KR20130082703A - Method and server for payment - Google Patents

Abstract

PURPOSE: A user location based payment method and a payment server for the same are provided to approve payment only when the location of a store terminal from which a payment approval is requested and the location of a user terminal are within a certain distance, thereby preventing the illegal use of a missing or stolen credit card. CONSTITUTION: A payment server receives payment approval request data including payment method data from a store terminal (S310). The payment server extracts the location of the store terminal (S320). The payment server obtains the location data of a user terminal (S330). The payment server determines whether the user terminal and the store terminal are located within a first range (S340). The payment server approves the payment by a payment method, which is selected by a user, according to the determination (S350-S390). [Reference numerals] (AA) Start; (BB) End; (S310) Receive payment approval request data from a store terminal; (S320) Extract the location of a store terminal; (S330) Obtain location data of a user terminal; (S340) Location of a user terminal - the location of a store terminal < a first critical range; (S350) Data acquisition time on a user terminal - payment approval request data receiving time < a second critical range; (S360) Payment approval; (S370) Additional approval data request; (S380) Additional approval success; (S390) Payment disapproval

Description

Form of payment and payment server for it {METHOD AND SERVER FOR PAYMENT}

The present invention relates to a payment method based on at least one of payment location information and payment time information, and a payment server therefor.

Currently, when purchasing goods or using services, users prefer to pay by card rather than by cash. In the case of cash, there is an anxiety associated with possession and the hassle of withdrawing cash separately from the bank, but in the case of a card, it is easy to carry and can receive various service benefits for each card.

However, as the types of cards are diversified and the benefits are diversified, the number of cards generally possessed by users is gradually increasing. Accordingly, many side effects occur. In particular, if you lose your wallet, you have to make several requests to stop using multiple cards, and it takes a lot of time and effort to reissue.

In addition, at present, since a strict authentication procedure is not required for the use of the card, it is possible for another person to easily pay using the card when the card issuer does not request the suspension of the lost or stolen card.

Therefore, it is necessary to introduce a system that stably prevents unauthorized use of a card by another when the card is lost or stolen.

An object of the present invention is to approve payment when the location of the merchant terminal and the terminal of the user requesting payment approval is within a predetermined range, thereby preventing unauthorized use of the card and strengthening payment security and the same. To provide a payment server for.

In order to achieve the above object, the present invention provides a payment server comprising: receiving payment approval request information including payment means information of a user from an affiliated store terminal; Extracting, by the payment server, the location of the affiliated store terminal; Acquiring, by the payment server, location information about the terminal of the user; Determining, by the payment server, whether a position difference between the terminal of the user and the affiliated store terminal is within a first threshold range; And selectively performing, by the payment server, a payment approval for the payment means of the user based on the determination result.

In order to achieve the above object, the present invention includes a communication unit for receiving payment approval request information including payment means information of the user from the merchant terminal, and obtains the location information for the terminal of the user; Extraction unit for extracting the location of the merchant terminal; A determination unit that determines whether a position difference between the user terminal and the affiliated store terminal is within a first threshold range; A payment approval unit for selectively performing payment approval for the payment means of the user based on the determination result; And a control unit for controlling the communication unit, the extraction unit, the determination unit, and the payment approval unit.

According to an embodiment of the present invention, by approving the payment when the location of the merchant terminal and the terminal of the user requested payment approval is within a predetermined range, it is possible to prevent fraudulent use of a lost or stolen card. The authentication means can be strengthened.

1 is a block diagram illustrating a payment system related to an embodiment of the present invention.
2 is a block diagram illustrating a configuration of a payment server according to an embodiment of the present invention.
3 is a flowchart illustrating a payment method associated with an embodiment of the present invention.

The terms used in this specification will be briefly described and the present invention will be described in detail.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. Also, in certain cases, there may be a term selected arbitrarily by the applicant, in which case the meaning thereof will be described in detail in the description of the corresponding invention. Therefore, the terms used in the present invention should be defined based on the meanings of the terms and the contents throughout the present invention, rather than the names of the simple terms.

When an element is referred to as "including" an element throughout the specification, it is to be understood that the element may include other elements, without departing from the spirit or scope of the present invention. In addition, the terms "... unit", "module", etc. described in the specification mean a unit for processing at least one function or operation, which may be implemented in hardware or software or a combination of hardware and software. .

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

1 is a block diagram illustrating a payment system related to an embodiment of the present invention.

