KR20160122101A - Method for Providing Electronic Payment by Using Subscriber Information And Subscriber Identification Module, System, Terminal And Communication Management Apparatus Therefor - Google Patents

Abstract

An embodiment of the present invention relates to an electronic payment providing method using subscriber information and subscriber identification modules, and a system, terminal and communication management apparatus therefor. The electronic payment providing system using subscriber information and a subscriber identification module (SIM) comprises: a communication management apparatus which extracts first payment information based on subscriber information and a first identification number assigned to the subscriber identity module, creates and transmits a first security token using the first identification number and the first payment information; a terminal which creates a second security token by using a second identification number assigned to the SIM connected to second payment information input by a user, stores the second security token, and processes a payment approval for an electronic payment request signal based on a comparing result between the first security token received from the communication management apparatus and the pre-stored second security token, when the electronic payment request signal is generated; and a financial payment providing apparatus which performs electronic payment for costs when an approval signal for the electronic payment approval request signal is received from the communication management apparatus.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic payment providing method using subscriber information and a subscriber identification module, and a system, a terminal, and a communication management apparatus therefor,

An embodiment of the present invention relates to an electronic payment providing method using subscriber information and a subscriber identity module, and a system, a terminal, and a communication management apparatus therefor. More specifically, electronic payment is performed using a security token generated based on subscriber information input by a user and a unique number of a subscriber identity module for a communication service, And a system, a terminal, and a communication management apparatus therefor, and more particularly, to an electronic payment providing method using subscriber information and a subscriber identification module capable of enhancing security against hacking and performance.

The contents described in this section merely provide background information on the embodiment of the present invention and do not constitute the prior art.

Common methods of payment, such as credit card, debit card, or bank account, are widely used for general commercial or e-commerce transactions. However, the conventional payment method has problems such as inconvenience to possession of cash, risk of loss of cash, troubles such as return of balance, etc. when using cash. In addition to these problems, the use of credit cards is recommended as a way to increase the tax transparency of commercial transactions and many other payment methods are being developed. In particular, as e-commerce using the Internet has been steadily growing, the payment market has been expanding rapidly. Until now, most of the payment methods on the Internet were credit card and non-bank online deposits, but recently, payment using mobile phones, wired and wireless ARS Payment methods are emerging and are being used at a rapid pace.

* However, despite the change of the means of payment, the credit card may suffer damage due to fraudulent use and leakage of personal information when lost. That is, even if personal information is leaked due to the hacking of the communication network at the time of payment, an electronic payment method that can maintain the security is needed.

In order to solve the above-described problems, an embodiment of the present invention provides an electronic payment providing method using subscriber information and a subscriber identity module that can enhance security against user authentication and hacking in electronic payment, and a system therefor , A terminal and a communication management apparatus.

In one aspect, the terminal extracts a second unique number assigned to the subscriber identity module that has been concatenated, generates a second security token based on the second payment information and the second unique number input through the key input unit, A second security token generating unit for generating and storing the generated security token; A terminal communication processing unit for receiving a first security token from the communication management apparatus when a payment request signal is received; And a payment approval unit for comparing the first security token with the second security token and processing payment approval for the payment request signal, wherein the second payment information includes payment information previously registered in the communication management apparatus, And is the same information.

According to an aspect of the present invention, there is provided a method for providing a subscriber identity module, the method comprising: extracting first payment information based on subscriber information and a first unique number assigned to a subscriber identity module; A first security token is generated and transmitted; Generates and stores a second security token using the second unique number assigned to the subscriber identity module that is concluded with the second payment information input by the user, and when the electronic settlement request signal is generated, A terminal for processing payment approval for the electronic settlement request signal based on a result of comparing the first security token with the previously stored second security token; And a financial settlement providing device for performing an electronic settlement for the fee when the approval signal for the electronic settlement approval request signal is received from the communication management apparatus. Providing system.

