated payment means and number determination medium 200 to the relay server 1100 (1240), and the relay server 1100 Based on the authentication result, the user's unique ID information and payment means information and user information for identifying the authenticated payment means are linked and stored (1245).

FIG. 13 is a diagram illustrating a payment method mapping system configuration according to another exemplary embodiment of the present invention. FIG.

In more detail, in FIG. 13, in contrast to the payment method mapping system configuration shown in FIG. 11, the user terminal 190 accesses the relay server 1100, and requests information mapping between the user's payment means and the disposable number. Shows a system configuration processed to be delivered directly from the user terminal 190 to the financial institution server 185. Hereinafter, a detailed description of the same configuration as that shown in FIG. 11 in FIG. 13 will be omitted for convenience.

Referring to FIG. 13, the relay server 1100 connects a communication channel with the user terminal 190 according to a connection request of the user terminal 190, and connects to the user terminal 190 through the communication channel. Provides an interface for inputting at least one information required for the user registration and authentication, the payment means and the one-time number mapping of the user, the process so that the security registration page is provided from the financial institution server 185 to the user terminal 190 The terminal interface unit 1105 is provided.

Referring to FIG. 13, the relay server 1100 identifies the number determination medium 200 for dynamically determining the payment means information and the user information input by the user and the disposable number to be mapped with the payment means of the user. An information receiving unit 1110 for receiving value information and a unique ID determining unit 1115 for determining unique ID information for uniquely identifying the user, and a financial company that can directly refer to the ledger by reading the payment means information. The financial company identification unit 1120 identifying the server 185 is provided.

The information receiving unit 1110 may receive at least one of payment means information, user information, and identification value information input by the user from the user terminal 190 through the terminal interface unit 1105. The payment means information and the identification value information can be omitted according to the intention of the person skilled in the art.

The unique ID determining unit 1115 determines unique ID information of a user uniquely identifying the user by using at least one of the first to fourth unique ID determining methods illustrated in FIG. 11.

The financial company identification unit 1120 reads the payment means information to identify the financial company that issued the payment means to the user.

Referring to FIG. 13, the relay server 1100 determines that the issuer of the payment means corresponding to the received payment means information is identical to the user and that the number corresponds to the received identification value information using the user information. An authentication processing unit 1125 for processing the issuer of the medium 200 to be authenticated as the user, and an information mapping unit 1130 for storing the authenticated payment means by linking the payment means information and the unique ID information. It is provided.

When the financial company that issued the payment means is identified to the user, the authentication processor 1125 may determine the issuer of the payment means and the number determination medium 200 and the user in the user terminal 190 based on the user information. By inputting the information necessary to authenticate the identity and processing it to be sent directly to the financial institution server 185, the financial institution server 185 refers to the financial institution's ledger of the payment means corresponding to the payment means information based on the user information The issuer is processed so that the issuer of the number determination medium 200 corresponding to the user and identical to the user is authenticated as the user.

According to an exemplary embodiment of the present invention, information necessary for authenticating the identity of the issuer and the user of the payment means and the number determination medium 200 on the relay server 1100 is directly transmitted to the financial company server 185. If the financial institution's security registration page is maintained, the authentication processing unit 1125 displays the security registration page of the financial company in addition to the page currently accessed by the terminal interface unit 1105 to the user terminal 190. It may be processed to be provided to the terminal 190.

According to another embodiment of the present invention, when the financial institution server 185 directly outputs the security registration page to the user terminal 190, the communication channel between the user terminal 190 and the relay server 1100 may be read. The financial institution server 185 may be relayed to process the financial institution server 185 to provide the security registration page of the financial company to the user terminal 190.

According to an embodiment of the present invention, the authentication processing unit 1125 may share and transmit the unique ID information of the user determined by the unique ID determining unit 1115 to the financial institution server 185 during the relaying of the security registration page. Alternatively, the information received from the user terminal 190 may be shared and transferred to the financial institution server 185.

The authentication processor 1125 receives an authentication result of the identity of the issuer and the user of the payment means and the number determination medium 200 from the financial company server 185.

