KR20140033679A - System and method for electronic payment by using amount authentication - Google Patents

Abstract

Disclosed are a system and method for electronic payment using amount authentication. The method for the electronic payment using the amount authentication according to one embodiment of the present invention includes the steps of: generating a random number; generating a plurality of authentication amounts using the random number; and checking a credit card owner thereby. The system for the electronic payment using the amount authentication according to one embodiment of the present invention includes a payment server and an authentication server. [Reference numerals] (AA) Start; (BB) End; (S31) Receive a payment request message; (S32) Generate 6-digit random number and store a session; (S33) Generate an approved amount; (S34) Request the approval relative to the approved amount; (S35) Request to input the approved amount; (S36) Within a predetermined period of time?; (S37) Receive the approved amount; (S38) Match?; (S39) Request to cancel the approval relative to the approved amount; (S40) Request to approve an original transaction amount; (S41) Transmit a payment completion message

Description

Electronic payment system and method using money authentication {SYSTEM AND METHOD FOR ELECTRONIC PAYMENT BY USING AMOUNT AUTHENTICATION}

The present invention relates to an electronic payment system and method using money authentication.

In general, electronic payment is a payment method that is performed electronically, and electronic payment is also increasing due to the explosive growth of electronic commerce.

Due to the proliferation of e-commerce sites, electronic payments using credit cards are increasing. Recently, mobile payments are also increasing due to the spread of smart phones.

Currently, as an electronic payment for a credit card, an authentication method using a password of a credit card (password authentication method), a credit card safe payment (ISP) method, a safe click method, and the like are used.

The password authentication method is a method of inputting a credit card number, a credit card password, and a resident registration number of a credit card holder at the time of electronic payment.

The ISP method is a method of operating based on Active-X or Flash, which has a disadvantage in that the platform is limited.

In addition, the assured click method is a method of operating based on Active X, and has a disadvantage that is not suitable for mobile payment due to the pop-up structure.

The conventional electronic payment method as described above was mainly a method of proceeding with electronic payment by plugging in an Active X to a user terminal. However, this Active X plug-in method has a problem causing inconvenience to the user, there is a problem that can not be used on a specific platform such as mobile payment.

The technical problem to be solved by the present invention is to provide an electronic payment system and method that can be implemented on a plurality of platforms without any plug-in by identifying the identity using information that only the credit card holder can know. .

In order to solve the above technical problem, the electronic payment system according to an embodiment of the present invention, for the user to pay for the purchase of goods / services through the user terminal at the site provided by the e-commerce providing server, for identity verification Generates a random random number, generates a plurality of authorization amounts, requests the credit card company authorization server for approval of a plurality of authorization amounts, a plurality of authorization amounts received from the user terminal and a plurality of authorization amounts generated If the match, the payment server for requesting the credit card company approval server to cancel the authorization of the authorization amount and the authorization of the original transaction amount; And a credit card company approval server that performs approval for a plurality of authorization amounts and original transaction amounts, and provides an authorization completion message to the mobile terminal of the user informing that the authorization is completed.

In one embodiment of the present invention, the payment server may store the random number in the session.

In one embodiment of the present invention, the payment server may generate the plurality of authorization amounts by dividing the random number for identity verification into a plurality of parts and adding a predetermined amount to the plurality of parts.

In one embodiment of the present invention, the payment server, it is possible to generate the random number of six digits for identity verification.

In one embodiment of the present invention, the payment server, by dividing the random number of six digits into two parts, by adding 1,000 won and 2,000 won to the number of the two parts, respectively, it is possible to generate two authorization amounts. .

In addition, in order to solve the above technical problem, a method of an embodiment of the present invention in which the payment server for receiving the payment request data from the electronic commerce providing server to perform the electronic payment, generating a random number; Generating a plurality of approved amounts using the random numbers; Requesting approval of the plurality of authorization amounts from a credit card company authorization server; Requesting an input of an approval amount from a user terminal, and receiving a plurality of approval amounts from the user terminal; Determining whether or not the generated plurality of authorization amounts and the plurality of authorization amounts received from the user terminal match; And requesting the credit card company authorization server to cancel the authorization of the plurality of authorization amounts and to approve the original transaction amount.

