KR20170138068A - Authentication method and system for safe shopping with enhanced security - Google Patents

Abstract

Disclosed are a method of authenticating security-enhanced safe shopping capable of preventing fraud, and a system thereof. The method of authenticating security-enhanced safe shopping includes: a step of registering terminal information of a user terminal that has completed purchase in association with an order number of a requested product; a step of receiving terminal information of the user terminal that has recognized an image code when the user terminal recognizes the image code provided when the product is received; a step of authenticating the user terminal that has recognized the image code on the basis of terminal information registered when a purchase is requested and terminal information of a user terminal that has recognized the image code; and a step of controlling payment for the product when the user terminal is authenticated.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication method,

Embodiments of the present invention relate to security-enhanced secure shopping authentication methods and systems.

Although the initial mobile communication terminal has merely a function of a portable phone, the mobile communication terminal now has various multimedia functions such as MP3 and wireless internet beyond merely a function of a telephone conversation.

Also, many additional services (for example, mobile games, wireless internet, etc.) that can use the multimedia functions of the mobile communication terminal are provided.

Most mobile communication terminals are capable of performing wireless Internet services using a wireless Internet browser (e.g., WAP browser, ME browser, etc.), and also capable of executing a wireless Internet platform (for example, GVM, BREW, You can now shop and make payments anywhere, anytime. If you are shopping or making payments on the Internet or mobile internet sites, you may need to make an escrow payment to protect the buyer from the seller's failure to deliver the item purchased by the buyer, . The escrow payment does not pay the payment amount of the commodity directly to the seller but deposits the settlement price at the payment agency server and if the purchaser confirms the purchase (for example, the purchase decision is selected at the site where the commodity is purchased) To the seller.

However, there is a difficulty in providing a secure electronic commerce through the Internet or the mobile Internet when the seller has malice due to the fact that the purchaser can make the purchase decision, not the purchaser necessarily.

According to the above trend, a method of performing settlement using a credit card in a portable terminal equipped with a wireless Internet platform is disclosed in Patent Document 10-2010-0004676.

The present invention provides a safe payment processing method and system for providing safe mobile payment and preventing fraudulent transactions by processing payment execution for a product when a user who purchased the product confirms the purchase.

The present invention also provides a secure settlement processing method and system for providing settlement flexibility by processing a settlement execution through a terminal registered in advance in addition to a user terminal purchasing a product.

The security-enhanced secure shopping authenticating method includes: registering terminal information of a user terminal that has performed the purchase request in association with an order number of a requested product; receiving, by the terminal, Receiving the terminal information of the user terminal that has recognized the image code, recognizing the image code based on the terminal information of the user terminal that recognized the image code and the terminal information registered at the time of the purchase request Performing authentication of the user terminal, and controlling, when the user terminal is authenticated, to execute the payment for the goods.

According to an aspect of the present invention, the step of authenticating the user terminal may include determining whether or not terminal information matching the received terminal information exists with respect to the registered terminal information, And performing authentication.

According to another aspect, the method may further include authenticating the payment means information for requesting the purchase of the goods or payment of the purchased goods when the user terminal is authenticated.

According to another aspect, the payment means information may be double-encrypted using a plurality of symmetric keys.

According to another aspect of the present invention, the step of executing the payment for the goods may execute an escrow payment according to receipt of the goods.

According to another aspect of the present invention, the step of executing payment execution for the goods includes the steps of: providing at least one payment means information registered in advance; and transmitting, based on the payment means information selected from the provided payment means information, And processing the payment related to the goods.

According to another aspect of the present invention, the step of registering the terminal information may register terminal information of a user terminal that intends to share a payment execution for the goods.

According to another aspect of the present invention, the step of registering the terminal information includes at least one of International Mobile Equipment Identity (IMEI) information, International Mobile Subscriber Identity (IMSI) information, and user terminal number information You can register.

The safe shopping authentication system includes an information registration unit for registering terminal information of a user terminal that has made the purchase request in association with an order number of a purchase requisitioned item, an image registration unit for receiving image codes, The terminal receives the terminal information of the user terminal that has recognized the image code, and authenticates the user terminal that has recognized the image code based on the terminal information of the received user terminal and the terminal information registered at the time of the purchase request A terminal authentication unit, and an execution control unit for controlling the execution of the payment for the commodity when the user terminal is authenticated.

