KR20190007196A - Apparatus and methods for providing card activation control and digital wallet exchange using card owner's identity verification - Google Patents

Abstract

In the case of the currently used credit card, in order to identify and authenticate a user, the user′s credit card is read in a credit card payment machine and the authentication for information stored in the credit card is requested to a remote credit card company′s system. At the same time, a signature is obtained from the user and read to see if the signature is identical to a signature on the credit card; or the user inputs a personal identification code to a credit card terminal for processing. The present invention relates to an apparatus and a method for controlling the operation for processing the payment of the credit card for a finite time that the payment has been made and is approved using the credit card by authenticating biometric information through a recognition and output module located in the credit card. In addition, the present invention makes mention of a storage space provided in a recognition and output module on a suggested credit card which supports the exchange of cryptocurrencies which is in the initial stage for introduction and the exchange between existing common currencies and the cryptocurrencies.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an apparatus and a method for controlling a card operation and a digital wallet exchange control using an identification of a cardholder,

The present invention relates to a technology for supporting operation control and exchange of digital wallets according to card use through identification and authentication of a card owner when a card owner uses the card.

Currently, there are four types of cards that are issued and used as credit cards, membership cards, and commute cards. First, in order to be introduced in the market, first, data reading on a magnetic line by a card reader capable of reading data stored in a corresponding magnetic line with a card having a magnetic stripe (MS) It is a card that is not recommended to use recently because it is possible to reproduce it in the process of reading. Secondly, it is a smart card or an EMV (Europay, MasterCard, Visa) card, a chip card, or an IC (Integrated Circuit) card that incorporates a computer chip in a card. A smart card is a card that allows you to add and verify a personal identification number (PIN) to the cardholder for identity and confirmation of the owner as well as providing relevant information about the cardholder. But is used in the form of a card embedded in a mobile phone in the form of a subscriber identity module (SIM) of a cellular phone. In particular, computer chips are not replicable and provide a higher level of security than magnetic stripe cards. Third, there is a composite card that can be used and supported by any card terminal by attaching an existing magnetic line tape to the smart card, and is a mainstream card form currently issued and used. Finally, the physical shape of the card is the same as that of the existing card. However, it is an electronic card with a built-in computer chip based on a thin-film battery and display that is not made of plastic material. It can register various kinds of existing cards in one card. There has been an attempt in recent years to allow the user to select a desired card.

In order to provide more advanced security technology by replacing the existing pin (PIN) number or signature for identifying and authenticating the identity of the current card, the security of the card is improved by recognizing the biometric information such as the fingerprint lost. However, it is not limited to the identification and authentication of the card, but it is required to be linked with the existing system of the financial and card companies. Even if the card is developed, there are many cases of application and commercialization of the card. It is not.

If a card is lost or stolen and a third party acquiring the card uses malicious intent, the card user may recognize the lost or stolen card, There is a possibility to try a PIN. Depending on the place where the card is used, some places require a PIN number. However, depending on the country and region, only a signature on the signature pad is requested in the same manner as a conventional magnetic card Even though the security of the card itself is secured because there are many places, the card is used in the conventional way and is used in a situation where security is weak.

Korean Patent Laid-Open Publication No. 2013-0050039 discloses a credit card payment method and system using biometric information authentication, in which biometric information is stored in a chip on a chip when a card is issued, and the card user stores the biometric information stored in the card in a card server The card payment terminal checks the biometric information stored in the card in the server stored in the card company through the payment agency. In this case, The present invention does not provide a function of confirming the identity of the card and processing the authentication information itself as an invention requiring a change of the system by additionally requesting and providing a method of providing the related information.

Korean Patent Laid-Open No. 2004-0091827 discloses that although the existing credit card is approved by the signature of the user, when the fingerprint input device and the comparison device are added to the cash dispenser and the card payment device using the fingerprint recognition sensor, And the authentication of the owner of the card according to the recognition result is provided. The function of processing the fingerprint recognition is an invention for confirming the identity and the authentication through the device installed at the bank window or the card merchant, It does not provide recognition and verification functions.

In a related invention, a sensor for recognizing biometric information is attached to a card or a participant card terminal device, and the recognized information of the card user is transmitted to a server of a bank or a settlement agency system affiliated with a card company or a credit card company, The transaction approval or cancellation is processed according to the matching result with the biometric information registered at the time of card registration. In order to confirm whether the biometric information is matched on the card, it is necessary to supplement the system for the biometric information matching on the card or the card terminal or the existing system server, We want to achieve the security enhancement that we want through the addition of recognition and motion control functions.

