KR20130100849A - Credit card payment management system and method thereof - Google Patents

Abstract

PURPOSE: A card payment management system is provided to increase the safety, convenience and variety of card payment and offer a card authentication process safe and proper for the latest card payment environment and various card payment processes. CONSTITUTION: A card payment module (300) is separated type card payment dedicated module capable of being separated and mounted at multiple terminal devices (100, 200). A terminal device (100) comprises personal mobile terminal device such as a smartphone, a mobile phone, and a tablet PC. A card payment management system (400) stores member authentication information including card payment module identification information and terminal identification information mapped on the card payment identification information in response to each member. [Reference numerals] (410) Member information storage unit; (420) Request reception unit; (430) Authentication unit; (AA) Payment processing unit; (BB) Registration control unit

Description

Card payment management system and method {CREDIT CARD PAYMENT MANAGEMENT SYSTEM AND METHOD THEREOF}

The present invention relates to a card payment management system and method, and more particularly, as the latest card payment environment capable of processing card payment by mounting one card payment module to a plurality of mobile terminal devices, The present invention relates to a card payment management system and method for increasing the safety, convenience, and variety of card payments by providing a secure authentication procedure and various payment procedures suitable for a card payment environment, and a card payment method of a terminal device and a terminal device.

In recent years, mobile terminal devices have been spreading / used to individuals so that people who do not have their own mobile terminal devices such as smart phones, mobile phones, and tablet PCs cannot be found.

On the other hand, in recent years, as the use of credit cards has become common and online purchasing has become more common, an increasing number of on-site card payments have been made by employees of a purchaser who carry a mobile card payment device and visit a buyer.

Thanks to the wide spread of field card payment and mobile terminal devices, a card payment module that can be detached / installed instead of a dedicated card payment device for credit card payment is installed in multiple mobile terminal devices. The latest card payment environment that can handle the payment has arrived.

In the latest card payment environment, a new authentication procedure is required, which is suitable for a unique environment in which one card payment module is installed in several mobile terminal devices to process card payment, but the existing authentication procedure requires such a requirement. It is difficult to satisfy, and furthermore, suitable for the unusual environment and various payment procedures will be required.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a state-of-the-art card payment environment capable of processing card payments by mounting one card payment module to a plurality of mobile terminal devices. Accordingly, by providing a secure authentication process and various payment procedures suitable for the latest card payment environment to increase the safety, convenience and variety of card payment.

The card payment management system according to the first aspect of the present invention for achieving the above object, the subscriber authentication information including terminal identification information mapped to the card payment module identification information and the card payment module identification information corresponding to each subscriber; A subscriber information storage unit for storing; Request receiving unit for receiving a payment request according to the card payment generated in the terminal device equipped with a card payment module; And the terminal authentication information including the terminal identification information of the terminal device mapped to the card payment module identification information of the card payment module and the card payment module identification information of the card payment module which are confirmed based on the received payment request. Determining, and comprises an authentication unit for performing subscriber authentication for the payment request.

Preferably, the subscriber information storage unit may classify two or more terminal identification information corresponding to the card payment module identification information into two or more groups, and set and store payment authority information for each of the two or more groups.

Preferably, if the subscriber authentication is successful as a result of the subscriber authentication for the payment request, the terminal identification information of the terminal device according to the payment request is identified and the payment authority information of the checked group is determined. The apparatus may further include a payment processing unit configured to process the card payment generated at the terminal device.

Preferably, when a registration request for subscriber authentication information is received from a terminal device equipped with a card payment module, it is determined whether the terminal identification information of the terminal device checked based on the registration request belongs to a specific terminal blacklist. The mobile terminal may further include a registration control unit which blocks registration of subscriber authentication information according to the registration request when belonging to the terminal blacklist.

Terminal device according to a second aspect of the present invention for achieving the above object, the terminal device, the card mounting module is mounted; And a payment request including card payment module identification information of the card payment module and terminal identification information of the terminal device when the card payment occurs for the target card to which the payment amount is to be linked with the mounted card payment module. It provides a card payment management system, and includes a payment control unit for performing subscriber authentication based on the card payment module identification information and the terminal identification information.

Card payment management method according to a third aspect of the present invention for achieving the above object, the subscriber authentication information including terminal identification information mapped to the card payment module identification information and the card payment module identification information corresponding to each subscriber; Storing the subscriber information; A request receiving step of receiving a payment request according to a card payment generated in a terminal device equipped with a card payment module; And the terminal authentication information including the terminal identification information of the terminal device mapped to the card payment module identification information of the card payment module and the card payment module identification information of the card payment module which are confirmed based on the received payment request. Determining, and performing an authentication of the subscriber for the payment request.

Preferably, the storing of the subscriber information may classify two or more terminal identification information corresponding to the card payment module identification information into two or more groups, and set and store payment authority information for each of the two or more groups.

Preferably, if the subscriber authentication is successful as a result of the subscriber authentication for the payment request, the terminal identification information of the terminal device according to the payment request is identified and the payment authority information of the checked group is determined. The method may further include a payment processing step of processing the card payment generated in the terminal device.

