KR20170111524A - A method of processing card information for preventing re-use of card information, an appratus thereof and a method for operating financial server - Google Patents

Abstract

A card information processing method using a card reader module according to an embodiment of the present invention includes: receiving a plurality of encryption keys corresponding to a plurality of financial servers; Encrypting card information input for settlement with at least one of the plurality of encryption keys to generate card information encryption data corresponding to each of the plurality of financial servers; Updating transaction counter information of the card reader module corresponding to the card information encryption data; Transmitting transaction approval request information including first encrypted data corresponding to the first financial server and the updated transaction counter information to a first financial server selected from the plurality of financial servers; And transmitting the reuse prevention message including the updated transaction counter information to a financial server other than the first financial server among the plurality of financial servers.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a card information processing method for preventing reuse of card information,

The present invention relates to a card information processing method for preventing the reuse of card information, an apparatus thereof, and a method of operating a financial server.

With the expansion of the electronic payment infrastructure, credit payment services based on credit card, check card, and debit card payment (hereinafter "credit card") settlement became common. After the user purchases the goods or services from the merchant through card payment, the credit payment service pays a fee for use of the goods or services to the credit card company on the payment date, and the merchant pays the sales price of the goods or services from the credit card company or the like The payment method using the payment settlement electronic payment infrastructure.

The system for providing the credit settlement service includes a plurality of card terminals provided at a plurality of merchant stores, and a Value Added Network (VAN) company providing a settlement agency service relating to card settlement between a plurality of merchants and card companies Server (hereinafter referred to as "settlement proxy server"), and a server of a card company who issued a credit card to the user are connected through a communication network. The VAN means a payment network for a payment transaction between the card terminals and the card issuer server.

In the payment system using the payment agent server between the card terminal and the card issuer server as described above, in the case where a failure occurs in the communication network between the payment agent server and the card terminal or between the payment agent server and the card terminal, , The card settlement may not be normally performed. Also, in recent years, the above communication troubles have occurred more frequently due to the communication delay due to the surge of the number of card settlement, and thus the reliability of the settlement system is lowered.

Accordingly, POS terminals capable of communicating with a plurality of VANs and performing settlement processing with different settlement agents in some cases have been proposed.

However, when a terminal system communicating with a plurality of VANs as described above is constituted, there arises a serious problem in terms of security.

For example, in the card reader, N encrypted data encrypted with the encryption key of each VAN must be managed for communication with the plurality of VANs. However, the POS terminal is allowed to use only the encrypted data of the VAN to be actually approved It is true.

At this time, if the attacker intercepts the remaining unused encryption data, if the attacker makes an approval request to the remaining van, the other van is recognized as the first approval request and a fatal security loophole occurs.

This results in a security flaw in both the POS terminal and the entire plurality of VANs, which leads to a loss of system reliability.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to solve the security problem caused by unused card information and encrypted data being reused by hacking or the like, A card information processing method for preventing reuse of card information capable of improving reliability, an apparatus thereof, and an operation method of a financial server.

According to another aspect of the present invention, there is provided a method of processing card information using a card reader module, comprising: receiving a plurality of encryption keys corresponding to a plurality of financial servers; Encrypting card information input for settlement with at least one of the plurality of encryption keys to generate card information encryption data corresponding to each of the plurality of financial servers; Updating transaction counter information of the card reader module corresponding to the card information encryption data; Transmitting transaction approval request information including first encrypted data corresponding to the first financial server and the updated transaction counter information to a first financial server selected from the plurality of financial servers; And transmitting the reuse prevention message including the updated transaction counter information to a financial server other than the first financial server among the plurality of financial servers.

According to another aspect of the present invention, there is provided an apparatus for processing a card using a card reader module, the apparatus comprising: a plurality of financial servers, each of which has a plurality of encryption keys corresponding to the plurality of encryption keys, A receiving unit; A card information processing unit for encrypting card information input for settlement with at least one of the plurality of encryption keys to generate card information encrypted data corresponding to each of the plurality of financial servers; A transaction counter management unit for updating the transaction counter information of the card reader module in correspondence with the card information encryption data; A communication unit for transmitting transaction authentication request information including first encryption data corresponding to the first financial server and transaction counter information to a first financial server selected from the plurality of financial servers; And a controller for transmitting the reuse prevention message including the updated transaction counter information to the other financial servers except for the first financial server among the plurality of financial servers through the communication unit.

According to another aspect of the present invention, there is provided a method for managing a transaction, the method comprising: receiving, from a card reader module connected to a plurality of financial servers, Comprising: receiving a reuse prevention message including information; When the transaction approval request information is received, comparing the second transaction count information of the transaction approval request information with the received first transaction count information, and when the counter value of the second transaction count information is smaller than the counter value of the first transaction count information Determining the approval of the transaction approval request information if the value is greater than the counter value; And determining the approval rejection and reuse prevention processing when the counter value of the second transaction count information is smaller than or equal to the counter value of the first transaction count information.

