KR20120124175A - Method and apparatus for issuing smart card - Google Patents

Abstract

PURPOSE: A method for issuing a smart card and a device thereof are provided to issue a temporary card to a card applicant in real time until the card applicant receives a formal card. CONSTITUTION: When an application for issuing a smart card is executed, a smart card issue request unit(110) transmits a smart card issue request to a mobile communication company server. A first smart card managing unit(120) receives and stores a first smart card corresponding to a first authentication result about an issue applicant. A second smart card managing unit(130) receives and stores a second smart card corresponding to a second authentication result. [Reference numerals] (110) Smart card issue request unit; (120) First smart card managing unit; (130) Second smart card managing unit

Description

METHOD AND APPARATUS FOR ISSUING A SMART CARD {METHOD AND APPARATUS FOR ISSUING SMART CARD}

The present invention relates to a method and apparatus for issuing a smart card, and more particularly, to a method and apparatus for issuing a smart card using a mobile terminal.

Conventional magnetic cards are emerging as a big problem in storing user's personal information and payment information, such as small storage capacity and weak security. Therefore, the replacement of existing magnetic cards with smart cards is rapidly progressing. It is a global trend.

Smart cards are integrated circuits (ICs) that perform user authentication, payment, and payment by embedding microprocessors, chip operating systems (COSs), memory, and cryptographic algorithms that have their own arithmetic functions on the surface of plastic cards that are the same size as conventional credit cards. It can be defined as an electronic card with a chip attached.

Therefore, smart cards are not only forged and tampered with, but their storage capacity is hundreds of times that of existing magnetic cards. The range of application is spreading rapidly, and the utility of the smart card is increasing due to the high security.

The specific reason that smart cards can be used as a more secure means of authentication and payment is that smart cards cannot easily read their contents without legitimate authentication procedures, have the most complete security at the current technology level, and By using a much larger storage capacity than the card, it not only solves the weak security such as easy copying of the conventional magnetic card itself, and the possibility of forgery and forgery of transaction history, but also stored in the user's computer, etc. This is because security can be enhanced by storing the high user information and secret key together with the encryption algorithm inside the smart card.

Due to the superior storage capacity, security, and more convenient portability of these smart cards, their applications are now expanding to various applications.

Indeed, the high level of security, data storage, and ease of mobility that smart cards provide enable applications such as public telephones, wireless communications, finance, health, Pay TV, transportation, identity, secure access control, and network cards. Various types of smart cards are adopted and used according to their respective uses.

However, in the case of magnetic cards, only the cardholder's personal authentication is required, and since there is no need for a card authentication process, a real-time issuance system can be easily constructed through a network. In order to maintain a high level of security, there is a problem that the issuing time takes too long due to essential issuance processes such as user authentication, card authentication, encryption / decryption of information, and mutual authentication of encrypted information.

That is, the conventional smart card issuing method has the inconvenience that the card issuing applicant must wait for a long time to receive the issued card after requesting the card issuance, difficulty in checking whether the card issuing is issued until the credit card is issued directly to the applicant, There is a risk of illegal use by others or loss during delivery.

In addition, the card issuer must bear the opportunity cost loss due to the delayed delivery of the card, with the additional cost incurred to deliver the issued card directly to the issuing applicant, and if the user requests a smart card reissue, There was a very inefficient problem in that it must be repeated in the future according to the issuance process and the issuance delay.

In order to solve the above problems of the prior art, the present invention provides a temporary card that can be issued in real time according to the user's credit.

In addition, the present invention, through sufficient authentication, such as user authentication and card authentication, issues a formal card to replace the previously issued temporary card.

The objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood from the following description.