Preferably, when a registration request for subscriber authentication information is received from a terminal device equipped with a card payment module, it is determined whether the terminal identification information of the terminal device checked based on the registration request belongs to a specific terminal blacklist. The apparatus may further include a registration control step of blocking registration of subscriber authentication information according to the registration request when belonging to the terminal blacklist.

In the card payment method of the terminal device according to the fourth aspect of the present invention for achieving the above object, Module mounting step of mounting the card payment module; And a payment request including card payment module identification information of the card payment module and terminal identification information of the terminal device when the card payment occurs for the target card to which the payment amount is to be linked with the mounted card payment module. And a payment control step of providing a card payment management system to perform subscriber authentication based on the card payment module identification information and the terminal identification information.

Therefore, according to the card payment management system and method of the present invention, subscriber authentication is performed based on identification information (card payment module identification information + terminal identification information) of each card payment module and a terminal device equipped with the card payment module. By distinguishing / managing a main subscriber and a plurality of additional subscribers among a plurality of subscribers sharing and using one card payment module, it is determined whether the subscriber is a subscriber or an additional subscriber when a card payment occurs and grants different payment rights corresponding thereto. Card payment module can increase the safety, convenience and variety of card payments by providing more suitable and secure authentication procedures and various payment procedures in a unique card payment environment that can be shared and used by multiple subscribers through multiple mobile terminal devices. have.

1 is a block diagram showing an entire system for card payment according to a preferred embodiment of the present invention.
2 is a block diagram of a terminal device according to a preferred embodiment of the present invention.
3 is a block diagram of a card payment management system according to a preferred embodiment of the present invention.
4 is a control flowchart illustrating a payment process for card payment according to a preferred embodiment of the present invention.
5 is a flowchart illustrating a control flow of a card payment method of a terminal device according to an exemplary embodiment of the present invention.
6 is a flowchart illustrating a control flow of a card payment management method according to an exemplary embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

1 is a diagram showing an entire system for card payment according to a preferred embodiment of the present invention.

As shown in FIG. 1, the entire system for card payment according to the present invention includes a card payment module 300, a plurality of terminal devices 100 and 200, and a card payment management system 400.

The entire system for card payment according to the present invention may further include a terminal blacklist system 500.

The card payment module 300 is a detachable card payment dedicated module that can be detached and mounted to a plurality of terminal devices 100, 200.

Preferably, the card payment module 300, a reader that can lead the card information of the target card to charge the payment amount by adopting a variety of methods, such as magnetic reading, IC credit card reading, NFC-based credit card reading May include functionality.

The card payment module 300 is mounted on one terminal device 100 among a plurality of terminal devices 100, 200..., And the payment amount is interlocked between the terminal device 100 and the card payment module 300. Card payment, such as credit card payment, debit card, gift card, etc., can be processed for card payment authorization and cancellation.

The terminal device 100 may include a personal mobile terminal device, such as a smartphone, a mobile phone, a tablet PC.

Therefore, the terminal device 100 and the card payment module 300 are mounted to each other among the plurality of terminal devices 100 and 200.

Terminal device 100 is equipped with a card payment module 300, the payment application (corresponding to the payment control unit of Figure 2 to be described later) in the terminal device 100 by the operation of the user (subscriber) to process the card payment It is executed and operated in the state for card payment.

And, the terminal device 100, in conjunction with the card payment module 300, the card payment module identification information and the terminal of the card payment module 300, when the card payment occurs for the target card to charge the payment amount The payment request including the terminal identification information of the device 100 is provided to the card payment management system 400 to perform subscriber authentication based on the card payment module identification information and the terminal identification information.

Here, when the card payment occurs, when the payment application (corresponding to the payment control unit of FIG. 2 to be described later) in the terminal device 100 is executed to operate in the state for the card payment, or by the card payment module 300 When the card information of the card is read, or when the card information input manually through the terminal device 100 is acquired, or the card payment execution is selected by the user (subscriber) operation after reading or obtaining the card information. Cases may be included.

Referring to the card payment management system 400, the card payment management system 400, the subscriber authentication information including terminal identification information mapped to the card payment module identification information and the card payment module identification information corresponding to each subscriber Save it.

That is, the card payment management system 400, card payment module identification information of the card payment module 300, including the serial number, MAC address, Bluetooth address, etc. of the card payment module 300 to be used by the subscriber, and By registering and storing subscriber authentication information including terminal identification information including a phone number, terminal identification number, etc. for the terminal device 100 to be used by the subscriber mapped to the card payment module identification information of the terminal through various methods. For example, subscriber authentication information can be stored / managed for each subscriber.

When the subscriber authentication information is described in various ways to be registered / stored in the card payment management system 400, the operation by the operator of the card payment management system 400 (e.g. Admin function), or the manual registration by the subscriber (e.g. Add subscriber authentication information from the management menu of the service website), or after the card payment module 300 and the terminal device 100 are mutually mounted, the payment application in the terminal device 100 (corresponding to the payment control unit of FIG. 2 to be described later). ) Is executed when the card payment module identification information of the card payment module 300 and the terminal identification information of the terminal device 100 is new information that is not already registered in the card payment management system 400. have.

The card payment management system 400, when receiving the payment request according to the card payment generated in the terminal device 100 equipped with the card payment module 300, the card payment module is confirmed based on the received payment request It determines the presence of the subscriber authentication information including the card payment module identification information of 300 and the terminal identification information of the terminal device 100 mapped thereto, and performs subscriber authentication for the payment request.

