KR20180105406A - biometrics certification by payment method and biometrics certification payment management server - Google Patents

Abstract

The present invention relates to a payment method by electronic money through biometric authentication and a biometric authentication payment managing server. A biometric authentication technique is added to a mobile payment system which pays for purchase of various goods or content or remits a fixed amount to a third party by using electronic money, and online/offline payment solutions which are convenient to use and has improved security such as payment or remittance are built, thereby purchasing or paying various goods or various content such as games or remitting to others without cash or various credit cards. The biometric authentication payment managing server comprises a communication part (110), an electronic money saving part (120), a biometric authentication information DB (130), a user information DB (140), a franchise information DB (150), an authentication part (160), a settlement part (170), and a settlement result notifying part (180).

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a biometrics authentication method and a biometrics authentication payment management server,

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a payment method and a biometric authentication payment management server using an electronic money through biometric authentication. More particularly, the present invention relates to a biometric authentication payment management server by adding a biometric authentication technology to a mobile payment system, By establishing an on / offline payment solution, it is possible to purchase and pay for various contents such as goods and games without cash or various credit cards, and to transfer money to other people. Server.

In addition, the present invention allows a user to connect to a biometric authentication payment management server to buy an electronic money identified by a user through biometric authentication, or to make an electronic money cashier.

According to the development of wireless Internet technology, users of mobile communication services can use various mobile phones such as smart phones and the like to use contents such as various games provided from servers on the Internet without restriction of time and space through a wireless communication network, You can purchase content such as shoes and various games.

Generally, as a method for solving the inconvenience and risk of carrying the cash and achieving a more convenient financial settlement function, conventionally, a predetermined amount is set based on the credit information for the user, and within a limit of the set amount The credit card payment method that is used as payment method after using the line is being used.

On the other hand, in recent years, a limited method of allowing payment by virtue of only the credit information of a credit card user built in the magnetic recording surface of the credit card or the information recording chip has been removed, and the value of the money has been digitized, An electronic money amount charging card has been developed and commercialized so that data can be directly stored in an information recording area of a card and used.

As such an electronic money amount charging card, a smart card (smart card) equipped with a semiconductor chip having a memory means and a central processing processor is typically used. In order to be embedded in a mobile such as a smart phone, And the smart card is implemented as a plug-in type.

Electronic money charging for a smart card that can be installed in such a portable device can be accomplished by charging a certain amount of money by connecting the smart card directly or indirectly to the electronic money charging machine in offline mode or by using a mobile or network adapter And a predetermined amount of money is charged through the computer terminal.

On the other hand, smart cards filled with electronic money are mainly used for settlement of traffic charges of transportation means, payment of commodity purchase of vending machines, or small payments such as toll road fees under an offline environment.

Patent Document 1 discloses a method of paying a purchase price for a merchandise traded by a customer using an electronically accumulated point. Patent Document 2 discloses a method in which when a point payment is requested by a mobile terminal, A patent document 3 describes a method of designing a discounted product whose discount rate increases according to an amount of money through a prepaid point product and calculating a point at a later time. In Patent Document 4, there is a method in which an authentication server A method is disclosed in which the merchant ID received from the smartphone, the ID of the one-time-merchant POS terminal, and the QR code are scanned and the settlement related information read out and the payment is approved through authentication using the disposable terminal ID previously transmitted to the online shopping mall server have.

As described above, the prior arts disclosed in Patent Documents 1 to 4 can pay for purchases of various goods by using points or smart phones without cash, but it is difficult for customers (users) or mobile terminals There is a problem that authentication is not performed and security is poor.

Korean Registered Patent No. 10-0733565 (Registered on June 29, 2007) Korean Registered Patent No. 10-1306808 (Registration Announcement on Mar. 09, 2013) Korean Registered Patent No. 10-1211139 (Registered Notice of December 11, 2012) Korean Registered Patent No. 10-1474556 (Registration Announcement on Dec. 22, 2014)

SUMMARY OF THE INVENTION The present invention has been made to solve the problems of the prior art as described above, and it is an object of the present invention to provide an on / off-line payment solution that is easy to use and enhanced security, And a payment method and a biometric authentication payment management server using a money.

As a means for solving the above-mentioned object, the present invention can be configured as follows.

A payment method using electronic authentication using biometrics authentication according to an embodiment of the present invention is a payment method in which a biometrics authentication payment management server at the time of a payment settlement request or a remittance request of a user of a mobile communication terminal, (POS) terminal or ATM (Automatic Teller's Machine) information together with the merchant information, the user information, and the settlement information from the merchant terminal or receives information on the user information and remittance amount from the mobile terminal, A first step of receiving ATM information and requesting a user's biometric code (w ') through the POS terminal or the ATM; Upon reception of the user's biometric code (w ') from the POS terminal or the ATM, the biometric authentication payment management server receives the biometric code (w') from the POS terminal or the ATM A second step of authenticating the biometrics code w 'of the user; When the user authentication is successful in the second step, the biometric authentication payment management server subtracts the electronic money corresponding to the payment requested from the virtual account of the user, puts the various goods or contents into the virtual account of the purchased merchant, A third step of subtracting the electronic money corresponding to the remittance amount requested by the user from the electronic money and inputting the electronic money into the virtual account of the receiver specified by the user; And the biometric authentication payment management server transmits to the mobile communication terminal or the affiliated terminal a result of payment for the various goods or contents purchased by the user in the third step or remittance of the remittance amount requested by the user, .