According to another aspect of the present invention, there is provided a method for extracting a second unique number assigned to a subscriber identity module that has been concatenated, extracting a second security token based on second payment information input through a key input unit and the second unique number A second security token generating unit for generating and storing a security token; A terminal communication processing unit for receiving a first security token from the communication management apparatus when a payment request signal is received; And a payment approval unit for comparing the first security token with the second security token and processing approval for payment of the electronic settlement request signal when the first security token and the second security token coincide with each other The terminal being characterized in that

According to another aspect of the present invention, there is provided a subscriber information database for storing subscriber information; An information extraction unit for extracting first payment information based on the subscriber information, a first unique number assigned to the subscriber identity module; A first security token generating unit for generating a first security token using the first payment information and the first unique number; And a communication processor for transmitting the first security token to the terminal when a request for the first security token is received from the terminal.

According to another aspect of the present invention, there is provided a method for extracting a second unique number assigned to a subscriber identity module that has been concatenated, extracting a second security token based on second payment information input through a key input unit and the second unique number A second security token generating step of generating and storing a security token; A communication processing step of receiving a first security token from the communication management apparatus when a payment request signal is received from the key input unit; And a payment approval step of processing payment approval for the electronic settlement request signal when the first security token and the second security token coincide with each other by comparing the first security token and the second security token And a payment method using the subscriber identity module.

According to another aspect of the present invention, there is provided an information retrieving method including extracting a first unique number assigned to a subscriber identity module, first payment information based on previously stored subscriber information; A first security token generation step of generating a first security token using the first payment information and the first unique number; And a communication processing step of, if there is a request for the first security token from the terminal, transmitting the first security token to the terminal, and providing the electronic payment using the subscriber identification module do.

As described above, according to an embodiment of the present invention, an electronic settlement is performed using a security token generated based on subscriber information input by a user and a unique number of a subscriber identity module for communication service, Security for user authentication and security for terminal hacking can be enhanced. In addition, according to an embodiment of the present invention, when a user makes a financial settlement, he / she can pay the corresponding fee using electronic payment with enhanced security only by PIN (Personal Identification Number) It is effective. That is, the user authenticates only the PIN, but compares the security token, which is encrypted information generated in the terminal and the communication management apparatus, to perform the authentication, thereby enhancing the security. In addition, according to one embodiment of the present invention, even if the security tokens generated in the terminal and the communication management apparatus are leaked to the outside, since the payment information of the user and the unique number of the subscriber identity module can not be confirmed through each security token, Information is protected.

1 is a block diagram schematically showing an electronic payment system using subscriber information and a subscriber identity module according to an embodiment of the present invention;
2 is a block diagram schematically illustrating a terminal according to an embodiment of the present invention,
3 is a block diagram schematically showing a communication management apparatus according to an embodiment of the present invention;
FIG. 4 is a flowchart illustrating an electronic payment providing method using subscriber information and a subscriber identity module according to an embodiment of the present invention; FIG.
5 is a diagram illustrating an example of an electronic payment providing method using subscriber information and a subscriber identity module according to an embodiment of the present invention.

The first payment information described in one embodiment of the present invention refers to credit card number information or bank account information inputted by a subscriber to pay a communication fee when joining a communication service and the second payment information is transmitted to the terminal 110 Credit card number information or bank account information entered to pay for communication charges when subscribing to the entered communication service. The first unique number refers to the unique number of the subscriber identity module assigned to the subscriber at the time of subscription to the communication service and the second unique number refers to the unique number of the subscriber identity module entered into the terminal 110. The first security token refers to the encrypted information generated for authentication in the communication management apparatus 130 and the second security token refers to the encrypted information generated for the authentication in the terminal 110. [

1 is a block diagram schematically illustrating an electronic settlement providing system using subscriber information and a subscriber identity module according to an embodiment of the present invention.

The electronic settlement providing system according to an embodiment of the present invention includes a terminal 110, a subscriber identity module 112, a communication network 120, a communication management apparatus 130, and a financial settlement providing apparatus 140. In an embodiment of the present invention, the electronic payment system includes only the terminal 110, the subscriber identity module 112, the communication network 120, the communication management device 130, and the financial settlement providing device 140 It will be understood by those of ordinary skill in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. Various modifications and variations may be applied to the components included in the electronic payment system.