That is, the card payment management system 400, the subscriber including the card payment module identification information of the card payment module 300 is confirmed based on the received payment request and the terminal identification information of the terminal device 100 mapped thereto. By determining whether the authentication information exists in the subscriber authentication information for each subscriber that has been previously registered and stored as described above, subscriber authentication is performed to determine whether the payment request received this time is a request by a valid subscriber.

Accordingly, if the above-described subscriber authentication succeeds, the card payment management system 400 processes a normal card payment afterward through interworking with a payment server 600 such as a credit card company or a VAN company in response to the payment request received this time. Do it.

On the other hand, the card payment management system 400, if the above-described subscriber authentication fails, in response to the payment request received this time can be notified that the normal card payment after the impossible.

Hereinafter, the configuration of the terminal device according to the present invention will be described in more detail with reference to FIG. 2.

The terminal device 100 according to the present invention, in conjunction with the module mounting unit 110, the card payment module 300 is mounted, the card payment module 300 is mounted, for the target card to charge the payment amount When the card payment occurs, by providing a payment request including the card payment module identification information of the card payment module 300 and the terminal identification information of the terminal device 100 to the card payment management system 400, the card payment module identification information And a payment control unit 120 configured to perform subscriber authentication based on the terminal identification information mapped to the card payment module identification information.

The module mounting unit 110 is a functional unit on which the detachable card payment module 300 including the reader function as described above is mounted, and can be adopted in various forms corresponding to various mounting and interface methods of the card payment module 300. .

As described above, the payment control unit 120 corresponds to a payment application in the terminal device 100 that processes a card payment for a target card to which a payment amount is to be charged in connection with the card payment module 300.

The payment control unit 120, in conjunction with the installed card payment module 300, when the card payment for the target card to be charged, the card payment module identification information and terminal device of the card payment module 300 A payment request including the terminal identification information of 100 is provided to the card payment management system 400 to perform subscriber authentication based on the card payment module identification information and the terminal identification information.

Here, when the card payment occurs, the payment control unit 120 in the terminal device 100 is executed to operate in the state for the card payment, or when the card information of the target card by the card payment module 300 Or when card information manually input through the terminal apparatus 100 is obtained, or when card payment execution is selected by a user (subscriber) operation after reading or obtaining card information.

Specifically, when described in detail, the payment control unit 120, in conjunction with the card payment module 300, the card payment of the card payment module 300 when the card payment occurs for the target card to charge the payment amount The payment request including the module identification information and the terminal identification information of the terminal device 100 is provided to the card payment management system 400.

More preferably, the payment request, the card payment module identification information of the card payment module 300 and the terminal identification information of the terminal device 100, and further the card information and payment amount information and the card payment module 300 The business information may further include.

Thus, the card payment management system 400, based on the payment request from the terminal device 100, will perform subscriber authentication as described above.

Subsequently, when the subscriber authentication is successful in the card payment management system 400, the payment control unit 120 interworks with a payment server 600 such as a credit card company or a VAN company in response to the provided payment request. Card payments (e.g. authorization and cancellation) can be processed.

On the other hand, the payment control unit 120, if the subscriber authentication fails in the card payment management system 400, in response to the payment request provided will be notified that the normal card payment is impossible later.

Hereinafter, the card payment management system according to the present invention will be described in more detail with reference to FIG. 3.

Card payment management system 400 according to the present invention, the subscriber information storage unit for storing the subscriber authentication information including the card payment module identification information and the terminal identification information mapped to the card payment module identification information corresponding to each subscriber ( 410, a request receiving unit 420 for receiving a payment request according to a card payment generated from a terminal device equipped with a card payment module, and a card payment module identification of the card payment module identified based on the received payment request. The authentication unit 430 determines whether there is subscriber authentication information including the terminal identification information of the terminal device mapped to the card payment module identification information of the card payment module, and performs subscriber authentication for the payment request. Include.

In addition, the card payment management system 400 according to the present invention may further include a payment processing unit 440 and a registration controller 450.

The subscriber information storage unit 410 stores subscriber authentication information including card payment module identification information and terminal identification information mapped to the card payment module identification information corresponding to each subscriber.

That is, the subscriber information storage unit 410, the card payment module identification information of the card payment module 300, including the serial number, MAC address, Bluetooth address, etc. of the card payment module 300 to be used by the subscriber, and By registering and storing subscriber authentication information including terminal identification information including a phone number, terminal identification number, etc. for the terminal device 100 to be used by the subscriber mapped to the card payment module identification information of the terminal through various methods. For example, subscriber authentication information can be stored / managed for each subscriber.

Here, more preferably, the subscriber information storage unit 410 classifies two or more terminal identification information corresponding to one card payment module identification information into two or more groups, and sets payment authority information for each of the two or more groups. Is preferably stored.

That is, the present invention originates from the latest card payment environment that can process the card payment by mounting one card payment module 300 to a plurality of mobile terminal devices (100,200 ...), therefore, one card payment module Consideration should be given to the unusual circumstances in which 300 can be shared and used by multiple subscribers.