As shown in FIG. 1, a payment system according to an embodiment of the present invention may include a user terminal 100, a payment server 200, and an affiliated store terminal 300. Throughout this specification, a user means a person who has a right to use a card. For example, the user may be a person who is legally issued a card or a person who has permission to use the card.

The user terminal 100 refers to a mobile device capable of transmitting its current location to the payment server 200. The user terminal 100 may be implemented in various forms. For example, the user terminal 100 may be a mobile phone, a smart phone, a laptop computer, a digital broadcasting terminal, a personal digital assistant (PDA), a portable multimedia player (PMP), navigation, a tablet PC, There may be an MP3 player, camera, etc.

The terminal 100 of a user according to an exemplary embodiment of the present invention may include a wireless communication unit, a user input unit, an interface unit, an output unit, a memory, a controller, and the like. Hereinafter, the components will be described in order.

The wireless communication unit may include one or more components that enable wireless communication between the user terminal 100 and a wireless communication system (eg, the payment server 200). For example, the wireless communication unit may include a broadcast receiving module, a mobile communication module, a wireless internet module, a short range communication module, and a location information module.

The broadcast receiving module receives broadcast signals and / or broadcast-related information from an external broadcast management server through a broadcast channel. The broadcast channel may include a satellite channel and a terrestrial channel. The broadcast management server may refer to a server for generating and transmitting broadcast signals and / or broadcast related information, or a server for receiving broadcast signals and / or broadcast related information generated by the broadcast management server and transmitting the generated broadcast signals and / or broadcast related information.

The mobile communication module transmits and receives radio signals to and from at least one of a base station, an external terminal, and a server on a mobile communication network. Here, the wireless signal may include various types of data depending on a voice call signal, a video call signal, or a text / multimedia message transmission / reception.

The wireless internet module refers to a module for wireless internet access. The wireless internet module may be internal or external.

The short-range communication module is a module for short-range communication. Bluetooth, Radio Frequency Identification (RFID), Infrared Data Association (IrDA), Ultra Wideband (UWB), ZigBee, Near Field Communication (NFC), and the like may be used as a short range communication technology.

In addition, the location information module is a module for checking or obtaining the location of the mobile terminal. One example is the GPS (Global Position System) module. The GPS module receives position information from a plurality of satellites. Here, the location information may include coordinate information indicated by latitude and longitude. For example, the GPS module can accurately calculate the current location according to the triangulation method by measuring the precise time and distance from three or more satellites and measuring three different distances. A method of obtaining distance and time information from three satellites and correcting the error by one satellite may be used. In particular, the GPS module can acquire latitude, longitude and altitude as well as three-dimensional velocity information and accurate time from the position information received from the satellite.

The user input unit generates input data for the user to control the operation of the terminal. The user input unit may include a key pad dome switch, a touch pad (static pressure / capacitance), a jog wheel, a jog switch, and the like. In particular, when the touch pad has a mutual layer structure with the display unit described later, this may be referred to as a touch screen.

The interface unit serves as an interface with all external devices connected to the user terminal 100. For example, a wired / wireless headset port, an external charger port, a wired / wireless data port, a memory card port, a port for connecting a device having an identification module, an audio I / O port, Video input / output (I / O) ports, earphone ports, and the like.

Here, the identification module is a chip that stores a variety of information for authenticating the user's right to use the terminal 100, a User Identification Module (UIM), Subscriber Identity Module (SIM) '), A Universal Subscriber Identity Module ("USIM"), and the like. In addition, an apparatus having an identification module (hereinafter referred to as 'identification device') can be manufactured in a smart card format. Accordingly, the identification module can be connected to the terminal 100 through the port. Such an interface unit receives data from an external device or receives power and transmits the data to each component inside the user terminal 100 or transmits the data inside the user terminal 100 to the external device.

The output unit is for outputting an audio signal, a video signal, or an alarm signal. The output unit may include a display unit, a sound output module, an alarm unit, and the like.

The display unit displays and outputs information processed by the user terminal 100. For example, the display unit may display various UIs and GUIs, and display information on a payment approval result received from the payment server 200.

Meanwhile, as described above, when the display unit and the touch pad have a mutual layer structure to constitute a touch screen, the display unit can be used as an input device in addition to the output device. The display unit may be a liquid crystal display, a thin film transistor-liquid crystal display, an organic light-emitting diode, a flexible display, a three-dimensional display And may include at least one. The touch screen may be configured to detect not only the touch input position and the touched area but also the touch input pressure. In addition, the touch screen can be configured to detect not only the real-touch but also the proximity touch.

