KR20200072742A - Apparatus for credit card payment service using biometric data - Google Patents

Abstract

The present invention relates to a biometric authentication payment service apparatus. More specifically, the present invention relates to the biometric authentication payment service apparatus wherein if biometric information is received for payment from an affiliated store terminal, a biometric authentication server, which registers and stores biometric information of a user and a biometric authentication token allocated to the biometric information, and a card management server, which registers and stores credit card information of the user and a card authentication token allocated to the credit card information, are used to provide the card authentication token mapped with the biometric authentication token corresponding to the biometric information received from the affiliated store terminal. Therefore, there is no need to store the biometric information of the user or the credit card information of the user separately in the biometric authentication payment service apparatus, and the credit card payment can be performed only with the biometric information of the user received from the affiliated store terminal.

Description

Apparatus for credit card payment service using biometric data

The present invention relates to a biometric authentication service device, and more specifically, when receiving biometric information from a merchant terminal when a credit card is paid at a merchant, the biometric authentication token assigned to the user's biometric information and the card authentication assigned to the user's credit card information By using a token, it relates to a biometric authentication payment service device that can safely perform credit card payment using biometric information without a credit card.

Biometric technology refers to a technology that identifies or identifies an individual using biometric information. To date, biometrics technology has identified personal identities using fingerprints, faces, irises, or voices.

In the fingerprint recognition technology, the recognition device is small and can be mass-produced inexpensively. It also shows relatively good performance in terms of recognition accuracy and speed. On the other hand, iris recognition technology is the most reliable biometric technology in that it is unlikely to cause a recognition error and difficult to counterfeit. Currently, a vein recognition technology has been developed. The vein recognition technology refers to a technology for identifying an individual using a vein pattern image acquired through infrared rays. Human veins are located under a complex shape directly under the skin, and according to various studies, the patterns of veins are different for each individual, and it is known that the pattern does not change with age.

This biometric technology can also be used for credit card payments. For example, after registering by mapping the user's biometric information and the user's credit card information to a merchant terminal or a merchant company server, the user registers the user's biometric information instead of the credit card information. Credit card payment is possible through the credit card information mapped to the biometric information entered by entering the information into the merchant terminal. Payment of a credit card using such biometric technology may be performed in a merchant or affiliated company unit.

However, according to the standard terms and conditions of the credit card merchants starting from July 20, 2018, it is forbidden to register and manage the customer's credit card information at the merchant or the merchant company, and accordingly, the customer's credit at the merchant terminal or the server of the merchant company. It is impossible to register and use card information in advance. However, it is limited to allow customers to register and store their credit card information on a server that satisfies the security level prescribed by the institution and use it for credit card payment.

Users who continue to perform credit card payment using the user's credit card information registered on the server that satisfies the user's biometric information and the security level prescribed by the institution, or register and store various types of user biometric information and then request it from the merchant terminal There is a need for a technology for providing credit card information mapped to user biometric information according to the type of biometric information.

The present invention is to solve the problems of the above-mentioned conventional technology, the object of the present invention is to achieve credit using the biometric authentication token assigned to the user's biometric information and the card authentication token assigned to the user's credit card information It is to provide a biometric authentication payment service device that performs card payment.

Another object of the present invention is to achieve the biometric authentication server and the user's credit card information that registers and stores the biometric authentication token assigned to the biometric information and the user's biometric information when receiving biometric information from a merchant terminal for payment. Performs credit card payment by providing the card authentication token mapped to the biometric authentication token corresponding to the biometric information received from the merchant terminal to the merchant terminal using a card management server that registers and stores the card authentication token assigned to the credit card information. To provide a biometric authentication payment service device.

Another object of the present invention is to achieve when receiving biometric information or biometric authentication information of a biometric authentication token from a merchant terminal, the card authentication token mapped to the biometric authentication information according to the type of biometric authentication information received from the merchant terminal is a merchant terminal. It is to provide a biometric authentication payment service device to perform a credit card payment by providing a.

Another object to be achieved by the present invention is to register various types of biometric information according to the type of the user's biometric information, and map the same card authentication tokens to various types of biometric information, regardless of the kind of biometric information received from the merchant. It is to provide a biometric authentication payment device capable of credit card payment using the user's biometric information.