The terminal 110 is a terminal capable of transmitting and receiving various data via the communication network 120 according to a key operation of a user. The terminal 110 may be a tablet PC, a laptop, a personal computer (PC) A smart phone, a personal digital assistant (PDA), a mobile communication terminal, and the like. That is, the terminal 110 includes a memory for storing a program for connecting to the communication management apparatus 130 via the communication network 120, a microprocessor for executing and controlling the program, and the like do. That is, the terminal 110 may be any terminal as long as it is connected to the communication network 120 and is capable of server-client communication with the communication management apparatus 130, and may be any communication computing apparatus such as a notebook computer, a mobile communication terminal, It is a broad concept that includes everything. Meanwhile, the terminal 110 is preferably manufactured with a touch screen, but is not limited thereto.

The application downloaded from the terminal 110 is an application installed after downloading through the application store when the terminal 110 is a smart phone and is downloaded through a communication company server when the terminal 110 is a feature phone. Virtual machines (VMs) and applications.

The terminal 110 according to an exemplary embodiment of the present invention extracts a second unique number given to the subscriber identity module 112 that has been concatenated, and based on the second unique number and the second payment information input by the user's command And stores the generated security token in the subscriber identity module 112. [ Here, the second payment information is the same information as the credit card number information or the bank account information previously registered in the communication management apparatus 130, and the second security token is encrypted information, and the second payment information and the second unique number Based encrypted value. Here, the second security token is preferably a hash value based on the second payment information and the second unique number, but is not limited thereto. The terminal 110 receives the first security token from the communication management apparatus 130 when the settlement request signal by the user's instruction is received, compares the first security token with the second security token, And the second security token coincide with each other, the settlement approval for the electronic settlement request signal is processed.

The terminal 110 checks whether the PIN (Personal Identification Number) information input by the user's operation is to be authenticated in order to generate the second security token. If the PIN information is authenticated, the second security token . Here, the PIN is a kind of personal identification number, which is generally set to four digits, and an eight-digit PUK (Personal Unblocking Key) is assigned. On the other hand, the PIN can be changed according to the user's need. If the user incorrectly inputs the PIN more than a predetermined number of times consecutively, the PIN can be reset by inputting the PUK because the subscriber identification module is locked. However, if the PUK is entered more than a predetermined number of times, the PUK must be discarded and re-granted. When the PIN information is authenticated, the terminal 110 confirms whether or not the PIN information re-entered by the user's operation is authenticated to process the payment approval. If the PIN information is authenticated, the terminal 110 transmits the second security token to the subscriber identification module 112, To be loaded. The terminal 110 transmits a settlement approval signal to the communication management apparatus 130 when the settlement approval for the settlement request signal is processed.

The terminal 110 adds a hash function, a hash algorithm, a Rivest Shamir Adleman (RSA), a data encryption standard (DES), a Message-Digest Algorithm 5 (MD5) to the second payment information and the second unique number ), A BitLocker Drive Encryption (BitLocker Drive Encryption), and a Feistel Cipher (BitLocker Drive Encryption). Meanwhile, the terminal 110 preferably applies a hash function or a hash algorithm to the second payment information and the second unique number, but is not limited thereto. Here, the hash function or the hash algorithm is a method of generating a kind of short 'electronic fingerprint' from arbitrary data. The hash function produces a result value by cutting, substituting, or repositioning the data, and the resulting value is generally referred to as a hash value. Since the hash function must operate deterministically, if the two hash values are different, the original data for the hash value must also be different, and the inverse is not established. That is, the quality of a hash function is determined by how many hash collisions (when two different hash values of the data are the same) in the input area. As the collisions increase, it becomes difficult to distinguish the different data, The cost will increase. That is, the most basic property of all hash functions is that if the two hash values are different, the original data is also somewhere different. This is because the hash function is deterministic, and conversely, the hash function is not a single function. Having the same hash value does not guarantee that the original input value is the same, but it does not guarantee that even if only one bit of the original input is changed, the hash value will vary greatly due to the nature of the hash function.