If the issuer of the payment means and the number determination medium 200 and the user are the same, the information mapping unit 1130 stores the payment means information that can identify the authenticated payment means and the unique ID information of the user. The user information is mapped and stored with the unique ID information. Here, some of the payment means information, unique ID information and user information may be shared from the financial institution server 185.

Referring to FIG. 13, the financial institution server 185 includes a page provider 1140 that provides a security registration page to the user terminal 190 in addition to the page currently accessed by the user terminal 190.

When providing the security registration page directly from the financial institution server 185 to the user terminal 190 according to an embodiment of the present invention, the page providing unit 1140 according to the communication channel relay of the relay server 1100 Provides a security registration page for inputting the information necessary for authenticating the identity of the issuer and the user of the payment means and the number determination medium 200 to the financial institution server 185 to the user terminal 190.

Meanwhile, when some of the payment means information, the user information, and the identification value information are shared and transmitted from the relay server 1100, the security registration page inputs the remaining information except for the information shared and transmitted from the relay server 1100. It includes a page configuration to be sent to the financial institution server (185).

According to an embodiment of the present invention, the page providing unit 1140 may securely receive information necessary for authenticating the identity of the issuer and the user of the payment means and the number determination medium 200 through the secure registration page. A secure channel may be connected between the user terminal 190 and the financial institution server 185.

Referring to FIG. 13, the financial institution server 185 includes an information receiver 1110 for receiving payment means information, user information, and identification value information input by the user, and unique ID information for uniquely identifying the user. The issuer of the payment means corresponding to the received payment means information using the unique ID determiner 1115 and the user information to determine the number determination medium 200 is the same as the user and corresponding to the received identification value information. Is provided with an authentication processing unit 1125 for processing so that the issuer of the same as the user is authenticated.

The information receiver 1110 receives payment means information, user information, and identification value information input by the user from the user terminal 190 through the security registration page, and among the payment means information, user information, and identification value information. Some information may be received from the relay server 1100.

The unique ID determining unit 1115 determines unique ID information for uniquely identifying the user by the first to fifth unique ID determining methods illustrated in FIG. 11.

When the payment means information, the user information and the identification value information of the user is received through the information receiving unit 1110, the authentication processing unit 1125 maintains a ledger for maintaining the ledger registration value corresponding to the user information and payment means information. By referring to the issuer information of the payment means corresponding to the payment means information, and verifying whether the issuer information and the user information of the confirmed payment means is the same. In addition, the authentication processing unit 1125 checks the issuer information of the number determination medium 200 corresponding to the identification value information by referring to the ledger maintaining the ledger registration value corresponding to the user information and the identification value information, and confirming The issuer information of the number determination medium 200 is compared with the user information, and authentication is performed.

Referring to FIG. 13, when the issuer of the payment means and the number determining medium 200 and the user are authenticated, the financial institution server 185 may identify the authenticated payment means and the unique payment means information. And an information mapping unit 1130 for storing and connecting ID information, wherein the information mapping unit 1130 is connected with identification value information uniquely identifying the authenticated number determination medium 200 and the unique ID information. The user information is mapped and stored with the unique ID information.

If the payment method cannot be identified by the relay server 1100, the financial institution server 185 may share the payment method information for identifying the payment method with the relay server 1100. ) May be further provided. If the unique ID information is determined by the financial institution server 185 according to the first to fourth determination methods, the mapping information sharing unit 1145 may further share the unique ID information to the relay server 1100. have.

14 is a diagram illustrating a payment method mapping process according to another embodiment of the present invention.

More specifically, FIG. 14 illustrates a disposable number to be dynamically determined through the user's payment means and the user's number determination medium 200 based on the payment means mapping system for mapping the user's payment means and the disposable number shown in FIG. FIG. 1 is a diagram illustrating one embodiment of various implementation methods for mapping the present invention to those skilled in the art to which the present invention pertains. In addition to the embodiment shown in FIG. Although various implementation methods (for example, some components may be omitted or changed in order) may be inferred from the configuration shown in FIG. 13, the present invention includes all the implementation methods inferred. It is made clear that the technical features are not limited only to the implementation method shown in FIG. to be.