Another object of the present invention is to provide a biometric authentication payment service device capable of payment using different credit cards according to the type of biometric information by mapping different card authentication tokens according to the type of biometric information of the user. .

In order to achieve the object of the present invention, the biometric payment service device according to the present invention requests and registers the biometric authentication token assigned to the user biometric information to the biometric authentication server when receiving the user biometric information from the user terminal or the merchant terminal . When receiving the user's credit card information from the user terminal or the merchant terminal , the card information registration unit to request and register the card authentication token assigned to the credit card information, and the merchant terminal to use the biometric authentication information It characterized in that it comprises a payment information providing unit that retrieves the card authentication token mapped to the biometric authentication information received from the merchant terminal at the time of payment and provides it to the merchant terminal.

Preferably, the biometric payment service device according to the present invention is a user authentication that authenticates a user by using at least one of the user identifier received from the user terminal or the merchant terminal, pre-registered user biometric information, and the user terminal identifier. Characterized in that it further comprises a wealth.

Preferably, the payment information providing unit according to the present invention maps the user's biometric authentication token and card authentication token to each other and registers and stores it in the mapping database unit, and the biometric authentication information based on the biometric authentication information received from the merchant terminal. It characterized in that it further comprises a search unit for retrieving the card authentication token mapped to the mapping database unit, and a card information providing unit for providing the searched card authentication token to the merchant terminal.

Preferably, the payment information providing unit according to the present invention further comprises an authentication type determination unit for determining the type of biometric authentication information or the format of the biometric information received from the merchant terminal.

Here, the authentication type determining unit is based on the identifier of the biometric authentication information received from the merchant terminal, whether the biometric authentication information received is recognized by the merchant terminal or the biometric information of the user received from the user terminal, or the biometric authentication received by the merchant terminal from the user terminal. It is characterized by determining whether it is a token.

Here, when receiving the biometric information of the user from the merchant terminal, the search unit transmits the biometric information of the received user to the biometric authentication server to receive the biometric authentication token assigned to the biometric information of the user from the biometric authentication server, and receives the biometric authentication. The card authentication token mapped to the token is searched in the mapping database unit.

Here, when the user receives the user's biometric authentication token from the merchant terminal, the search unit searches the mapping database unit for the card authentication token mapped to the received user's biometric authentication token.

The biometric information registration unit vivo to, if a user terminal or merchant terminal receives a registration request of the user biometric information, sends the user terminal or the user biometric information received from the merchant terminal to the biometric authentication server corresponds to the user biometric information from the biometric authentication server Characterized in that the receiving and receiving the authentication token.

Here, the biometric information registration unit is a biometric authentication server that manages biometric information in a corresponding format based on the format of the biometric information when receiving biometric information and a biometric information type identifier to be registered from a user terminal or a merchant terminal . It is characterized in that it transmits the identifier and the biometric information, and receives and receives a biometric authentication token corresponding to the type identifier of the biometric information from the biometric authentication server.

Here, the payment information providing unit is characterized in that the biometric authentication token received for each type identifier of the biometric information is mapped to the card authentication token allocated to the same credit card information and stored.

Here, the payment information providing unit is characterized in that the biometric authentication token received for each type identifier of the biometric information is mapped to the card authentication token allocated to the credit card information selected by the user and stored.

Here, the card information registration unit transmits the credit card information received from the user terminal to the card management server when receiving a request for registration of credit card information from the user terminal or the merchant terminal , and sends a card authentication token corresponding to the credit card information from the card management server. It is characterized by receiving and storing the registration.

The biometric payment service device according to the present invention has the following effects.

First, the biometric authentication service device according to the present invention uses a biometric authentication token allocated to a user's biometric information and a card authentication token allocated to a user's credit card information when receiving biometric information from a merchant terminal when a credit card payment is made at the merchant. By doing so, it is possible to safely perform a credit card payment using biometric information without a credit card.

Second, when the biometric authentication service device according to the present invention receives biometric information for payment of payment from a merchant terminal, the biometric authentication server and the user who register and store biometric authentication tokens assigned to the user's biometric information and biometric information By providing the card authentication token mapped to the biometric authentication token corresponding to the biometric information received from the merchant terminal to the merchant terminal by using the card management server that registers and stores the credit card information and the card authentication token assigned to the credit card information, It is possible to perform a credit card payment only with the biometric information of the user received from the merchant terminal without having to separately store the biometric information of the user or store the user's credit card information in the biometric payment service device.