In order to solve the above problems, a method according to an embodiment of the present invention may be implemented by a program for executing the method in a computer and a recording medium on which the program is recorded.

According to the embodiment of the present invention, when the card information encryption data corresponding to each of the plurality of financial servers is generated, the transaction counter information of the card reader module is updated in correspondence with the card information encryption data, And transmits the transaction approval request information including the updated transaction counter information and the first encryption data corresponding to the first financial server to the selected first financial server, To a financial server other than the first financial server among the plurality of financial servers.

Accordingly, it is an object of the present invention to solve a security problem caused by reuse of unused card information and encrypted data by hacking and the like, while being capable of performing settlement processing freely with a plurality of financial servers using a card information processing apparatus, It is possible to provide a card information processing method capable of improving reliability, an apparatus thereof, and an operation method of a financial server.

1 is a diagram illustrating an overall system according to an embodiment of the present invention.
2 is a block diagram for explaining a card information processing apparatus according to an embodiment of the present invention.
3 is a flowchart for explaining a card information processing method according to an embodiment of the present invention.
4 is a flowchart illustrating an operation of a financial server according to an embodiment of the present invention.
5 to 7 are ladder diagrams for explaining an overall system operation for performing settlement processing for cryptographic key distribution and reuse prevention according to an embodiment of the present invention.
8 is a diagram for explaining a data structure and a processing flow according to an embodiment of the present invention.

Hereinafter, an encryption key distribution method, a terminal device, a card reader module, and a system using the same will be described in detail with reference to the accompanying drawings.

The foregoing objects, features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings. Like reference numerals designate like elements throughout the specification. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail.

Hereinafter, a server device and a terminal device related to the present invention will be described in detail with reference to the drawings. The suffix "module" and " part "for the components used in the following description are given or mixed in consideration of ease of specification, and do not have their own meaning or role.

1 is a diagram illustrating an overall system according to an embodiment of the present invention.

1, the overall system according to an exemplary embodiment of the present invention may include a VAN server 100, a key distribution server 200, and a card reader device 500, The POS terminal 300, or the card reader module 400. The POS terminal 300 may include at least one of the POS terminal 300 and the card reader module 400. [

Referring to FIG. 1, the VAN server 100 is an example of a financial server, and may be a server of a VAN (Value Added Network) company providing a billing service in an electronic payment system using a credit card.

Here, the "financial server" may refer to a server that processes information related to financial transactions. For example, the financial server includes a bank server for relaying transactions between financial accounts, a server for a van (VAN) server for relaying financial card electronic settlement, a card company server for processing payment approval for credit card transactions, . In addition, there may be a form in which the actual financial transaction function and other additional functions are separated into separate server types according to a specific function.

In general, the card reader module 400 and the POS terminal 300 may be separated from each other, but they are often combined and are generally referred to as a "POS terminal" or a POS. In the following description, the card reader module 400 and the POS terminal 300 may be referred to as a POS system 500, and the POS system 500 may be referred to as an embodiment of the present invention It is possible to configure the card information processing apparatus 500 according to the present invention.

The card reader module 400 of the card information processing apparatus 500 may exist separately from the POS terminal 300 and may be connected to a PC, a mobile computing device such as a smart phone, a personal digital assistant (PDA) , Or a tablet or the like.

Hereinafter, an embodiment of the present invention will be described by exemplifying that the card information processing apparatus 500 includes the POS terminal 300, but the present invention is not limited to this, and the POS terminal 300 The operation may be performed by various terminal devices such as a portable terminal, a tablet, and the like.

The card reader module 400 is an apparatus for acquiring card information including a card number, for example, a magnetic stripe reader (MSR) for reading card information from a magnetic card, an IC (Integrated Circuit) An IC card reader for reading information, an NFC reader for receiving card information using a short-range wireless communication method, or a barcode reader for reading card information using a barcode.

However, the card reader module 400 according to the present invention is not limited to the device for reading or receiving the card information as described above, and may be an input device for receiving the card information from the user.

1, the card information processing apparatus 500 includes a POS terminal 300 and a card reader module 400. The POS terminal 300 uses the card information received from the card reader module 400 And performs the function of generating an approval request message. When the settlement action occurs at the merchant's office, information on the payment amount, settlement details, and the like, which is input through the input interface of the POS terminal 300 or processed by the computer in advance, is stored in the card reader module 400 And a function of receiving signature information of the payer and creating an approval request telegram and transmitting the approval request telegram to the VAN server 100 is performed in the POS terminal 300. [

The authorization request message generated as described above is connected to the POS terminal 300 through the network or is transmitted to a VAN server (for example, one of the VAN servers shown in FIG. 1) Lt; / RTI >

The VAN server receiving the approval request telegram from the POS terminal 300 relays and processes the approval request to the card terminal 300 and transmits the approved approval result to the POS terminal 300 as a response to the approval request telegram.