Accordingly, the subscriber information storage unit 410 classifies two or more terminal identification information mapped / registered corresponding to one same card payment module identification information into two or more groups and sets and stores different payment authority information for each group. Can be.

In more detail, as an example, a case in which two groups corresponding to one card payment module identification information, for example, a main subscriber group and an additional subscriber group subordinate to the main subscriber is classified will be described with reference to the embodiment. do.

In this case, the subscriber information storage unit 410, at least one second terminal is set to the first terminal identification information set as the primary subscriber and at least two additional terminal identification information corresponding to one card payment module identification information. The terminal identification information may be classified and grouped, and the subscriber subscriber payment authority information corresponding to the subscriber subscriber and the subscriber subscriber payment authority information corresponding to the subscriber subscriber may be set and stored.

Furthermore, the subscriber information storage unit 410 may further store subscription type information corresponding to each subscriber.

That is, for example, the main subscriber's subscription type information may include a main subscriber identifier indicating that the subscriber is a subscriber, a registered card payment service, or information on the subscriber's payment authority (e.g., less than 50,000 won without signature). Available, payment can be made when manual card information is entered), information on the number of additional subscribers that can be accommodated under the main subscriber, and additional payment authority information for the additional subscribers (e.g., payment only when the actual card information is read) Yes, payment only with signature).

In addition, the subscription type information of the additional particle may include an additional particle identifier indicating that the additional particle, and a main subscriber identifier for determining which sub-additional particles correspond to which main subscriber.

The request receiving unit 420 receives a payment request according to a card payment generated from the terminal device 100 equipped with the card payment module 300.

Here, the received payment request includes the card payment module identification information of the card payment module 300 and the terminal identification information of the terminal device 100, and further, the card information and payment amount information and the card payment module 300 Business information may be further included.

The authentication unit 430 is a terminal device 100 mapped to the card payment module identification information of the card payment module 300 and the card payment module identification information of the card payment module 300 to be confirmed based on the received payment request. It is determined whether the subscriber authentication information including the terminal identification information of the subscriber, the subscriber authentication for the payment request is performed.

That is, the authentication unit 430, the terminal device mapped to the card payment module identification information of the card payment module 300 and the card payment module identification information of the card payment module 300 is confirmed based on the received payment request ( By determining whether the subscriber authentication information including the terminal identification information of 100 is present in the subscriber authentication information for each subscriber stored in the subscriber information storage unit 410, whether the payment request received this time is a request by a legitimate subscriber. Perform subscriber authentication for

Thus, the authentication unit 430, if there is the subscriber information stored in the card payment module identification information and the terminal identification information that is the same as the card payment module identification information of the card payment module 300 and the terminal identification information of the terminal device 100, It is determined that the payment request received this time is a request by a legitimate subscriber, and the subscriber authentication is successful. In response to the payment request received, the payment server 600 such as a credit card company and a VAN company can be linked. Through this, the normal card payment can be processed.

On the other hand, the authentication unit 430, if the above-described subscriber authentication fails, in response to the payment request received this time may notify that the normal card payment is not possible.

The payment processing unit 440 checks the group to which the terminal identification information of the terminal device 100 belongs according to the payment request, if the authentication of the subscriber is successful as a result of the subscriber authentication of the payment request. The card payment generated in the terminal device 100 is processed according to the payment authority information of the confirmed group.

That is, referring to the above-described embodiment, the payment processing unit 440, if the subscriber authentication succeeds as a result of the subscriber authentication for the payment request in the authentication unit 430, the terminal device 100 according to the payment request On the basis of the terminal identification information of the) to determine whether the subscriber or the additional subscriber, and to process the card payment accordingly.

In other words, if the subscriber authentication succeeds as a result of the subscriber authentication for the payment request, the terminal identification information of the terminal device 100 according to the payment request is the main subscription of the first terminal identification information. If it is determined to grow, the card payment generated in the terminal device 100 is processed according to the pre-set stockholder payment authority information.

That is, the payment processing unit 440, in response to the payment request received from the terminal device 100, which is determined to be the stock subscriber, through the interworking with the payment server 600 such as a credit card company, a VAN company, and then normal card payment In this case, the card payment authority may be granted according to the stockholder settlement authority information (e.g., less than 50,000 won can be paid without a signature, or if manual card information is entered).

On the other hand, the payment processing unit 440, if the subscriber authentication is successful as a result of the subscriber authentication for the payment request, the terminal identification information of the terminal device 100 according to the payment request is the additional subscriber of the second terminal identification information. If it is determined, the card payment generated in the terminal device is processed according to preset additional payment authority information.

That is, the payment processing unit 440, in response to the payment request received from the terminal device 100, which is determined to be an additional subscriber, through the interworking with the payment server 600, such as a credit card company, VAN company and the like after the normal card payment In this case, the card payment authority may be granted according to the additional subscriber payment authority information (e.g., payment is possible only when the real card information is read and payment is possible only if the signature is signed).

As described above, according to the card payment management system and the terminal device according to the present invention, a single card payment module 300 can be used by several subscribers through a plurality of mobile terminal devices (100, 200 ...) In consideration of the card payment environment, when the card payment occurs, each identification information (card payment module identification information + terminal identification information) of the card payment module 300 and the terminal device 100 to which the card payment module 300 is mounted. On the basis of this, it is possible to provide a more suitable and secure environment in which subscriber authentication can be performed by determining whether the card payment is made by a legitimate subscriber.