Meanwhile, the terminal 110 stores a second security token generated using the second unique number assigned to the subscriber identity module 112 concluded with the second payment information input by the user, and the electronic settlement request signal A function of processing payment approval for an electronic settlement request signal based on a result of comparison between the first security token received from the communication management apparatus 130 and the previously stored second security token is installed in the terminal 110 Lt; / RTI > applications. That is, the terminal 110 may download and install an electronic payment application, and perform the functions described above through the corresponding electronic payment application, but the present invention is not limited thereto.

The subscriber identification module 112 stores basic information such as subscriber identification information and telephone number information, and is connected to the terminal 110 to provide subscriber identification information. Herein, the subscriber identity module is a type of smart card and may be called a UICC (Universal Integrated Circuit Card), and may be a microprocessor, a memory, a card operation system (COS), a security algorithm, an Electronically Erasable Programmable Read Only Memory ) And the like. The subscriber identification module 112 is used for subscriber authentication, billing, global roaming, electronic commerce, and the like. The subscriber identity module 112 may be manufactured as a card and inserted into the terminal 110 and may include at least one of a Subscriber Identification Module (SIM), a Universal Subscriber Identity Module (USIM), or a Micro USIM .

Various information of the user stored in the subscriber identity module 112 includes personal authentication information such as a personal identification number PIN for user authentication of the terminal 110 and a personal unblocking key PUK. The personal authentication information stored in the memory chip of the subscriber identity module 112 determines whether the card user is a registered user in the network when the subscriber identity module 112 is inserted into the terminal 110, ), Thereby allowing the call charge to be charged to the user of the subscriber identification module 112. If the user of the subscriber identification module 112 is a registered user in the network, it is determined that a correct PIN is input. If the wrong PIN is input more than three times, the use of the terminal 110 is blocked and a PUK is input . If an incorrect PUK is entered more than a preset number of times, it will be impossible to make a call except an emergency call. The PUK is a unique number stored in the subscriber identity module 112, which is assigned when the subscriber identity module 112 is purchased (or provided). Meanwhile, the subscriber identity module 112 according to an embodiment of the present invention stores a second security token in a security area divided into separate areas.

The communication network 120 is a network capable of transmitting and receiving data using an Internet protocol using various wired and wireless communication technologies such as an Internet network, an intranet network, a mobile communication network, and a satellite communication network. Here, since the description of the communication network 120 is already known, a detailed description will be omitted.

The communication management apparatus 130 performs basic and supplementary service processing for providing a communication service, incoming and outgoing call processing of a subscriber, location registration procedure and handoff procedure processing, interworking with other networks, and the like. The communication management apparatus 130 includes a database storing a service profile related to information of a subscriber and includes a mobile identification number (MIN), an electronic serial number (ESN) ) And the type of service to store subscriber information.

The communication management apparatus 130 according to an exemplary embodiment of the present invention stores subscriber information and extracts a first unique number assigned to the subscriber identity module 112 based on subscriber information. The communication management apparatus 130 generates a first security token using the first payment information and the first unique number and stores the first security token in the subscriber identity module 112. When the request for the first security token is received from the terminal 110 And transmits the first security token to the terminal 110. [ When the communication management apparatus 130 receives an approval signal for requesting an electronic payment from the terminal 110, the communication management apparatus 130 transmits a payment approval signal for the corresponding fee to the financial settlement providing apparatus 140, And transmits the approval result signal to the terminal 110. Meanwhile, the communication management apparatus 130 applies the hash function, the hash algorithm, the RSA, the DES, the MD5, the bitlocker drive encryption, and the Pasteel encryption to the first payment information and the first unique number, And generates a first security token. Here, the communication management apparatus 130 preferably uses a hash function or a hash algorithm to generate the first security token, but is not limited thereto.