Third, the biometric payment service device according to the present invention is a card authentication token mapped to biometric authentication information according to the type of biometric authentication information received from the merchant terminal when the biometric authentication token or biometric authentication token is received from the merchant terminal. By providing the as a merchant terminal, it is possible to determine the type of biometric information or biometric authentication token and perform credit card payment.

Fourth, the biometric payment service device according to the present invention registers various types of biometric information according to the type of the user's biometric information, and maps the same card authentication token to each other of the various types of biometric information, thereby displaying the biometric information received from the merchant. Regardless of the type, credit card payment is possible using the user's biometric information.

Fifth, the biometric payment service device according to the present invention maps different card authentication tokens according to the type of biometric information of the user, thereby allowing the user to selectively use different credit cards according to the type of biometric information, thereby allowing the user to selectively perform biometric information. Credit card payment is possible by mapping various types of credit cards depending on the type.

1 is a functional block diagram illustrating a card payment system using biometric information according to the present invention.
2 is a functional block diagram for describing a biometric payment service server according to an embodiment of the present invention.
3 is a functional block diagram for explaining an example of a payment information providing unit according to the present invention.
4 is a flowchart illustrating a procedure for registering a biometric authentication token corresponding to a user's biometric information to a biometric payment service server in a card payment system using biometric information according to the present invention.
5 is a flowchart illustrating a procedure for registering a card authentication token corresponding to a user's credit card information to a biometric payment service server in a card payment system using biometric information according to the present invention.
6 is a flowchart illustrating an example of a procedure for performing a credit card payment using biometric information of a user in a card payment system using biometric information according to the present invention.
7 is a flowchart illustrating another example of a procedure for performing credit card payment using biometric information of a user in a card payment system using biometric information according to the present invention.
8 is a flowchart illustrating another example of a procedure for performing a credit card payment using biometric information of a user in a card payment system using biometric information according to the present invention.
9 is a flowchart illustrating another example of a procedure for performing a credit card payment using biometric information of a user in a card payment system using biometric information according to the present invention.
10 is a flowchart illustrating a process of registering user biometric information in the biometric payment service server according to the present invention.
11 is a flowchart for explaining a process of registering credit card information of a user in the biometric payment service server according to the present invention.
12 is a flowchart for explaining a process of performing credit card payment using biometric information of a user in a biometric payment service server according to the present invention.

It should be noted that the technical terms used in the present invention are only used to describe specific embodiments, and are not intended to limit the present invention. In addition, technical terms used in the present invention should be interpreted as meanings generally understood by a person having ordinary knowledge in the technical field to which the present invention belongs, unless otherwise defined in the present invention. It should not be interpreted as a meaning or an excessively reduced meaning. In addition, when the technical term used in the present invention is a wrong technical term that does not accurately represent the spirit of the present invention, it should be understood as being replaced by a technical term that can be correctly understood by those skilled in the art.

In addition, the singular expression used in the present invention includes a plural expression unless the context clearly indicates otherwise. In the present invention, terms such as “consisting of” or “comprising” should not be construed to include all of the various components, or various stages, described in the invention, including some of the components or some stages It may or may not be construed as further comprising additional components or steps.

In addition, it should be noted that the accompanying drawings are only for easy understanding of the spirit of the present invention and should not be interpreted as limiting the spirit of the present invention by the accompanying drawings.

Hereinafter, a biometric authentication payment service device according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a functional block diagram illustrating a card payment system using biometric information according to the present invention.

Referring to FIG. 1 in more detail, the network 10 includes a biometric authentication server 30, a card management server 50, a user terminal 70, a merchant terminal 80, a credit card payment server 90, and a biometric The information payment service server 100 is connected.

Here, the network 10 is between the biometric authentication server 30, the card management server 50, the user terminal 70, the merchant terminal 80, the credit card payment server 90, and the biometric authentication service server 100. Various types of wired or wireless networks capable of transmitting and receiving data may be used.