In addition, according to the card payment management system and terminal device according to the present invention, a unique card payment environment that can be used to share a single card payment module 300 through several mobile terminal devices (100, 200 ...) In consideration of the above, one card payment module 300 shares and manages the main subscriber and a plurality of additional subscribers among multiple subscribers who share and use, and when the card payment is generated by the authorized subscribers of the terminal device 100 By determining whether the subscriber or the additional subscriber based on the terminal identification information and granting different payment authority corresponding thereto, it is possible to provide a more suitable and various card payment environment.

Further, when the registration control unit 450 of the card payment management system 4000 according to the present invention receives a registration request for subscriber authentication information from the terminal device 100 on which the card payment module 300 is mounted, the registration request is received. It is determined based on whether the terminal identification information of the terminal device 100 belonging to a specific terminal black list to block the subscriber authentication information registration according to the registration request when belonging to the terminal black list.

As mentioned in the description with reference to FIG. 1, various methods of registering / saving subscriber authentication information in the subscriber information storage unit 410 may be performed by an operator (eg, an Admin function) of the card payment management system 400. Registration / storage method, or manual registration / storage by the subscriber (for example, adding subscriber authentication information in the management menu of the service website), or after the card payment module 300 and the terminal device 100 are mutually installed. When the payment application (payment control unit 120) in the terminal device 100 is executed for the first time, the card payment module identification information of the card payment module 300 and the terminal identification information of the terminal device 100 are transmitted to the card payment management system 400. In case of new information that is not already registered, automatic registration may be performed.

Here, the two methods described above, which are registered / stored by the operation / manual of the operator or subscriber, are generally performed by the initial connection authentication by the operator or subscriber, so that the security problem will not be large.

However, after the card payment module 300 and the terminal device 100 are mutually mounted, the last method of automatically registering when the payment application (the payment control unit 120) in the terminal device 100 is executed may occur for security reasons. You will need to prevent the problem.

Here, after the card payment module 300 and the terminal device 100 are mutually mounted, a payment application, that is, the payment control unit 120 in the terminal device 100 is executed / activated for the first time, the terminal device 100, in particular, the payment control unit ( 120 may provide the card payment management system 400 with a registration request for subscriber authentication information including card payment module identification information of the card payment module 300 and terminal identification information of the terminal device 100.

Accordingly, when the registration control unit 450 receives a registration request for subscriber authentication information from the terminal device 100 equipped with the card payment module 300, the registration request through interworking with the terminal blacklist system 500. It may be determined whether the terminal identification information of the terminal device 100 to be identified based on the belonging to a specific terminal black list.

As a result of the determination, when the terminal identification information of the terminal apparatus 100 belongs to the terminal blacklist, the registration controller 450 determines that the terminal apparatus 100 is not a valid terminal apparatus due to loss or theft, and thus is received this time. Block registration of subscriber authentication information according to registration request.

Of course, the registration controller 450 determines that the terminal device 100 is a valid terminal device when the terminal identification information of the terminal device 100 does not belong to the terminal blacklist, and thus the subscriber according to the registration request received this time. The authentication information registration will be normally registered in the subscriber information storage unit 410.

On the other hand, the registration control unit 450, the subscriber information registered by the operation / manual of the operator or subscriber will be normally registered in the subscriber information storage unit 410 without blocking.

As described above, according to the card payment management system and the terminal device according to the present invention, each identification information of the card payment module 300 and the terminal device 100 equipped with the card payment module 300 (card payment module) Subscriber authentication based on identification information + terminal identification information), and distinguishes and manages the main subscriber and a plurality of additional subscribers among multiple subscribers who share and use one card payment module 300 Determining whether the subscriber is an additional subscriber and granting different payment rights corresponding thereto, a unique card payment that can be used by sharing a single card payment module 300 through several mobile terminal devices (100, 200 ...) By providing a more suitable and secure authentication process and various payment procedures in the environment, it is possible to increase the security, convenience and variety of card payments.

Hereinafter, the payment process for card payment according to a preferred embodiment of the present invention will be described with reference to FIGS. 4 to 6. Here, for convenience of description, the components shown in FIGS. 1 to 3 will be described with reference to corresponding reference numerals.

First, the payment process for card payment according to a preferred embodiment of the present invention will be described with reference to FIG. 4.

The card payment module 300 is mounted on one terminal device 100 among a plurality of terminal devices 100, 200.

Meanwhile, the card payment management system 400 stores subscriber authentication information including terminal identification information mapped to card payment module identification information and card payment module identification information corresponding to each subscriber.

And, the terminal device 100, in conjunction with the card payment module 300 is mounted, when the card payment occurs for the target card to be charged (S30), the card payment module identification of the card payment module 300 Providing a payment request including information and terminal identification information of the terminal device 100 to the card payment management system 400 (S40), to perform subscriber authentication based on the card payment module identification information and the terminal identification information. do.

Here, when the card payment occurs, when the payment application (corresponding to the payment control unit of FIG. 2 to be described later) in the terminal device 100 is executed to operate in the state for the card payment, or by the card payment module 300 When the card information of the card is read, or when the card information input manually through the terminal device 100 is acquired, or the card payment execution is selected by the user (subscriber) operation after reading or obtaining the card information. Cases may be included.