In an electronic money settlement method using biometrics authentication according to another embodiment of the present invention, electronic money accumulated in a virtual account of a user of the mobile communication terminal may be transferred to a bank account through a bank transfer server, Various electronic moneys can be acquired and acquired from various electronic money acquisition servers on the Internet.

In an electronic money settlement method using biometrics authentication according to another embodiment of the present invention, electronic money accumulated in a virtual account of the user of the mobile communication terminal, the manager of the affiliate shop terminal or the receiver is stored in the mobile communication terminal, The manager of the merchant terminal or the recipient may transfer the money to the account designated by the user of the mobile communication terminal, the manager of the merchant terminal or the receiver after biometrics authentication.

In the electronic money payment method according to another embodiment of the present invention, the user information, the merchant information, and the receiver information are information including account information together with terminal information of a user, a merchant, and a receiver, Users, merchants, and recipients can be collected and stored at the time of membership.

According to another embodiment of the present invention, in a payment method by electronic money through biometric authentication, the POS (Point of Sales) terminal or the ATM (Automatic Teller's Machine) may have a biometric function including an iris or a face have.

In the electronic money payment method using biometric authentication according to another embodiment of the present invention, the user information may be a QR code.

In the payment method by electronic money through biometrics authentication according to another embodiment of the present invention, the biometrics authentication information of the pre-registered user in the second step is transmitted to the POS terminal, together with user information, After receiving the terminal or the ATM information, the biometric authentication payment management server generates a QR code including the user information, transmits the QR code to the mobile communication terminal, and transmits the biometric code (w) of the user through the POS terminal or the ATM A requesting step; Generating biometric authentication information of the user by using the biometric code (w) when receiving the biometric code (w) of the user from the POS terminal or the ATM; And storing the generated biometric authentication information of the user in the biometric authentication information.

In the payment method by electronic money through biometrics authentication according to another embodiment of the present invention, the biometrics authentication information of the user generated using the biometrics code (w) includes dummy data (e) in the biometrics code (w) ; Encoding an arbitrary key using an error correction algorithm; Generating verification data (s) using the encoded random code (c) and w || e; Generating a bio-hash code h (w) by hashing the bio-code w using a hash function; And storing the verification data (s) and the bio-hash code (h (w)) in the biometric authentication payment management server 100 as biometric authentication information.

In the electronic money payment method according to another embodiment of the present invention, the verification data (s) can be generated by XORing the encoded biometric code w with a random code (c).

In the payment method using electronic money through biometric authentication according to another embodiment of the present invention, the user authentication in the second step may be performed at the time of payment request of the merchant terminal manager or when requesting remittance from the mobile communication terminal user Requesting the biometric code (w ') of the user through the terminal or the ATM; Adding dummy data (e) composed of '0' to the biometric code (w ') when receiving the biometric code (w') of the user from the POS terminal or the ATM; Performing decoding on the verification data (s) using biometrics code (w '| e) added with the dummy data (e) and an error correction algorithm; Adding s to the decoded data and extracting a resultant biometric code bit to generate a biometric hash code h (w '') using a hash function; And determining the authentication success or authentication failure of the user by the previously registered biometric hash code h (w) and the hashed biometric hash code h (w '').

In the electronic money payment method according to another embodiment of the present invention, decoding of the verification data (s) may be performed using biometrics code (w ') to which the dummy data (e) s); < / RTI > Decoding the XOR computed value using an error correction algorithm; And a step of XORing the decoded value with respect to the verification data (s).

In addition, the biometric authentication payment management server according to an embodiment of the present invention includes a communication unit for communication with a mobile communication terminal, an affiliate terminal, a POS terminal or an ATM; An electronic money accumulating unit which stores a virtual account of the mobile communication terminal user, the merchant terminal manager and the receiver, and accumulates electronic money in each virtual account; A biometric authentication information DB in which biometric authentication information of at least one mobile communication terminal user is registered in advance; A user information DB storing user or recipient specific information including an account for financial transactions; A merchant information DB storing information unique to one or more merchant stores including accounts for financial transactions; (W ') of the user via the POS terminal or the ATM at the time of requesting payment by the merchant terminal manager or requesting remittance of the user of the mobile communication terminal, and transmits the request to the POS terminal or the user An authentication unit for executing the user biometric authentication through comparison between the biometric code (w ') and the biometric authentication information of the user registered in advance; The authentication unit subtracts the electronic money corresponding to the payment amount or the remittance amount from the user virtual account of the electronic money accumulating unit when the user of the mobile communication terminal succeeds in biometric authentication and outputs the electronic money to the virtual account of the merchant manager of the electronic money accumulating unit or the virtual account of the receiver A settlement part for putting; And a settlement result notifying unit for transmitting a settlement result of the purchase price of the various goods or contents purchased by the user or the remittance result of the remittance amount requested by the user to the mobile communication terminal or the merchant terminal.

In the biometric authentication payment management server according to another embodiment of the present invention, when the user of the mobile communication terminal requests the electronic money purchase, he / she accesses the bank management server, purchases electronic money through the account transfer after biometrics authentication, An electronic money purchasing unit for purchasing electronic money through card settlement after biometric authentication or accessing various electronic money acquisition servers of a user name on the Internet to convert various electronic moneys acquired by the user into electronic money that can be used by the biometric authentication payment management server As shown in FIG.

In the biometric authentication payment management server according to another embodiment of the present invention, electronic money of an amount requested by the user of the mobile communication terminal, the manager of the merchant terminal, or the recipient after the biometric authentication is requested by the mobile communication terminal user , An administrator of the franchise terminal or an electronic money refunding unit for transferring money to an account designated by the receiver and cashing it.