The card information transmitted from the card reader module 400 to the POS terminal 300 and used to generate the approval request message may include a connection interface between the POS terminal 300 and the card reader module 400, There is a risk of hacking at the network terminal between the POS terminal 300 and the POS terminal 300 and the VAN server 100. [

Accordingly, the card information (for example, the card number) acquired by the card reader module 400 is encrypted and transmitted to the POS terminal 300 in order to prevent leakage due to hacking and safely protect the card information of the customer And transmitted to the VAN server 100 in an encrypted state.

A symmetric encryption algorithm or an asymmetric encryption algorithm may be used for encrypting the card information as described above. The VAN server 100 may have a cryptographic key or a private key for decrypting the encrypted card information.

For the above operation, the POS terminal 300 includes an external server such as a POS module (not shown) and a VAN server 100 for generating an approval request message using the card information received from the card reader module 400 A gateway module (not shown) that serves as a kind of gateway for distributing data, a VAN code list, and the like, or temporarily stores the encrypted card information (Not shown), and the like.

The card information processing method of the card information processing apparatus 500 to be described below may be performed by a gateway module included in the POS terminal 300. The configuration of the gateway may be implemented in the form of the card reader module 400 And may be implemented in various forms such as a PC program or a communication process inside the POS terminal 300. [

According to the present invention, the POS terminal 300 can perform card settlement through a plurality of settlement agencies (i.e., a plurality of VAN companies), so that even if the VAN company is changed, the POS terminal 300 or the card reader module 400 can be used without being replaced, and when a failure occurs in any one of a plurality of VAN companies, settlement can be performed through another settlement agency.

In order to configure a billing system operated by a plurality of VAN companies as described above, the card reader module 400 may include a key for encrypting card information (for example, a symmetric encryption key identical to the encryption key held by the VAN server or a VAN server A plurality of public keys corresponding to the private keys held by the plurality of VAN servers 110 to 130, respectively.

The cipher key distribution system 10 includes a key distribution server 200 and a plurality of VAN servers 110 to 130 so that a plurality of cipher keys corresponding to each of the plurality of VAN servers 100 are stored in the POS And distributed to the card reader module 400 through the terminal 300.

According to an embodiment of the present invention, a public key for authentication for at least one VAN server is transmitted from the key distribution server 200 to the card reader module 400 using a distribution public key stored in advance in the card reader module 400 And the encryption key may be received from the corresponding VAN server in the card reader module 400 using the received at least one authentication public key.

Accordingly, the manufacturer of the card reader module 400 does not inject the encryption key of the corresponding VAN server directly into the card reader module 400, but has the authority to access the key distribution server 200 (for example, And the corresponding VAN server can distribute its own encryption key to the card reader module 400 through the POS terminal 300 directly.

The card information processing apparatus 500 encrypts the card information input for payment through at least one of the plurality of encryption keys through the POS terminal 300 or the card reader module 400, (110, 120, ..., 130), updates the transaction counter information of the card reader module (400) in response to the card information encrypted data, and updates the transaction counter information of the plurality Transmits the transaction approval request information including the first encrypted data corresponding to the first financial server and the updated transaction counter information to the first VAN server 110 selected among the financial servers, 130 to the other VAN servers 120, ..., 130 of the plurality of VAN servers 110, 120, ..., 130 excluding the first VAN server 110. [

When the transaction approval based on the transmission is received, the card information processing device 500 transmits the card information encrypted data generated corresponding to each of the plurality of VAN servers through the POS terminal 300 or the card reader module 400 Data excluding the first encrypted data may be discarded.

In addition, according to the embodiment of the present invention, the transaction counter information may include KSN (Key Serial Number) information based on a Derived Unique Key Per Transaction (DUKPT), and may include a plurality of VANs The servers 120, ..., 130 update the transaction count information and the next encryption key information for the card reader module 400 using the KSN information, thereby enabling the reuse prevention processing to be performed.

In addition, since the KSN can be formed for each encryption key, and a separate encryption key is required for each VAN server, the KSN can be separately generated for each of the VAN servers 110, 120, ..., 130 . Therefore, the reuse prevention message including the transaction counter information may be different for each of the other VAN servers 120, ..., 130.

Accordingly, even if unused card information and encrypted data are hacked and reused for other VAN servers, other VAN servers can reject the transaction approval based on the transaction counter information included in the reuse prevention message, It is possible to solve the security problem and improve the system reliability.

2 is a block diagram for explaining a card information processing apparatus according to an embodiment of the present invention.

As described above, the card information processing apparatus 500 according to the embodiment of the present invention can be configured by combining all or a part of the POS terminal 300 and the card reader module 400, However, the present invention can be implemented in a form in which some components are included in the card reader module 400 and the remaining components are included in the POS terminal 300.