Referring to FIG. 14, the user terminal 190 accesses the relay server 1100 to identify the number determination medium 200 for dynamically determining payment means information and user information and a disposable number to be mapped with the user's payment means. When at least one piece of identification value information is input and transmitted (1400), the relay server 1100 may transmit at least one of payment means information, user information, and identification value information input by the user from the user terminal 190. Information is received (1405), and unique ID information that uniquely identifies the user is determined (1410).

After the relay server 1100 identifies a financial company corresponding to the received payment means information (1415), the relay server 1100 provides a security registration page of the identified financial company to the user terminal 190, or the identified financial company server In operation 185, the security registration page may be relayed to the user terminal 190 (1420). The financial institution server 185 may transmit the security registration page according to the page relay of the relay server 1100. 190) (1425). Meanwhile, unique ID information determined by the relay server 1100 and information provided by the user terminal 190 to the relay server 1100 in the process of providing the security registration page are shared with the financial institution server 185.

The user terminal 190 inputs payment means information, user information and identification value information through the security registration page of the financial institution (1430) and transmits the data to the financial institution server 185 (1435), or with the payment means information. Among the user information and the identification value information, the remaining information other than the information provided from the user terminal 190 to the relay server 1100 is input (1430) and transmitted to the financial institution server 185 (1435).

The financial institution server 185 receives payment means information, user information, and identification value information input through the security registration page or shared from the relay server 1100 (1440), and receives the received information using the user information. The issuer of the payment means corresponding to the received payment means information is the same as the user and authenticates whether the issuer of the number determination medium 200 corresponding to the received identification value information is the same as the user (1445).

If the identity of the issuer of the payment means and the number determination medium 200 and the user is authenticated, the financial institution server 185 provides the payment means information and the identification value information and the user information identifying the whole of the authenticated payment means. It is stored in connection with the unique ID information of the user (1450).

The financial company server 185 transmits the authentication result of the identity of the issuer and the user of the authenticated payment means and number determination medium 200 to the relay server 1100 (1455), and the relay server 1100 On the basis of the authentication result, the unique ID information of the user and the payment means information for identifying the authenticated payment means and the user information are connected and stored (1460).

100: mapping management server 105: user authentication unit
110: identification value receiving unit 115: medium authentication unit
120: media connectivity authentication unit 125: media separation authentication unit
130: media use switching unit 135: program providing unit
140: token allocator 145: seed component
150: seed storage unit 155: seed agreement unit
160: card information receiving unit 165: card authentication unit
170: card mapping unit 185: financial company server
190: user terminal 200: number determination medium
205: connection module 220: command receiving unit
225: number system identification unit 230: seed determination unit
235 number generation unit 240 interface unit
300: communication device medium 302: output module
306: communication module 308: media connection
310: media connection determination unit 315: media configuration determination unit
320: medium access authentication unit 325: identification value confirmation unit
330: identification value transmission unit 335: interface output unit
340: information input unit 345: information registration unit
350: program receiving unit 355: program loading unit
360: dynamic consensus 365: one-time number request
370: one-time number receiving unit 375: number system authentication unit
380: disposable number output unit 385: disposable payment processing unit
1100: relay server 1105: terminal interface unit
1110: information receiver 1115: unique ID determiner
1120: financial company identification unit 1125: authentication processing unit
1130: information mapping unit 1135: authentication result transmission unit
1140: page provider 1145: mapping information sharing unit

Claims (73)