In the biometric authentication payment management server according to another embodiment of the present invention, the user information, the merchant information, and the recipient information are stored in the user information DB and the merchant information DB, such as the terminal information of the user, Together with the account information.

In the biometric authentication payment management server according to another embodiment of the present invention, the POS (point of sale) terminal or the ATM (Automatic Teller's Machine) may have a biometric function including an iris or a face.

In the biometric authentication payment management server according to another embodiment of the present invention, the user information may be converted into a QR code and stored in the user information DB.

In the biometric authentication payment management server according to another embodiment of the present invention, the authentication unit may receive a QR code including the user information after the mobile communication terminal user receives the POS terminal or the ATM information together with user information at the time of membership registration (W) of the user through the POS terminal or the ATM, and transmits the biometric code (w) to the POS terminal or the ATM when the user receives the biometric code (w) To generate the biometric authentication information of the user, and to register the generated biometric authentication information in the biometric authentication information DB.

In the biometric authentication payment management server according to another embodiment of the present invention, the authentication unit adds (XOR or +) dummy data (e) to the biometric code (w) (w) is combined with the random code (c) encoded using an error correction algorithm to generate verification data (s), and the biometric code (w) is hashed using the hash function to generate a bio- ), And store the verification data (s) and the bio-hash code (h (w)) in the biometric authentication information DB as the biometric authentication information of the user.

In the biometric authentication payment management server according to another embodiment of the present invention, the verification data (s) can be generated by XORing the encoded random code (c) with the biometric code (w).

In the biometric authentication payment management server according to another embodiment of the present invention, the authentication unit may transmit the biometric code w of the user through the POS terminal or the ATM at the time of payment request of the merchant terminal manager or when requesting remittance by the user of the mobile communication terminal ), Adds dummy data (e) composed of '0' to the biometric code (w ') upon receipt of the biometric code (w') from the POS terminal or the ATM, and uses an error correction algorithm And decodes a value obtained by adding the verification data (s) to the biometric code (w ') to which the dummy data (e) is added, adds the verification data to the decoded value, (H (w ')) using the hash function and generates the hash function h (w' ') using the hash function h ')) To the user's authentication success or It can determine the authentication fails.

In the biometric authentication payment management server according to another embodiment of the present invention, the authentication unit performs an XOR operation on the biometric code (w ') to which the dummy data (e) is added and the verification data (s) Decodes the computed value using an error correction algorithm, and XORs the decoded value with respect to the verification data (s), thereby performing decoding on the biometric code (w ') to which the dummy data (e) is added can do.

According to the electronic money payment method and the biometric authentication payment management server through the biometric authentication according to the embodiment of the present invention, when payment of a purchase of various goods or contents with electronic money pre-paid or remittance to another person By acquiring biometric information of a user using a POS terminal or an ATM having an iris or face recognition function and approving payment and remittance through authentication of the biometric information and the biometric authentication information registered in advance, It is possible to increase the convenience and security of the purchasing price of the purchased goods or contents without a card or to remit it to another person.

1 is a configuration diagram of an electronic money settlement system through biometric authentication according to an embodiment of the present invention.
Fig. 2 is a configuration diagram of the biometric authentication settlement management server shown in Fig. 1. Fig.
FIG. 3 is a diagram illustrating a process of registering biometric authentication information of a user in the biometric authentication payment management server 100. FIG.
4 is a diagram illustrating a process of performing user authentication in the biometric authentication settlement management server 100. Referring to FIG.
5 is a flowchart showing a process in which a user connects to a biometric authentication payment management server and registers a biometric authentication information.
6 is a flowchart showing a process in which a user connects to a biometric authentication payment management server and purchases electronic money.
7 is a flowchart showing a process of a user accessing a biometric authentication payment management server and paying for a purchase of various goods or contents.
Fig. 8 is a flowchart showing a process in which a user connects to a biometric authentication payment management server and remits to another person.
9 is a flowchart showing a process in which a user (merchant terminal administrator or recipient) connects to the biometric authentication payment management server 100 to repurchase electronic money.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a configuration diagram of an electronic money settlement system through biometric authentication according to an embodiment of the present invention.

Referring to FIG. 1, an electronic money settlement system using biometrics authentication according to an exemplary embodiment of the present invention includes a biometric authentication payment management server 100, a mobile communication terminal 200, an affiliate shop terminal 300, A card issuance management server 420, an electronic money acquisition server 430, a POS terminal 510, and an ATM 520. [

The biometric authentication payment management server 100 approves settlement and remittance through biometric authentication of the user when payment of various goods or contents purchased by the user is made by electronic money or electronic money is sent to a designated user. To this end, the biometric authentication payment management server 100 has a virtual account capable of accumulating electronic money of a user, an affiliate store, and a receiver, biometric authentication information for biometric authentication of a user is registered in advance, To purchase electronic money for payment or remittance to another person. Here, the receiver may be the user himself or a third user or a franchisee terminal manager.

In addition, the mobile communication terminal 200 can access the biometric authentication payment management server 100 and register as a member, and request a remittance to another person, that is, a receiver. The mobile communication terminal 200 stores a QR code including a connection with the biometric authentication payment management server 100 and information unique to the user of the mobile communication terminal 200. In addition, the merchant terminal 300 may access the biometric authentication payment management server 100 and request payment of the purchase of various goods or contents.

The bank management server 410, the card issuer management server 420 and the electronic money obtaining server 430 can receive electronic money (e-mail) obtained through account transfer, card settlement, game, The electronic money that the user can use in the biometric authentication payment management server 100 is accumulated by switching the money to the electronic money that can be used in the biometric authentication payment management server 100. [

The POS terminal 510 and the ATM 520 are provided with a biometric function such as an iris or a face and are connected to the biometric authentication payment management server 100 in cooperation with the mobile communication terminal 200 or the merchant terminal 300 Acquires and provides the biometric information of the user when requesting the biometric information.