2, the card information processing apparatus 500 according to the embodiment of the present invention includes a control unit 510, a communication unit 520, an encryption key receiving unit 530, a card information processing unit 540, a transaction counter management unit 550 A storage unit 560, and an output unit 570.

The communication unit 520 may include one or more communication modules for transmitting and receiving data for wired / wireless communication with the plurality of VAN servers 100. The communication module may include a modem that encodes and modulates the transmitted signal and demodulates and decodes the received signal through a cable, antenna, etc., and an RF front end that processes the RF signal.

The encryption key receiving unit 530 can receive and manage a plurality of encryption keys corresponding to the plurality of financial servers through the communication unit 520. [

The encryption key receiving unit 530 may process a series of processes for receiving a plurality of encryption keys for encrypting card information to configure a billing system operated by a plurality of VAN corporations. For example, the encryption key receiving unit 530 transmits the symmetric encryption key identical to the encryption key held by the VAN server 100 or the public key corresponding to the private key held by the VAN server 100) to the plurality of VAN servers 110 A plurality of processes capable of holding a plurality of processes corresponding to each of the plurality of processes.

The encryption key receiving unit 530 can communicate with the key distribution server 200 through the communication unit 520 to receive a plurality of cipher keys corresponding to each of the plurality of VAN servers 100. [

For example, according to one embodiment of the present invention, the encryption key receiving unit 530 receives authentication information for at least one VAN server from the key distribution server 200 using the distribution public key stored in advance in the card reader module 400 The public key is received by the card reader module 400 and the encryption key is received from the corresponding VAN server by the card reader module 400 using the received at least one authentication public key.

Accordingly, the manufacturer of the card reader module 400 does not inject the encryption key of the corresponding VAN server directly into the card reader module 400, but has the authority to access the key distribution server 200 (for example, And the corresponding VAN server can distribute its encryption key directly to the card reader module 400 through the POS terminal 300. [

The card information processing unit 540 encrypts the card information input or read for payment with the plurality of encryption keys respectively corresponding to the plurality of VAN servers 100, ..., 130 of the card information.

Accordingly, the transaction counter management unit 550 can update transaction counter information of the card reader module in response to the card information encryption data. Here, the transaction counter information may be updated corresponding to each of the plurality of encryption keys.

The card information processing unit 540 transmits the first encryption data corresponding to the first VAN server and the first encryption data corresponding to the transaction counter information to the first VAN server 110 selected from the plurality of VAN servers 100 through the communication unit 520, The transaction approval request information including the transaction approval request information.

Here, the transaction counter information may include KSN (Key Serial Number) information based on a Derived Unique Key Per Transaction (DUKPT), and the transaction count information may include an encryption key corresponding to each transaction, Lt; RTI ID = 0.0 > updateable < / RTI >

The control unit 510 transmits a reuse prevention message including the updated transaction counter information through the communication unit to the other financial servers 120, ..., < / RTI >

Here, the control unit 510 may encrypt the transaction count information with a common encryption key shared with the plurality of VAN servers and transmit the same.

According to an embodiment of the present invention, a plurality of VAN servers 120, ..., 130 except for the first VAN server 110 may use the KSN information corresponding to each of the VAN servers 120, ..., The second transaction count information of the next transaction approval request information is compared with the first transaction count information previously received, and the second transaction count information of the next transaction approval request information is compared with the second transaction count information of the next transaction approval request information, And if the second transaction count information is larger than the first transaction count information, decides the approval of the next transaction approval request information.

When the transaction approval based on the transmission is received, the control unit 510 discards data of the card information encryption data corresponding to each of the plurality of VAN servers 100 except for the first encrypted data, The processing for preventing the reuse of the card information and the encrypted approval request data in the storage 500 can be completed.

Meanwhile, the storage unit 560 may include a memory such as a flash ROM and an SRAM. The storage unit 560 may store the transaction counter information, the encryption key, the card information of the read credit card, the received payment information, or the unique identification information of the POS terminal 300 or the card reader module 400.

Display unit 570 may also include one or more displays for outputting information relating to the payment status and results. The display unit 570 emits light using a red LED or a blue LED to notify the current state of the card reader module 400 or generate a specific beep sound such as a beep to recognize a signal .

3 is a flowchart for explaining a card information processing method according to an embodiment of the present invention.

Referring to FIG. 3, the card information processing apparatus 500 according to the embodiment of the present invention firstly accesses a plurality of VAN servers 100 corresponding to a plurality of VAN servers 100 for encrypting approval request information through an encryption key receiving unit 530 And receives an encryption key (S101).

Here, the reception of the encryption key may be performed in the card reader module 400 connected to the POS terminal 300, and a concrete encryption key receiving method will be described with reference to FIG. 5 and FIG.