The user terminal 70 is a terminal possessed by a user and capable of registering biometric information of the user or registering credit card information to be used by the user for payment, and the biometric information of the user (eg, fingerprint, iris, finger vein, face) , Voice, etc.), and access the network 10 to register biometric information in the biometric authentication server 30 through the biometric authentication service server 100 or manage the card through the biometric authentication service server 100 A smart phone, PDA, notebook, personal computer, etc. that can register credit card information to the server 50 may be used.

When the biometric authentication service server 100 receives the user's biometric information from the user terminal 70 and receives a request to register the user's biometric information, the biometric authentication service server 100 provides the user's biometric information to the biometric authentication server 30 to obtain biometric information of the user Requests the registration to the biometric authentication server 30 or receives the biometric authentication token mapped to the user's biometric information from the biometric authentication server 30 and registers and stores it in the biometric payment service server 100.

On the other hand, when the biometric authentication service server 100 receives credit card information to be used for payment by the user from the user terminal 70 and receives a request for registration of credit card information, the credit card information of the user is managed by the card management server 50 Provides to register the user's credit card information to the card management server 50 or receive the card authentication token mapped to the user's credit card information from the card management server 50 and register it with the biometric payment service server 100 To save.

Here, the biometric payment service server 100 registers and stores the biometric authentication token mapped to the user's biometric information and the card authentication token mapped to the user's credit card information, and stores the registration information. When receiving the user's biometric authentication information from ), the card authentication token mapped to the biometric authentication token corresponding to the user's biometric authentication information is searched and provided to the merchant terminal 80.

The merchant terminal 80 is equipped with a means (for example, a fingerprint scanner, an iris scanner, etc.) for obtaining the user's biometric authentication information, or a communication capable of obtaining the user's biometric authentication information directly from the user terminal 70. Although it has a means, the merchant terminal 80 registers the biometric information of the acquired user to the biometric authentication server 30 or uses the biometric information of the acquired user to authenticate the biometric authentication information at the time of credit card payment. The card authentication token and payment information (for example, payment cost, installment) received by the card authentication token 100 transmitted to the biometric authentication service server 100 mapped to the biometric authentication token corresponding to the user's biometric authentication information and transmitted The payment approval request message including the period, merchant identifier, and the like) is transmitted to the credit card payment server 90.

The credit card payment server 90 includes a credit card company server, a financial company server, and a payment agency server that performs payment of a credit card, and the credit card payment server 90 receives a payment approval request message when receiving a payment approval request message. The card authentication token provided in the server is transmitted to the card management server 50, and the actual credit card information of the user mapped to the card authentication token is received from the card management server 50. The credit card payment server 90 performs the user's credit card payment using actual credit card information and payment information. Here, the card management server 50 means a server capable of storing and managing the user's credit card information and the card authentication token mapped to the credit card information by satisfying the required security requirements.

According to the field to which the present invention is applied, a user's biometric information can be registered through a user terminal or a merchant terminal, and a plurality of biometrics different from each other according to the format of the biometric information obtained from the user terminal 70 or the merchant terminal 80 Authentication server ( 30) It is possible to register, and the biometric payment service server 100 may register the biometric information of a user registered in a plurality of biometric authentication servers 30. Mapped Biometric authentication tokens are received from each biometric authentication server 30 to the same or different card authentication tokens. By mapping Registration can be saved.

2 is a functional block diagram for describing a biometric payment service server according to an embodiment of the present invention.

Referring to FIG. 2 in more detail, the user authentication unit 110 registers and stores the user's authentication identifier in the database unit 190 and registers the user's authentication identifier in the database unit 190 when receiving the user's authentication identifier from the user terminal. The authenticated user is authenticated by comparing the authenticated user's authentication identifier with the received authentication identifier. Here, the user's authentication identifier may be at least one of a user ID such as a user ID, a password, and a social security number, pre-registered user biometric information, and a user terminal identifier.

When the user authentication unit 110 authenticates the user through the authentication identifier, the user terminal displays the biometric information type or credit card information of the user pre-registered in the database unit 190 by being mapped to the authentication identifier at the request of the user terminal. Can be provided on.

Preferably, when the user authentication unit 110 receives a request to register a member of the biometric payment service server from the user terminal, the user authentication unit 110 may register and store the authentication identifier received from the user terminal in the database unit 190 to perform a member registration procedure. .

