KR20170052552A - Method for Providing Safety Code - Google Patents

Abstract

The present invention relates to a method to safely provide a code, capable of being executed through a user mobile phone and a server. According to the present invention, the method comprises: a step of the server confirming a code dynamically generated to be provided to the user mobile phone; a step of the server checking whether or not a predetermined program to receive the generated code is installed in the user mobile phone; a step of the server transmitting a message including operation information for operating the predetermined program and transferring the generated code to the predetermined program to the user mobile phone when the predetermined program is checked; the server encoding the generated code to be decoded through only the predetermined program operated in the user mobile phone when the user mobile phone receives the message to operate the predetermined program by the operation information, so as to generate an encoded code; a step of the server providing the encoded code to the predetermined program of the user mobile phone; a step of the predetermined program of the user mobile phone checking the encoded code; a step of the predetermined program of the user mobile phone decoding the checked encoded code to check the decoded code; and a step of the predetermined program of the user mobile phone outputting the checked decoded code or using the same in an authentication procedure.

Description

{Method for Providing Safety Code}

The present invention provides a secure code providing method that is executed through a user's mobile phone and a server, comprising the steps of: confirming a dynamically generated code for providing to a user's mobile phone by a server; And a message for transmitting the generated code to the specific program is provided to the user's mobile phone when the server confirms that the program is installed and the server includes driving information for driving the specific program, Receiving the message from the user's cellular phone and generating the encrypted code by encrypting the generated code so that the server is decrypted only through the specific program driven by the user's cellular phone when the specific program is driven by the drive information, The server A specific program of the user's mobile phone identifies the encrypted code and a specific program of the user's mobile phone decrypts the identified encrypted code to identify a decryption code, And to provide a secure code providing method in which a specific program of the mobile phone outputs the identified decryption code or uses it in the authentication procedure.

Generally, in the case of a small payment for Phone Ville which is currently being serviced, a customer requesting payment transmits a mobile phone number and a social security number to a server through a UI (User Interface) outputted to the terminal, A SMS (Short Message Service) text message containing a code is transmitted, and a customer who has confirmed the text message inputs a payment code through the terminal and transmits the text message to the server, thereby using the Phone Ville payment service.

The method for such a Voicemail micropayment service is such that, when a mobile phone number and a user's authentication number (i.e., a resident registration number) are input through a user terminal (PC) and transmitted to a server, as in the registered patent No. 10-0344114, And provides a text message to the mobile phone number, receives authentication information input by a user who has confirmed the authentication number, and authenticates and processes the authentication.

However, when a user loses his / her cell phone and finds out the resident registration number of the owner of the cell phone acquired by the user who acquires the lost cell phone, the user can not solve the problem by using the Phone ville micro payment service.

For this reason, a method for solving the problem of abuse of the Phone Ville small settlement service due to the loss of the mobile phone is required, resulting in a financial loss of the owner of the mobile phone due to the abuse of the Phone Ville small settlement service, Which will adversely affect the activation of the Phone Ville micropayment service.

It is an object of the present invention to provide a secure code providing method that is executed through a user's mobile phone and a server, comprising: a first step of a server confirming a dynamically generated code for providing to a user's mobile phone; A second step of confirming whether a specific program to be provided with a code is installed, and a second step of confirming whether or not a specific program to be provided with the code is installed, and a message for transmitting the generated code to the specific program, And a third step of receiving the message from the user's mobile phone and generating the driving information so that the server is decrypted only through a specific program driven by the user's cellular phone when the specific program is driven by the driving information, Encrypted Code to Encrypt A fifth step of the server providing the encryption code to a specific program of the user's cellular phone; a sixth step of confirming the encryption code by a specific program of the user's cellular phone; The program comprising the steps of: decrypting the identified encryption code and confirming the decryption code; and eighth step of outputting the identified decryption code or using the decrypted code in the authentication procedure, .