The card information processing apparatus 500 encrypts the card information through the card information processing unit 540 to generate card information encryption data corresponding to each of the plurality of VAN servers 100 (S103).

Then, the card information processing device 500 updates transaction counter information for the card reader module 400 for each VAN server through the transaction counter management unit 550 (S105).

The card information processing apparatus 500 transmits the first encrypted data and the second encrypted data to the first VAN server 110 selected from among the plurality of VAN servers 110, 120, ..., 130 through the communication unit 520, Transaction approval request information including the updated transaction counter information is transmitted (S107).

The transaction approval request information may be generated by the card information processor 540 or the controller 510 and may be encrypted with an encryption key corresponding to the first VAN server 110. [

The card information processing apparatus 500 generates a plurality of reuse prevention messages each including the updated transaction counter information through the control unit 510 and transmits the reuse prevention message to the other VAN servers 120 except for the first VAN server 110 , ..., 130 (S109).

Accordingly, the control unit 510 can generate and transmit the reuse prevention message including the transaction counter information, and it is possible to prevent reuse of transaction information in the other VAN servers 120, ..., 130 .

In addition, the card information processing apparatus 500 itself can perform reuse prevention processing. In this case, the control unit 510 may discard data other than the first encryption data among the card information encryption data corresponding to the plurality of VAN servers, when receiving the transaction approval based on the transmission (S111).

4 is a flowchart illustrating an operation of a financial server according to an embodiment of the present invention.

4 is a view for explaining the operation of the second VAN server 120 in the case of receiving the reuse prevention message including the updated first transaction counter information according to the embodiment of the present invention. When the reuse prevention message is received (S201), if the transaction approval request information is received, the server 120 compares the second transaction count information of the transaction approval request information with the received first transaction count information ( S203).

Then, the second VAN server 120 determines whether the second transaction counter is larger than the first transaction counter (S205).

If the counter value of the second transaction count information is larger than the counter value of the first transaction count information, the second VAN server 120 may determine approval of the transaction approval request information (S207).

However, if the counter value of the second transaction count information is smaller than or equal to the counter value of the first transaction count information, the second VAN server 120 determines the approval rejection (S209) The reuse prevention notification and the reuse prevention process to perform necessary processing (S211).

5 to 7 are ladder diagrams for explaining an overall system operation for performing settlement processing for cryptographic key distribution and reuse prevention according to an embodiment of the present invention.

Each of the plurality of VAN servers 110 to 130 stores an authentication public key for distribution of an encryption key of card information and a corresponding private key for authentication. The card reader module 400 stores a public key for distribution .

The key distribution server 200 may receive and store the authentication public key from at least one VAN server.

For example, the key distribution server 200 may store a plurality of authentication public keys corresponding to each of the plurality of VAN servers 110 to 130 together with a distribution private key.

5, the POS terminal 300 connected to the card reader module 400 configures a secure channel with the key distribution server 200 using the distribution public key stored in the card reader module 400, The public key for authentication of the VAN server 100 can be received from the key distribution server 200 through the configured secure channel.

For this purpose, the POS terminal 300 first connects the network with the key distribution server 200 (Step 601).

The card reader module 400 generates a session key (step S602), encrypts the generated session key with a public key for distribution (denoted as "[session key] public key for distribution] (Step S603).

The POS terminal 300 transmits the session key encrypted with the public key for distribution received from the card reader module 400 to the key distribution server 200 (step S604).

The key distribution server 200 decrypts and stores the session key encrypted with the public key for distribution received from the POS terminal 300 with the private key for distribution and stores the decrypted session key in the session key received in step S605, (Step S606).

The POS terminal 300 transmits a session key reception response message encrypted with the session key received from the key distribution server 200 to the card reader module 400 in step S607 so that the secure channel can be configured.

Thereafter, the POS terminal 300 transmits a message requesting the authentication public key of the VAN server to be used to the key distribution server 200 (step S608).

For example, the POS terminal 300 may transmit a VAN code, which is identification information of an institution corresponding to a VAN server to be used, to the key distribution server 200 and request a public key for authentication of the corresponding VAN server.

According to an embodiment of the present invention, the POS terminal 300 may transmit the VAN code corresponding to the corresponding VAN server to the key distribution server 200 and request transmission of the authentication public key corresponding to the VAN server .

The key distribution server 200 transmits the public key for authentication encrypted with the session key to the POS terminal 300 in response to the public key request for authentication in step S609 and the POS terminal 300 transmits the authentication public key to the key distribution server 200 To the card reader module 400 (step S610).

The card reader module 400 decrypts and stores the public key for authentication encrypted with the session key received from the POS terminal 300 into the session key in operation S611 and transmits the decrypted public key to the POS terminal 300 through the connection with the key distribution server 200 (Step S612), and distribution of the public key for authentication from the key distribution server 200 can be completed.