On the other hand, when receiving a request for registration of new biometric information from a user terminal or a merchant terminal , the biometric information registration unit 130 requests to receive a biometric authentication token assigned to the new biometric information to the biometric authentication server, thereby biometric authentication token allocated to the new biometric information When registering the new credit card information from the user terminal or the merchant terminal, the card information registration unit 150 requests the card management server to receive the card authentication token assigned to the new credit card information and receives the new credit card information. Register the assigned card authentication token.

If the biometric information registration unit 130 from the user terminal or the merchant terminal receives a registration request of the user biometric information, sends the user biometric information received from the user terminal or the merchant terminal to the biometric authentication server and corresponding to the user biometric information from the biometric authentication server The biometric authentication token is allocated and received. Preferably, when receiving biometric information and biometric information type identifiers to be registered from a user terminal or a merchant terminal, the biometric authentication type biometric information and biometric information are transmitted to the biometric authentication server, and the biometric authentication server is received. The biometric authentication token corresponding to the type identifier of the biometric information may be allocated and received. More preferably, the biometric information registration unit 130 determines a biometric authentication server that manages biometric information in the corresponding format based on the format information of the biometric information received from the user terminal or the merchant terminal. The type identifier of the biometric information may be transmitted to receive the biometric authentication token corresponding to the biometric information.

The biometric information registration unit 130 may register the biometric information registered by the user as a type identifier of the biometric information by mapping the user's authentication identifier to the database unit 190, and when receiving a request from the user terminal, the biometric authentication payment service The type of biometric information of a user pre-registered with the server may be indicated.

The payment information providing unit 170 maps the biometric authentication token corresponding to the user's biometric information and the card authentication token corresponding to the user's credit card information to each other and stores the registration in the database unit 190, and the payment information provider 170 ) Receives biometric authentication information of the user from the merchant terminal when payment is made using the biometric authentication information at the merchant terminal. The payment information provider 170 searches for the card authentication token mapped to the biometric authentication information received from the merchant terminal and provides the retrieved card authentication token to the merchant terminal.

Preferably, the biometric payment service server according to the present invention may further include a token management unit 180. After user authentication is completed through the user authentication unit 110, the token management unit 180 manages received from the user terminal. According to the message To the database unit 190 The registered and stored biometric authentication token or card authentication token can be managed. That is, the token management unit 180 To the database unit 190 Biometric token and card authentication token Mapping Set or change, or To the database unit 190 The registered biometric authentication token or card authentication token can be deleted.

3 is a functional block diagram for explaining an example of a payment information providing unit according to the present invention. Referring to FIG. 3 in more detail, the mapping storage unit 171 includes a biometric authentication token of a user received from a biometric authentication server. The card authentication tokens received from the card management server are mapped to each other and stored in the database unit.

In one embodiment, the mapping management unit 171 maps and stores the biometric authentication token received for each type identifier of the biometric information to the card authentication token assigned to the same credit card information, or stores or registers the biometric authentication token received for each type identifier of the biometric information. Can be mapped to the card authentication token assigned to the credit card information selected by the user and stored. Therefore, even if various types of biometric information are registered, payment may be performed using the same credit card or different credit cards may be used for each biometric information according to a user's selection.

The authentication type determination unit 173 is based on the identifier of the biometric authentication information received from the merchant terminal, whether the biometric authentication information received is recognized by the merchant terminal or the biometric information of the user received from the user terminal, or the merchant terminal is received from the user terminal. Determine if it is a biometric authentication token. That is, in the merchant terminal, the biometric information received from the merchant terminal may be obtained by scanning the user's biometric information or by receiving the biometric information or the biometric authentication token of the user stored in the user terminal. Whether it is biometric information or a biometric authentication token is determined.

The search unit 175 searches the database unit 190 for the card authentication token mapped to the biometric authentication information based on the biometric authentication information received from the merchant terminal, and the card information providing unit 177 retrieves the searched card authentication token. Provided by the merchant terminal.

Here, the search unit 175 controls the user's biometric information based on the format of the received user's biometric information when receiving the user's biometric information from the merchant terminal based on the determination result of the authentication type determining unit 173. and sent to the biometric authentication server receives a biometric authentication token assigned to the biometric information of user from the biometric authentication server, it retrieves a card authentication token is mapped to the received biometric authentication token from the database section 190. Meanwhile, when the user's biometric authentication token is received from the merchant terminal, the search unit 175 directly searches the database unit 190 for the card authentication token mapped to the received user's biometric authentication token.