Fig. 2 is a configuration diagram of the biometric authentication settlement management server shown in Fig. 1. Fig.

2, the biometric authentication payment management server 100 includes a communication unit 110 for communicating with the mobile communication terminal 200, the merchant terminal 300, the POS terminal 510 or the ATM 520, An electronic money accumulating unit 120 for storing a virtual account of a user of the terminal 200 and an administrator and a receiver of the merchant terminal 300 and accumulating electronic money in each virtual account, A biometric authentication information DB 130 in which authentication information is registered in advance, a user information DB 140 in which a user including an account for financial transaction or information specific to a recipient is stored, at least one merchant unique A biometric code of the user through the POS terminal 510 or the ATM 520 at the request of the payment of the payment of the manager of the merchant terminal 300 or the remittance of the user of the mobile communication terminal 200, (w '), and requests PO Authentication unit 160 for performing biometrics authentication of the user through comparison of the biometrics code w 'of the user received from the S terminal 510 or the ATM 520 with the biometrics authentication information of the user registered in advance, When the biometric authentication of the user of the mobile communication terminal 200 is successful in step 170, the electronic money corresponding to the payment amount or the remittance amount is subtracted from the user virtual account of the electronic money accumulating unit 120, The payment result of the purchase price of the various goods or contents purchased by the user or the remittance result of the remittance amount requested by the user to the mobile communication terminal 200 or the merchant terminal 300 (Not shown).

The biometric authentication payment management server 100 accesses the bank management server 410 when the mobile communication terminal 200 requests the electronic money purchase by the user of the mobile communication terminal 200 and purchases the electronic money through the bank transfer after the biometric authentication, To access various electronic money acquisition servers 430 of a user name on the Internet and to use the various electronic moneys acquired by the user in the biometric authentication payment management server 100 And an electronic money purchaser 191 that converts the electronic money into electronic money.

In addition, the biometric authentication payment management server 100 transmits the electronic money of the amount requested by the manager or the recipient of the mobile communication terminal 200 or the merchant terminal 300 after the biometric authentication request to the mobile communication terminal 200 And an electronic money refunding unit 192 for transferring money to an account of the user or an account of the franchisee terminal 300 designated by the manager or the receiver.

Herein, the user information, the merchant information, and the receiver information are information including the terminal information of the user, the merchant, and the receiver collected at the time of membership registration by the user, the merchant manager, and the receiver, as the information including the account information, (150). The user information is converted into a QR code in the user information DB 140 and stored or transmitted to the mobile communication terminal 200 of the user.

Also, POS (point of sale) terminal 510 or ATM (Automatic Teller's Machine) 520 acquires biometric information for biometric authentication of a user who desires payment and remittance of purchase price of various goods or contents An IR LED, and an iris recognition camera, and has a biometric function including an iris or a face.

The authentication unit 160 generates a QR code including the user information after receiving the POS terminal 510 or ATM 520 information together with the user information at the time of subscription to the mobile communication terminal 200, Transmits the biometric code w to the communication terminal 200 and requests the biometric code w of the user through the POS terminal 510 or the ATM 520 and receives the biometric code w of the user from the POS terminal 510 or ATM 520 The biometric authentication information of the user can be generated using the biometric code w and the generated biometric authentication information can be registered in the biometric authentication information DB 130. [

At this time, the authentication unit 160 adds the dummy data e to the biometric code w, adds the biometric code w to which the dummy data e is added to the random code c encoded using the error correction algorithm, Generates biometric hash code h (w) by hashing biometric code w using a hash function, generates verification data s and biometric hash code h (w) And can be stored in the biometric authentication information DB 130 as biometric authentication information of the user.

Here, the verification data (s) can be generated by XORing the encoded biometric code w with the random code (c).

The authentication unit 160 may transmit the biometric code w 'of the user through the POS terminal 510 or the ATM 520 when the payment is requested by the administrator of the merchant terminal 300 or when the user of the mobile communication terminal 200 requests the transfer, And adds dummy data e composed of '0' to the biometric code w 'upon receipt of the user's biometric code w' from the POS terminal 510 or the ATM 520 and outputs an error correction algorithm (W ') by adding the verification data (s) to the biometric code (w') to which the dummy data (e) is added, adding the verification data to the decoded value, (H (w '')) using the hash function, and outputs the hash code h (w '') and the hashed biohash code h (w Authentication failure or authentication failure.

The authentication unit 160 performs an XOR operation on the biometric code w 'and the verification data s to which the dummy data e is added, decodes the XOR-computed value using an error correction algorithm, And perform a XOR operation on the verification data (s) to perform decoding on the biometric code (w ') to which the dummy data (e) is added.

FIG. 3 is a diagram illustrating a process of registering biometric authentication information of a user in the biometric authentication payment management server 100. FIG.

Referring to Fig. 3, verification data (s) can be generated by XORing a concatenated value (w // e) of the biometric code (w) and the dummy data (e) and the random code (c). The biometric hash code h (w) can be generated by hashing the biometric code w by the hash function. The verification data (s) and the biometric hash code h (w) are stored in the biometric authentication information DB 130 as biometric authentication information, whereby the biometric authentication information of the user can be registered. Here, the dummy data e may have a random value. Here, the method of adding the biometric code (w) and the dummy data (e) is not limited to the above embodiment.