An identification value receiving unit for receiving identification value information for identifying a number determination medium for dynamically generating a disposable number of a number system that can be mapped to a user payment means from a user terminal;
A payment means receiver configured to receive payment means information including N (N≥1) digit payment means numbers and at least one payment means configuration value assigned to the user payment means from the user terminal;
A payment means authentication unit for authenticating whether the user payment means is a payment means issued to the user; And
And a payment means mapping unit for mapping the user's payment means information and the disposable number dynamically generated through the number determination medium when the user payment means is authenticated.
The method of claim 1, wherein the disposable number is,
N-digit one-time payment means number that can be mapped to the N-digit payment means number, N-times one-time alternative number to replace some of the number (1≤n≤N) of N number of payment means number mappable and Payment means mapping system comprising at least one m (m≥1) disposable payment number that can be mapped to the payment means number.
The method of claim 1, wherein the identification value receiving unit,
And when the numbering medium is accessible to the communication device medium of the user having the medium connection unit, receiving identification value information uniquely identifying the communication device medium to which the numbering medium is accessible from the user terminal. Sudan mapping system.
The method of claim 1 or 3, wherein the payment means mapping unit,
And the payment means information of the user and the identification value information are connected and stored.
The method of claim 1,
And a media authentication unit for authenticating whether the number determination medium corresponding to the identification value information is a number determination medium for generating a disposable number of a number system that can be mapped with the user payment means.
The method according to claim 1 or 3,
And a medium authentication unit for authenticating whether the number determination medium corresponding to the identification value information is accessible to the communication device medium of the user having the medium connection unit.
The method of claim 3, wherein
And the communication device medium further comprises a media authentication unit for authenticating whether the numbering medium is accessible when the numbering medium is connectable to the communication device medium.
The method of claim 1,
If the numbering medium is accessible to the communication device medium of the user having a medium connection, payment means mapping further comprises a medium connectivity authentication unit for authenticating whether the numbering medium is connected to the communication device medium; system.
The method of claim 1,
A media separable authentication unit for authenticating whether the numbering medium is detachable from the communication device medium when the numbering medium is accessible or connected to a communication device medium of a user having a medium connection unit; And
And a medium use switching unit for converting the communication device medium of the user into a user terminal requesting payment using a user payment means mapped to the disposable number when the number determination medium is detachable from the communication device medium. Payment means mapping system, characterized in that made.
The method of claim 1,
A program providing unit for processing an applet program package recordable on a chip of the numbering medium to be provided to the communication device medium through the communication channel when the numbering medium is connected to a communication device medium of a user having a medium connection unit. More equipped,
The applet program package is
And a program code including a key generation function for generating a one-time number by identifying a number system including one or more digits and a number structure of the one-time number.
The method of claim 10, wherein the applet program package,
At least one seed value (or seed generation rule) to be assigned to the key generation function, and one or more medium identification tokens for uniquely identifying a program code for generating the one-time number. system.
The method of claim 10,
A number authentication server for determining the at least one seed value (or seed determination rule for dynamically generating seed values) necessary for the numbering medium to generate the disposable number, or storing the seed value (or seed determination rule) Seed configuration unit for identifying a server identification value for identifying the; And
And a seed storage unit for connecting and storing the payment means information of the user and the seed value (or seed determination rule), or connecting and storing the payment means information of the user and the server identification value. Payment method mapping system.
13. The method of claim 12,
When the numbering medium is connected to the user's communication device medium, the seed agreement (or seed determination rule) is transmitted to the communication device medium, and further comprising a seed agreement unit for recording on the chip of the numbering medium. Payment method mapping system.
The method of claim 10,
Determining a media identification token for uniquely identifying a program code for generating a disposable number recorded on a chip of the numbering medium, and processing the media identification token to be recorded on a chip of the numbering medium via the communication device medium; Payment method mapping system characterized in that it further comprises a token allocator.
The method of claim 1, wherein the numbering medium,
A SD (Secure Digital) memory card having a chip on which a program code for dynamically generating the disposable number is recorded, the SD memory card having an IC chip, a micro SD memory card, and a USIM, which can be connected to a media connection of the communication device medium. (Universal Subscriber Identity) module, at least one removable IC card module, or