4 is a flowchart illustrating a procedure for registering a biometric authentication token corresponding to a user's biometric information in a biometric authentication payment service server in a card payment system using biometric information according to the present invention.

In the present invention, biometric information of a user to be used for card payment may be registered with a biometric authentication service server through a user terminal possessed by a user or a biometric authentication service server through a merchant terminal.

Looking more specifically with reference to Figure 4, the user terminal or the merchant terminal transmits the user authentication information to the biometric authentication payment service server (S11). When biometric information is registered on the biometric payment service server through a user terminal, in order to authenticate the user, the user authentication information may first be transmitted to the biometric payment service server through the user terminal, and the biometric payment service through the merchant terminal. When registering biometric information in the server, in order to authenticate the user, first, the user authentication information may be transmitted to the biometric authentication payment service server through the merchant terminal or the user terminal. Here, the user authentication information is information for a user to log in to the biometric payment service server and register new biometric information, and a user identifier, a user terminal identifier, and a one-time authentication number may be used.

The user terminal or the merchant terminal sends the biometric information to be registered to the biometric authentication service server to request registration of the new biometric information of the user (S13). Here, the user terminal or the merchant terminal may be provided with various kinds of acquiring means for acquiring new biometric information of the user, for example, a scanner and a camera.

When the biometric authentication service server receives new biometric information from the user terminal or the merchant terminal , it transmits the received new biometric information to the biometric authentication server to request the issuance of a new biometric authentication token corresponding to the new biometric information (S15), The biometric authentication server issues a new biometric authentication token by mapping to the new biometric information received from the biometric payment service server, and transmits the issued new biometric authentication token to the biometric authentication payment service server (S17). Depending on the field to which the present invention is applied, various formats for obtaining biometric information may exist for each user terminal or merchant terminal, and biometric authentication servers may be operated for each company managing biometric information in different formats. Accordingly, biometric information of a user may be registered for each merchant terminal using different formats of biometric information according to the format of biometric information.

In this case, preferably, when receiving biometric information, an identifier indicating the format of the biometric information used by the user terminal or the merchant terminal may be received, and the biometric payment service server is applied based on the identifier representing the format of the received biometric information. The received biometric information is transmitted to the biometric authentication server that manages the biometric information format of the identifier. Mapped A new biometric authentication token can be received.

When the new biometric authentication token mapped to the new biometric information is registered, the biometric payment service server transmits a message to inform the user terminal or the merchant terminal that the registration of the new biometric information is completed (S19).

5 is a flowchart illustrating a procedure for registering a card authentication token corresponding to a user's credit card information to a biometric authentication service server in a card payment system using biometric information according to the present invention.

Looking more specifically with reference to Figure 5, the user terminal or the merchant terminal transmits the user authentication information to the biometric authentication payment service server (S21). Here, the user authentication information is information for a user to log in to the biometric payment service server and register new credit card information, and a user identifier, biometric information of a pre-registered user, and a user terminal identifier may be used.

The user terminal or the merchant terminal transmits the credit card information to be newly registered to the biometric payment service server and requests the user to register the new credit card information (S23). Here, the user terminal may be provided with various kinds of acquiring means for acquiring new credit card information of the user, for example, a scanner, a camera, a keypad, and the like.

When receiving the new credit card information from the user terminal or the merchant terminal, the biometric payment service server requests the issuance of the new card authentication token corresponding to the new credit card information by transmitting the received new credit card information to the card management server ( S25), the card management server maps to new credit card information received from the biometric payment service server, issues a new card authentication token, and transmits the issued new card authentication token to the biometric payment service server (S27).

When the new card authentication token mapped to the new credit card information is registered, the biometric payment service server sends a message to the user terminal or the merchant terminal to notify that the registration of the new credit card information is completed (S29).

4 and 5, in the credit card payment system using the biometric information according to the present invention, the biometric information of the user is not registered in the biometric payment service server, only the biometric authentication token is stored, and the user's credit card information Is not registered in the biometric payment service server, and only the card authentication token is stored, thereby preventing the user's biometric information or credit card information from being stolen from the biometric payment service server.