Before the use of a smart card, a magnetic stripe on a magnetic stripe was used to scan the magnetic stripe and transmit information related to the card stored in the magnetic stripe. The signature of the card was signed by the card owner The recipient who receives the card usage document confirms whether the signature of the card matches the signature of the card and confirms whether the user is using the card. However, since the expiration date of the ordinary card issuance is five years, the signature is erased due to a lot of use or careless handling during the period, and there are cases where it is difficult to read, and there are many practical difficulties for the card recipient to confirm the identity of the card user . When the smart card is used, the IC card of the card terminal or the card information required for payment through reading of the magnetic line is transmitted for payment processing. Instead of directly signing the card slip, a signature is displayed on the signature pad display You will be asked to verify your identity by signing in or entering the PIN number of your smart card. In some cases, when many people are waiting for a card payment, the user signs the signature pad display directly without confirming the PIN number, but does not check the signature and the signature on the card registration. However, there is a possibility that the card can be used in a state in which the identity is not confirmed according to the usage environment.

In addition, if a credit card is stolen or lost, a third party who acquires the card may attempt to imitate the signature or hack the PIN number for illegal use for malicious purposes. Or there is no way for the cardholder's employee to have a prior authorization before the cardholder's use of the card is legitimate or the cardholder's employee immediately before the card is used, There is no way to check in advance. If a third party acquires the card even if it is lost, it is impossible to make illegal use of the card, or if the card is used under normal circumstances, the identity verification and authentication There is a need to provide a method of providing mutual reliability for processing.

The inventor of the present invention, unlike the existing proposed method, installs a biometric information sensor on a card to receive the card, directly registers the biometric information of the card holder on the card at the time of initial registration, A method of supporting a card that informs the employee of the card merchant that the information is approved by the card according to whether the information is already registered in the card, The present invention has been completed after researching to find a technical solution for how to implement a technology for increasing trust between an effective card user and a card merchant by supporting a method of storing and mutually exchanging money.

Currently, when the cryptocurrency such as Bitcoin, Ethereum and Iota is widely distributed and becomes commonplace, current money is used for purchasing, And can be used for a technique that can be used as a secure digital wallet for currency exchange and cryptographic communication as means for connecting and exchanging the mutual boundary between cryptographic currency and conventional common denomination.

On the other hand, other unspecified purposes of the present invention will be further considered within the scope of the following detailed description and easily deduced from the effects thereof.

According to another aspect of the present invention, there is provided an apparatus for controlling an operation of a card according to a result of notifying an outside of an identification and authentication result from a recognition and output module on a card.

A second aspect of the present invention is a method for controlling the operation of a card in accordance with a result of informing an outside of an identification and authentication result from a recognition and output module on a card.

According to the present invention, the biometric information is registered and stored on the card, and when the card is used, identification and authentication of the card owner are promptly provided from the card without accessing the system of the card company or the settlement agency, To monitor the illegal use of.

It is possible to control the operation of the EMV chipset, which is a computer chip built in the same card, by checking the identity of the card holder. In case of illegal use of the existing card, the operation of the computer chipset is disabled, Thereby preventing access to illegal use of the card.

In addition, by checking the identity of the card owner, it is possible to control the operation of storing and reading magnetic lines built in the same card. In case of illegal use of the existing card, the operation of the magnetic magnetic line is disabled, It makes it impossible for them to block access to illegal use of the card.

Even if the card is stolen or lost, it is possible to provide a function to prepare for the loss and theft of the card in real time through continuous monitoring with the adjacent smartphone through the wireless chip built in the card.

Password coins, such as bit coin, etherium, and iota, which are currently in use, are usually stored in a computer or smart phone in the form of a wallet (or digital wallet), which is easy to use wherever the Internet is available. The use of a cipher currency may be impossible. At present, ATM (Automatic Teller Machine) exists for withdrawing and depositing existing common currency and cipher currency, but it is possible to use it as a card having a built-in password instead of an existing card, In the automatic teller machine, it enables the withdrawal and withdrawal of the coded currency, the withdrawal and withdrawal of the existing currency or the withdrawal and withdrawal of the mutual currency in the same manner as the existing card.

The effects described in the following specification and the provisional effects expected by the technical features of the present invention and the provisional effects thereof described in the specification of the present invention, even if not explicitly mentioned here, Quot ;, which is incorporated herein by reference in its entirety.