An SD memory card having a chip for dynamically generating the disposable number, an SD memory card having an IC chip, a micro SD memory card, a USIM, and a smartphone to which a removable IC card module is connected, or
Or a smart phone equipped with a NFC (Near Field Communication) module having a chip for dynamically generating the disposable number, or
It includes a smart phone equipped with a number generation program for dynamically generating the one-time number, or
A payment means mapping system comprising a number generator or a number generator card distributed by a financial institution.
In the payment method mapping method of the server connectable to the user terminal,
An identification value receiving step of receiving identification value information for identifying a number determination medium for dynamically generating a one-time number of a number system that can be mapped to a user payment means from the user terminal;
A payment means receiving step of receiving payment means information of a user including N (N≥1) digit payment means numbers assigned to the user payment means and at least one payment means configuration value from the user terminal;
A payment means authentication step of authenticating whether the user payment means is a payment means issued to the user; And
And a payment means mapping step of mapping the user's payment means information and the disposable number dynamically generated through the number determination medium when the user payment means is authenticated.
The method of claim 16, wherein the disposable number is,
N-digit one-time payment means number that can be mapped to the N-digit payment means number, N-times one-time alternative number to replace some of the number (1≤n≤N) of N number of payment means number mappable and Payment method mapping method characterized in that it comprises at least one disposable payment number of m (m≥1) digits that can be mapped to the payment means number.
The method of claim 16, wherein the receiving of the identification value comprises:
And when the numbering medium is accessible to the communication device medium of the user having the medium connection unit, receiving identification value information uniquely identifying the communication device medium to which the numbering medium is accessible from the user terminal. Means mapping method.
The method of claim 16 or 18, wherein the payment method mapping step,
And the payment means information of the user and the identification value information are connected and stored.
17. The method of claim 16,
And verifying whether the number determination medium corresponding to the identification value information is a number determination medium for generating a disposable number of a number system that can be mapped with the user payment means.
The method of claim 16 or 18,
And authenticating whether the number determination medium corresponding to the identification value information is accessible to the communication device medium of the user having the medium connection unit.
19. The method of claim 18,
And if the numbering medium is accessible to the communication device medium, authenticating whether the communication device medium is also accessible to the numbering medium.
17. The method of claim 16,
And if the numbering medium is connectable to a communication device medium of a user having a medium connection unit, authenticating whether the numbering medium is connected to the communication device medium.
17. The method of claim 16,
Authenticating whether the numbering medium is detachable from the communication device medium when the numbering medium is accessible or connected to a communication device medium of a user having a media connection; And
If the number determination medium is separable from the communication device medium, converting the communication device medium of the user into a user terminal requesting payment using a user payment means mapped to the disposable number; The payment method mapping method characterized in that.
17. The method of claim 16,
If the numbering medium is connected to a communication device medium of a user having a media connection, processing the applet program package recordable on a chip of the numbering medium to be provided to the communication device medium via the communication channel. Equipped,
The applet program package is
And a program code including a key generation function for generating the one-time number by identifying a number system including one or more digits and a number structure of the one-time number.
The method of claim 25, wherein the applet program package,
At least one seed value (or seed generation rule) to be assigned to the key generation function, and one or more medium identification tokens for uniquely identifying a program code for generating the one-time number. Way.
26. The method of claim 25,
A number authentication server for determining the at least one seed value (or seed determination rule for dynamically generating seed values) necessary for the numbering medium to generate the disposable number, or storing the seed value (or seed determination rule) Identifying a server identification value identifying the server; And
And concatenating and storing the payment means information of the user and the seed value (or seed determination rule) or concatenating and storing the payment means information of the user and the server identification value. Method of payment mapping.
28. The method of claim 27,
If the numbering medium is connected to a communication device medium of the user, transmitting the seed value (or seed determination rule) to the communication device medium and recording on the chip of the numbering medium. Payment method mapping method.
26. The method of claim 25,
Determining a media identification token for uniquely identifying a program code for generating a disposable number recorded on a chip of the numbering medium, and processing the media identification token to be recorded on a chip of the numbering medium via the communication device medium; Payment method mapping method characterized in that it further comprises a step.
In a communication device medium having a medium connection,