5, after the POS terminal 300 transmits the session key to the key distribution server 200 and receives the encrypted session key reception response message from the key distribution server 200 using the session key, the authentication of the VAN server to be used The POS terminal 300 may transmit a public key request message for authentication of the VAN server to be used when the POS terminal 300 transmits the session key to the key distribution server 200. [

In this case, the key distribution server 200 decrypts the session key with the distribution private key to directly configure the secure channel, and does not need to transmit the session key reception response message to the POS terminal 300, To the POS terminal 300 by using the session key.

The public key distribution method for authentication as described with reference to FIG. 5 may be performed for a plurality of VAN servers 110 to 130 at one time or may be repeated for each of two or more VAN servers 110 to 130 A plurality of public keys for authentication corresponding to each of the plurality of VAN servers 110 to 130 may be distributed to the card reader module 400. [

6, an authentication public key corresponding to at least one VAN server is distributed from the key distribution server 200 and stored in the card reader module 400, And may store a cryptographic key for encrypting / decrypting the card information together with the authentication private key corresponding to the public key.

According to an exemplary embodiment of the present invention, the card information acquired by the card reader module 400 may be encrypted using a symmetric encryption key, and the symmetric encryption key may be encrypted by a card reader module 400 using a symmetric encryption algorithm And the VAN server can generate and provide a new key each time. The symmetric encryption key may be advantageous in that the processing speed and transmission speed in the card reader module 400 and the like are improved as compared with the case of using the asymmetric encryption key of the public key / private key scheme.

6, the POS terminal 300 configures a secure channel with the VAN server 100 using the public key for authentication received from the key distribution server 200 and stored in the card reader module 400, It is possible to receive the encryption key from the VAN server 100 via the channel.

For this purpose, the POS terminal 300 connects the network with the VAN server 100 (step S801).

The card reader module 400 generates a session key (step S802), encrypts the generated session key with a public key for authentication of the VAN server 100, and transmits the encrypted session key to the POS terminal 300 (step S803).

The POS terminal 300 transmits the session key encrypted with the public key for authentication received from the card reader module 400 to the VAN server 100 (step S804).

The VAN server 100 decrypts the session key encrypted with the public key for authentication received from the POS terminal 300 with the private key for authentication and stores the decrypted session key in step S805, 300 (step S806).

The POS terminal 300 transmits a session key reception response message encrypted with the session key received from the VAN server 100 to the card reader module 400 in step S807 to configure a secure channel.

Thereafter, the POS terminal 300 requests the transmission of the encryption key to the VAN server 100 in step S808. In response, the VAN server 100 transmits the encryption key encrypted with the session key to the POS terminal 300 (Step S809).

8, the POS terminal 300 transmits the encrypted session key to the VAN server 100, receives the encrypted session key reception response message from the VAN server 100, and then transmits the encrypted session key to the VAN server 100 The POS terminal 300 may request the transmission of the encryption key when the POS terminal 300 transmits the session key.

In this case, the VAN server 100 may decrypt the session key encrypted with the public key for authentication by using the private key for authentication, directly configure the secure channel, and transmit the encrypted key encrypted with the session key to the POS terminal 300.

The POS terminal 300 transmits the cryptographic key encrypted with the session key received from the VAN server 100 to the card reader module 400 in step S810 and the card reader module 400 receives the cryptographic key from the POS terminal 300 The encryption key encrypted with the received session key is decrypted with the session key and stored (S811).

Thereafter, the POS terminal 300 releases the connection with the VAN server 100 (step S812), and distribution of the encryption key from the VAN server 100 can be completed.

The cipher key distribution method described with reference to Fig. 6 is performed for each of the plurality of VAN servers 110 to 130, whereby a plurality of cipher keys corresponding to each of the plurality of VAN servers 110 to 130 is transmitted to the card reader module 400).

Meanwhile, according to another embodiment of the present invention, the card reader module 400 may be released in a state where a public key for authentication for at least one VAN server is stored.

In this case, the steps of receiving the public key for authentication of the corresponding VAN server from the key distribution server 200 and storing it in the card reader module 400 may be omitted as described with reference to FIGS. 5 to 6.

7 is a ladder diagram illustrating an embodiment of a method for processing card information using distributed cryptographic keys.

First, in the card reader module 400, a plurality of cipher keys corresponding to each of the plurality of VAN servers 110 to 130 may be stored by the cipher key distribution method as described above.

According to an embodiment of the present invention, the card reader module 400 encrypts the card information using each of a plurality of cryptographic keys stored in the POS terminal 300, regardless of the VAN server that the POS terminal 300 intends to use, 300, and the POS terminal 300 can transmit some of the encrypted card information received from the card reader module 400 to the VAN server to use.

7, the card reader module 400 reads the card information from the card (or the terminal in which the card information is stored) (S1001), and transmits the read card information to the stored plurality of cipher keys And performs update processing of each transaction counter information (for example, KSN, Key Serial Number) corresponding to the transaction counter information (S1002).