When the card payment management system 400 receives the payment request according to the card payment generated from the terminal device 100 equipped with the card payment module 300 (S40), the card is confirmed based on the received payment request. The payment is determined by determining whether the subscriber authentication information including the terminal identification information of the terminal device 100 mapped to the card payment module identification information of the payment module 300 and the card payment module identification information of the card payment module 300, Subscriber authentication for the request is performed (S50).

That is, the card payment management system 400, the terminal mapped to the card payment module identification information of the card payment module 300 and the card payment module identification information of the card payment module 300 is confirmed based on the received payment request. By determining whether the subscriber authentication information including the terminal identification information of the device 100 exists in the subscriber authentication information for each subscriber that has been previously registered and stored as described above, the payment request received this time is a request by a valid subscriber. Perform subscriber authentication for acknowledgment.

Accordingly, if the above-described subscriber authentication succeeds, the card payment management system 400 processes a normal card payment afterward through interworking with a payment server 600 such as a credit card company or a VAN company in response to the payment request received this time. Do it.

On the other hand, the card payment management system 400, if the above-described subscriber authentication fails, in response to the payment request received this time can be notified that the normal card payment after the impossible.

Hereinafter, the card payment method of the terminal device according to the present invention will be described in detail with reference to FIG. 5.

In the card payment method of the terminal device according to the present invention, the detachable card payment module 300 is mounted (S100).

In the card payment method of the terminal device according to the present invention, by executing the payment application in the terminal device 100 for processing the card payment for the target card to be charged in connection with the card payment module 300 mounted, The card is operated in a state for payment (S110).

And the card payment method of the terminal device according to the present invention, when the card payment for the target card to be charged (S120), the card payment module identification information of the card payment module 300 and of the terminal device 100 The payment request including the terminal identification information is provided to the card payment management system 400 (S130) to perform subscriber authentication based on the card payment module identification information and the terminal identification information.

In other words, the card payment method of the terminal device according to the present invention, in conjunction with the card payment module 300, the card payment module of the card payment module 300, when the card payment occurs for the target card to charge the payment amount The payment request including the identification information and the terminal identification information of the terminal device 100 is provided to the card payment management system 400.

More preferably, the payment request, the card payment module identification information of the card payment module 300 and the terminal identification information of the terminal device 100, and further the card information and payment amount information and the card payment module 300 The business information may further include.

Thus, the card payment management system 400, based on the payment request from the terminal device 100, will perform subscriber authentication as described above.

Subsequently, in the card payment method of the terminal device according to the present invention, when the subscriber authentication is successful in the card payment management system 400, in response to the payment request provided, interworking with the payment server 600 such as a credit card company, VAN company, etc. Through the normal card payment (for example, authorization and cancellation, etc.) can be processed, at this time, the corresponding payment authority information (eg, the above-mentioned stockholder payment authority information or addition) granted from the card payment management system 400 Particle payment authority information) will be able to process the card payment (S140).

On the other hand, in the card payment method of the terminal device according to the present invention, if the subscriber authentication fails in the card payment management system 400, in response to the provided payment request will be notified that the normal card payment is not possible.

Hereinafter, a method for managing card payment according to the present invention will be described in detail with reference to FIG. 6.

The card payment management method according to the present invention stores subscriber authentication information including terminal identification information mapped to card payment module identification information and card payment module identification information corresponding to the subscriber (S200).

That is, the card payment management method according to the present invention, the card payment module identification information of the card payment module 300, including the serial number, MAC address, Bluetooth address, etc. of the card payment module 300 to be used by the subscriber, Subscriber authentication information including terminal identification information including a phone number, terminal identification number, etc. for the terminal device 100 to be used by the subscriber mapped to the card payment module identification information described above is stored and registered in advance through various methods. Thus, subscriber authentication information can be stored / managed for each subscriber.

Here, more preferably, the card payment management method according to the present invention, classifies two or more terminal identification information corresponding to one card payment module identification information into two or more groups, and the payment authority information for each of the two or more groups. It is desirable to set and save.

That is, the present invention originates from the latest card payment environment that can process the card payment by mounting one card payment module 300 to a plurality of mobile terminal devices (100,200 ...), therefore, one card payment module Consideration should be given to the unusual circumstances in which 300 can be shared and used by multiple subscribers.

Accordingly, in the card payment management method according to the present invention, by classifying two or more terminal identification information to be mapped / registered corresponding to one same card payment module identification information into two or more groups and by setting different payment authority information for each group Can be stored.

In more detail, as an example, a case in which two groups corresponding to one card payment module identification information, for example, a main subscriber group and an additional subscriber group subordinate to the main subscriber is classified will be described with reference to the embodiment. do.

In this case, the card payment management method according to the present invention, at least one terminal identification information that is mapped to correspond to one card payment module identification information, at least one set as the first terminal identification information and additional subscribers set as the primary subscriber The second terminal identification information may be classified and grouped, and the subscriber's payment authority information corresponding to the subscriber and additional subscriber payment authority information corresponding to the subscriber may be set and stored.