N (1≤n≤N) out of N digit disposable payment means numbers mapped to N (N≥1) digit payment means numbers and N digit payment means numbers mapped to the payment means number via the medium connection part A medium access determination unit for determining whether a number determination medium capable of generating at least one disposable number from among a disposable replacement number replacing a partial number and a m (m≥1) single-digit payment number mapped to the payment means number is connected;
An identification value checking unit for identifying one or more identification value information that uniquely identifies the numbering medium or uniquely identifies the communication device medium when the numbering medium is connected;
An identification value transmitter for transmitting the identified identification value information to a server side;
An interface output unit for outputting an interface for inputting payment means information of a user including an N-digit payment means number to be mapped with the disposable number and at least one payment means configuration value;
An information input unit configured to receive payment means information of the user through the interface; And
And an information register for transmitting the input means of payment information to the server.
31. The method of claim 30,
And a media configuration discriminating unit for determining whether the program code for generating the disposable number is provided on the chip of the numbering medium when the connection of the numbering medium is confirmed.
31. The method of claim 30,
And a medium connection authentication unit for transmitting the connection status authentication information of the number determination medium to the server side.
31. The method of claim 30,
A program receiver configured to receive an applet program package executable on a chip of the numbering medium and generating the disposable number from a server side when the numbering medium is connected; And
And a program mounting unit for recording the program code for generating the disposable number based on the applet program package on a chip of the number determination medium.
34. The method of claim 33,
And a dynamic consensus unit for agreeing the seed value (or seed determination rule) with a server side and recording it on a chip of the number determination medium.
34. The method of claim 33,
And a dynamic consensus unit for recording, on a server side, a medium identification token assigned to the numbering medium on a chip of the numbering medium.
31. The method of claim 30,
When the program code for generating a disposable number is mounted on the number determination medium connected to the medium connection unit, the number N number of disposable payment means numbers mapped to N (N≥1) digit payment means number, Among the N number of payment method numbers mapped to the payment method number, the one-time replacement number to replace the n (1 ≤ n ≤ N) some numbers and m (m ≥ 1) one-time payment number mapped to the payment method number A disposable number request unit requesting a disposable number to be used for payment using at least one disposable number;
A disposable number receiving unit for receiving the disposable number dynamically generated from the number determination medium; And
And a disposable number output unit for outputting the received disposable number.
34. The method of claim 33,
And a number system authentication unit for authenticating whether the received one-time number corresponds to the number system of the one-time number mapped to the payment means number.
34. The method of claim 33,
At least one identification uniquely identifying the disposable number and the numbering medium received from the numbering medium or uniquely identifying the communication device medium when the numbering medium connected to the medium connection is detachable from the communication device medium; And a one-time payment processing unit for transmitting the value information to the server side.
Claims [1] A method of mapping a payment means of a communication device medium having a medium connection,
N (1≤n≤N) out of N digit disposable payment means numbers mapped to N (N≥1) digit payment means numbers and N digit payment means numbers mapped to the payment means number via the medium connection part Determining whether a number determination medium capable of generating at least one disposable number from among a disposable substitute number replacing a partial number and a m (m≥1) single-use payment number mapped to the payment means number is connected;
When the connection of the numbering medium is confirmed, identifying one or more identification value information that uniquely identifies the numbering medium or uniquely identifies the communication device medium;
Transmitting the identified identification value information to a server side;
Outputting an interface for inputting payment means information of a user including an N-digit payment means number to be mapped with the disposable number and at least one payment means configuration value;
Receiving payment means information of the user through the interface; And
And transmitting the input payment means information of the user to the server side.
40. The method of claim 39,
And determining whether a program code for generating the disposable number is provided on the chip of the numbering medium when the connection of the numbering medium is confirmed.
40. The method of claim 39,
And transmitting the connection status authentication information of the number determination medium to a server side.
40. The method of claim 39,
When the numbering medium is connected, receiving from the server side an applet program package executable on a chip of the numbering medium and generating the disposable number; And
And recording the program code for generating the disposable number on the chip of the number determination medium based on the applet program package.
The method of claim 42, wherein
And agreeing the seed value (or seed determination rule) with a server side and recording the seed value on a chip of the number determination medium.
The method of claim 42, wherein
And recording the medium identification token assigned to the numbering medium on a chip of the numbering medium on a server side.