The financial settlement providing device 140 is a concept of a device including at least one of a card issuer server for performing electronic settlement, a financial institution server, a communication fee charging server, a transportation agency server, and a mobile payment server. Of course, the financial settlement providing apparatus 140 may be implemented by any one of a card issuer server, a financial institution server, a communication fee charging server, a traffic agency server, and a mobile payment server. The financial settlement providing apparatus 140 receives the payment approval signal and performs a function of processing the payment corresponding to the payment approval signal by the payment means. That is, the financial settlement providing device 140 performs an electronic settlement for the corresponding fee when the approval signal for the electronic settlement approval request signal is received from the communication management device 130. [

2 is a block diagram schematically illustrating a terminal according to an embodiment of the present invention.

The terminal 110 according to an embodiment of the present invention includes a subscriber identity module concatenation unit 210, a second security token generation unit 220, a PIN authentication unit 230, a settlement approval unit 240, a key input unit 250 And a terminal communication processing unit 260. In an embodiment of the present invention, the terminal 110 includes a subscriber identity module concatenation unit 210, a second security token generation unit 220, a PIN authentication unit 230, a payment approval unit 240, a key input unit 250 and the terminal communication processing unit 260. However, the present invention is not limited to the description of the technical idea of an embodiment of the present invention, The present invention is not limited to the above embodiments and various changes and modifications may be made to the components included in the terminal 110 without departing from the essential characteristics of the embodiments of the present invention. That is, the terminal 110 according to an exemplary embodiment of the present invention is preferably configured to include a memory unit, a display unit, a terminal controller, a microphone, and a speaker, but in the present invention, It is assumed that only the connection unit 210, the second security token generation unit 220, the PIN authentication unit 230, the payment approval unit 240, the key input unit 250 and the terminal communication processing unit 260 are included.

The subscriber identity module concatenation unit 210 concludes with the subscriber identity module 112 and transmits and receives information stored in the subscriber identity module 112. [ The second security token generation unit 220 extracts a second unique number assigned to the subscriber identity module 112 that has been concluded and generates a second security token based on the second payment information and the second unique number input through the key input unit 250 And generates and stores the second security token in the subscriber identity module 112. [ The second security token generating unit 220 applies the hash function, the hash algorithm, the RSA, the DES, the MD5, the bitlocker drive encryption, and the Pasteur encryption to the second payment information and the second unique number, Lt; / RTI > Here, the second security token is encrypted information, and the second payment information is an encrypted value based on the second payment information and the second unique number, and the second payment information is credit card number information previously registered in the communication management apparatus 130, It is the same information as the account information.

The PIN authentication unit 230 checks whether or not the PIN information input through the key input unit 250 is authenticated to generate the second security token. If the PIN information is authenticated as a result of the check, (220) to generate a second security token. The PIN authentication unit 230 checks whether the re-entered PIN information is authenticated in order to process the payment approval. When the PIN information is authenticated, the PIN authentication unit 230 causes the payment approval unit 240 to load the second security token Allow. The payment approval unit 240 compares the first security token with the second security token, and if the first and second security tokens match, processes the payment approval for the electronic settlement request signal.

The key input unit 250 includes keys for inputting numbers, characters, and symbols, and receives keys or commands from a user using the terminal 110. [ Here, the key input unit 250 may be implemented as a touch screen together with the display unit, but is not limited thereto. The terminal communication processing unit 260 receives the first security token from the communication management apparatus 130 when a payment request signal is received from the key input unit 250. [ The terminal communication processing unit 260 transmits a settlement approval signal to the communication management apparatus 130 when the settlement approval for the settlement request signal is processed through the settlement approval unit 240. [ That is, the terminal communication processing unit 260 may include a digital signal processing function for coding or decoding an audio signal, performing an equalizer function for eliminating multipath noise, performing an audio data processing function, etc., A baseband conversion function for performing a digital-to-analog conversion and an analog-to-digital conversion processing, an RF (Radio Frequency) signal to be converted into an IF (Intermediate Frequency) An RF signal processing function for demodulating and amplifying an RF signal, and an antenna function for transmitting and receiving a radio signal into the air. Also, the terminal communication processing unit 260 can perform voice or data communication through an access point (AP). That is, the terminal communication processing unit 260 can be implemented to process data packets using a wireless communication technology such as a wireless LAN (WLAN), a Wi-Fi, a WiMAX, and a WiBro , But is not limited thereto.