Moreover, only the biometric information is transmitted to the biometric authentication server, and the biometric authentication token mapped to the transmitted biometric information is issued, so that even if the biometric information of the user is stolen, the biometric authentication server does not have the user information so that the biometric information cannot be used. .

6 is a flowchart illustrating an example of a procedure for performing a credit card payment using biometric information of a user in a card payment system using biometric information according to the present invention.

Looking more specifically with reference to Figure 6, the merchant terminal, if the user wants to perform a credit card payment using biometric information, the user's biometric information acquisition means provided in the merchant terminal, for example, through a scanner, camera, etc. The user's biometric information is acquired and the obtained biometric information is transmitted to the biometric payment service server (S31).

The biometric payment service server transmits the biometric information of the received user to the biometric authentication server (S32), and the biometric authentication server searches for the biometric token mapped to the received biometric information and transmits it to the biometric payment service server ( S33). When the biometric authentication service server receives the biometric authentication token, it searches for the card authentication token mapped to the received biometric authentication token and provides the retrieved card authentication token to the merchant terminal (S35).

The merchant terminal generates a payment approval request message including the received card authentication token and payment information and transmits it to the payment server (S36). When the payment server receives the payment approval request message, it extracts the card authentication token and transmits the extracted card authentication token to the card management server (S37). When receiving the card authentication token from the payment server, the card management server retrieves the actual credit card information mapped to the card authentication token and transmits the searched actual credit card information to the credit card payment server (S38).

The credit card payment server performs the credit card payment requested by the merchant using the actual credit card information and payment information, and when the credit card payment is completed, generates a payment completion message and transmits it to the merchant terminal (S39).

7 is a flowchart illustrating another example of a procedure for performing credit card payment using biometric information of a user in a card payment system using biometric information according to the present invention.

Referring to FIG. 7 in more detail, when a user wants to pay after purchasing an item at an affiliated store, the biometric information registered in the user terminal or acquired at the user terminal is transmitted to the affiliated terminal (S41). The merchant terminal transmits the biometric information received from the user terminal to the biometric payment service server (S42).

The biometric payment service server transmits the biometric information of the received user to the biometric authentication server (S43), and the biometric authentication server searches for the biometric token mapped to the received biometric information and transmits it to the biometric payment service server ( S44). When receiving a biometric authentication token, the biometric authentication service server searches for the card authentication token mapped to the received biometric authentication token and provides the retrieved card authentication token to the merchant terminal (S45).

The merchant terminal generates a payment approval request message including the received card authentication token and payment information and transmits it to the payment server (S46). When the payment server receives the payment approval request message, it extracts the card authentication token and transmits the extracted card authentication token to the card management server (S47). When the card management server receives the card authentication token from the credit card payment server, it retrieves the actual credit card information mapped to the card authentication token and transmits the searched actual credit card information to the credit card payment server (S48).

The credit card payment server performs the credit card payment requested by the merchant using the actual credit card information and payment information, and when the credit card payment is completed, generates a payment completion message and sends it to the merchant terminal (S49).

8 is a flowchart illustrating another example of a procedure for performing a credit card payment using biometric information of a user in a card payment system using biometric information according to the present invention.

Referring to FIG. 8 in more detail, when the user wants to pay for the purchase of goods at the merchant, the biometric authentication token registered in the user terminal is transmitted to the merchant terminal (S51). The merchant terminal transmits the biometric token received from the user terminal to the biometric authentication service server (S52).

The biometric payment service server searches for the card authentication token mapped to the received user's biometric authentication token and provides the retrieved card authentication token to the merchant terminal (S53).

The merchant terminal generates a payment approval request message including the received card authentication token and payment information and transmits it to the payment server (S55). When receiving a payment approval request message, the credit card payment server extracts the card authentication token and transmits the extracted card authentication token to the card management server (S57). When the card management server receives the card authentication token from the credit card payment server, it retrieves the actual credit card information mapped to the card authentication token and transmits the searched actual credit card information to the credit card payment server (S58).

The credit card payment server performs the credit card payment requested by the merchant using the actual credit card information and payment information, and when the credit card payment is completed, generates a payment completion message and transmits it to the merchant terminal (S59).