A number determination medium having a connection module connected to a medium connection portion provided in a communication device medium of a user provided with an output module (or a communication module),
N (1 ≦ 1) of the N-digit one-time payment means number mapped to the N (N≥1) digit payment means number and the N-digit payment means number mapped to the payment means number through the connection module. a command for requesting a disposable number to be used for payment using at least one disposable number of one-time alternative numbers replacing n≤N) partial numbers and m (m≥1) digit disposable payment numbers mapped to the payment means number; A command receiving unit for receiving
A number system identification unit for identifying a number system including one or more digits and a number structure of a disposable number agreed upon with the server processing the payment;
A seed determination unit that determines one or more seed values required to generate a disposable number corresponding to the number system;
A number generator for dynamically generating a one-time number corresponding to the number system by inserting the determined seed value into a key generation function agreed upon with the server;
And a chip on which an interface unit for processing the generated disposable number is transmitted to the communication device medium of the user through the connection module.
46. The method of claim 45,
And a memory unit for storing program codes corresponding to the seed determination unit, the number generation unit, and the interface unit.
The chip,
And a program code provided by the server side from the communication device medium of the user through the connection module and stored in the memory unit.
46. The method of claim 45,
And a memory unit for maintaining a seed value or a seed determination rule required to dynamically generate the disposable number.
The chip,
Receives the seed value received from the server side from the communication device medium of the user through the connection module and stores the seed value in the memory unit;
The seed determination unit,
And determining the seed value stored in the storage module.
46. The method of claim 45,
Further comprising a timer for counting the current time value using the power applied from the communication device medium of the user through the connection module,
The seed determination unit,
And determine the seed value based on the time value counted by the timer module.
46. The method of claim 45, wherein the seed determination unit,
And the seed value is dynamically determined based on a current time value or a random number value provided from the communication device medium of the user through the access module.
46. The method of claim 45,
A memory unit for storing a media identification code for uniquely identifying the numbering medium,
The interface unit includes:
And the medium identification code is transmitted to the communication device medium of the user through the access module.
46. The method of claim 45,
And a memory unit configured to store a media identification token assigned to the number determination medium (or program code for generating the disposable number),
The chip,
Receive the media identification token provided by the server side from the communication device medium of the user through the access module and stores in the memory unit,
The interface unit includes:
And the media identification token is transmitted to the communication device media through the access module.
In the payment method mapping system of the server that directly or indirectly refer to the ledger of the financial company that issued the payment method to the user and processed the number determination medium for the non-face-to-face transaction authentication of the payment method to the user,
An information receiver configured to receive payment means information input by the user and user information and identification value information identifying a number determination medium for dynamically determining a disposable number to be mapped with the user's payment means;
Unique ID determination unit for determining the unique ID information that uniquely identifies the user;
Authentication that the issuer of the payment means corresponding to the received payment means information is the same as the user and that the issuer of the numbering medium corresponding to the received identification value information is authenticated with the user using the user information Processing unit; And
And an information mapping unit for storing the authenticated payment means by identifying payment means information and the unique ID information.
The method of claim 52, wherein the information mapping unit,
And storing the identification value information uniquely identifying the authenticated number determination medium and the unique ID information.
53. The method of claim 52, wherein the disposable number is
At least one disposable replacement number replacing n (1≤n≤N) partial numbers among N (N≥1) digit payment method numbers and m (m≥1) digit disposable payment number that can be mapped to the payment method number. Payment means mapping system characterized in that it comprises one.
The method of claim 52, wherein the unique ID determining unit,
Determine the ID information input by the user as the unique ID information, or
Determine the unique information among the information input by the user as the unique ID information, or
Partially combining two or more pieces of information input by the user to determine the unique ID information, or
And determining the key value generated using the information input by the user as a key generation value as the unique ID information.
The method of claim 52, wherein
If the server does not directly refer to the ledger further comprises a financial company identification unit for reading the received payment means information to identify the financial company server that can directly refer to the ledger,
The authentication processing unit,
Payment means mapping system, characterized in that for transmitting the user information, payment means information and identification value information to the financial company server.
The method of claim 56, wherein the authentication processing unit,