A secure code providing method according to the present invention is a secure code providing method executed by a user's mobile phone and a server, the secure code providing method comprising: a first step of the server verifying a code dynamically generated for providing to a user's mobile phone; A second step of checking whether or not a specific program to be provided with the generated code is installed; and a second step of checking whether the specific program is provided, when the server confirms the specific program, the server includes driving information for driving the specific program, A third step of processing the message to be delivered to the user's cellular phone when the specific information is received by the user's cellular phone, and a third step of receiving the message from the user's cellular phone, The generated nose < RTI ID = 0.0 > A fifth step of the server providing the encryption code to a specific program of the user's cellular phone, a sixth step of confirming the encryption code by a specific program of the user's cellular phone, A seventh step of a specific program of the user's mobile phone decrypting the identified encryption code to confirm a decryption code and an eighth step of outputting the identified decryption code or using the decrypted code in the authentication procedure by the specific program of the user's mobile phone .

In the secure code providing method according to the present invention, when the specific program is driven by the driving information upon receiving the message from the user's cellular phone, the server communicates with a specific program of the user's cellular phone to generate an encryption key for encryption / And a step of exchanging and storing the decryption key, wherein the server encrypts the generated code through an encryption key exchanged with a specific program of the user's cellular phone to generate an encrypted code, The seventh step is characterized in that the specific program of the user's cellular phone decrypts the encrypted code using the decryption key exchanged with the server to confirm the decrypted code.

In the secure code providing method according to the present invention, the message is received by the user's mobile phone and transmitted to a specific program driven in the mobile phone.

According to the present invention, it is possible to prevent a financial loss to the owner of a mobile phone caused by abuse of the Phone Ville micropayment service due to the loss of the mobile phone, and to provide a secure Phone Ville micropayment service.

1 is a diagram illustrating a configuration of a payment system for providing a payment service according to an embodiment of the present invention.
2 is a diagram illustrating a configuration of a payment system for providing a payment service according to an embodiment of the present invention.
3 is a diagram illustrating a process for providing a payment service according to an embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

It is to be understood that both the foregoing general description and the following detailed description of the present invention are exemplary and explanatory and are intended to provide further explanation of the invention as claimed. The configuration is omitted as much as possible, and a functional configuration that should be additionally provided for the present invention is mainly described. Those skilled in the art will readily understand the functions of components that have been used in the prior art among the functional configurations that are not shown in the following description, The relationship between the elements and the components added for the present invention will also be clearly understood.

In order to efficiently explain the essential technical features of the present invention, the following embodiments properly modify the terms so that those skilled in the art can clearly understand the present invention, It is by no means limited.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

FIG. 1 is a diagram illustrating a configuration of a payment system for providing a payment service according to an embodiment of the present invention.

In more detail, FIG. 1 illustrates one or more users purchasing goods through an Internet shopping mall, payment using one or more services through a server on the Internet providing one or more services, payment through one or more services (Or selecting) one or more pieces of information corresponding to the requested information, and transmits the information of the second terminal 120, which is input (or selected) through the user interface, user information A settlement system for receiving settlement request information including at least one of driving information, settlement amount information and merchant information, and providing a settlement service based on the received settlement request information, A person who has ordinary skill in the art can use the drawing 1 to make a payment service The present invention is not limited to the various embodiments of the payment system.

For example, those skilled in the art can refer to and / or modify the FIG. 1 to provide a single server integrated with one or more servers provided on the payment system, or a plurality of servers The present invention is not limited thereto.

Referring to FIG. 1, the payment system includes a first terminal that requests a settlement service after using a service through a server that purchases a product through an Internet shopping mall or provides one or more services on the Internet, An affiliate shop 105 that provides an Internet shopping mall service to the terminal or provides an Internet shopping mall service to distribute a product or provides one or more services, and a second terminal that requests payment through the affiliate shop server 105, A user interface for inputting (or selecting) payment request information including at least one of the second terminal 120 information, user information, driving information, payment amount information, and merchant information, A payment server 110 for receiving the payment request information and providing the payment service, In order to provide a settlement service, a communication service provider who verifies the user who has requested payment (i.e., the subscriber authentication based on the second terminal 120 information and the user information), and confirms / And a server (115).

The first terminal requests the settlement of the purchase price for the purchase of goods through the Internet shopping mall or requests the payment of the service use fee after using one or more services provided from the server on the Internet or applying for use Requests the payment interface for using the payment service, processes the received payment interface to be output according to the request, and transmits the payment request information input through the outputting payment interface to the payment server 110 (or the merchant server 105) to request payment.