For example, the card information encrypted with the "encryption key 1" of the first VAN server 110, the card information encrypted with the "encryption key 2" of the second VAN server 120, The card information encrypted with the "encryption key n" of the card reader 130, and the card information encrypted with the total of n different encryption keys may be generated.

Also, as the card information encrypted with the different encryption keys is generated, the KSN, which is transaction counter information, can be updated to KSN 1, ..., KSN n for each VAN server.

Thereafter, the card reader module 400 transmits the card information and the transaction counter information encrypted with the different cipher keys to the POS terminal 300 (step S1003).

When the POS terminal 300 wants to make a card settlement using the first VAN server 110, the POS terminal 300 transmits the "cipher key 1" of the card information encrypted with the different cipher keys Transmits the encrypted card information and approval request information generated using KSN 1 to the first VAN server 110 (S1004).

In step S1004, the POS terminal 300 generates an approval request message including the card information encrypted with the "encryption key 1" and the transaction counter information KSN1, and transmits the approval request message to the first VAN server 110 have.

Thereafter, the first VAN server 110 compares the card information encrypted with the "encryption key 1" received from the POS terminal 300 and KSN 1 with a previously stored KSN management database to determine whether the newly received value is a larger value (S1005). If it is not reused, the encrypted card information is decrypted to "cryptographic key 1" (S1005), and card information to be used for payment can be obtained.

On the other hand, the POS terminal 300 transmits a reuse prevention message including the updated KSN 2, ..., KSN n to the remaining VAN servers 120, ..., 130 Respectively.

Accordingly, even if the second VAN server 120 is not used for payment of a card, the POS terminal 300 can transmit a reuse prevention message including KSN 2 to the second VAN server 120 (S1007) The POS terminal 300 may transmit the reuse prevention message including the KSN n to the nth VAN server 120 without using the nth VAN server 130 in step S1008.

Accordingly, the other VAN servers 120, ..., 130 other than the first VAN server 110 update the transaction counter information of the card reader module 400 using the KSNs 2 to n, respectively, The reuse prevention process of the received approval request information can be performed (S1009).

On the other hand, in the POS terminal 300, card information other than the card information encrypted using the encryption key 1 in the encrypted card information is discarded for preventing reuse (S1010).

Here, the discard process may be, for example, a process of moving to a previously set inherent security area, or a process of permanently deleting it from the memory.

8 is a diagram for explaining the data structure and the processing flow according to the embodiment of the present invention in more detail.

Referring to FIG. 8, the transaction counter information may include Key Serial Number (KSN) information based on a Derived Unique Key Per Transaction (DUKPT). Since the DUKPT performs encryption using the One Time Key, which is used only once each time the card information is transmitted, even if the key is exposed, the card reader module 400 for DUKPT does not significantly affect the overall security. And the first VAN server 110 for decrypting may share the same master secret key.

Generally, the first VAN server 110 can generate a BDK (Base Derivation Key) from a master encryption key, BDK generates an IPK (Initial Pin Encryption Key), and IPEK generates a Future Key, . Accordingly, the Future Key set in the first VAN server 110 can be injected equally into all the card reader modules 400 in the manufacturing process.

Accordingly, the Future Key of the card reader module 400 can be used to generate a new one-time encryption key every time the card information is read and transmitted, and the new encryption key can be used have.

Particularly, in generating the new encryption key, the card information processing unit 540 may generate a One-Time Encryption Key in the inserted Future Key and encrypt it with the card data.

The transaction counter management unit 550 can generate and manage the KSN including the unique identification number of the card reader module 400 issued through the IPEK and the transaction counter information corresponding to the reader module 400. [ The KSN can be set to be updatable only in an increasing direction each time transaction information is generated, and thus can be used to manage duplication of transactions.

The encrypted data is encrypted with the public key corresponding to the first VAN server 110 together with the key serial number (KSN), generated as approval request information, and transmitted to the first VAN server 110. The first VAN server 110 decrypts the public key encrypted approval request information through the private key, separates the One-Time Encryption Key and the encrypted card information data through Future Key matching based on the updated KSN Data decoding can be completed.

On the other hand, the card information processing apparatus 500 can generate and transmit the reuse prevention message to the second to n-th VAN servers 120, ..., 130, rather than the transaction target server, using the respective KSNs. Here, the reuse prevention message may include only the KSN information not including the encrypted card information data.

Accordingly, the second to n-th VAN servers 120, ..., 130 other than the transaction target server do not directly decrypt and process the card information, and prevent the encrypted card information from being reused in advance It is possible to easily perform the comparison processing with the KSN database update and other approval request information.

In particular, the KSN is shared including minimum data for preventing reuse of transaction information, thereby enabling more efficient reuse prevention processing.