The memory may store a program for processing and controlling the controller, or may perform a function for temporarily storing input / output data (for example, a message, a still image, a video, etc.).

The memory may be a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (e.g. SD or XD memory, etc.), RAM (RAM, Random Access Memory (SRAM) Static Random Access Memory (ROM), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM (Programmable Read-Only Memory) magnetic memory, magnetic disk, optical disk It may include one type of storage medium. In addition, the user terminal 100 may operate a web storage that performs a storage function of a memory on the Internet.

The controller typically controls the overall operation of the user terminal 100. That is, the controller may control the wireless communication unit, the user input unit, the interface unit, the output unit, and the memory as a whole.

In addition, according to an embodiment of the present invention, the controller may receive the location information of the affiliated store terminal 300 from the payment server 200, and compare the location information with the location of the user terminal 100. The controller may transmit a result of determining whether the location of the affiliated store terminal 300 and the location of the user terminal 100 are within a first threshold range to the payment server 200 through the wireless communication unit.

The payment server 200 refers to a server that approves payment for a specific payment method of a user. The payment server 200 according to an embodiment of the present invention may include a card company server, a purchase company server, a financial company server, a value added network (VAN) server, and the like.

According to an embodiment of the present invention, the payment server 200 may perform wired or wireless communication with the user terminal 100 or the merchant terminal 300. Therefore, according to an embodiment of the present invention, the payment server 200 may obtain location information from the user terminal 100 and may receive a payment approval request from the affiliated store terminal 300. In addition, the payment server 200 may transmit the payment approval result to the user terminal 100 or the merchant terminal 300. Description of each configuration of the payment server 200 will be described later with reference to FIG.

Merchant terminal 300 is for performing the payment for the purchased goods or services used. The affiliated store terminal 300 according to an embodiment of the present invention may store purchase information for each member.

Meanwhile, according to an embodiment of the present invention, the affiliated store terminal 300 may be implemented through a credit authorization terminal (CAT), a point of sales (POS), and the like.

POS (Point Of Sales) is a system that can register sales in real time and enable automatic settlement and aggregation of registered sales data to improve the efficiency of store operations. Therefore, according to an embodiment of the present invention, the affiliated store terminal 300 may perform member management, store management, and the like.

According to an embodiment of the present invention, the affiliated store terminal 300 may transmit payment approval request information including payment means information of the user to the payment server 200. In addition, the affiliated store terminal 300 may receive a personal identification number or biometric information from a user and transmit it to the payment server 200.

2 is a block diagram illustrating a configuration of a payment server according to an embodiment of the present invention.

As shown in FIG. 2, according to an embodiment of the present invention, the payment server 200 may include a communication unit 210, an extraction unit 220, a determination unit 230, a payment approval unit 240, and a storage unit ( 250, and a controller 260. However, not all illustrated components are required. The payment server 200 may be implemented by more components than the illustrated components, and the payment server 200 may be implemented by fewer components.

The communication unit 210 may receive payment approval request information including payment means information of the user from the affiliated store terminal 300. In this case, the communication unit 210 may receive payment approval request information directly from the affiliated store terminal 300 or may receive payment approval request information through a VAN server or a PG server.

The payment means may include not only a card in the form of a magnet plate, but also a mobile card and a virtual card, which are stored in a program form in a secure area of the mobile terminal. In addition, according to an embodiment of the present invention, the card may include a credit card, check card, prepaid card, gift card, electronic money, affiliate card.

According to an embodiment of the present invention, the payment means information may include a card identification number, expiration date, authentication code (for example, Card Validation Code, CVV: Card Verification Value, CID: Card Identification Number).

On the other hand, the payment approval request information according to an embodiment of the present invention includes the payment means information, merchant information (for example, merchant terminal identification information, merchant code, merchant name, merchant owners, etc.), information about the product (commodity code, product) Price, manufacturer, color, size, quantity purchased), date and time of purchase, installment status, number of months.

The communication unit 210 may obtain location information about the terminal 100 of the user. For example, the communication unit 210 may receive location information collected by the user's terminal 100 through GPS, etc. from the user's terminal 100.

Meanwhile, the communication unit 210 may transmit the location of the affiliated store terminal 300 to the user terminal 100. In this case, the communication unit 210 may receive a result from the terminal 100 of the user terminal 100 determines whether the difference between its location and the location of the affiliated store terminal 300 is within the first threshold range.