Here, the payment interface may include at least one user interface for inputting payment request information including at least one of the second terminal 120 information, user information, driving information, payment amount information, and merchant point information , The user interface for inputting the payment request information may be provided in one or more windows.

The merchant server 105 provides the Internet shopping mall service or provides one or more services to provide the Internet shopping mall to the first terminal to distribute the goods.

For example, the merchant server 105 may be an Internet shopping mall server, or a server on the Internet that provides one or more contents.

When the payment server 110 requests settlement service through the merchant server 105, the payment server 110 transmits the second terminal 120 information, user information, driving information, payment amount information, and merchant information to the first terminal (Or a payment interface) for inputting (or selecting) payment request information including at least the payment request information included in the received payment request and providing payment service by receiving payment request information input (or selected) through the provided user interface .

According to an embodiment of the present invention, the provided payment service may be configured such that the payment request information is inputted (or selected) through the provided user interface, and when the payment request information is received from the first terminal, Generates payment code information to be transmitted to the second terminal 120 after confirming user authentication corresponding to the information,

The second terminal 120 transmits the generated payment code information to the second terminal 120 to further transmit the driving information included in the received payment request information to the second terminal 120 so that the program corresponding to the driving information is driven It is preferable to treat them.

Here, the user interface (i.e., payment interface) may be provided by the merchant server 105 in addition to the payment server 110, and thus the present invention is not limited thereto.

The billing code may be generated by a shopping mall server (or a service providing server) requesting payment of settlement amount, or may be generated by a payment server 110 or a communication company server 115 that provides a payment service.

In order to provide a payment service from the payment server 110, the communication company server 115 confirms a user requesting payment (i.e., subscriber authentication based on information of the second terminal 120 and user information) And / or whether the user is a user who can provide a payment service.

FIG. 2 is a diagram illustrating a configuration of a payment system 205 for providing a payment service according to an embodiment of the present invention.

In more detail, FIG. 2 illustrates an example in which one or more users purchase goods through an Internet shopping mall or use one or more services through a server on the Internet to provide one or more services, Requests a payment service and provides a user interface including one or more input (or selection) interfaces corresponding to the second interface 260. Then, the second terminal 260, which is input through the user interface, The payment system 205 receives payment request information including at least one piece of information and provides the payment service on the basis of the received payment request information. If it is the owner, the payment for providing the settlement service using the drawing 2 It will be able to derive a range of exemplary methods for the system 205, to which the present invention is not limited.

For example, those skilled in the art will appreciate that one or more of the means provided on the payment system 205 may be provided on a single server, or may be provided on a plurality of servers The present invention is not limited thereto.

Each of the function configuration means provided on the payment system 205 may be separated into a plurality of function configuration means or may be combined with a single function configuration means by combining a plurality of function configuration means, One or more functions of the constituent means may be separated / combined, and thus the present invention is not limited thereto.

Referring to FIG. 2, when the payment system 205 purchases a product through one or more servers on the Internet or requests a payment service corresponding to the purchase after using the service, the corresponding user interface (that is, And a second terminal 260 that is input (or selected) through the provided user interface (i.e., a payment interface), user information, driving information, payment amount information, merchant information (Second terminal 260) for confirming the real name authentication of the user who has requested the payment service corresponding to the received payment request information, and an information receiving unit 215 for receiving the payment request information including at least one piece of information, Real name authentication processing means (220) for authenticating the real name based on the information and the user information) A settlement authentication processing unit 225 for confirming whether payment is possible in response to the received settlement request information, and a settlement processing unit 225 for receiving settlement code information to be transmitted to the second terminal 260 Payment approval processing means (235) for transferring the generated payment code information and driving information to the second terminal (260) to process payment approval; And payment processing means (240) for authenticating the received payment code and providing a payment service when the information is received.

The interface providing means 210 provides a corresponding user interface (i.e., a payment interface) when purchasing a product through one or more servers on the Internet or using a service and then requesting a payment service corresponding thereto, .

According to the embodiment of the present invention, the user interface (i.e., the payment interface) includes information about the second terminal 260 (e.g., mobile phone number information) for the user requesting the payment service,

Driving information

And an area for inputting the payment request information including at least one of the payment amount information and the merchant information. In order to input one or more pieces of information included in the payment request information according to the intention and purpose of a person skilled in the art, And a user interface for inputting (or selecting) through a window of the display device.