The method according to the present invention may be implemented as a program for execution on a computer and stored in a computer-readable recording medium. Examples of the computer-readable recording medium include a ROM, a RAM, a CD- , A floppy disk, an optical data storage device, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet).

The computer readable recording medium may be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. And, functional programs, codes and code segments for implementing the above method can be easily inferred by programmers of the technical field to which the present invention belongs.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It should be understood that various modifications may be made by those skilled in the art without departing from the spirit and scope of the present invention.

Claims (17)

A card information processing method using a card reader module,
Receiving a plurality of encryption keys corresponding to each of the plurality of financial servers;
Encrypting card information input for settlement with at least one of the plurality of encryption keys to generate card information encryption data corresponding to each of the plurality of financial servers;
Updating transaction counter information of the card reader module for each financial server corresponding to the card information encryption data;
Transmitting transaction approval request information including first encrypted data corresponding to the first financial server and the updated transaction counter information to a first financial server selected from the plurality of financial servers; And
And transmitting the reuse prevention message including the updated transaction counter information to a financial server other than the first financial server among the plurality of financial servers
Card information processing method. The method according to claim 1,
And discarding data of the card information encryption data corresponding to each of the plurality of financial servers excluding the first encrypted data when the transaction approval based on the transmission is received
Card information processing method. The method according to claim 1,
Wherein the transaction counter information includes key serial number (KSN) information based on a Derived Unique Key Per Transaction (DUKPT)
Card information processing method. The method of claim 3,
The plurality of financial servers except for the first financial server updates the transaction count information and the next encryption key information for the card reader module using the KSN information,
Card information processing method. The method according to claim 1,
Wherein the transaction count information is encrypted with a public encryption key shared with the plurality of financial servers
Card information processing method. The method according to claim 1,
A plurality of financial servers, excluding the first financial server,
If the second transaction count information is greater than the existing transaction count information, comparing the second transaction count information of the next transaction approval request information with previously received existing transaction count information, And determines approval of the transaction approval request information
Card information processing method. The method according to claim 1,
Wherein the transaction count information includes counter information updatable only in an increasing direction corresponding to the card reader module and initial identification number information issued corresponding to the card reader module
Card information processing method. 1. A card information processing apparatus using a card reader module,
An encryption key receiving unit that receives a plurality of encryption keys corresponding to each of the plurality of financial servers;
A card information processing unit for encrypting card information input for settlement with at least one of the plurality of encryption keys to generate card information encrypted data corresponding to each of the plurality of financial servers;
A transaction counter management unit for updating transaction counter information of the card reader module for each financial server corresponding to the card information encryption data;
A communication unit for transmitting transaction authentication request information including first encryption data corresponding to the first financial server and transaction counter information to a first financial server selected from the plurality of financial servers; And
And a controller for transmitting a reuse prevention message including the updated transaction counter information to the other financial servers except for the first financial server among the plurality of financial servers through the communication unit
Card information processing device. 9. The method of claim 8,
Wherein the control unit discards data excluding the first encrypted data among the card information encrypted data corresponding to each of the plurality of financial servers when the transaction approval based on the transmission is received
Card information processing device. 9. The method of claim 8,
Wherein the transaction counter information includes key serial number (KSN) information based on a Derived Unique Key Per Transaction (DUKPT)
Card information processing device. 11. The method of claim 10,
The plurality of financial servers except for the first financial server may be a server for updating the transaction count information and the next encryption key information for the card reader module using the KSN information
Card information processing device. 9. The method of claim 8,
Wherein the transaction count information is encrypted with a public encryption key shared with the plurality of financial servers
Card information processing device. 9. The method of claim 8,
A plurality of financial servers, excluding the first financial server,
When the next transaction approval request information is received, the second transaction count information of the next transaction approval request information is compared with the first transaction count information previously received. If the second transaction count information is larger than the first transaction count information A server for determining approval of the next transaction approval request information
Card information processing device. 9. The method of claim 8,
Wherein the transaction count information includes serial number information that can be updated only in an increasing direction corresponding to each transaction
Card information processing device. A method of operating a financial server,
Receiving from a card reader module connected to a plurality of financial servers a reuse prevention message including first transaction counter information updated in accordance with a transaction with another financial server in the card reader module;
When the transaction approval request information is received, comparing the second transaction count information of the transaction approval request information with the received first transaction count information, and when the counter value of the second transaction count information is smaller than the counter value of the first transaction count information Determining the approval of the transaction approval request information if the value is greater than the counter value; And
And determining the authorization rejection and reuse prevention processing when the counter value of the second transaction count information is less than or equal to the counter value of the first transaction count information
How the financial server works. 16. The method of claim 15,
Wherein the plurality of financial servers are each a VAN server for distributing different encryption keys to the card reader module
How the financial server works. A recording medium on which a program for causing a computer to execute the method according to any one of claims 1 to 7 and 15 to 16 is recorded.

Images