1 is a diagram showing an example of a workflow that is processed when a current card is used.
2 is a diagram illustrating the exchange of information about the identity and authentication between a cardholder and a card merchant according to a preferred embodiment of the present invention.
FIG. 3 is a diagram illustrating a process of identifying and authenticating an identity through matching of biometric information between a cardholder, a card merchant, and a card company in time and space according to a preferred embodiment of the present invention.
Fig. 4 is a diagram showing a schematic configuration of a card currently in use. Fig.
5 is a diagram showing an external configuration of a proposal card according to a preferred embodiment of the present invention.
6 is a cross-sectional view illustrating an electronic internal configuration of a recognition and output module according to a preferred embodiment of the present invention.
Fig. 7 is a diagram showing a function for a terminal of an EMV chip currently in use.
8 is a view illustrating a process of registering biometric information of a cardholder through a biometric information recognition sensor on a card according to a preferred embodiment of the present invention.
FIG. 9 is a view for explaining a case where a card holder possesses a biometric information stored in the card holder according to a preferred embodiment of the present invention, FIG.
FIG. 10 is a view illustrating a process flow for mutual transfer request, transfer, and transfer confirmation between wallets present on a card through a smartphone or a portable computer connected to the card according to a preferred embodiment of the present invention.
* The accompanying drawings illustrate examples of the present invention in order to facilitate understanding of the technical idea of the present invention, and thus the scope of the present invention is not limited thereto.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may obscure the subject matter of the present invention.

FIG. 1 shows a flowchart of a transaction between a card member, a card merchant, a settlement agency, and a credit card company when using a credit card at present. In order to purchase an item or service from a card merchant, the card member makes payment using the card owned by the card merchant, and the merchant requests approval from the settlement agency and the card company connected to the card terminal. Here, an automatic teller machine (or automatic teller machine), which can be called an unmanned card payment device operated separately from the attraction card merchant, provides the same function as a card merchant. The credit card company approves the data read from the card and transmits the data to the card merchant through the payment agency. The card member purchases the goods or services to be purchased. Instead, the card company charges the purchaser and the card member pays the payment on the payment date. At present, the identification information of the card member is read from the card terminal of the card merchant, and the information is matched with the identification information stored in the card company, and the card terminal installed in the card merchant stores the result of the payment approval or rejection of the card to provide.

Figure 2 illustrates the flow of information embedded within a card payment and merchandise transaction flow between a cardholder and a card merchant in accordance with a preferred embodiment of the present invention. A solid line in the figure represents the workflow depicted in FIG. 1, and a dashed line illustrates a detailed cross-data flow for identification and authentication. 1, the identification information stored in the card or inputted by the card member is read and transmitted by the card terminal of the existing merchant, and it is determined whether or not to authenticate based on the information stored in the card company, Different from the method confirmed by the result, it is possible to provide the trustee with high confidence in the identification and authentication of the user by providing the identity confirmation result directly to the corresponding merchant while the card member makes payment through biometric information matching on the card .

In a preferred embodiment of the present invention, identification and authentication are performed so that payment can be completed at a card merchant shop or an automatic teller machine (ATM), and a function to be normally operated by a timer for a certain period of time until the payment or processing is normally completed This is possible.

FIG. 3 shows a space-time diagram illustrating a process of payment processing centering on a card member, a card merchant, and a card company according to a preferred embodiment of the present invention. The card member performs authentication matching of himself / herself through a biometric information sensor such as a fingerprint or an iris embedded in his / her card, and the result can be immediately confirmed to the card merchant. After the identity verification is completed, the process of transferring the approval result determined through matching with the card member information stored in the card company's system connected to the network through the installed card terminal, which is an existing authentication confirmation method, to the card terminal of the card merchant It is a figure that shows.

FIG. 4 is a card having chips and magnetic lines frequently used at present. Generally, a card 100 made of a plastic material has an EMV chip 110 and a magnetic line 170 built in its rear surface. When a card is issued, information about the card owner and the card is stored in a magnetic tape, The stored information of the chip or the magnetic line is read and the read information is transmitted to the card company's system via the payment agency located remotely via the network.

5 shows an example of the proposed card 200 shape according to a preferred embodiment of the present invention. 4 is different from the conventional card in that it is not a conventional plastic card but a thin-film type battery that can be charged with wired and wireless, and is coated with plastic on its surface. In order to support the card holder's identity and authentication, an EMV chip 210 It is built in the same way. In addition, a display capable of recognizing biometric information and outputting information includes a recognition and output module 220 in which a complex function is embedded, and an LED 250 and a speaker 260 ). A switch 270 may be further provided to provide the function of turning on or off the proposal card, if necessary, to protect the life of the battery.