In another embodiment, the verification data (s) can be generated by XORing the random code (c) with the concatenated value (e // w) of the dummy data (e) and the biometric code (w). Further, the verification data (s) can be generated by XORing the random code (c) with the value obtained by combining the dummy data (e) and the biometric code (w) according to a predetermined rule. The method of adding the biometric code w to the dummy data e is a method of separating the dummy data e and the biometric code w from the result obtained by adding the biometric code w to the dummy data e If so, any method can be used.

4 is a diagram illustrating a process of authenticating payment and remittance requested by a user in the biometric authentication payment management server 100. [

Referring to FIG. 4, biometrics code w 'and dummy data e for which user authentication is desired can be concatenated. Here, the dummy data e may be predetermined bead data composed of '0'. In this case, the concatenated value becomes w '// 0. A first XOR operation is performed on the concatenated value (w '// 0) and the verification data (s). The XOR-computed value (QQQ) is decoded by the BCH decoder. The value QQQ calculated here satisfies the following equation.

s = w // e + c = w + c // e + c

C = (w '+ w // e) + c (w' // 0) = w '+ w +

The codeword size of the BCH is 8191, the message length is 391, and the error correction value is t 1403. Here, the hamming distance of QQQ with respect to c of the concatenated value (w // e) is equal to 53, assuming that w 'and w are 1350, and their sum is 1403. That is, QQQ can differ by 1403 bits from c. Therefore, decoding QQQ yields c.

A second XOR operation on the decoded value (c) and the verification data (s) may then be performed. The result value of the second XOR operation is the concatenated value (w // e) used in the biometric authentication information registration in FIG. The resulting concatenated value (w // e) is hashed by the hash function used to hash w.

The comparison unit CMP also compares the biometric hash code h (w) included in the biometric authentication information stored in the biometric authentication information DB 130 of the biometric authentication payment management server 100 with the hashed value from the hash function The authentication result, i.e. authentication success and authentication failure, are generated.

5 is a flowchart showing a process of a user accessing the biometric authentication payment management server 100 to register and register biometric authentication information.

5, the user of the mobile communication terminal 200 accesses the biometric authentication payment management server 100 to register his / her membership (S11) and registers the email, password, ID, name, profile picture, The same user information is input (S12) and it is determined whether a QR code and a virtual account (or wallet) are generated (S13).

When the user of the mobile communication terminal 200 decides to generate the QR code and the virtual account, the biometric authentication payment management server 100 directly or indirectly transmits part or all of the user information inputted through the mobile communication terminal 200, And stores the converted QR code in the mobile communication terminal 200 or converts it into a QR code, stores the converted QR code, transmits the converted user information to the mobile communication terminal 200, and creates a virtual account of the user in the electronic money accumulating unit 120 ). At this time, the user of the mobile communication terminal 200 stores the QR code transmitted from the biometric authentication payment management server 100 as information for connection with the biometric authentication payment management server 100 and authentication for the corresponding mobile communication terminal 200, Designates the POS terminal 510 or ATM 520 that can be used for acquiring biometric information and transmits the unique information to the biometric authentication payment management server 100. [

The biometric authentication payment management server 100 requests the biometric information of the user through the POS terminal 510 or the ATM 520 designated by the user of the mobile communication terminal 200 together with the mobile communication terminal 200. [ (S15).

The user of the mobile communication terminal 200 obtains the biometric information such as the iris or face of the user by the POS terminal 510 or the ATM 520 according to the request of the biometric authentication payment management server 100, To the server 100 (S16).

3, the biometric authentication payment management server 100 transmits the verification data s and the biometric hash code h (w) from the biometric information acquired by the POS terminal 510 or the ATM 520 And stores it in the biometric authentication information DB 130 as the biometric authentication information of the user and registers the biometric authentication information in the biometric authentication information DB 130 (S17).

Although the above description has been made only on the subscription of the user of the mobile communication terminal 200, the present invention is not limited to this, and the manager or recipient of the affiliate terminal 300 may access the biometric authentication payment management server 100 to register the member. At this time, the information of the manager or recipient of the merchant terminal 300 may be changed, added, or deleted in the same or a part of the user information.

6 is a flowchart showing a process of the user accessing the biometric authentication payment management server 100 and purchasing electronic money.

6, when the user of the mobile communication terminal 200 (or the manager or recipient of the merchant terminal 300) accesses the biometric authentication payment management server 100 (S21) and requests the electronic money purchase (S22) The biometric authentication payment management server 100 can select one of the electronic money purchasing method, that is, the conversion of the electronic money acquired through the real-time bank transfer, the card settlement, the purchase of the game, the goods or the contents to the user of the mobile communication terminal 200 (S23).

The user of the mobile communication terminal 200 selects one of the electronic money purchase methods proposed by the biometric authentication payment management server 100 and transmits the information of the POS terminal 510 and the ATM 520 to the bank for real- (Step S24), the biometric authentication payment management server 100 transmits the bank account number, the credit card number of the credit card company, and the server address and the amount of the electronic money on the Internet to the bank management server 410 or the card issuance management server 420 Or the electronic money acquisition server 430 (S25).

The biometric authentication payment management server 100 requests the user's biometric information through the POS terminal 510 or the ATM 520 specified by the user of the mobile communication terminal 200 together with the mobile communication terminal 200 (S26).

The user of the mobile communication terminal 200 obtains the biometric information such as the iris or face of the user by the POS terminal 510 or the ATM 520 according to the request of the biometric authentication payment management server 100, To the server 100 (S27).