3 is a block diagram schematically showing a communication management apparatus according to an embodiment of the present invention.

The communication management apparatus 130 according to an embodiment of the present invention includes a subscriber information database 310, an information extraction unit 320, a first security token generation unit 330, a communication processing unit 340, ). In an embodiment of the present invention, the communication management apparatus 130 includes a subscriber information database 310, an information extraction unit 320, a first security token generation unit 330, a communication processing unit 340, The present invention is not limited to the above-described embodiments, and various modifications and changes may be made without departing from the spirit and scope of the invention as defined in the appended claims. Various modifications and changes may be made to the components included in the communication management apparatus 130 without departing from the essential characteristics of the exemplary embodiments.

The subscriber information database 310 stores subscriber information. Here, the subscriber information database 310 classifies the first payment information, the unique number of the subscriber identity module 112, and the telephone number information included in subscriber information and stores the classified information in a database, May be implemented inside or outside the device 130. Such a database is a general data structure implemented in a storage space (hard disk or memory) of a computer system using a database management program (DBMS), and can be used to freely search (extract), delete, edit, (RDBMS) such as Oracle, Informix, Sybase, and DB2, as well as Gemston, Orion, (OODBMS) such as O2 and O2, and an XML Native Database such as Excelon, Tamino, Sekaiju, etc. for the purpose of an embodiment of the present invention. And has the appropriate fields or elements to achieve its function.

The information extracting unit 320 extracts the first payment information and the first unique number assigned to the subscriber identification module 112 based on the subscriber information stored in the subscriber information database 310. The first security token generating unit 330 generates the first security token using the first payment information and the first unique number. The first security token generating unit 330 applies the hash function, the hash algorithm, the RSA, the DES, the MD5, the bitlocker drive encryption, and the Pasteur encryption to the first payment information and the first unique number to encrypt Lt; RTI ID = 0.0 > token < / RTI > When there is a request for the first security token from the terminal 110, the communication processing unit 340 transmits the first security token to the terminal 110. When the electronic settlement processor 350 receives an approval signal for an electronic settlement request from the terminal 110, the electronic settlement processor 350 transmits a settlement approval signal for the corresponding fee to the financial settlement providing device 140. [ The electronic settlement processing unit 350 receives an approval result signal for the corresponding cost from the financial settlement providing apparatus 140 and transmits it to the terminal 110. [

4 is a flowchart illustrating an electronic payment providing method using subscriber information and a subscriber identity module according to an embodiment of the present invention.

In step S410, the communication management apparatus 130 extracts first payment information input from a dealer, a merchant, or an Internet server when the user first subscribes to the communication service. That is, after subscribing to the initial communication service, the subscriber essentially inputs the bank account number or the credit card number in order to automatically transfer the communication cost, and the communication management apparatus 130 acquires the corresponding information. In addition, the communication management apparatus 130 obtains the first unique number of the subscriber identity module 112 assigned to the user when the user uses the communication service (S412). That is, the subscriber identity module 112 is connected to the terminal 110 to use the communication service, but when the communication service is started, the communication management apparatus 130 transmits the unique number of the subscriber identity module 112 assigned to the user, Payment information, telephone number information, and the like.

The communication management apparatus 130 stores the first payment information and the first unique number (S414), and transmits a payment initiation request signal to the terminal 110 (S416). The terminal 110 can receive the settlement initiation request signal from the communication management apparatus 130 and initialize the settlement information. On the other hand, the communication management apparatus 130 can provide an electronic payment application capable of performing electronic settlement to the terminal 110.

The terminal 110 receives the second payment information input by the user's operation (S418). At this time, the terminal 110 can use the downloaded electronic payment application. The terminal 110 extracts a second unique number assigned to the subscriber identity module 112 (S420). Here, the second payment information is the same information as the credit card number information or the bank account information previously registered in the communication management apparatus 130, and the second security token is encrypted information based on the second payment information and the second unique number Is a hash value.