Here, the provided user interface (i.e., payment interface) may be provided (or directly) through the merchant server, the payment server, or the communication company server 255 shown in FIG. 1, No.

The payment request information including at least one of the second terminal 260 information, user information, driving information, payment amount information, and merchant point information through the user interface (i.e., the payment interface) provided through the interface providing means 210 The information receiving means 215 receives the payment request information inputted through the user interface.

The information of the second terminal 260 may be used to settle a service purchase fee generated according to the purchase amount of the goods or the service purchase of one or more goods through the merchant providing the payment service using a payment service, (Universal Subscriber Identity Module) information provided in a terminal such as a wireless terminal, or an IC (Integrated Circuit) information such as a telephone number of a mobile phone requesting an actual settlement, Chip information or the like, or information (for example, IP address information, etc.) about a terminal having a communication function such as IPTV (Internet Protocol Television) or the like.

The user information may include at least one of a merchandise purchase amount of at least one merchandise purchased through the merchant providing the settlement service or a service usage fee generated in accordance with the use of the service, Personal information (e.g., name, resident registration number, home telephone number, etc.).

The settlement amount information may include at least one of a purchase amount of a product purchased through at least one merchant through the merchant providing the settlement service or a service usage fee generated in accordance with the use of the service, It is preferable to include the amount information to be used.

The Fonville merchant information is obtained by paying a service purchase fee generated according to a purchase amount of a product or a service purchased by one or more merchandise through the merchant providing the payment service using a payment service, A merchant address, a telephone number, a representative name, a merchant code, and the like for the merchant to which the money is to be paid.

When the payment request information is received through the information receiving means 215, the real name authentication processing means 220, in association with the communication company system, processes the received payment request information based on the received payment request information (I.e., real name authentication for the subscriber based on the information of the second terminal 260) to the user requesting the VoIP installment payment.

According to an embodiment of the present invention, the real name authentication process corresponding to the received payment request information may include transmitting information of the second terminal 260 and user information included in the received payment request information to the communication server server (255) to confirm the real name authentication.

Those skilled in the art will appreciate the technical features of the process for processing the real name authentication for providing the payment service, so that a detailed description thereof will be omitted for the sake of convenience.

The settlement authentication processing unit 225 confirms whether the user is a user who can use the settlement service through the settlement service corresponding to the settlement request information when the real name authentication for the settlement request information is completed do.

According to the method of the present invention, the payment approval process corresponding to the payment service requested by the user, upon receiving the settlement limit information that can be settled from the communication company server 255, It is preferable to compare / check the payment amount included in the payment request information to process the payment approval.

That is, when the user requests to settle the settlement amount of 100,000 won by using the settlement service, if the user receives the settlement limit of 100,000 won or more from the communication company server 255, It is preferable that the payment approval is regarded as having failed.

Here, it is preferable that the settlement amount further includes a settlement amount in accordance with the provision of the settlement service in the actual commodity purchase price or service use fee.

When payment authentication is completed through the payment authentication processing unit 225, the information generation unit 230 generates a payment code to be transmitted to the second terminal 260, Information is generated.

According to the method of the present invention, the location where the payment code is generated may be a shopping mall server (or service providing server) for requesting settlement of a payment amount, a payment server for providing a payment service, .

According to an embodiment of the present invention, the payment code is a one-time payment code to be transmitted to the second terminal 260.

Here, it is preferable that the settlement code is encrypted for processing to be transmitted to and output from the second terminal. In order to encrypt the settlement code, a program provided in the second terminal is checked, It is preferable to perform encryption processing using an encryption key corresponding to the decryption key provided in the encryption key.

As a person skilled in the art will appreciate the technical features of the method or process of generating the payment code information to be transmitted to the second terminal 260, do.

When the payment code to be transmitted to the second terminal 260 of the user corresponding to the information of the second terminal 260 is generated through the information generating means 230, the payment approval processing means 235 generates the payment code information And drive information to the second terminal (260) to process payment approval.

According to the embodiment of the present invention, the billing code to be transmitted is information to be transmitted through a Short Message Service (SMS) or a Multimedia Message Service (MMS) to a mobile phone number when the second terminal 260 is a cellular phone, , And other methods other than SMS or MMS may be used depending on the intention and purpose of those skilled in the art.