According to an aspect of the present invention, the terminal authentication unit performs device authentication or authentication of the user terminal by determining whether there exists terminal information matching the received terminal information with respect to the registered terminal information .

When a user who has purchased a product confirms the purchase, the payment execution of the product is processed, thereby providing secure mobile settlement and preventing fraudulent transactions.

In addition, settlement flexibility can be provided by allowing payment execution to be performed through a terminal registered in advance in addition to a user terminal that has purchased a product.

1 is a diagram illustrating a secure shopping authentication system and a user terminal 101 in an embodiment of the present invention.
2 is a block diagram illustrating an internal configuration of a secure shopping authentication system according to an exemplary embodiment of the present invention.
3 is a flowchart showing a secure payment processing method according to an embodiment of the present invention.
4 is an exemplary diagram for explaining an operation of processing goods settlement using an image code in an embodiment of the present invention.
FIG. 5 is an exemplary diagram for explaining an operation of processing settlement using an escrow settlement in an embodiment of the present invention. FIG.
FIG. 6 is an exemplary diagram for explaining an operation of processing settlement using postpay settlement in an embodiment of the present invention. FIG.
7 is a view for explaining a configuration for specifying terminal information for settlement execution in an embodiment of the present invention.
8 is an exemplary diagram for explaining an operation of registering terminal information of another user terminal through a medium list in an embodiment of the present invention.
9 is a diagram illustrating an example of a terminal information registration screen in which terminal information of other user terminals is registered according to an embodiment of the present invention.
FIG. 10 is a flowchart illustrating a process of processing a user authentication and settlement using a settlement service, according to an embodiment of the present invention.
11 is a block diagram for explaining an example of the internal configuration of a computer system in an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The present embodiments relate to a technique for performing payment execution such as purchase confirmation and receipt confirmation with a user terminal that has purchased or paid for a product by authenticating a user terminal based on terminal information. For example, at the time of the escrow settlement, the terminal that requested the settlement of purchase can authenticate whether it is the terminal that requested the purchase of goods or the settlement of goods, and can process the escrow settlement or the like.

Particularly, in the embodiments, as a payment service app is executed in a user terminal, a technique of performing both a purchase of a product through a corresponding payment service application, a purchase decision on a purchased product, and a payment execution on a commodity .

In this embodiment, the 'terminal information' is a unique number of the user terminal. The information includes International Mobile Equipment Identity (IMEI) information assigned at the time of manufacturing the terminal, International Mobile Subscriber Identity (IMSI) And may indicate a mobile phone number.

In the present embodiments, the 'image code' is a QR code (Quick Response Code). The 'image code' may be a bar code, a data matrix, Code), and so on.

In the present embodiments, the 'card number' may indicate a virtual card number used in an online / mobile payment service as well as a number printed on a card issued when issuing a credit card or a check card.

1 shows a secure shopping authentication system 100 and a user terminal 101 according to an embodiment of the present invention. In FIG. 1, the arrow indicates that data can be transmitted and received between the user terminal 101 and the secure shopping authentication system 100 using the wireless network.

The user terminal 101 may be a personal computer (PC), a smart phone, a tablet, a wearable computer, a smart TV, / Mobile site access or a dedicated service application (hereinafter referred to as a 'payment service application'). At this time, the user terminal 101 can perform service-wide operations such as service screen configuration, data input, data transmission / reception, and data storage under the control of a web / mobile site or a dedicated application.

The secure shopping authentication system 100 serves as a service platform for providing an online or mobile settlement service to a client. For example, the secure shopping authentication system 100 serves as a service platform for providing card settlement and simple card settlement services on-line or mobile.

At this time, the secure shopping authentication system 100 may be implemented in an application form on the user terminal 101, but is not limited thereto and may be embodied in a service platform that provides a payment service in a client-server environment It is also possible. In particular, the secure shopping authentication system 100 can process the payment execution for the commodity after confirming whether the user terminal that has made a purchase and the user terminal that requests payment execution for the received commodity match.

FIG. 2 is a block diagram illustrating an internal configuration of a secure shopping authentication system according to an exemplary embodiment of the present invention, and FIG. 3 is a flowchart illustrating a secure settlement processing method according to an exemplary embodiment of the present invention.