In one embodiment of the present invention, the method may further include requesting and receiving credit card information from the user terminal.

In one embodiment of the present invention, the method may further include checking whether a plurality of approval amounts are received from the user terminal within a predetermined time.

In an embodiment of the present disclosure, the generating of the plurality of approval amounts may include generating the plurality of approval amounts by dividing the random number into a plurality of parts and adding a predetermined amount to the plurality of parts.

The present invention as described above, since it is available on all platforms without requiring any plug-in for electronic payment, there is an effect that it is possible to provide a simple electronic payment.

In addition, the random number used to generate the authorization amount in the present invention, since the difficulty is maintained at a probability of one millionth regardless of the amount range of the original transaction amount, it is effective to provide a reliable identity authentication for the user have.

1 is a block diagram of an electronic payment system according to an embodiment of the present invention.
FIG. 2 is a detailed configuration diagram of the payment server of FIG. 1.
3 is a flowchart illustrating an electronic payment method according to an embodiment of the present invention.
4A to 4D are exemplary views of a display provided to a user terminal.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of an electronic payment system according to an embodiment of the present invention.

As shown in the figure, the electronic payment system of an embodiment of the present invention, the payment server 1, credit card company approval server (2), e-commerce providing server (3), the user terminal (4) used by the user and the user It includes a mobile terminal (5) possessed by.

The user can access the site provided by the electronic commerce providing server 3 through the network using the user terminal 4. In FIG. 1, the user terminal 4 illustrates a personal computer (PC) for convenience of description, but various terminals such as a smart phone, a pad-type computer, and a smart TV may be used. It will be apparent to those skilled in the art to which the present invention pertains. That is, the electronic payment system according to an embodiment of the present invention is applicable to various platforms.

The user terminal 4 may be connected to a payment server 1, a credit card company approval server 2 and an e-commerce providing server 3 via a wired or wireless network, respectively. In FIG. 1, an example of wireless connection is described, but the case of wired connection is not excluded. In addition, components other than those shown in FIG. 1 may be included for connection of a wired or wireless network.

The mobile terminal 5 of the user is, for example, a smart phone, but is not limited thereto, and may be various types of terminals capable of receiving an authentication code from the payment server 1. In addition, although the user terminal 4 and the mobile terminal 5 are shown as separate terminals, the same terminal may be used. That is, the electronic payment according to an embodiment of the present invention in the server provided by the electronic commerce providing server 3 through the mobile terminal 5 may perform authentication for electronic payment.

The user can use the user terminal 4 to access an e-commerce site (not shown) provided by the e-commerce providing server 3 to purchase certain goods or services. The manner in which the e-commerce providing server 3 provides the goods or services through a predetermined e-commerce site will be obvious to those of ordinary skill in the art, so the detailed description thereof will be omitted. Let's do it.

If a user purchases goods or services at a site provided by the e-commerce providing server 3 through the user terminal 4 and wants to make electronic payment at the site, the payment server 1 is a credit card company approval server 2. In conjunction with the start of the electronic payment according to an embodiment of the present invention.

In this case, the credit card company approval server 2 generally transmits the approval completion message to the mobile terminal 5 of the user in the form of a short message (SMS) when the approval of the user's credit card is completed. The approval completion message includes a user name, an approved amount, an approved date and time, and merchant information. The user completes an application for receiving the approval completion message in advance to the credit card company approval server 2, and when the credit card is approved, the user can receive the approval completion message for the corresponding approval through the mobile terminal 5. have.

Hereinafter, the detailed configuration of the payment server 1 of the present invention will be described with reference to the drawings.

FIG. 2 is a detailed configuration diagram of the payment server of FIG. 1.

As shown in the figure, the payment server 1 of the embodiment of the present invention includes a control unit 11, the communication unit 12 and the session storage unit 13.