4, the biometric authentication payment management server 100 transmits the biometric information of the user acquired by the POS terminal 510 or the ATM 520 and the biometric information of the user registered in the biometric authentication information DB 130 (S28) of the user's biometric information through comparison with the authentication information, and acquires the electronic money purchase method designated by the user at the time of successful authentication, that is, the electronic money purchase method acquired through the purchase of the game, Electronic money is purchased by one of the electronic money conversion and accumulated in the virtual account of the user (S29).

Of course, as described above, a user connects to the bank management server 410, the card issuer management server 420, and the electronic money acquisition server 430 and transmits the electronic money to the biometric authentication payment management server 100 It is obvious that a predetermined agreement must be concluded between the operator of the biometric authentication payment management server 100 and the bank, credit card company, and various server operators for purchasing the electronic money. This is also true for remittance or redemption of electronic money as described below.

In the above embodiment, the electronic money is acquired by real-time account transfer, card payment, or purchase of a game or goods or contents. However, the present invention is not limited to this, Various points that can be converted into electronic money on-off-line, such as micropayment, by the communication terminal can be utilized.

7 is a flowchart showing a process of a user accessing the biometric authentication payment management server 100 to settle a purchase amount of various goods or contents.

7, in the state that item, unit price, quantity and amount of various goods or contents purchased by the user are inputted, the user selects payment by electronic money and inputs the QR code of the user of the mobile communication terminal 200 (S31 , The merchant terminal 300 accesses the biometric authentication payment management server 100 (S32) and requests payment approval (S33), and transmits the QR code of the mobile communication terminal 200, payment information including the purchase price, The POS terminal 510 having the biometric function and the ATM 520 information are transmitted.

The biometric authentication payment management server 100 analyzes the QR code and confirms whether the user who has requested payment approval is registered in advance in step S34. The biometric authentication payment management server 100 searches the POS terminal (300) 510) or the ATM 520 (S35).

According to the request of the biometric authentication payment management server 100, the user acquires the biometric information such as the iris, face, etc. of the user by the POS terminal 510 or the ATM 520 and transmits it to the biometric authentication payment management server 100 (S36).

4, the biometric authentication payment management server 100 transmits the biometric information of the user acquired by the POS terminal 510 or the ATM 520 and the biometric information of the user registered in the biometric authentication information DB 130 Authentication of the user's biometric information (S37) is performed through comparison with the authentication information, the electronic money corresponding to the purchase amount requested for payment is subtracted from the virtual account of the user at the time of successful authentication, and put into the virtual account of the merchant (S38) (Settlement approval) to the communication terminal 200 and the merchant terminal 300 (S39).

8 is a flowchart showing a process in which a user connects to the biometric authentication payment management server 100 and remits to another person.

8, a user of the mobile communication terminal 200 accesses the biometric authentication payment management server 100 (S41), and transmits the QR code of the user of the mobile communication terminal 200, a POS having a remittance amount and a biometric function The biometric authentication payment management server 100 analyzes the QR code and confirms whether the user who has requested the transfer is registered in advance in step S43, The user requests biometric information of the user through the POS terminal 510 or ATM 520 designated by the user of the mobile communication terminal 200 together with the corresponding mobile communication terminal 200 at step S44.

According to the request of the biometric authentication payment management server 100, the user acquires the biometric information such as the iris, face, etc. of the user by the POS terminal 510 or the ATM 520 and transmits it to the biometric authentication payment management server 100 (S45).

4, the biometric authentication payment management server 100 transmits the biometric information of the user acquired by the POS terminal 510 or the ATM 520 and the biometric information of the user registered in the biometric authentication information DB 130 (S46) of the user's biometric information in comparison with the authentication information, extracts the electronic money corresponding to the remittance amount requested from the user's virtual account at the time of successful authentication, and inserts the electronic money into the virtual account of the receiver (S47) And transmits the remittance result (remittance approval) to the terminal 200 (S48).

Here, the receiver may be the third user or the franchise terminal manager other than the user or the user. In addition, although the electronic money is subtracted from the virtual account of the user and put in the virtual account of the other user, that is, the recipient, the remittance is not limited to this, but the electronic money of the user's virtual account may be directly transferred (Remittance). Of course, as described above, it is a matter of course that a predetermined agreement must be concluded between the operator of the biometric authentication settlement management server 100 and a financial institution such as a bank or credit card company.

9 is a flowchart showing a process in which a user connects to the biometric authentication settlement management server 100 and repurchases electronic money.

9, the user of the mobile communication terminal 200 accesses the biometric authentication payment management server 100 (S51), transfers the QR code of the user of the mobile communication terminal 200, the amount of the redemption money, The biometric authentication payment management server 100 analyzes the QR code and transmits a redemption message to the biometric authentication payment management server 100 when the POS terminal 510 or the ATM 520 having the account number and the biometric function of the financial institution is transmitted and the redemption request is made The user of the mobile communication terminal 200 requests the biometric information of the user through the POS terminal 510 or the ATM 520 specified by the user of the mobile communication terminal 200 together with the corresponding mobile communication terminal 200 (S54).

According to the request of the biometric authentication payment management server 100, the user acquires the biometric information such as the iris, face, etc. of the user by the POS terminal 510 or the ATM 520 and transmits it to the biometric authentication payment management server 100 (S55).

4, the biometric authentication payment management server 100 transmits the biometric information of the user acquired by the POS terminal 510 or the ATM 520 and the biometric information of the user registered in the biometric authentication information DB 130 (S56) of the user's biometric information in comparison with the authentication information to extract the electronic money corresponding to the redemption amount requested from the virtual account of the user at the time of successful authentication and transmit the electronic money corresponding to the financial institution designated by the user of the mobile communication terminal 200 (S57), and transmits the reimbursement result (redemption approval) to the mobile communication terminal 200 (S58).