2, the secure shopping authentication system 200 according to the present embodiment may include a processor 210, a bus 220, a network interface 230, a memory 240, and a database 250 have. The memory 240 may include an operating system 241 and a service providing routine 242. [ The processor 210 may include an information registration unit 211, a terminal authentication unit 212, and an execution control unit 213. In other embodiments, the secure shopping authentication system 200 may include more components than the components of FIG. 2, or some of the components may be omitted

The memory 240 may be a computer-readable recording medium and may include a permanent mass storage device such as a random access memory (RAM), a read only memory (ROM), and a disk drive. Also, the memory 240 may store program codes for the operating system 241 and the service providing routine 242. [ These software components may be loaded from a computer readable recording medium separate from the memory 240 using a drive mechanism (not shown). Such a computer-readable recording medium may include a computer-readable recording medium (not shown) such as a floppy drive, a disk, a tape, a DVD / CD-ROM drive, or a memory card. In other embodiments, the software components may be loaded into the memory 240 via the network interface 230 rather than from a computer readable recording medium.

The bus 220 may enable communication and data transmission between the components of the secure shopping authentication system 200. The bus 220 may be configured using a high-speed serial bus, a parallel bus, a Storage Area Network (SAN), and / or other suitable communication technology.

The network interface 230 may be a computer hardware component for connecting the secure shopping authentication system 200 to a computer network. The network interface 230 may connect the secure shopping authentication system 200 to a computer network via a wireless or wired connection.

The database 250 includes at least one terminal information registered in advance for escrow settlement, prepayment, postpayment, and the like, identification information of a user registered in the payment service (for example, A user ID, a user terminal number), a password (e.g., pin information) set by the user at the time of membership registration, and the like.

The processor 210 may be configured to process instructions of a computer program by performing basic arithmetic, logic, and I / O operations of the secure shopping authentication system 200. The instructions may be provided by the memory 240 or the network interface 230 and to the processor 210 via the bus 220. The processor 210 may be configured to execute program codes for the information registration unit 211, the terminal authentication unit 212, and the execution control unit 213. [ Such program code may be stored in a recording device such as memory 240. [

The information registration unit 211, the terminal authentication unit 212 and the execution control unit 213 may be configured to perform the steps 301 to 305 in FIG.

In step 301, the information registration unit 211 can receive a purchase request for goods from the user terminal 101. [

Referring to FIG. 4, the user terminal 101 may scan an image code 401 displayed on a home shopping broadcast, an image code 401 attached to a product promotion flyer, or the like. The attached image code 401 may represent an image code 401 containing product information for purchasing a product.

For example, the image code is scanned through a camera mounted on the user terminal 101. As the image code is scanned, the user can immediately order or pay for the product to the user terminal 101 without connection with the web site of the product. May be provided. That is, the secure shopping shopping system 200 can provide a screen for ordering or payment to the user terminal 101. At this time, when display information (e.g., button, icon, etc.) such as "order / purchase" is selected by the user on the order or payment screen to be provided for purchase, the information registration unit 212 registers the user The terminal information of the terminal 101 can be received from the user terminal 101. [ Then, the information registration unit 212 can generate the order number of the purchased product.

As another example. The image code is scanned through a camera mounted on the user terminal 101, and URL information included in the scanned image code can be recognized. Then, the user terminal 101 can be connected to the mobile site of the commodity based on the URL information. In the same manner, when display information such as "order / purchase" is selected to purchase a product at the connected mobile site, the information registration unit 212 receives the terminal information of the user terminal and generates an order number of the purchased commodity .

As another example, the user terminal 101 may be connected to a web site / mobile web site of the merchandise to be purchased via the Internet or the mobile Internet. When the purchase of goods is requested at the website / mobile web site, the information registration unit 212 generates an order number of the purchased product and receives the terminal information of the terminal requesting purchase of the goods from the user terminal 101 .

In step 302, the information registration unit 211 may register the generated order number and the terminal information of the user terminal requesting the purchase of the goods in the database 250.

In step 303, the terminal authentication unit 212 receives terminal information of the user terminal that has recognized the image code from the user terminal 101 as the image code provided upon receipt of the article is recognized by the user terminal .