The communication unit 12 transmits and receives data with the electronic commerce providing server 3, the credit card company approval server 2, the user terminal 4 and the mobile terminal (5).

When the user completes the purchase of goods or services at the site provided by the e-commerce providing server 3 and requests a payment, the communication unit 12 receives a payment request from the e-commerce providing server 3. In this case, the e-commerce providing server 3 may simultaneously transmit user information including the user's mobile terminal 5 information and payment information including the price of the goods or services. In addition, it is possible to simultaneously transmit credit card information for use by the user.

When the communication unit 12 receives the payment request, the control unit 11 generates a random number for identity verification. The random number for identity verification can be any number of six digits. In addition, the control unit 11 can generate the six-digit random number generated into two parts, and add two thousand units, respectively, to generate two prices (authorization amount) as the authentication code.

For example, when receiving a payment request of 200,000 won from the e-commerce providing server 3, the control unit 11 generates a random 6-digit random number of '857532', and then to the '857' and '532' Separate and generate '1,857 won' and '2,532 won' plus 1,000 won and 2,000 won, respectively. In this case, the controller 11 may provide the session storage unit 13 with a randomly generated random number. The authorization amount thus generated is used as an authentication code. That is, the control unit 11 may transmit the authorization amount generated through the communication unit 12 to the credit card company approval server (2). The credit card company approval server 2 transmits an authorization completion message including the authorization amount to the mobile terminal 5 of the user.

The control unit 11 requests the user terminal 4 to input the approval amount as an authentication code through the communication unit 12, and when the approval amount input by the user and the approval amount generated by the control unit 11 coincide with each other. In addition, the credit card company approval server 2 requests the credit card company approval server 2 to cancel the authorization for the corresponding authorization amount, and the credit card company approval server 2 requests the approval.

That is, in the above example, when the control unit 11 transmits two authorization amounts of '1,857 won' and '2,532 won' to the credit card company approval server 2, the approval card company approval server 2 makes a payment for this. And complete, and transmits the approval completion message in the SMS format to the user's mobile terminal (5). When the user confirms this and inputs this authorization amount in the e-commerce site, authentication of the user is completed.

In this case, when there is no input of the approval amount for the approval amount for a predetermined time (for example, 15 minutes) from the user, the controller 11 may request the credit card company approval server 2 to cancel the transaction approval.

Hereinafter, an electronic payment method according to an embodiment of the present invention will be described with reference to the operation of the control unit 11.

3 is a flowchart illustrating an electronic payment method according to an embodiment of the present invention, and FIGS. 4A to 4D are exemplary views of a display provided to the user terminal 4.

The electronic payment method of an embodiment of the present invention first starts when a user purchases goods or services at a site provided by the e-commerce providing server 3 and wishes to pay using a credit card. The control unit 11 of the payment server 1 of the embodiment of the present invention receives a payment request from the electronic commerce providing server 3 (S31). The e-commerce providing server 3 generally has user information by the user's login. When the payment request is transmitted, the e-commerce providing server 3 may include the user's mobile terminal number and the original transaction amount.

Although not shown in FIG. 3, the control unit 11 may first receive credit card information as shown in FIGS. 4A and 4B.

Thereafter, the controller 11 generates a random six-digit random number for identity verification and stores it in the session storage unit 13 (S32). In addition, the generated six-digit random number is divided into two parts, and each unit of 1,000 won is added (that is, 1,000 won and 2,000 won) to generate two authorization amounts as authentication codes (S33).

When the control unit 11 requests the approval of the approval amount from the credit card company approval server 2 through the communication unit 12 (S34), the credit card company approval server 2 performs the payment for the two approved amounts. In addition, an approval completion message indicating that payment has been performed for the two approved amounts may be transmitted to the mobile terminal 5 of the user.

The control unit 11 may request the user terminal 4 to input the approved amount (S35). 4C is an example of a display requested by a user. The user inputs the approval amount within a predetermined time (for example, 15 minutes) (S36) in the interface provided as shown in FIG. 4C (In FIG. 4C, the following three digits are input. It may be input) (S37).