In order to achieve the above object, a smart card issuing method according to an aspect of the present invention comprises the steps of (a) receiving a request for issuing a smart card from the mobile communication terminal of the issuing applicant, (b) the issuance included in the issuing request Performing a first authentication based on the applicant's personal information, and transmitting a result of the first authentication to a server of a card company; (c) if a result of the first authentication is received from a server of the card company; Transmitting a first smart card corresponding to a first authentication to the mobile communication terminal; and (d) if a result of the second authentication for the issuing applicant is received from the server of the card company, the second smart card corresponding to the second authentication. And transmitting the smart card to the mobile communication terminal.

In one aspect of the present invention, step (b) performs the first user authentication in consideration of one or more of the fee amount of the issuing applicant and the payment history for the fee.

In addition, in one aspect of the present invention, step (c) receives the result of the first user authentication from the server of the card company in real time, and step (d) is the card use amount of the issuing applicant, the card Includes one or more of a history of payment for the amount used and a history of payment for the amount incurred in a bank transaction.

In order to achieve the above object, the smart card issuing device according to an aspect of the present invention, the smart card issuing request unit for transmitting the smart card issuance request to the mobile communication company server, when the application for smart card issuing, the mobile A first smart card manager for receiving and storing a first smart card corresponding to a first authentication result for the issuing applicant from a telecommunication company server in real time and a second corresponding to a second authentication result for the issuing applicant from the mobile carrier server And a second smart card manager configured to receive and store the smart card, wherein the second smart card manager deletes the previously stored first smart card when the second smart card is received.

In one aspect of the present invention, the first smart card has a predetermined usage amount limit and a usage method.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will be more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: FIG.

The present invention may, however, be embodied in many different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. It is provided to fully inform the owner of the scope of the invention.

According to one of the problem solving means of the method and apparatus for issuing the smart card of the present invention described above, the card applicant can be issued and used in real time until the official card is issued, until the received card is delivered It can alleviate the inconvenience of having to wait for a long time.

In addition, the credit card company can reduce the cost of the cost of issuing or reissuing the plastic card and the delivery cost of delivering the issued card to the applicant.

In addition, credit card companies can reduce the opportunity revenue loss due to delayed delivery of issued cards.

1 is a diagram showing the configuration of a smart card issuing system according to an embodiment of the present invention.
2 is a diagram showing the configuration of a smart card issuing apparatus according to an embodiment of the present invention.
3 is a diagram showing the configuration of a smart card issuing apparatus according to another embodiment of the present invention.
4 is a flowchart illustrating a smart card issuing process according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention.

The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein.

In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

For reference, in the entire specification, when a part is "connected" to another part, it is not only "directly connected" but also "electrically connected" with another element in between. Also includes.

Also, when an element is referred to as "comprising ", it means that it can include other elements as well, without departing from the other elements unless specifically stated otherwise.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings.

1 is a diagram showing the configuration of a smart card issuing system according to an embodiment of the present invention.

The smart card issuing system according to an embodiment of the present invention includes a mobile communication terminal 100 of an issuing applicant, a server 200 of a mobile communication company, and a server 300 of a card company.

Referring to each component, the issuing applicant's mobile communication terminal (hereinafter, referred to as a "mobile communication terminal") 100 is an application for smart card issuance (hereinafter referred to as "application") is installed, the application execution City, the mobile carrier server 200 requests the issuance of a smart card.

In this case, the mobile communication terminal 100 may transmit the personal information of the issuing applicant to the server of the mobile telecommunication company (hereinafter, referred to as a "mobile telecommunication company server") 200.

Thereafter, the mobile communication terminal 100 receives the first smart card from the mobile communication company server 200 and stores the first smart card in a predetermined storage.

The predetermined repository herein may include a repository that provides personal information security, such as a Universal Subscriber Identity Module (USIM).

Here, the first smart card is a temporary smart card, not a formal smart card, and may be issued after authentication is made based on the amount paid by the issuing applicant using the telecommunication service of the mobile carrier and the payment history for the amount. It may not be a physically existing smart card such as plastic, but software in the form of a file implemented as a program.

For reference, the communication service of the mobile carrier may include a voice call service, a text service, and a data service provided by the mobile carrier, and may also include a micro payment service affiliated with the mobile carrier.