The terminal 110 receives the PIN information input by the user's operation to generate the second security token, and compares the PIN with the PIN of the subscriber identity module 112 to authenticate the input PIN (S422). When the input PIN information is authenticated, the terminal 110 generates a second security token using the second payment information and the second unique number (S424). Here, the terminal 110 may generate a second security token encrypted by applying a hash function or a hash algorithm to the second payment information and the second unique number. The terminal 110 stores the generated second security token in the subscriber identity module 112 (S426). Meanwhile, the communication management apparatus 130 generates and stores the first security token using the first payment information and the first unique number (S428). Meanwhile, the communication management apparatus 130 generates a first security token encrypted by applying a hash function or a hash algorithm to the first payment information and the first unique number.

The terminal 110 receives the settlement request signal by the user's command (S430). The terminal 110 receives the PIN information re-entered by the user's operation to retrieve the first security token stored in the subscriber identification module 112, compares the PIN with the PIN of the subscriber identification module 112, Information is authenticated (S432). When the re-entered PIN information is authenticated, the terminal 110 loads the second security token from the subscriber identity module 112 (S434).

After receiving the first security token from the communication management apparatus 130, the terminal 110 compares the first security token with the second security token (S436). When the first security token and the second security token coincide with each other, the terminal 110 processes the settlement approval for the electronic settlement request signal and transmits a settlement approval signal to the communication management apparatus 130 at step S438. When the communication management apparatus 130 receives an approval signal for requesting an electronic payment from the terminal 110, the communication management apparatus 130 transmits a payment approval signal for the corresponding fee to the financial settlement providing apparatus 140 (S440) (S442), and transmits the approval result signal to the terminal 110 (S444). After receiving the approval result signal from the communication management device 130, the terminal 110 processes the purchase completion for the corresponding cost (S446).

Although it is described in FIG. 4 that steps S410 to S446 are sequentially executed, this is merely illustrative of the technical idea of an embodiment of the present invention. It is to be understood that the technical knowledge in the technical field to which an embodiment of the present invention belongs Those skilled in the art will appreciate that various modifications and adaptations may be made to those skilled in the art without departing from the essential characteristics of one embodiment of the present invention by changing the order described in Figure 4 or by executing one or more of steps S410 through S446 in parallel And therefore, it is not limited to the time-series order in Fig.

As described above, the electronic payment providing method using the subscriber information and the subscriber identity module according to the embodiment of the present invention illustrated in FIG. 4 can be implemented by a program and recorded on a computer readable recording medium. A program for implementing an electronic payment providing method using subscriber information and a subscriber identity module according to an embodiment of the present invention is recorded and a computer-readable recording medium includes all kinds of data stored in a computer- And a recording device. Examples of such computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, etc., and also implemented in the form of a carrier wave (e.g., transmission over the Internet) . The computer readable recording medium may also be distributed over a networked computer system so that computer readable code is stored and executed in a distributed manner. In addition, functional programs, code, and code segments for implementing an embodiment of the present invention may be easily inferred by programmers skilled in the art to which an embodiment of the present invention belongs.

5 is a diagram illustrating an example of an electronic payment providing method using subscriber information and a subscriber identity module according to an embodiment of the present invention.

As shown in FIG. 5, the user inputs a bank account number or a credit card number to automatically transfer a communication cost by using an agent, an affiliate shop, or an Internet server at the time of first joining a communication service. ) Stores the information as first payment information. Also, the communication management apparatus 130 extracts the unique number of the subscriber identity module 112 assigned to the user when the user uses the communication service, and stores the extracted unique number as the first unique number. At this time, the communication management apparatus 130 stores the unique number of the subscriber identity module 112 assigned to the user, first payment information, telephone number information, and the like in a matching manner.

Here, the communication management apparatus 130 may provide an electronic settlement application capable of performing electronic settlement to the terminal 110. [ The terminal 110 receives the second payment information inputted by the user's operation. At this time, the terminal 110 can use the downloaded electronic payment application. The terminal 110 extracts a second unique number assigned to the subscriber identity module 112 that has been concatenated. Here, the second payment information is the same information as the credit card number information or the bank account information previously registered in the communication management apparatus 130, and the second security token is encrypted information based on the second payment information and the second unique number Is a hash value.