For example, when a user has received a purchase-requested product through a payment service application, an image code for execution of payment may be attached to the packaging material (for example, a courier box, a courier bag, etc.) used for delivering the product. In addition, an image code for execution of payment may be attached (or printed) to the product purchase statement. The image code attached to the packaging material may represent an image code containing information for execution of settlement such as settlement of purchase or postpayment processing after receipt of the commodity. Then, as the attached image code is scanned through the camera mounted on the user terminal 101, the terminal authentication unit 212 receives the order information (for example, order number) included in the image code from the user terminal 101 Thus, the order information can be recognized. The terminal authentication unit 212 can receive the terminal information of the user terminal that has scanned the image code from the user terminal 101.

In step 304, the terminal authentication unit 212 may authenticate the user terminal based on the terminal information and the order information of the received user terminal. The terminal authentication unit 212 can search the database 250 for order information matching the order information. The terminal authentication unit 212 can determine whether or not the terminal information matched with the matching order information matches the received terminal information. That is, the terminal authentication unit 212 can authenticate the user terminal by checking whether the user terminal used when making a purchase and the user terminal used for payment execution after receiving a product match.

For example, if the terminal information is IMEI information or IMSI information, the terminal authentication unit 212 determines whether the IMEI information or the IMSI information received from the user terminal 101 matches the IMEI information or the IMSI information registered in the database 250 The user terminal 101 can authenticate the user terminal 101 through the device authentication. Here, the IMEI information indicates information unique to a terminal given by the manufacturer when the user terminal is manufactured, and the IMSI information can indicate unique subscriber information assigned to the SIM card inserted in the user terminal.

The terminal authentication unit 212 may determine whether the user terminal number information received from the user terminal 101 and the user terminal information registered in the database 250 are identical to each other, The user terminal can be authenticated according to the user authentication.

In step 305, the execution control unit 213 can execute payment execution for the goods received by the user as the user terminal is authenticated. For example, the enforcement controller 213 may control escrow, postpay, and the like to be performed.

For example, referring to FIG. 5, when the escrow settlement is processed, the enforcement controller 213 may provide the settlement processing screen 500 to the user terminal 101 as the user terminal is authenticated. On the payment processing screen 500, an order number, a product name of the purchased product, a payment amount, display information 501 for confirming the purchase, and display information 502 for canceling the purchase can be displayed. At this time, as the display information 501 is selected in the user terminal 101, the execution control unit 213 can receive a payment execution request. In this case, the execution control unit 213 may control the payment execution so that the payment proceeds deposited in accordance with the payment means information selected or input at the time of the purchase request of the goods in the step 301 are provided to the goods seller. For example, the enforcement controller 213 can control the settlement amount to be deposited to the corresponding account in cooperation with the bank server, based on the account information previously designated by the merchandise seller. Then, the enforcement controller 213 can provide the user terminal 101 with a message 502 such as " purchase complete has been processed ".

6, the execution control unit 213 can provide the settlement processing screen 500 to the user terminal 101 when the user terminal 101 is authenticated. In the settlement processing screen 500, an order number, merchandise related information 601, payment means information, payment related display information 602, and purchase cancel related display information 603 can be displayed. At this time, the payment means information may include information related to the pre-registered payment means or the payment means directly input by the user. For example, it may include credit card information, account information, check card information, etc. that are pre-registered or directly input.

At this time, when any of the payment means is selected and payment is requested (payment display information 602 is selected), the enforcement controller 213 notifies the payment means It is possible to control the settlement of goods based on the information. For example, when a credit card is selected, the enforcement controller 213 can process post-payment for a commodity already received in conjunction with the selected credit card company server. In addition, when account information is selected, the enforcement controller 213 can process deferred payment for the commodity in conjunction with the bank server of the selected account. When the settlement is completed, the enforcement controller 213 can provide the payment approval result to the user terminal 101. [ For example, the enforcement controller 213 can provide a message to the user terminal 101, such as " the payment process is normally completed ".

On the other hand, when the purchase cancellation display information 603 is selected, the enforcement controller 213 can cancel the payment of the commodity and switch the settlement processing screen 600 to the return processing screen. For example, the return process screen may include information for directly receiving or selecting a return reason, a return method (direct courier dispatch, courier article visit, etc.), and the like for returning a product already received by the user.

7 is a view for explaining a configuration for specifying terminal information for settlement execution in an embodiment of the present invention.