The communication unit 210 may transmit the payment approval result to the user terminal 100 or the merchant terminal 300.

The extraction unit 220 may extract the location of the affiliated store terminal 300. According to an embodiment of the present invention, the location of the affiliated store terminal 300 may mean the location of the affiliated store where the affiliated store terminal 300 exists.

According to an embodiment of the present invention, the extraction unit 220 may extract the location of the affiliated store terminal 300 based on the affiliated store information included in the payment approval request information. For example, the extractor 220 may extract an affiliate store address mapped to the affiliate store code or identification information of the affiliate store terminal 300 from the affiliate store DB.

According to another embodiment of the present invention, the extraction unit 220 may extract the location of the affiliated store terminal 300 directly from the received payment approval request information.

The determination unit 230 may determine whether a difference between the location of the user terminal 100 and the location of the affiliated store terminal 300 is within a first threshold range. In addition, the determination unit 230 may determine whether a difference between a time of obtaining location information of the user terminal 100 and a time of receiving the payment approval request information is within a second threshold range. In another embodiment, the location information of the user terminal 100 may be registered only when the user requests the transmission of the location information of the user terminal 100, and the determination unit 230 may determine the time when the location information is registered and the above information. It may be determined whether the difference between the times of receiving the payment approval request information is within the second threshold range.

According to an embodiment of the present invention, the first threshold range and the second threshold range may be preset values by the user, or may be values set by the payment server 200 based on payment history information of the user. According to an embodiment of the present invention, the first threshold range and the second threshold range may be changed through user input.

On the other hand, according to one embodiment of the present invention, the determination unit 230 is the location of the user terminal 100 and the merchant terminal 300 of the user only if the payment approval request amount included in the payment approval request information is a predetermined amount or more; You can also compare locations. That is, the payment method according to an embodiment of the present invention may be applied only when the payment amount is more than the predetermined amount. For example, only if the payment approval amount is more than 300,000 won, it is possible to determine whether the position difference between the merchant terminal 300 and the user terminal 100 within a radius of 10m for payment approval.

According to another embodiment of the present invention, the amount of payment that can be settled according to the positional difference between the merchant terminal 300 and the user terminal 100 can be adjusted. For example, if the position difference between the merchant terminal 300 and the user terminal 100 is less than 1km, payment can be made up to 300,000 won, and if more than 1km or less than 2km, payment can be set up to 20. In addition, the amount of payment that can be paid is adjusted according to the difference between the time of obtaining (or registering) the location information of the user terminal 100 and the time of receiving the payment approval request information, or the user of the terminal 100 The first threshold range may be changed according to a difference between a time when the location information is acquired (or registered) and a time when the payment approval request information is received. For example, if payment approval information is received within 10 minutes from the time when the user registers the location information of the user terminal 100, the payment amount is set to 300,000 won, and the first threshold distance is set to 1 km, but the user If payment approval information is received 10 minutes after the location information of the terminal 100 is registered, the payment amount may be set to 200,000 won, and the first threshold distance may be set to 2 km (or 500 m).

According to another embodiment of the present invention, the payment method according to an embodiment of the present invention may be applied based on the region where the merchant terminal 300 is located and the payment approval request time.

For example, a user may set the payment method according to an embodiment of the present invention to be applied only between 21 o'clock and 6 o'clock, and the merchant terminal 300 exists in an area (Gangwon-do, Gyeongsang-do) other than his or her living base. Only when the payment method according to an embodiment of the present invention may be applied.

The payment approval unit 240 may selectively perform the payment approval for the payment method of the user based on the determination result. That is, the payment approval unit 240 approves the payment when the difference between the location of the user terminal 100 and the location of the affiliate terminal 300 is within the first threshold range, and disapproves when the payment is out of the first threshold range. You can do it.

Since the user generally possesses a mobile phone and the like, by comparing the location of the mobile phone and the like with the location of the affiliated terminal 300, the payment is not made if the user is far from the location of the terminal 100, thus losing or stolen the card. Can be prevented from being used illegally.

According to another embodiment of the present invention, the payment approval unit 240 is a difference between the location of the user terminal 100 and the location of the merchant terminal 300 is within the first threshold range, the user terminal 100 If the difference between the time for obtaining the location information and the time for receiving the payment approval request information is within the second threshold range, the payment may be approved.