The first smart card is to alleviate the inconvenience that the issuing applicant must wait for a long time to receive the formal smart card, and the use amount limit and the method of use may be determined in advance due to the characteristics of the temporary card.

For example, the usage amount limit of the first smart card (hereinafter, referred to as a "temporary smart card") is 500,000 won, and the use method may be partially limited, such as using a check card.

Thereafter, the mobile communication terminal 100 receives the second smart card from the mobile communication company server 200.

Here, the second smart card is a formal smart card, not a temporary card. The second smart card is a formal card issued after the credit card company's credit evaluation for the issuing applicant and the bank transaction history of the issuing applicant are reviewed.

For reference, the second smart card may not be a physically existing smart card such as plastic, but may be software in the form of a file implemented by a program.

Subsequently, when the mobile communication terminal 100 receives the second smart card (hereinafter, referred to as a formal smart card), the mobile communication terminal 100 deletes the pre-stored temporary smart card and uses the formal smart card as a universal subscriber. By storing in the same storage as the identification module, the smart card issuing applicant can use the smart card using the mobile communication terminal (100).

For reference, the mobile communication terminal 100 includes a communication terminal having mobility, such as a mobile phone, a smart phone, a personal digital assistant (PDA) phone, a tablet computer, and is connected to the mobile communication company server 200 through a network. It may include all types of handheld based wireless communication devices.

Meanwhile, the mobile telecommunication company server 200 receives a smart card issuance request from the mobile communication terminal 100 and performs a first authentication based on the personal information of the issuing applicant included in the issuance request.

Here, the first authentication may be performed based on the amount paid by the issuing applicant using the telecommunications service of the mobile carrier and the payment history for the corresponding amount, and the mobile carrier server 200 stores the first authentication result as the card company. The server (hereinafter referred to as "card company server") of the 300 is transmitted.

Subsequently, the mobile telecommunication company server 200 receives a real-time card examination result corresponding to the first authentication result from the card company server 300, and when it is confirmed that the reception result is 'card issue target', temporarily transfers to the mobile communication terminal 100. Send a smart card.

Subsequently, the mobile telecommunication company server 200 receives the card examination result corresponding to the second authentication result from the card company server 300, and when it is confirmed that the reception result is 'card issue target', it is formally smart to the mobile communication terminal 100. Send the card.

Here, the second authentication result is the result of the screening such as the card applicant's card use amount, card payment history of the card usage amount, and the history of the amount generated in the bank transaction and payment history of the amount to the card applicant. It may include, depending on the card company and the bank that the issuing applicant transactions, the time required for the mobile carrier server 200 to receive the second authentication result may vary.

Meanwhile, the card company server 300 receives the first authentication result from the mobile communication company server 200, performs a real time card examination for issuing a temporary smart card based on the first authentication result, and then moves the real time card examination result. The communication company transmits to the server 200.

In addition, the card company server 300 performs an authentication for the issuing applicant through a review of the issuing applicant's card use amount, the payment history for the card use amount, and the payment history for the money generated during the bank transaction. The second authentication result, which is an authentication result, is transmitted to the mobile communication company server 200.

2 is a diagram showing the configuration of a smart card issuing apparatus according to an embodiment of the present invention.

The smart card issuing device illustrated in FIG. 2 may be included in the server 200 of the mobile telecommunication company shown in FIG. 1, and the smart card issuing device illustrated in FIG. 2 will be described as the server 200 of the mobile telecommunication company. .

Smart card issuing apparatus 200 according to an embodiment of the present invention is a smart card issuing request receiving unit 210, the first authentication result processing unit 220, subscriber use history DB 230 and the second authentication result processing unit 240 It includes.

In describing each component, the smart card issuing request receiving unit 210 receives a smart card issuing request from the mobile communication terminal 100, extracts personal information of the issuing applicant included in the issuing request, and processes the first authentication result processing unit ( To 220).