Payment means mapping system, characterized in that for sharing the unique ID information to the financial institution server.
The method of claim 56, wherein the stored payment means information,
Payment means mapping system characterized in that it is possible to identify the financial company that issued the payment means, but only a part of the user's payment means can be identified.
The method of claim 52, wherein
If the server can directly refer to the ledger, further comprising a page providing unit for providing a security registration page to the user terminal in addition to the page currently accessed by the user terminal,
Wherein the information receiver comprises:
Receiving information input through the security registration page among the payment means information, the user information, and the identification value information,
The information mapping unit,
Payment means mapping system, characterized in that for storing the payment means information that can identify the whole of the authenticated payment means and identification value information uniquely identifying the authenticated number determination medium and the unique ID information.
The method of claim 59, wherein the information receiving unit,
And at least one piece of information not input through the security registration page from a relay server providing a page currently accessed to the user terminal.
60. The method of claim 59, wherein the unique ID determining unit,
If the page connected to the user terminal provided by a separate relay server, payment means mapping system, characterized in that for receiving the unique ID information determined by the relay server.
The method of claim 59,
And a mapping information sharing unit for sharing at least one information input through the security registration page to the relay server.
In the payment method mapping method of the server that directly or indirectly refer to the ledger of the financial company that issued the payment method to the user and processed the number determination medium for the non-face-to-face transaction authentication of the payment method to the user,
An information receiving step of receiving payment means information input by the user and user information and identification value information identifying a number determination medium for dynamically determining a disposable number to be mapped with the payment means of the user;
A unique ID determining step of determining unique ID information uniquely identifying the user;
Authentication that the issuer of the payment means corresponding to the received payment means information is the same as the user and that the issuer of the numbering medium corresponding to the received identification value information is authenticated with the user using the user information Processing step; And
And an information mapping step of linking and storing the authenticated payment means identifying the payment means information and the unique ID information.
The method of claim 63, wherein the information mapping step,
And storing the identification value information uniquely identifying the authenticated number determination medium and the unique ID information.
The method of claim 63, wherein the disposable number is
At least one disposable replacement number replacing n (1≤n≤N) partial numbers among N (N≥1) digit payment method numbers and m (m≥1) digit disposable payment number that can be mapped to the payment method number. Payment method mapping method characterized in that it comprises one.
The method of claim 63, wherein the determining the unique ID,
Determine the ID information input by the user as the unique ID information, or
Determine the unique information among the information input by the user as the unique ID information, or
Partially combining two or more pieces of information input by the user to determine the unique ID information, or
And determining the key value generated using the information input by the user as a key generation value as the unique ID information.
The method of claim 63, wherein
If the server does not directly refer to the ledger, further comprising: reading the received payment means information to identify a financial company server that can directly refer to the ledger;
The authentication processing step,
Payment method mapping method characterized in that for transmitting the user information, payment means information and identification value information to the financial company server.
68. The method of claim 67, wherein the authenticating step comprises:
Payment method mapping method characterized in that for sharing the unique ID information to the financial institution server.
The method of claim 67, wherein the stored payment means information,
Payment means mapping method characterized in that it is possible to identify the financial company that issued the payment means, but only a part of the user's payment means can be identified.
The method of claim 63, wherein
If the server can directly refer to the ledger, further comprising providing a security registration page to the user terminal in addition to the page that the user terminal currently accesses,
The information receiving step includes:
Receiving information input through the security registration page among the payment means information, the user information, and the identification value information,
The information mapping step,
Payment means information identifying the entirety of the authorized payment means and identification value information uniquely identifying the authenticated number determination medium and the payment means mapping method, characterized in that the connection with the unique ID information.
The method of claim 70, wherein the information receiving step,
And at least one piece of information not input through the security registration page from a relay server providing a page currently accessed to the user terminal.
The method of claim 70, wherein the unique ID determination step,
When the user terminal provides a page accessed by a separate relay server, payment means mapping method characterized in that for receiving the unique ID information determined by the relay server.
The method of claim 70,
And sharing the at least one information input through the security registration page to the relay server.

Images