If the difference between the time of obtaining the location information of the user terminal 100 and the time of receiving the payment approval request information is large, it is difficult to compare the exact location between the user terminal 100 and the merchant terminal 300, the card is This is because it is difficult to determine whether it is lost or stolen.

Meanwhile, the payment approval unit 240 may request additional authentication information from the affiliated store terminal 300 or the user terminal 100 based on the determination result. For example, the payment approval unit 240 may further request additional authentication information when the difference between the location of the user terminal 100 and the location of the affiliated store terminal 300 is not within the first threshold range.

Additional authentication information according to an embodiment of the present invention may include a personal identification number, biometric information, and the like. The biometric information according to an embodiment of the present invention may include fingerprint information, vein information, iris information, voice information, face information, palm print information, genetic information, and the like.

The storage unit 250 may store information about the affiliate store and information about the user. The information on the affiliated store may include an affiliated store code, identification information (ID) of the affiliated store terminal 300, an address of the affiliated store, an affiliated store name, an affiliated store share, and the like. The information on the user may include user identification information, user terminal 100 information, pre-issued payment means information, payment means use history information, additional service subscription information, and the like.

The controller 260 may generally control the communicator 210, the extractor 220, the determiner 230, the payment approval unit 240, and the storage 250.

3 is a flowchart illustrating a payment method associated with an embodiment of the present invention.

As shown in FIG. 3, the payment server 200 may receive payment approval request information from the affiliated store terminal 300 [S310]. For example, suppose a user purchases iced coffee at A merchant and requests a payment while presenting a credit card. In this case, the merchant terminal 300 includes merchant information (A merchant, merchant code: xxx, merchant terminal ID: 12344, etc.), transaction information (ice coffee, 2 cups, 6000 won, etc.) and payment method information (card number, validity). Period, authentication code, etc.) to the payment server 200 to request a payment approval.

According to an embodiment of the present invention, the payment server 200 extracts the location of the affiliated store terminal 300 [S320]. According to an embodiment of the present invention, when the payment approval request information includes the location information of the affiliated store terminal 300, the payment server 200 extracts the location of the affiliated store terminal 300 from the payment approval request information. can do.

According to another embodiment of the present invention, the payment server 200 extracts the location of the affiliated store terminal 300 from the affiliated store DB based on the identification information or the affiliated store code of the affiliated store terminal 300 included in the payment approval request information. can do.

According to an embodiment of the present invention, the payment server 200 may obtain location information about the terminal 100 of the user [S330]. According to an embodiment of the present invention, when payment approval request information is received, the payment server 200 may request location information from the user terminal 100.

According to another embodiment of the present invention, even if there is no request from the payment server 200, the user may transmit the location information to the payment server 200 through the user terminal 100.

That is, according to an embodiment of the present invention, step 310 may be performed before step 330, and step 310 may be performed later than step 330.

Meanwhile, according to an embodiment of the present invention, the payment server 200 may determine whether the position difference between the user terminal 100 and the affiliated store terminal 300 is within a first critical range [S340]. For example, when the first threshold range is 50m, the payment server 200 determines whether the location difference between the location of the user terminal 100 and the affiliated store terminal 300 having received payment approval request information is within 50m. will be.

According to an embodiment of the present invention, the payment server 200 may directly determine whether the location difference between the user terminal 100 and the affiliated store terminal 300 is within the first threshold range, or determined by the user terminal 100. You can also receive the result.

For example, the payment server 200 may transmit the extracted location of the affiliated store terminal 300 to the user terminal 100. In this case, the terminal 100 of the user may compare the current location of the terminal with the location of the affiliated terminal 300 and determine whether a difference between the location of the terminal 100 and the affiliated terminal 300 of the user is within the first threshold range. It is. In addition, the user terminal 100 may transmit the determined result to the payment server 200.

On the other hand, according to an embodiment of the present invention, the payment server 200 is only when the payment approval request amount is more than a predetermined amount or the merchant terminal 300 is located in a predetermined region, the payment approval request time is a predetermined time only It may be determined whether the position difference is within the first threshold range.

According to an embodiment of the present invention, the payment server 200 may determine whether a difference between a time of obtaining location information of the user terminal 100 and a time of receiving the payment approval request information is within a second threshold range. [S350]. For example, if the second threshold range is 5 minutes, the payment server 200 is a time difference between the time when the location information for the user terminal 100 and the payment approval request information received from the merchant terminal 300 is 5 It will be judged within minutes.