Further, in order to process the encrypted payment code through the second terminal 260 and output it through the second terminal 260, a payment code provided to the second terminal 260 is output And further includes drive request information for driving a program for executing the program.

For example, if an SMS or an MMS including the driving request information is received from the mobile phone, it is preferable that the program corresponding to the received driving request information is confirmed and then the identified program is automatically executed. It is possible to process the SMS or the MMS so that the SMS or MMS is directly transmitted to the driven program rather than being stored in the text message box of the mobile phone.

According to an embodiment of the present invention, the driving information for transmitting to the second terminal 260 is program driving information for driving a program installed in the second terminal 260 of the user requesting the payment.

If the payment code transmitted to the second terminal 260 is an encrypted payment code, it is preferable that the encrypted payment code is decrypted and then output.

For example, when the second terminal 260 is a mobile phone, the drive information to be transmitted to the mobile phone number is program drive information for processing a program included in the mobile phone of the user requesting the payment to be driven, It is preferable that the information is information necessary for driving the program for outputting the payment code.

Transmits the driving information and the payment code information to the mobile phone number included in the received payment request information through the payment approval processing means 235 to process the program for confirming the payment code information to be driven, When the user who has confirmed the outputting payment code inputs (or selects) the payment code information through the first terminal and then transmits the payment code, the payment processing means 240 receives the payment code from the first terminal And confirms whether the payment code information matches the generated payment code information to process approval of the payment service requested by the user.

According to an embodiment of the present invention, it is preferable that the program for outputting the payment code confirms the authentication for outputting the payment code by confirming the transmitted driving information.

That is, when the program for outputting the received payment code is executed after the payment code information and the drive information are received, it is checked whether the program can be executed (i.e., It is preferable to confirm the information).

Thereafter, when the payment code is received from the first terminal, it is preferable to check whether the received payment code matches the generated payment code, and process authentication for providing a payment service.

Alternatively, if the payment code is received from the second terminal 260, it is preferable that the authentication processing for checking the matching of the received payment code with the generated payment code is performed to provide a payment service.

Here, the payment code transmitted from the second terminal 260 may be automatically transmitted through a program provided in the mobile phone, or may be input by the user after confirming the payment code.

The payment code transmitted from the second terminal 260 is preferably an encrypted payment code for decrypting and outputting the payment code through the program provided in the second terminal 260. [

If authentication of the received payment code is completed, the payment processing for the payment service requested by the user is completed.

Those skilled in the art will appreciate from the technical description of the method or process of the settlement process for the settlement service, so that a detailed description thereof will be omitted for the sake of convenience.

Referring to FIG. 2, the payment system 205 provides a settlement service according to a request of the user, and then transmits settlement history information for providing a settlement service according to information of the second terminal 260 to a storage medium 250 And an information storage means (245) for storing the information.

Here, the payment history information stored in the storage medium 250 is used as information for settlement processing with the merchant for the amount of the settlement processed through the settlement service in the future.

FIG. 3 is a diagram illustrating a process for providing a payment service according to an embodiment of the present invention.

In more detail, FIG. 3 illustrates an example in which one or more users purchase goods through an Internet shopping mall or use one or more services through a server on the Internet to provide one or more services, Requests a payment service and provides a user interface including one or more input (or selection) interfaces corresponding to the second interface 260. Then, the second terminal 260, which is input through the user interface, The present invention relates to a process of receiving settlement request information including at least one piece of information and providing a settlement service based on the received settlement request information. As a person skilled in the art, 3, a variety of procedures for providing payment services The present invention is not limited thereto.

In FIG. 3, the billing system 205 shown in FIG. 2 is referred to as a "server" for convenience, and the first terminal is referred to as a "terminal" for convenience.

Referring to FIG. 3, the terminal shown in FIG. 2 requests a user interface for providing a payment service (300a), and the server generates (or extracts) a user interface corresponding to the request of the terminal, (305a) to the terminal (310a), and confirms whether payment request information is input (or selected) through the output user interface (315a).