In some preferred embodiments of the present invention, the magnetic line 280 operates differently from the conventional magnetic line 170 referred to in FIG. In the conventional magnetic line, the recorded data is kept fixed without change at all times except for re-issuance due to replacement, disposal, or loss of the card, while the digital magnetic line 280 stores data from the recognition and output module stored in the card It can be implemented as a digital magnetic line capable of being rewritten by an actuator or capable of changing and restoring different data as needed.

In some preferred embodiments of the present invention, the recognition and output module not only provides a function of recognizing biometric information, but also a function of verifying identity, authentication, and various kinds of code information required for transaction such as barcode or QR Outputting the information to present the information to a specific person concerned, or providing information through a camera-equipped device such as an ATM device, a computer, or a smart phone.

6 illustrates an internal electronic configuration of the recognition and output module 220 according to some preferred embodiments of the present invention. Basically, the module is understood as a small computer module that enables wireless communication including sensors and actuators (actuators) and enables input / output through the display. 6, the recognition and output module 220 includes a radio frequency (RF) unit 221, a baseband unit 222, a processor 223, a memory 224, an I / O interface 225, A safe memory 226, a sensor 227, an actuator 228, a power supply 229, and a display 230. [ When the above-described individual RF unit and baseband unit are applied to a software-defined radio (SDR) technology as a preferred embodiment of the present invention, the RF unit and the baseband unit can be configured as a single component have. The configuration of FIG. 6 can be extended to this embodiment as well.

The wireless RF section 221 supports wireless communication. The baseband unit 222 provides a modulation / demodulation function. The memory 224 stores programs and input / output related data, and the processor 223 processes programs and various data. The sensor 227 includes one or more sensors in the fingerprint or iris, and the actuator 228 informs the outside of the results of the identification and authentication from the recognition and output module. Preferably, the actuator 228 may comprise a light emitting diode (LED) and / or a speaker. The light output to the LED for identification and authentication results is continuously operated for a certain period of time (e.g., 30 seconds if a finite time required for payment processing and completion is required, for example, 30 seconds) Generates an alarm sound and notifies the outside. The power supply unit 229 can use, for example, a lithium ion battery or the like, but can be replaced with various power supply means through other solar panels or wireless charging. Particularly, the vault memory 226 stores a pattern of registered biometric information, a block-chunk based password call such as bit coin, etherium, and a password associated with a non-block-based password-based password call such as iota Information that is required for currency exchange, such as a secret key or a digital signature, and which requires absolute security, is stored and managed separately from the existing memory 224. The vault memory stores and manages the digital information or files, including the secret key or digital signature required for the cryptographic currency, transaction history, recent transaction ledger, etc., into the concept of a wallet (or digital wallet). While the card is being authenticated and authenticated, the cardholder's cryptographic wallet can be remitted to the cardholder's cryptographic wallet with the corresponding cryptographic equivalent of the purchase.

The display 230 provides a function of recognizing biometric information or receiving specific information, and exists in a form capable of outputting information when necessary. The input / output interface 225 provides an RF unit and a baseband unit for transmitting and receiving data through a processor and wirelessly, and an interface and a bus for mutual input and output of data between the sensor, the display, and the actuator. To prevent theft and loss of the card, the wireless RF unit and baseband unit must be configured and connected with the smartphone that is being carried or connected to the smartphone periodically to prevent theft or loss of the card. (Wi-Fi), Bluetooth (Bluetooth), etc. in order to request the wireless communication method of the present invention.

In some preferred embodiments of the present invention, the RF unit and the baseband unit incorporated in the card are used to communicate with a near field communication (NFC) means built in a smart phone or a communication between a device and a card at a distance of 4-5 centimeters And the like.

In a preferred embodiment of the present invention, the wireless module incorporated in the card enables mutual monitoring for preventing loss by interlocking with a notebook and a smart phone possessed by the card owner, and can output and transmit data to be transmitted to the card from the related device So that all information required for all the objects to be processed can be transmitted using the card, and the information can be displayed on the recognition and output module.

In a preferred embodiment of the present invention, the display and the biometric information sensor are not separately located, but are superimposed on the same space so that biometric information can be input, and when necessary, the function of outputting specific information can be provided. The display of the module and the biometric information sensor can input data from the outside. This means that the combination of the display and the sensor enables output and input of data.