Furthermore, the card payment management method according to the present invention may further store subscription type information corresponding to each subscriber.

That is, for example, the main subscriber's subscription type information may include a main subscriber identifier indicating that the subscriber is a subscriber, a registered card payment service, or information on the subscriber's payment authority (e.g., less than 50,000 won without signature). Available, payment can be made when manual card information is entered), information on the number of additional subscribers that can be accommodated under the main subscriber, and additional payment authority information for the additional subscribers (e.g., payment only when the actual card information is read) Yes, payment only with signature).

In addition, the subscription type information of the additional particle may include an additional particle identifier indicating that the additional particle, and a main subscriber identifier for determining which sub-additional particles correspond to which main subscriber.

In the card payment management method according to the present invention, the card payment module 300 receives the payment request according to the card payment generated in the terminal device 100 is mounted (S210, Yes).

In the card payment management method according to the present invention, the terminal device mapped to the card payment module identification information of the card payment module 300 and the card payment module identification information of the card payment module 300 confirmed based on the received payment request. It is determined whether the subscriber authentication information including the terminal identification information of the 100, the subscriber authentication for the payment request (S220).

That is, the card payment management method according to the present invention is mapped to the card payment module identification information of the card payment module 300 and the card payment module identification information of the card payment module 300 confirmed based on the received payment request. By determining whether the subscriber authentication information including the terminal identification information of the terminal device 100 exists in the subscriber authentication information for each subscriber stored in advance, subscriber authentication as to whether the payment request received this time is a request by a valid subscriber. To perform.

Accordingly, in the card payment management method according to the present invention, the card payment module identification information of the card payment module 300 and the subscriber information stored in the same card payment module identification information and terminal identification information as the terminal identification information of the terminal device 100 are stored. If present, it is determined that the payment request received this time is a request by a legitimate subscriber and succeeds in subscriber authentication (S230, Yes). In response to the payment request received this time, the credit card company, VAN company, etc. Through the interworking with the payment server 600, it is possible to process subsequent normal card payment.

On the other hand, the card payment management method according to the present invention, if the above-described subscriber authentication fails (S230, No), in response to the payment request received this time it can be notified that the normal card payment is impossible (S260).

In the card payment management method according to the present invention, if the subscriber authentication is successful as a result of the subscriber authentication for the payment request, check the group belonging to the terminal identification information of the terminal device 100 according to the payment request and the confirmed group Process the card payment generated in the terminal device 100 according to the payment authority information of the.

That is, referring to the above-described embodiment, the card payment management method according to the present invention, if the subscriber authentication is successful as a result of the subscriber authentication for the payment request (S230, Yes), the terminal device according to the payment request On the basis of the terminal identification information of (100), it is determined whether the subscriber or the additional subscriber, and to process the card payment accordingly.

In other words, the card payment management method according to the present invention, if the subscriber authentication is successful as a result of the subscriber authentication for the payment request, the terminal identification information of the terminal device 100 according to the payment request is the first terminal identification information. If it is determined that the subscriber is a stock subscriber (S240, Yes), the card payment generated in the terminal device 100 is processed according to the preset subscriber payment authority information (S250).

That is, the card payment management method according to the present invention, in response to the payment request received from the terminal device 100 that is determined to be a stock subscriber through a connection with a payment server 600 such as a credit card company, VAN company In this case, the card payment authority may be granted according to the stockholder payment authority information (eg, 50,000 won or less can be paid without a signature, or if manual card information is entered).

On the other hand, in the card payment management method according to the present invention, if the subscriber authentication is successful as a result of the subscriber authentication for the payment request, the terminal identification information of the terminal device 100 according to the payment request of the second terminal identification information; If it is determined that the additional subscriber (S240, No), the card payment generated in the terminal device is processed according to the predetermined additional subscriber payment authority information (S255).

That is, the card payment management method according to the present invention, in response to the payment request received from the terminal device 100 is determined to be an additional subscriber through a linkage with a payment server 600 such as a credit card company, VAN company, etc. In this case, the card payment authority may be granted according to the supplementary payment authority information (for example, payment is possible only when the real card information is read, and payment is possible only if the signature is signed).

On the other hand, the card payment management method according to the present invention, the above-described payment request is not received (S210, No), the registration request for the subscriber authentication information is received from the terminal device 100 equipped with the card payment module 300 It may be (S270).

In the card payment management method according to the present invention, when a registration request is received, it is determined whether the terminal identification information of the terminal device 100 checked based on the registration request belongs to a specific terminal blacklist (S290). If belonging to the black list is blocked registration of subscriber authentication information according to the registration request (S300).

That is, in the card payment management method according to the present invention, when a registration request for subscriber authentication information is received from the terminal device 100 equipped with the card payment module 300, the terminal blacklist system 500 interworks with the terminal blacklist system 500. The terminal blacklist may be checked (S280), and it may be determined whether the terminal identification information of the terminal apparatus 100 checked based on the registration request belongs to a specific terminal blacklist (S290).

The card payment management method according to the present invention, if the terminal identification information of the terminal device 100 belongs to the terminal blacklist as a result of the determination in step S290, the terminal device 100 is not a valid terminal device for reasons such as loss or theft. By judging, the registration of subscriber authentication information according to the registration request received this time is blocked (S300).