There may be a case where it is difficult for the purchaser to request payment execution processing from a user terminal that has requested to purchase for reasons such as a hospital or a foreign business trip. Accordingly, the purchaser can designate a user terminal that wants to share settlement execution in addition to the user terminal requested to purchase. That is, the purchaser can designate another user terminal that can request the payment execution processing of the purchased product. For example, terminal information possessed by another terminal or a family owned by the user can be registered. At this time, another user terminal for payment execution processing can be designated through the user terminal requesting purchase of the goods.

For example, referring to FIG. 7, when the purchase of goods is requested, the information registration unit 211 may provide the terminal information registration screen 700 to the user terminal 101. FIG. For example, the information registration unit 211 may display the terminal information of the user terminal A requesting purchase as basic information on the first line of the terminal information registration screen 700. The information registering unit 211 may receive the terminal information of the user terminal B to be registered directly from the user terminal A 101 when the addition means 701 for registering terminal information of other user terminals is selected, The terminal information of the user terminal B selected through the medium list 702 may be registered. The information registration unit 211 can register the terminal information of the user terminal B, which has been selected or inputted directly, in the database 250. At this time, the information registration unit 211 may register the terminal information of the user terminal B together with the order number and the terminal information of the user terminal A

8 is an exemplary diagram for explaining an operation of registering terminal information of another user terminal through a medium list in an embodiment of the present invention.

7 and 8, when a specific medium (for example, a messenger) is selected in the medium list 702, the information registration unit 211 registers the friend list registered in the application of the selected specific medium or the user terminal A 101 And can receive the registered telephone number list from the user terminal 101. Then, the information registration unit 211 can display the phone number list 710 according to the basic application form.

At this time, if at least one friend of at least one friend included in the number list 710 is selected in the user terminal A 101, the information registration unit 211 transmits the terminal information registration request to the selected friend From the user terminal A (101). For example, the information registration unit 211 may receive a user terminal number (mobile) phone number of the user terminal B owned by the selected friend, or e-mail address information. Then, as shown in FIG. 8, the information registering unit 211 can transmit a message 810 requesting terminal information registration to the user terminal B. For example, the message 810 transmitted to the user terminal B may include a URL 811 for registering the terminal information through the payment service application. When the URL is selected in the user terminal B, the information registration unit 211 can provide the request acceptance screen 820 to the user terminal B. [ When the terminal information registration of the user terminal B is accepted (821), the information registration unit 211 can receive terminal information such as IMEI information, IMSI level, or user terminal number information of the user terminal B from the user terminal B. The information registration unit 211 registers the received terminal information of the user terminal B together with the order number and the terminal information of the user terminal A in the database 250 and informs the user terminal A 101 of the terminal information of the user terminal B You can let them know you are registered.

For example, referring to FIG. 9, the information registration unit 211 may add the terminal information of the user terminal B to the second line of the terminal information registration screen 900 and provide the terminal information to the user terminal A 101. As the terminal information of the user terminal B is additionally registered, the terminal authentication unit 212 scans the image code in the user terminal B in the same manner as described in step 304 of FIG. 3, It is possible to perform device authentication or authentication of the user terminal B based on the terminal information of the terminal B. [ When the authentication of the user terminal B is successful, the execution control unit 213 can control the payment execution of the goods purchased from the user terminal A through the user terminal B to be processed.

FIG. 10 is a flowchart illustrating a process of processing a user authentication and settlement using a settlement service, according to an embodiment of the present invention. In Fig. 10, as an example of the payment information, a process of selecting the card information and processing payment will be described as an example. In Fig. 10, authentication of the payment means can be performed by the terminal authenticating section 212. Fig.

In FIG. 10, the user terminal 1001 can receive information for registering membership subscription information, payment means (for example, a credit card, a check card, etc.) for using a payment service from a user, To the secure shopping authentication system 1002. For example, when an application installed in the user terminal 1001 is executed to provide the settlement service, the user terminal 1001 can transmit the input information to the secure shopping authentication system 1002 through the application.

The secure shopping authentication system 1002 can mediate a card settlement service between the user terminal 1001 and the card issuer server 1003.

The card issuer server 1003 can encrypt the card information of the users stored and managed in the database of the card issuer server and transmit the encrypted card information to the secure shopping authentication system 1002. At this time, the secure shopping authentication system 1002 can encrypt the encrypted card information again and transmit the encrypted card information to the user terminal 1001. That is, since the card information transmitted to the user terminal 1001 is double-encrypted in the card company server 1003 and the secure shopping authentication system 1002, the card information is hacked, or the secure shopping authentication system 1002 or the card issuer server 1003, the symmetric key used for encryption in the card issuer server 1003 and the symmetric key used for encryption in the secure shopping authentication system 1002 are not known, so that it is possible to prevent the up / down and secure payment service.