According to an embodiment of the present invention, the user interface (i.e., the payment interface) includes information about the second terminal 260 (e.g., mobile phone number information) for the user requesting the payment service, And an area for inputting payment request information including at least one payment amount information and merchant point information. In order to input one or more pieces of information included in the payment request information according to an intention and purpose of a person skilled in the art, And a user interface for input (or selection) through a separate window.

Here, the provided user interface (i.e., payment interface) may be provided (or directly) through the merchant server, the payment server, or the communication company server 255 shown in FIG. 1, No.

If the received payment request information is input (or selected) (320a), the terminal transmits the input (or selected) payment request information to the server (325a) (330a) confirms the real name authentication for the user who requested the payment service corresponding to the received payment request information.

The information of the second terminal 260 may be used to settle a service purchase fee generated according to the purchase amount of the goods or the service purchase of one or more goods through the merchant providing the payment service using a payment service, (Universal Subscriber Identity Module) information provided in a terminal such as a wireless terminal, or an IC (Integrated Circuit) information such as a telephone number of a mobile phone requesting an actual settlement, Chip information or the like, or information (for example, IP address information, etc.) about a terminal having a communication function such as IPTV (Internet Protocol Television) or the like.

The user information may include at least one of a merchandise purchase amount of at least one merchandise purchased through the merchant providing the settlement service or a service usage fee generated in accordance with the use of the service, Personal information (e.g., name, resident registration number, home telephone number, etc.).

The settlement amount information may include at least one of a purchase amount of a product purchased through at least one merchant through the merchant providing the settlement service or a service usage fee generated in accordance with the use of the service, It is preferable to include the amount information to be used.

The Fonville merchant information is obtained by paying a service purchase fee generated according to a purchase amount of a product or a service purchased by one or more merchandise through the merchant providing the payment service using a payment service, A merchant address, a telephone number, a representative name, a merchant code, and the like for the merchant to which the money is to be paid.

According to an embodiment of the present invention, the real name authentication process corresponding to the received payment request information may include transmitting information of the second terminal 260 and user information included in the received payment request information to the communication server server (255) to confirm the real name authentication.

Those skilled in the art will appreciate the technical features of the process for processing the real name authentication for providing the payment service, so that a detailed description thereof will be omitted for the sake of convenience.

If the real name authentication for the user requesting the payment service is not confirmed (335a), the server generates (or extracts) the real name authentication confirmation error information for the received payment request information and transmits the information to the terminal (340a).

On the other hand, if the real name authentication for the user requesting the payment service is confirmed (335a), the server confirms whether the user can request the payment service (345a).

According to the method of the present invention, the payment approval process corresponding to the payment service requested by the user, upon receiving the settlement limit information that can be settled from the communication company server 255, It is preferable to compare / check the payment amount included in the payment request information to process the payment approval.

That is, when the user requests to settle the settlement amount of 100,000 won by using the settlement service, if the user receives the settlement limit of 100,000 won or more from the communication company server 255, It is preferable that the payment approval is regarded as having failed.

Here, it is preferable that the settlement amount further includes a settlement amount in accordance with the provision of the settlement service in the actual commodity purchase price or service use fee.

If it is impossible to settle the received payment request information (350a), the control unit generates (extracts or extracts) the payment incompleteness limit information for the received payment request information and transmits the generated error information to the terminal for output ).

On the other hand, if payment for the received payment request information is possible (350a), the server generates (or extracts) a payment code to be transmitted to the terminal (300b).

According to the method of the present invention, the location where the payment code is generated may be a shopping mall server (or service providing server) for requesting settlement of a payment amount, a payment server for providing a payment service, .

According to an embodiment of the present invention, the payment code is a one-time payment code to be transmitted to the second terminal 260.

Here, it is preferable that the settlement code is encrypted for processing to be transmitted to and output from the second terminal. In order to encrypt the settlement code, a program provided in the second terminal is checked, It is preferable to perform encryption processing using an encryption key corresponding to the decryption key provided in the encryption key.

As a person skilled in the art will appreciate the technical features of the method or process of generating the payment code information to be transmitted to the second terminal 260, do.

Then, the server transmits the driving information included in the received payment request information and the generated (or extracted) payment code information to the mobile phone number through a text message (305b), and in response to this, (310b), and confirms the authentication of the driving information (315b).