The payment server 200 may selectively perform the payment approval for the payment means of the user based on the determination result. For example, when the location difference between the user terminal 100 and the affiliated store terminal 300 is within the first threshold range, the time at which the location information about the user terminal 100 is obtained and the time for receiving the payment approval request information are received. If the difference is within the second threshold range, the payment server 200 may approve the payment [S360].

In addition, the time difference between the location of the user terminal 100 and the merchant terminal 300 is not within the first threshold range, or the time when the location information for the user terminal 100 and the payment approval request information received If the difference is not within the second threshold range, according to the first embodiment, the payment server 200 may disapprove the payment.

On the other hand, according to the second embodiment, the time difference between the position of the user terminal 100 and the merchant terminal 300 is not within the first threshold range, or the position information of the user terminal 100 and the payment When the difference between the times of receiving the approval request information is not within the second threshold range, the payment server 200 may request additional authentication information from the affiliated store terminal 300 or the user terminal 100 [S370].

The additional authentication information may include personal identification number, biometric information (fingerprint information, vein information, iris information, voice information, face information, palm print information, genetic information, etc.). For example, when the position difference between the user terminal 100 and the merchant terminal 300 is 100m and the first threshold range is 50m, the payment server 200 is connected to the merchant terminal 300 or the terminal 100 of the user. Fingerprint information can be requested.

If the authentication for the additional authentication information is successful, since the card is not seen as stolen or lost, the payment server 200 may approve the payment [S380]. On the other hand, if the authentication for the additional authentication information fails, the payment server 200 will disapprove payment [S390].

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It belongs to the scope of right.

100: user terminal
200: payment server
210:
220: extraction unit
230:
240: Payment Authorization Unit
250:
260:
300: merchant terminal

Claims (12)

Receiving, by the payment server, payment approval request information including payment means information of the user from the affiliated store terminal;
Extracting, by the payment server, the location of the affiliated store terminal;
Acquiring, by the payment server, location information about the terminal of the user;
Determining, by the payment server, whether a position difference between the terminal of the user and the affiliated store terminal is within a first threshold range; And
And by the payment server, selectively performing payment approval for the payment means of the user based on the determination result.
The method of claim 1, wherein the determining comprises:
And determining, by the payment server, whether a difference between a time of obtaining location information of the terminal of the user and a time of receiving the payment approval request information is within a second threshold range.
The method of claim 1, wherein the determining comprises:
Transmitting, by the payment server, the location of the extracted affiliated store terminal to the terminal of the user; And
And receiving, by the payment server, a result of determining whether the position difference between the terminal of the user and the affiliated store terminal is within a first threshold range from the terminal of the user.
The method of claim 1, wherein the step of selectively performing the payment authorization,
And requesting additional authentication information from the affiliated store terminal or the terminal of the user based on the determination result.
The method of claim 4, wherein the additional authentication information,
And at least one of a personal identification number and biometric information.
The method of claim 1, wherein the determining
And the payment approval request amount included in the payment approval request information is greater than or equal to a predetermined amount.
A communication unit configured to receive payment approval request information including payment means information of a user from an affiliated store terminal and to obtain location information of the terminal of the user;
Extraction unit for extracting the location of the merchant terminal;
A determination unit that determines whether a position difference between the user terminal and the affiliated store terminal is within a first threshold range;
A payment approval unit for selectively performing payment approval for the payment means of the user based on the determination result; And
And a control unit for controlling the communication unit, the extraction unit, the determination unit, and the payment approval unit.
The method of claim 7, wherein the determination unit,
And determining whether a difference between a time of obtaining location information of the terminal of the user and a time of receiving the payment approval request information is within a second threshold range.
The method of claim 7, wherein the communication unit,
The payment server, characterized in that for transmitting the location of the extracted merchant terminal to the terminal of the user, and receives a result of determining whether the position difference between the terminal of the user and the merchant terminal within the first threshold range from the terminal of the user.
The method of claim 7, wherein the payment approval unit,
The payment server, characterized in that for requesting additional authentication information to the merchant terminal or the terminal of the user based on the determination result.
The method of claim 10, wherein the additional authentication information,
And at least one of a personal identification number and biometric information.
The method of claim 7, wherein the determination unit,
If the payment approval request amount included in the payment approval request information is more than a predetermined amount, the payment server, characterized in that it is determined whether the position difference between the terminal of the user and the merchant terminal within the first threshold range.

Images