In step 1010, the user terminal 1001 may directly input information related to the previously registered payment means through the user terminal, or may select a card registered in advance. For example, the user terminal 1001 can directly receive credit card information, account information, or the like.

If any one of the pre-registered card information is selected in step 1020, the user terminal 1001 can acquire the double-encrypted card information based on the card identification information of the selected card in the internal memory of the user terminal have. The card identification information of the registered card and the double-encrypted card information may be matched and stored in the internal memory and managed. Here, the double encryption is performed once using the first symmetric key K3 at the card company server (or the bank server), and is encrypted at the secure shopping authentication system 1002 using the second symmetric key K4, And encrypt the information encrypted with the third encryption key K3 once again. Then, the user terminal 1001 can digitally sign the double-encrypted card information using the private key (KV) received from the secure shopping authentication system 1002.

In step 1030, the user terminal 1001 may transmit the digitally signed card information to the secure shopping authentication system 1002. [

In step 1040, the secure shopping authentication system 1002 can authenticate the card information received from the user terminal 1001. [ For example, the secure shopping authentication system 1002 can decrypt the card information received from the user terminal 1001 using the public key (KB), and extract the signature value of the double encrypted card information through the decryption. Then, the secure shopping shopping system 1002 can authenticate the double-encrypted card information based on the extracted signature value.

At this time, the secure shopping authentication system 1002 can use the terminal number information (for example, a mobile phone number) of the user terminal 1001, the card identification information (card ID), and the like when authenticating the double-encrypted card information. For example, the secure shopping authentication system 1002 may be configured such that the user's telephone number included in the personal information is stored in the user terminal 1001 (For example, a mobile phone number) of the mobile terminal (e.g., mobile phone number).

In step 1050, when the authentication is successful, the secure shopping authentication system 1002 can decrypt the double encrypted card information using the second symmetric key K4. As decrypted with the second symmetric key K4, the card information may be single encrypted card information with the second symmetric key K3.

In step 1060, the secure shopping authentication system 1002 can transmit the card information decrypted by the second symmetric key K4 to the card issuer server 1003.

In step 1070, the card issuer server 1003 can decrypt the card information received from the secure shopping authentication system 1002 into the first symmetric key K3 again.

In step 1080, the card issuer server 1003 checks whether or not the card information decrypted by the second symmetric key K3 matches the card information stored in the card issuer server 1003, and if it coincides, it can perform the settlement process . For example, the card company server 1003 can check whether the decrypted card number, the CVC number, and the validity period coincide with the card number, the CVC number, and the validity period matched with each other in the database of the card issuer server.

If they match, the card issuer server 1003 can proceed with the settlement processing. For example, the card issuer server 1003 can deliver a message indicating successful card authentication successful settlement to the secure shopping authentication system 1002. [ Then, the secure shopping authentication system 1002 can transmit a message indicating the progress of the payment to the user terminal 1001. [ On the user terminal 1001 screen, a message such as payment in progress or a screen showing the progress of payment may be displayed. At this time, when the payment processing is completed, the card issuer server 1003 delivers the payment completion message to the secure shopping authentication system 1002, and the secure shopping authentication system 1002 can deliver the payment completion message to the user terminal 1001 . Then, a message such as 'payment has been completed', a payment completion screen, and the like may be displayed on the screen of the user terminal 1001.

10, the settlement means information is double-encrypted using the symmetric keys K3 and K4 in the secure shopping authentication system 1002 and the card issuer server / bank server, respectively. However, this corresponds to the embodiment, The payment server information may be double-encrypted using the symmetric keys K3 and K4 generated or stored in the secure shopping authentication system 1002 without the card issuer server or the bank server interfering with the encryption. In addition to the double encryption, the secure shopping authentication system 1002 may also encrypt the payment means information using a public key encryption algorithm.

11 is a block diagram for explaining an example of the internal configuration of a computer system in an embodiment of the present invention.

11, a computer system 1100 includes at least one processor 1110, a memory 1120, a peripheral interface 1130, an I / O subsystem, A power circuit 1140, a power circuit 1150, and a communication circuit 1160. At this time, the computer system 1100 may correspond to a user terminal.