Of course, the card payment management method according to the present invention, if the terminal identification information of the terminal device 100 does not belong to the terminal blacklist as a result of the determination in step S290, the terminal device 100 is determined to be a valid terminal device, this time received Subscriber authentication information registration according to the registered registration request will be normally registered (S310).

On the other hand, the card payment management method according to the present invention, the subscriber information registered by the operation / manual of the operator or subscriber will be normally registered without blocking.

As described above, according to the card payment management method and the card payment method of the terminal device according to the present invention, identification information of each of the card payment module 300 and the terminal device 100 equipped with the card payment module 300 is installed. Subscriber authentication is performed based on (card payment module identification information + terminal identification information), card payment by distinguishing / managing the main subscriber and a number of additional subscribers among a number of subscribers sharing and using one card payment module 300 By determining whether it is a subscriber or additional subscriber and granting different payment authority corresponding thereto, one card payment module 300 can be shared by several subscribers through several mobile terminal devices (100, 200 ...). In an unusual card payment environment, a more suitable and secure authentication process and various payment procedures can be provided to increase the safety, convenience, and variety of card payments.

Meanwhile, the steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of both. A software module may reside in a RAM memory, a flash memory, a ROM memory, an EPROM memory, an EEPROM memory, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor such that the processor can read information from, and write information to, the storage medium. Alternatively, the storage medium may be integrated into the processor. The processor and the storage medium may be included within an ASIC. The ASIC may be included in the user terminal device. In the alternative, the processor and the storage medium may be included as separate components within the user terminal device.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

According to the card payment management system and method according to the present invention, a more suitable and secure authentication process and various payment procedures in a unique card payment environment that can be used by sharing a single card payment module through a number of mobile terminal devices In order to increase the safety, convenience and versatility of card payments, thereby exceeding the limitations of existing technologies, not only the use of related technologies but also the possibility of market or sales of the applied device is not only realistic but also obvious. Since it can be implemented, it is an invention with industrial applicability.

400: Card Payment Management System
410: subscriber information storage unit 420: request receiving unit
430: authentication unit 440: payment processing unit
450: registration control unit

Claims (9)

A subscriber information storage unit for storing subscriber authentication information including card payment module identification information and terminal identification information mapped to the card payment module identification information corresponding to each subscriber;
Request receiving unit for receiving a payment request according to the card payment generated in the terminal device equipped with a card payment module; And
Whether there is subscriber authentication information including the card payment module identification information of the card payment module and the terminal identification information of the terminal device mapped to the card payment module identification information of the card payment module confirmed based on the received payment request. The card payment management system, characterized in that it comprises an authentication unit for performing a subscriber authentication for the payment request. The method of claim 1,
The subscriber information storage unit,
And classifying two or more terminal identification information mapped corresponding to the card payment module identification information into two or more groups, and setting and storing payment authority information for each of the two or more groups. 3. The method of claim 2,
If the subscriber authentication succeeds as a result of the subscriber authentication for the payment request, the terminal device identifies the group to which the terminal identification information of the terminal device belongs according to the payment request and is generated in the terminal device according to the payment authority information of the confirmed group. The card payment management system, characterized in that it further comprises a payment processing unit for processing the card payment. The method of claim 1,
When a registration request for subscriber authentication information is received from a terminal device equipped with a card payment module, the terminal black is determined by determining whether the terminal identification information of the terminal device checked based on the registration request belongs to a specific terminal blacklist. The card payment management system, characterized in that it further comprises a registration control unit for blocking the registration of subscriber authentication information according to the registration request when belonging to the list. A module mounting unit to which a card payment module is mounted; And
In connection with the mounted card payment module, when the card payment for the target card to be charged, the payment request including the card payment module identification information of the card payment module and the terminal identification information of the terminal card And a payment control unit configured to provide a payment management system to perform subscriber authentication based on the card payment module identification information and the terminal identification information. A subscriber information storing step of storing subscriber authentication information including card payment module identification information and terminal identification information mapped to the card payment module identification information corresponding to each subscriber;
A request receiving step of receiving a payment request according to a card payment generated in a terminal device equipped with a card payment module; And
Whether there is subscriber authentication information including the card payment module identification information of the card payment module and the terminal identification information of the terminal device mapped to the card payment module identification information of the card payment module confirmed based on the received payment request. And determining and performing an authentication of the subscriber with respect to the payment request. The method according to claim 6,
The subscriber information storage step,
And classifying two or more terminal identification information mapped corresponding to the card payment module identification information into two or more groups, and setting and storing payment authority information for each of the two or more groups. The method of claim 7, wherein
If the subscriber authentication succeeds as a result of the subscriber authentication for the payment request, the terminal device identifies the group to which the terminal identification information of the terminal device belongs according to the payment request and is generated in the terminal device according to the payment authority information of the confirmed group. The card payment management method characterized in that it further comprises a payment processing step for processing the card payment. The method according to claim 6,
When a registration request for subscriber authentication information is received from a terminal device equipped with a card payment module, the terminal black is determined by determining whether the terminal identification information of the terminal device checked based on the registration request belongs to a specific terminal blacklist. And a registration control step of blocking registration of subscriber authentication information according to the registration request when belonging to a list.

Images