If the authorization amount input by the user matches the authorization amount generated in S33, the control unit 11 can confirm that the credit card holder is the user (S38).

Thereafter, the control unit 11 requests the credit card company approval server 2 to cancel the approval for the approved amount (S39), and requests the credit card company approval server 2 to approve the original transaction amount ( S40). In this process, the credit card company approval server 2 confirms that the authorization for the authorization amount is canceled, and only if the authorization for the authorization amount may request authorization for the original transaction amount.

The credit card company approval server 2 may complete the approval of the original transaction amount and transmit the approval completion message to the user's mobile terminal 5. In addition, a message indicating that the approval for the approved amount is canceled may be transmitted.

The controller 11 may transmit a message indicating that the payment is completed to the user terminal 4 as shown in FIG. 4D (S41).

An amount less than the price of the goods or services (this is referred to as the 'original transaction amount') (which is referred to as the 'authentication amount') is randomly generated and provided to the credit card company authorization server 2. This authentication amount is used as an authentication code for user authentication. The control unit 11 provides this authentication amount to the credit card company approval server 2 through the communication unit 12. The credit card company approval server 2 transmits an approval completion message including the authentication amount to the mobile terminal 5 of the user.

The present invention can be used on all platforms without requiring any plug-in for electronic payment, it is possible to provide a simple electronic payment.

In addition, since the random number used for generating the approved amount of money is maintained at a probability of one millionth, regardless of the amount range of the original transaction amount, it is possible to provide reliable identity authentication for the user.

While the invention has been shown and described with reference to certain preferred embodiments thereof, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention as defined by the appended claims. Accordingly, the true scope of the present invention should be determined by the following claims.

1: payment server 11: control unit

Claims (9)

In the electronic payment system for the user to pay for the purchase of goods / services through the user terminal at the site provided by the e-commerce providing server,
Generates a random number for identity verification, using this to generate a plurality of authorization amounts, requesting the credit card company approval server for approval of a plurality of authorization amounts, and a plurality of authorization amounts received from the user terminal A payment server for requesting the credit card company authorization server to cancel the authorization and to approve the original transaction amount when the plurality of authorization amounts match; And
An electronic payment system comprising the credit card company approval server that performs the approval for a plurality of authorization amount and the original transaction amount, and provides an authorization completion message to the mobile terminal of the user informing that the authorization is completed.
The electronic payment system of claim 1, wherein the payment server stores the random number in a session.
The method of claim 1, wherein the payment server,
An electronic payment system for generating a plurality of approved amounts of money by dividing the random number for identity verification into a plurality of parts and adding a predetermined amount to the plurality of parts.
The method of claim 1, wherein the payment server,
Electronic payment system for generating the random number to 6 digits for identity verification.
The method of claim 4, wherein the payment server,
And dividing the random number of six digits into two parts, and adding two thousand won and two thousand won to the number of the two parts, respectively, to generate two authorization amounts.
In the payment server for receiving the payment request data from the e-commerce providing server to perform the electronic payment,
Generating any random number;
Generating a plurality of approved amounts using the random numbers;
Requesting approval of the plurality of authorization amounts from a credit card company authorization server;
Requesting an input of an approval amount from a user terminal, and receiving a plurality of approval amounts from the user terminal;
Determining whether or not the generated plurality of authorization amounts and the plurality of authorization amounts received from the user terminal match; And
And requesting the credit card company authorization server to cancel the authorization of the plurality of authorization amounts and to approve the original transaction amount.
The method according to claim 6,
And requesting and receiving credit card information from the user terminal.
The method according to claim 6,
And confirming whether a plurality of authorization amounts are received within a predetermined time from the user terminal.
The method of claim 6, wherein the generating of the plurality of authorization amounts comprises:
And dividing the random number into a plurality of parts, and adding a predetermined amount to the plurality of parts to generate the plurality of approved amounts of money.

Images