According to the embodiment of the present invention, the billing code to be transmitted is information to be transmitted through a Short Message Service (SMS) or a Multimedia Message Service (MMS) to a mobile phone number when the second terminal 260 is a cellular phone, , And other methods other than SMS or MMS may be used depending on the intention and purpose of those skilled in the art.

Further, in order to process the encrypted payment code through the second terminal 260 and output it through the second terminal 260, a payment code provided to the second terminal 260 is output And further includes drive request information for driving a program for executing the program.

For example, if an SMS or an MMS including the driving request information is received from the mobile phone, it is preferable that the program corresponding to the received driving request information is confirmed and then the identified program is automatically executed. It is possible to process the SMS or the MMS so that the SMS or MMS is directly transmitted to the driven program rather than being stored in the text message box of the mobile phone.

According to an embodiment of the present invention, the driving information for transmitting to the second terminal 260 is program driving information for driving a program installed in the second terminal 260 of the user requesting the payment.

If the payment code transmitted to the second terminal 260 is an encrypted payment code, it is preferable that the encrypted payment code is decrypted and then output.

For example, when the second terminal 260 is a mobile phone, the drive information to be transmitted to the mobile phone number is program drive information for processing a program included in the mobile phone of the user requesting the payment to be driven, It is preferable that the information is information necessary for driving the program for outputting the payment code.

If the authentication of the driving information is not confirmed (320b), the cellular phone generates (or extracts) error information on the received driving information, processes it, and transmits the error information to the server (325b).

On the other hand, if the authentication of the driving information is confirmed (320b), the received payment code is retransmitted (330b) to the server. In response, the server transmits the received authentication code It is checked whether the code is matched (335b).

If the received payment code and the generated payment code do not match (340b), the server generates (or extracts) matching error information for the received payment code and transmits the matching error information to the terminal (345b).

On the other hand, if the received payment code and the generated payment code match each other (340b), the server provides the mobile payment service requested by the user, notifies the user of the processing result, (350b) in the storage medium 250 provided in the payment system 205 shown in FIG.

According to an embodiment of the present invention, it is preferable that the program for outputting the payment code confirms the authentication for outputting the payment code by confirming the transmitted driving information.

That is, when the program for outputting the received payment code is executed after the payment code information and the drive information are received, it is checked whether the program can be executed (i.e., It is preferable to confirm the information).

Thereafter, when the payment code is received from the second terminal 260, it is preferable to check whether the received payment code matches the generated payment code, and process authentication for providing a payment service.

Here, the payment code transmitted from the second terminal 260 may be automatically transmitted through a program provided in the mobile phone, or may be input by the user after confirming the payment code.

100: first terminal 105: merchant server
110: Payment server 115:
120:

Claims (3)

In a secure code delivery method that is executed through a user's mobile phone and a server,
A first step of the server confirming a dynamically generated code for providing to the user's cellular phone;
A second step of the server verifying whether a specific program to be provided with the generated code is installed in the user's cellular phone;
A third step of causing the server to include a driving information for driving the specific program and to provide a message for delivering the generated code to the user program when the specific program is confirmed;
A fourth step of receiving the message from the user's cellular phone and generating the encrypted code by encrypting the generated code so that the server is decrypted only through a specific program driven by the user's cellular phone when the specific program is driven by the drive information, ;
A fifth step of the server providing the encryption code to a specific program of the user's cellular phone;
A sixth step of the specific program of the user's mobile phone confirming the encryption code;
A seventh step of the specific program of the user's cellular phone decrypting the identified encryption code to confirm a decryption code; And
And a specific program of the user's cellular phone outputs the identified decryption code or uses the decrypted code to the authentication procedure.
The method according to claim 1,
Receiving the message from the user's cellular phone and, when the specific program is driven by the driving information, the server communicates with a specific program of the user's cellular phone to exchange and store an encryption key and a decryption key for encryption / decryption ≪ / RTI &
The server encrypts the generated code through an encryption key exchanged with a specific program of the user's cellular phone to generate an encrypted code,
The method of claim 7, wherein the specific program of the user's mobile phone decrypts the encrypted code using a decryption key exchanged with the server to confirm the decrypted code.
The method of claim 1,
Wherein the secure code is received by the user's cellular phone and transmitted to a specific program driven in the cellular phone.

Images