The terminal 110 generates a second security token using the second payment information and the second unique number. Here, the terminal 110 may generate a second security token encrypted by applying a hash function or a hash algorithm to the second payment information and the second unique number. The terminal 110 stores the generated second security token in the subscriber identity module 112. Meanwhile, the communication management apparatus 130 generates and stores the first security token using the first payment information and the first unique number. Meanwhile, the communication management apparatus 130 generates a first security token encrypted by applying a hash function or a hash algorithm to the first payment information and the first unique number.

When the terminal 110 receives the settlement request signal by the user's command, the terminal 110 compares the first security token with the second security token after receiving the first security token from the communication management device 130. [ When the first security token and the second security token coincide with each other, the terminal 110 processes the settlement approval for the electronic settlement request signal and transmits a settlement approval signal to the communication management apparatus 130. When the communication management apparatus 130 receives an approval signal for requesting an electronic payment from the terminal 110, the communication management apparatus 130 transmits a payment approval signal for the corresponding fee to the financial settlement providing apparatus 140, And transmits the approval result signal to the terminal 110.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention. Various modifications and variations will be possible. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of equivalents should be construed as falling within the scope of the present invention.

As described above, the present invention is applied to various fields that can enhance security for user authentication and terminal hacking in electronic payment, so that when a user makes a financial settlement, only PIN authentication for his / It is a useful invention that generates the effect of paying the corresponding cost by using electronic payment with enhanced security.

110: Terminal 112: Subscriber Identity Module
120: communication network 130: communication management apparatus
140: financial settlement providing apparatus 210: subscriber identification module concatenation unit
220: second security token generation unit 230: PIN authentication unit
240: Payment acceptance unit 250: Key input unit
260: terminal communication processing unit 310: subscriber information database
320: information extracting unit 330: first security token generating unit
340: communication processing unit 350: electronic payment processing unit

Claims (9)

Extracting a second unique number assigned to the subscriber identity module that has been concatenated and generating and storing a second security token based on the second payment information and the second unique number input through the key input unit, A security token generating unit;
A terminal communication processing unit for receiving a first security token from the communication management apparatus when a payment request signal is received; And
A settlement approval unit for comparing the first security token with the second security token and processing a payment approval for the settlement request signal,
And the second payment information is the same information as the payment information previously registered in the communication management apparatus.
The method according to claim 1,
(PIN) information input through the key input unit to generate the second security token is authenticated. If it is determined that the PIN information is authenticated, the second security token generating unit Further comprising a PIN authentication unit for allowing the second security token to be generated in the terminal.
3. The method of claim 2,
The PIN authenticating unit,
The second security token is allowed to be loaded into the payment approval unit when the PIN information is authenticated as a result of checking whether the PIN information re-inputted to process the payment approval is authenticated Lt; / RTI >
The method according to claim 1,
Wherein the second security token is encrypted information and is an encrypted value based on the second payment information and the second unique number.
The method according to claim 1,
And the second payment information includes:
The information is the same as the credit card number information or the bank account information previously registered in the communication management apparatus.
The method according to claim 1,
The terminal communication processing unit,
And transmits a settlement approval signal to the communication management apparatus when the settlement approval for the settlement request signal is processed through the settlement approval unit.
The method according to claim 1,
Wherein the second security token generating unit comprises:
(Hash Function), a Hash Algorithm, a Rivest Shamir Adleman (RSA), a Data Encryption Standard (DES), a Message-Digest Algorithm 5 (MD5) Wherein the second security token is generated by applying an encryption method of either BitLocker Drive Encryption or Feistel Cipher.
The method according to claim 1,
Wherein the subscriber identity module comprises:
And stores the second security token in a security area divided into a separate area.
The method according to claim 1,
Wherein the subscriber identity module comprises:
A Subscriber Identification Module (SIM), a Universal Subscriber Identity Module (USIM), and a Micro USIM (USIM).

Images