 Although the user of the mobile communication terminal 200 repurchases the electronic money in the above description, the present invention is not limited to this. However, the receiver of the electronic money remitted from the merchant terminal manager or the user may also redeem the electronic money in the same manner as above, can do.

In the foregoing, some embodiments of the payment method and the biometric authentication payment management server using biometrics authentication according to the present invention have been described with reference to the accompanying drawings. These embodiments are included in the technical idea described in the claims of the present invention. Furthermore, these embodiments are merely illustrative and should not be construed as limiting in interpreting the claims of the present invention.

100: biometric authentication payment management server 110:
120: electronic money accumulating unit 130: biometric authentication information DB
140: User information DB 150: Merchant information DB
160: authentication unit 170: settlement unit
180: settlement result notification unit 191: electronic money purchase unit
192 Electronic money refund unit 200: Mobile communication terminal
300: Merchant terminal 410: Bank management server
420: Card issuer management server 430: Electronic money acquisition server
510: POS terminal 520: ATM

Claims (20)

The biometric authentication payment management server 100 receives from the affiliate shop terminal 200 the merchant information and the user information from the merchant terminal 300 in response to a payment settlement request or a remittance request of the user of the mobile communication terminal 200, (POS) terminal 510 or an ATM (Automatic Teller's Machine) 520 together with payment information and information on the user information and remittance amount from the mobile communication terminal 200 510) or ATM (520) information and requesting a user's biometric code (w ') through the POS terminal (510) or the ATM (520);
Upon receipt of the biometrics code (w ') of the user from the POS terminal 510 or the ATM 520, the biometric authentication payment management server 100 performs user authentication through comparison with the biometric authentication information of the user registered in advance A second step of authenticating the biometric code (w ') of the user received from the POS terminal (510) or the ATM (520)
Upon successful user authentication in the second step, the biometric authentication payment management server 100 subtracts the electronic money corresponding to the payment requested from the virtual account of the user, inserts the various goods or contents into the virtual account of the purchased merchant, A third step of subtracting the electronic money corresponding to the remittance requested from the virtual account of the user and inputting the electronic money into the virtual account of the receiver designated by the user; And
The biometric authentication payment management server 100 transmits the result of payment for the various goods or contents purchased by the user in the third step and remittance of the remittance amount requested by the user to the mobile communication terminal 200 or the affiliate terminal (300)
Wherein the biometric authentication is performed by using the electronic money. The method according to claim 1,
The electronic money accumulated in the virtual account of the user of the mobile communication terminal 200,
The electronic money is acquired by a bank transfer server through the bank management server 410, a card payment through the card issuance management server 420, or various electronic money acquisition servers 430 on the Internet, Payment by electronic money through. The method according to claim 1,
Electronic money accumulated in the virtual account of the user of the mobile communication terminal 200, the manager of the merchant terminal 300,
The user of the mobile communication terminal 200, the manager of the franchise terminal 300 or the user of the franchise terminal 300 after biometrics authentication at the request of the recipient And transferring the electronic money to the account and realizing the electronic money. The method according to claim 1,
Wherein the user information, the merchant information, and the receiver information are information including account information together with terminal information of a user, an affiliate store, and a receiver, and the user, the merchant, and the receiver are collected and stored at the time of membership registration. Payment method by electronic money. The method according to claim 1,
The point of sale (POS) terminal 510 or the ATM (Automatic Teller's Machine) 520 has a biometric function including an iris or a face. The method according to claim 1,
Wherein the user information is composed of a QR code. 7. The method according to any one of claims 1 to 6,
The biometric authentication information of the pre-registered user in the second step includes:
After the user of the mobile communication terminal 200 receives the POS terminal 510 or the ATM 200 information together with the user information at the time of membership registration, the biometric authentication payment management server generates a QR code including the user information Requesting a biometric code (w) of a user through the POS terminal (510) or the ATM (520) by transmitting the biometric code (w) to the mobile communication terminal (200)
Generating biometric authentication information of the user by using the biometric code (w) when the biometric code (w) of the user is received from the POS terminal (510) or the ATM (520); And
Storing biometrics authentication information of the generated user internally
Wherein the electronic money is registered through the biometric authentication. 8. The method of claim 7,
The biometric authentication information of the user generated using the biometric code (w)
Adding dummy data (e) to the biometric code (w);
Generating biometric code (w) to which the dummy data (e) has been added, with the random code C encoded using an error correction algorithm to generate verification data (s);
Generating a bio-hash code h (w) by hashing the bio-code w using a hash function; And
Storing the verification data (s) and the bio-hash code (h (w)) in the biometric authentication payment management server 100 as biometric authentication information
And the biometric authentication information is generated and stored through the biometric authentication. 7. The method according to any one of claims 1 to 6,
The user authentication in the second step includes:
Requesting the biometric code (w ') of the user through the POS terminal 510 or the ATM 520 at the time of the payment request of the manager of the affiliated shop terminal 300 or the remittance request of the user of the mobile communication terminal 200 ;
Adding dummy data (e) composed of '0' to the biometric code (w ') upon receipt of a biometric code (w') from the POS terminal (510) or the ATM (520);
Performing decoding on the value obtained by XORing the verification data (s) to the biometric code (w ') to which the dummy data (e) is added using the verification data (s) and an error correction algorithm;
Extracting a biometric bit (w '') by XORing the verification data with the decoded value and generating a biometric hash code (h (w '')) using a hash function; And