The memory 1120 can include, for example, a high-speed random access memory, a magnetic disk, a SRAM, a DRAM, a ROM, a flash memory, or a non-volatile memory. have. Memory 1120 may include software modules, a set of instructions, or various other data required for operation of computer system 1100. At this time, accessing the memory 1120 from other components, such as the processor 1110 or the peripheral device interface 1130, may be controlled by the processor 1110.

The peripheral device interface 1130 may couple the input and / or output peripheral devices of the computer system 1100 to the processor 1110 and the memory 1120. Processor 1110 may execute a variety of functions and process data for computer system 1100 by executing a software module or set of instructions stored in memory 1120. [

The input / output subsystem 1140 can couple various input / output peripheral devices to the peripheral interface 1130. For example, input / output subsystem 1140 may include a controller for coupling a peripheral device such as a monitor, keyboard, mouse, printer, or a touch screen or sensor, as needed, to peripheral interface 1130. According to another aspect, the input / output peripheral devices may be coupled to the peripheral device interface 1130 without going through the input / output subsystem 1140.

The power circuitry 1150 can provide power to all or a portion of the components of the terminal. For example, the power circuitry 1150 may include one or more power supplies, such as a power management system, a battery or alternating current (AC), a charging system, a power failure detection circuit, a power converter or inverter, And may include any other components for creation, management, distribution.

The communication circuitry 1160 may enable communication with other computer systems using at least one external port. Or as described above, the communication circuitry 1160 may communicate with other computer systems by sending and receiving RF signals, also known as electromagnetic signals, including RF circuits.

11 is merely an example of the computer system 1100, and the computer system 1100 may include additional components not shown in FIG. 11, some components shown in FIG. 11 may be omitted, Lt; RTI ID = 0.0 > components. ≪ / RTI > For example, in addition to the components shown in FIG. 11, a computer system for a communication terminal in a mobile environment may further include a touch screen, a sensor, etc., and various communication methods (WiFi, 3G, LET , Bluetooth, NFC, Zigbee, etc.). Components that may be included in computer system 1100 may be implemented in hardware, software, or a combination of both hardware and software, including one or more signal processing or application specific integrated circuits.

The methods according to embodiments of the present invention may be implemented in the form of a program instruction that can be executed through various computer systems and recorded in a computer-readable medium.

The program according to the present embodiment can be configured as a PC-based program or an application dedicated to a mobile terminal. The payment service application according to the present embodiment may be implemented as a program operating independently or in an in-app form of a specific application, and may be implemented to operate on the specific application.

Also, the methods according to embodiments of the present invention may be performed by a payment service application controlling a user terminal. Such an application can be installed in a user terminal through a file provided by a file distribution system. For example, the file distribution system may include a file transfer unit (not shown) for transferring the file at the request of the user terminal.

In the above-described embodiments, payment of a purchased product is performed by executing a payment service app at a user terminal. However, this is an embodiment, and the secure shopping authentication system may be configured to perform payment The settlement of purchasing goods can be performed using any form of settlement method capable of acquiring terminal information of a user terminal provided by a third party. For example, when purchasing a product in an in-app payment, an off-line store, holding a payment for a purchased product, providing only a mobile phone number, or registering the purchased product in a seller terminal, Based on the provided / registered mobile phone number. In addition, the secure shopping authentication system, such as a mobile phone micropayment, may perform authentication by performing authentication using only the mobile phone number in connection with the communication company server of the user terminal.

The apparatus described above may be implemented as a hardware component, a software component, and / or a combination of hardware components and software components. For example, the apparatus and components described in the embodiments may be implemented within a computer system, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA) A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For ease of understanding, the processing apparatus may be described as being used singly, but those skilled in the art will recognize that the processing apparatus may have a plurality of processing elements and / As shown in FIG. For example, the processing unit may comprise a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of the foregoing, and may be configured to configure the processing device to operate as desired or to process it collectively or collectively Device can be commanded. The software and / or data may be in the form of any type of machine, component, physical device, virtual equipment, computer storage media, or device , Or may be permanently or temporarily embodied in a transmitted signal wave. The software may be distributed over a networked computer system and stored or executed in a distributed manner. The software and data may be stored on one or more computer readable recording media.

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (1)

Security-enhanced safe shopping authentication method.

Images