On the other hand, the first authentication result processing unit 220 receives the personal information of the issuing applicant from the smart card issuing request receiving unit 210, the personal communication information of the issuing applicant and the mobile communication service of the issuing applicant stored in the subscriber use history DB (230) The first authentication is performed based on the amount used and the payment history of the amount.

Thereafter, the first authentication result processor 220 transmits the first authentication result to the card company server 300, receives a temporary smart card corresponding to the first authentication from the card company server 300, and then executes the mobile communication terminal 100. To send.

On the other hand, the subscriber use history DB 230 provides information such as subscriber's name, social security number, telephone number (mobile communication phone number, landline phone number, etc.), address, communication service usage history, usage amount and payment history for the usage amount. Include.

For reference, the communication service may include a voice call service, a text service, a data service, etc. provided by a mobile communication company, and may also include a micro payment service affiliated with a mobile communication company.

Meanwhile, the second authentication result processor 240 receives the second authentication result for the issuing applicant from the card company server 300 and transmits a formal smart card corresponding to the second authentication to the mobile communication terminal 100.

Here, the second certification may include a review of the card applicant's card use amount, the card payment history of the card use amount, the history of the amount generated during the bank transaction, and the payment history of the amount. The time required for the second authentication result processor 240 to receive the second authentication result from the card company server 300 may vary according to the card company and the bank that the issuing applicant deals with.

3 is a diagram showing the configuration of a smart card issuing apparatus according to another embodiment of the present invention.

The smart card issuing device illustrated in FIG. 3 may be included in the mobile communication terminal 100 of the issuing applicant shown in FIG. 1. Hereinafter, the smart card issuing device of the issuing applicant is shown in FIG. 3. To explain.

The smart card issuing apparatus 100 according to another embodiment of the present invention includes a smart card issuing request unit 110, a first smart card manager 120 and a second smart card manager 130.

For reference, an application for issuing a smart card is installed in the mobile communication terminal 100, and operations of the following components may be performed by executing the corresponding application.

When describing each component, the smart card issuing request unit 110 requests the issue of the smart card to the mobile carrier server 200, the smart card issuing request unit 110 includes the personal information of the smart card issuer To issue a smart card to the mobile telecommunication company server 200.

Meanwhile, the first smart card manager 120 receives a temporary smart card corresponding to the first authentication result of the issuing applicant from the mobile carrier server 200 in real time, thereby receiving a Universal Subscriber Identity Module (USIM). Can be stored in a repository that provides personal information security.

On the other hand, the second smart card management unit 130 receives and stores a formal smart card corresponding to the second authentication result for the issuing applicant from the mobile carrier server 200, the second smart card management unit 130 The stored temporary smart card can be deleted and the full smart card can be stored in the universal subscriber identity module.

For reference, components shown in FIGS. 2 and 3 according to an embodiment of the present invention mean software components or hardware components such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC), and have a predetermined role. Perform them.

However, 'components' are not meant to be limited to software or hardware, and each component may be configured to be in an addressable storage medium or may be configured to reproduce one or more processors.

Thus, by way of example, an element may comprise components such as software components, object-oriented software components, class components and task components, processes, functions, attributes, procedures, Routines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays, and variables.

Components and the functionality provided within those components may be combined into a smaller number of components or further separated into additional components.

4 is a flowchart illustrating a smart card issuing process according to an embodiment of the present invention.

Hereinafter, the flowchart of FIG. 4 will be described with reference to the components of the system shown in FIG. 1.

The mobile communication terminal 100 transmits a request for issuing a smart card to the mobile communication company server 200 (S401).

At this time, the issuance request of the smart card may include personal information of the issuing applicant.

After step S401, the mobile telecommunication company server 200 performs the first authentication based on the personal information of the issuing applicant included in the issuance request, and transmits the result of the first authentication to the card company server 300 (S402).

In this case, the mobile telecommunication company server 200 may perform the first authentication based on the amount paid by the issuing applicant using the telecommunication service of the mobile telecommunication company and the payment history of the corresponding amount.