Determining the authentication success or authentication failure of the user by the previously registered biometric hash code h (w) and the hashed biometric hash code h (w '')
Wherein the biometrics authentication method comprises the steps of: 10. The method of claim 9,
The decoding of the value obtained by XORing the verification data (s) on the biometric code (w ') to which the dummy data (e)
Performing an XOR operation on the biometric code (w ') to which the dummy data (e) is added and the verification data (s);
Decoding the XOR computed value using an error correction algorithm; And
And XORing the decoded value with respect to the verification data (s)
Wherein the electronic money is acquired through the biometric authentication. A communication unit 110 for communication with the mobile communication terminal 200, the merchant terminal 300, the POS terminal 510 or the ATM 520;
An electronic money accumulating unit 120 having a virtual account of the user of the mobile communication terminal 200, the manager and the receiver of the merchant terminal 300, and accumulating electronic money in each virtual account;
A biometric authentication information DB 130 in which biometric authentication information of at least one mobile communication terminal 200 user is registered in advance;
A user information DB 140 in which information specific to a user or a recipient including an account for a financial transaction is stored;
A merchant shop information DB 150 in which information unique to one or more merchant stores including an account for a financial transaction is stored;
The user of the mobile terminal 200 requests the biometrics code w 'of the user through the POS terminal 510 or the ATM 520 at the request of the manager of the merchant terminal 300 or at the request of the user of the mobile terminal 200 An authentication unit 160 for executing user biometric authentication through comparison between the biometric code w 'of the user received from the POS terminal 510 or the ATM 520 and the biometric authentication information of the user registered in advance, ;
The authentication unit 170 subtracts the electronic money corresponding to the payment amount or the remittance amount from the user virtual account of the electronic money accumulation unit 120 when the user of the mobile communication terminal 200 succeeds in biometric authentication, 120) into a virtual account of the merchant manager or a virtual account of the receiver; And
A settlement result notification unit 180 that transmits a settlement result of a purchase price of a variety of goods or contents purchased by a user or a remittance result of a remittance requested by a user to the mobile communication terminal 200 or the merchant terminal 300,
And a biometric authentication device. 12. The method of claim 11,
When the user of the mobile communication terminal 200 requests the electronic money purchase, he / she accesses the bank management server 410 and purchases the electronic money through the account transfer after the biometrics authentication or accesses the card company management server 420, Or an electronic money purchase server 430 for transferring various electronic moneys acquired by the user to electronic money that can be used by the biometric authentication payment management server 100 by purchasing the electronic money through the electronic money purchase server 430, (191)
The biometric authentication device further comprising: 12. The method of claim 11,
When the user of the mobile communication terminal 200 or the franchisee terminal 300 or the receiver of the electronic money requests the electronic money of the amount requested for the redemption after the biometric authentication, the user of the mobile communication terminal 200, the franchise terminal 300 ) Or an electronic money refunding unit (192) for transferring money to an account designated by the receiver and cashing the money,
The biometric authentication device further comprising: 12. The method of claim 11,
The user information, the merchant information, and the recipient information are stored in the user information DB 140 and the merchant information DB 150 as information including account information together with terminal information of the user, Wherein the biometric authentication device is a biometric authentication device. 12. The method of claim 11,
Wherein the POS (point of sale) terminal (510) or the ATM (Automatic Teller's Machine) (520) has a biometric function including an iris or a face. 12. The method of claim 11,
Wherein the user information DB is converted into a QR code and stored in the user information DB (140). 17. The method according to any one of claims 11 to 16,
The authentication unit 160
After the user of the mobile communication terminal 200 receives the POS terminal 510 or the ATM 520 information together with the user information at the time of membership registration, the mobile communication terminal 200 generates a QR code including the user information, And requests the user's biometric code (w) through the POS terminal 510 or the ATM 520,
Generates the biometric authentication information of the user by using the biometric code (w) when the biometric code (w) of the user is received from the POS terminal (510) or the ATM (520)
And registers the generated biometric authentication information of the user in the biometric authentication information DB (130). 18. The method of claim 17,
The authentication unit 160
Adding the dummy data (e) to the biometric code (w)
Generates biometric code (w) to which the dummy data (e) has been added, with the random code (c) encoded using an error correction algorithm to generate verification data (s)
Generates a bio-hash code h (w) by hashing the bio-code w using a hash function,
And stores the verification data (s) and the biometric hash code (h (w)) in the biometric authentication information DB (130) as biometric authentication information of the user. 17. The method according to any one of claims 11 to 16,
The authentication unit 160
(W ') of the user through the POS terminal 510 or the ATM 520 at the time of the payment request of the manager of the affiliate shop terminal 300 or the remittance request of the user of the mobile communication terminal 200,
(E) composed of '0' is added to the biometric code (w ') when the biometric code (w') of the user is received from the POS terminal 510 or the ATM 520,
Performs decoding on a value obtained by adding the verification data (s) to the biometric code (w ') to which the dummy data (e) is added by using an error correction algorithm,
Generates a bio-hash code (h (w ')) using a hash function by adding the verification data to the decoded value and extracting a biometric bit and extracting a value w'
Wherein the biometrics authentication server determines a user's authentication success or authentication failure based on the previously registered biometric hash code h (w) and the hashed biometric hash code h (w '). 20. The method of claim 19,
The authentication unit 160
Performs an XOR operation on the biometric code (w ') to which the dummy data (e) is added and the verification data (s)
Decodes the XOR-computed value using an error correction algorithm,
And performs decoding on the biometric code (w ') to which the dummy data (e) is added by XORing the decoded value with respect to the verification data (s).

Images