In some preferred embodiments of the present invention, instead of a built-in rechargeable battery, a thin film solar cell is embedded in a transparent plastic coating, or is requested outside the coating, thereby enabling self-supply of power.

In some preferred embodiments of the present invention, data and signals transmitted from the recognition and output module can be repeatedly stored and deleted by the actuator on the digital magnetic line 280 shown in FIG.

FIG. 7 is a diagram illustrating a terminal configuration of a corresponding chip for reading in a current EMV chip 110 and a card terminal. The chip generally has eight terminals and is connected to the power supply terminal 1 (VCC), reset signal terminal 2 (RST), clock terminal 3 (CLK), terminal 4 (not used), ground terminal 5 (GND) , Program voltage terminal 6 (VPP), data input / output terminal 7 (I / O) and terminal 8 (not used).

According to some preferred embodiments of the present invention, the EMV chip 110 and the recognition and output module 220 may be integrated into a single chipset, or interconnected with a separate chipset.

In the preferred embodiment of the present invention, the actuator 228 in the recognition and output module compares the biometric information pattern initially stored at the time of registration with the biometric information pattern just recognized at the time of registration in the safe memory 226, A certain signal is applied from the actuator 228 of the recognition and output module to the arbitrary terminal, for example, the reset signal terminal, to interfere with the normal operation of the EMV chipset, thereby making the payment impossible. It is possible to realize an interrupt function for unauthorized use of the card.

In some preferred embodiments of the present invention, the actuator 228 in the recognition and output module compares the biometric information pattern initially stored at the time of registration with the biometric information pattern just recognized at the time of registration in the safe memory 226, It is possible to disable the reading of the stored data and disable the use of illegitimate card by unauthorized persons.

FIG. 8 is a diagram illustrating an example of a preferred embodiment of the present invention in which a card issuer first saves and registers his / her biometric information on a card without visiting a bank or a card issuer. Once the registration is completed, it is impossible to repeatedly register the biometric information even though the valid period of use of the card exists. The recognition and output module scans the biometric information of the card owner (S310), extracts a recognition pattern for the scanned information (S330), and stores the recognition pattern extracted in the safe memory of the module (S350) .

FIG. 9 is a flowchart illustrating a method of scanning a biometric information of a card holder according to a preferred embodiment of the present invention in order to use the card in operation S510, reading the pattern stored in the card registration operation in operation S520, (S530). If there is no match, the information that the card has not been authenticated and authenticated is indicated by the sound through the speaker or light through the LED. In addition, electrical signals are applied to specific terminals to prevent the EMV chipset from operating. In a similar manner, a control signal is applied to the magnetic line so that the information stored in the magnetic line can not be read by the card reader (S540). If a match is found, a signal indicating that the identification and authentication of the card has been completed normally for a suitable period of time for payment of the card is indicated in the form of sound and / or light or in the form of information such as the merchant who intends to pay the card In step S550, a timer is operated to perform a payment so that it can be operated for a predetermined period of time. If the time is exceeded, the biometrics information is scanned again to retry identification and authentication at step S550. The recognition and output module acts as a simple power switch that provides some sort of on and off functionality.

FIG. 10 is a flow chart illustrating a process in which, when identification and authentication of a cardholder is completed according to a preferred embodiment of the present invention (S710), a cardholder who is capable of communicating with the card, (S720). After receiving the request command, the wallet for the specific currency is transferred (S730). When the transfer is completed, the result of transfer is confirmed to the card user who requested the transfer (S740). ≪ / RTI >

According to a preferred embodiment of the present invention, in order to conduct a transfer, a cardholder may pre-purchase a precious metal such as gold having a predetermined nominal value or equivalent value currently in use for safe transaction for purchase and payment, To increase the safety of transactions.

Meanwhile, the method for controlling the operation of the payment processing for the identification and authentication of the card according to the present invention as described above is implemented in the form of a program command which can be executed through various computer means, . The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. The medium may be a transmission medium such as an optical or metal line, a wave guide, or the like, including a carrier wave for transmitting a signal designating a program command, a data structure, or the like. Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

The scope of protection of the present invention is not limited to the description and the expression of the embodiments explicitly described in the foregoing. It is again to be understood that the present invention is not limited in scope by obvious changes or substitutions in the technical field to which the present invention belongs.

Claims (2)

A device for notifying the identity and authentication result from the recognition and output module on the card to the outside, and controlling the operation of the card according to the result A method of notifying the identity and authentication result from the recognition and output module to the outside on the card, and controlling the operation of the card according to the result

Images