After step S402, the card company server 300 receives the first authentication result from the mobile communication company server 200, performs a real-time card examination for issuing a temporary smart card based on the first authentication result, and then performs the card examination result. The mobile communication server 200 transmits in real time (S403).

After step S403, the mobile telecommunication company server 200 receives the card screening result corresponding to the first authentication result from the card company server 300, and if it is confirmed that the reception result is a 'card issue target', the mobile communication terminal 100 The temporary smart card is transmitted (S404).

After step S404, the mobile communication terminal 100 may receive a temporary smart card from the mobile communication company server 200 and store it in a predetermined storage (S405).

The predetermined repository here may comprise a universal subscriber identification module.

After step S405, the card company server 300 examines the issuer's card use amount, the payment history for the card use amount and the history of the amount generated during the bank transaction and the payment history for the corresponding amount. 2 authentication is performed, and the second authentication result is transmitted to the mobile communication company server 200 (S406).

After step S406, the mobile telecommunication company server 200 receives the formal smart card corresponding to the second authentication from the card company server 300, the card screening result corresponding to the second authentication result, and the received result is 'card issue target' If confirmed, the formal smart card is transmitted to the mobile communication terminal 100 (S407).

After step S407, when the mobile communication terminal 100 receives the formal smart card from the mobile communication company server 200, the mobile communication terminal 100 deletes the pre-stored temporary smart card and stores the formal smart card in a predetermined storage (S408).

The predetermined repository here may comprise a universal subscriber identification module.

The foregoing description of the present invention is intended for illustration, and it will be understood by those skilled in the art that the present invention may be easily modified in other specific forms without changing the technical spirit or essential features of the present invention. will be.

It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is shown by the following claims rather than the above description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. do.

100: mobile communication terminal
110: smart card issuing request unit
120: first smart card management unit
130: second smart card management unit
200: carrier server
210: smart card issuing request receiving unit
220: first authentication result processing unit
230: subscriber use history DB
240: second authentication result processing unit
300: card company server

Claims (6)

In the smart card issuing method,
(a) receiving a smart card issuance request from the issuing applicant's mobile terminal,
(b) performing a first authentication based on the personal information of the issuing applicant included in the issuing request, and transmitting a result of the first authentication to a server of a card company;
(c) if a result of the first authentication is received from the server of the card company, transmitting a first smart card corresponding to the first authentication to the mobile communication terminal; and
(d) if a result of the second authentication for the issuing applicant is received from the server of the card company, transmitting a second smart card corresponding to the second authentication to the mobile communication terminal;
Including, wherein the first smart card is a usage amount limit and the usage method is predetermined, smart card issuing method.
The method of claim 1,
In the step (b), the first user authentication is performed in consideration of at least one of a fee amount of the issuing applicant and a payment history for the fee.
The method of claim 1,
In step (c), the result of the first user authentication is received in real time from the server of the card company, and in step (d), the card use amount of the issuing applicant, the payment history of the card use amount, and a bank transaction A smart card issuing method comprising one or more of a payment history for the amount incurred at the time of the payment.
In the smart card issuing device,
When an application for issuing a smart card is executed, a smart card issuing request unit for transmitting a smart card issuance request to a mobile carrier server,
A first smart card manager for receiving and storing in real time a first smart card corresponding to a first authentication result for the issuing applicant from the mobile communication company server;
A second smart card manager that receives and stores a second smart card corresponding to a second authentication result for the issuing applicant from the mobile communication company server
Includes, The second smart card management unit, upon receiving the second smart card, the smart card issuing device for deleting the pre-stored first smart card.
The method of claim 4, wherein
The first smart card is a smart card issuing device, the amount of use limit and the usage method is predetermined.
The method of claim 4, wherein
And the first smart card manager and the second smart card manager respectively store the first smart card and the second smart card in a universal subscriber identity module (USIM).

Images