9 is a flowchart illustrating another example of a procedure for performing a credit card payment using biometric information of a user in a card payment system using biometric information according to the present invention.

Referring to FIG. 9 in more detail, when a user wants to pay after purchasing an item at an affiliate store, the biometric information registered in the user terminal or obtained from the user terminal is transmitted to the biometric payment service server ( S61 ).

The biometric payment service server transmits the biometric information of the received user to the biometric authentication server ( S62 ), the biometric authentication server Mapped Search for the biometric authentication token and send it to the biometric payment service server ( S63 ). Biometric authentication payment Service When the biometric authentication token is received, the server Mapped Search for the existing card authentication token and provide the retrieved card authentication token to the user terminal ( S64 ).

The user terminal provides the received card authentication token to the merchant terminal ( S65 ), the merchant terminal generates a payment approval request message with the received card authentication token and payment information and sends it to the payment server ( S66 ). When the payment server receives the payment approval request message, it extracts the card authentication token and sends the extracted card authentication token to the card management server ( S67 ). The card management server receives the card authentication token from the credit card payment server. Mapped Retrieves the actual credit card information, and sends the searched actual credit card information to the credit card payment server ( S68 ).

The credit card payment server performs the credit card payment requested by the merchant using the actual credit card information and payment information, and when the credit card payment is completed, generates a payment completion message and sends it to the merchant terminal ( S69 ).

10 is a flowchart illustrating a process of registering user biometric information in the biometric payment service server according to the present invention.

Referring to FIG. 10 in more detail, when an authentication identifier is received from a user terminal or a merchant terminal , the user is authenticated by comparing the received authentication identifier with the authentication identifier of the user registered in the database (S110).

When new biometric information to be used for credit card payment is received from the user terminal or the merchant terminal (S130), the new biometric information is transmitted to the biometric authentication server that manages the biometric information in the corresponding format based on the received new biometric information format. Request a biometric authentication token corresponding to the new biometric information ( S150 ) . Preferably, when receiving the type identifier of the biometric information from the user terminal or the merchant terminal , based on the type identifier of the biometric information or the format of the biometric information, the same type of biometric information or biometrics of the same type registered and registered to the authenticated user It is determined whether the information is registered in the database unit . When biometric information of the same type or the same format is registered in the database unit, a message for inquiring whether to change the pre-registered biometric information is transmitted to the user terminal or the affiliated terminal, and the same pre-registered from the user terminal or the affiliated terminal. When receiving a message requesting to change the biometric information of the same type or the same format, biometric authentication token corresponding to the new biometric information is deleted after deleting the biometric authentication token mapped to the biometric information of the same type or the same format that has been previously registered. You can ask the server.

When the biometric authentication token mapped to the new biometric information is received from the biometric authentication server (S170), the biometric authentication token is mapped to the card authentication token registered as the user's authentication identifier and then registered and stored (S190). ).

11 is a flowchart for explaining a process of registering credit card information of a user in the biometric payment service server according to the present invention.

Referring to FIG. 11 in more detail, when an authentication identifier is received from a user terminal, the received authentication identifier is compared with the authentication identifier of the user registered in the database unit to authenticate the user (S210).

When receiving new credit card information to be used for credit card payment from the user terminal (S230), the new credit card information is transmitted to the card management server to request a card authentication token corresponding to the new credit card information (S250).

When the card authentication token mapped to the new credit card information is received from the card management server (S270), the card authentication token is mapped to the biometric authentication token registered as the user's authentication identifier, and then registered and stored (S270). S290).

12 is a flowchart for explaining a process of performing credit card payment using biometric information of a user in a biometric payment service server according to the present invention.

Referring to Figure 12, when receiving the user's biometric authentication information for credit card payment from the merchant terminal (S310), it is determined the type of biometric authentication information of the user based on the identifier of the biometric authentication information (S320). Here, the biometric authentication information is characterized by being biometric information of the user or a biometric authentication code of the user.

It is determined whether the type of biometric authentication information of the user received from the affiliated terminal is biometric information (S330), and when the type of biometric authentication information of the user received from the affiliated terminal is biometric information, biometric authentication is performed by transmitting biometric information to the biometric authentication server. The server requests a biometric authentication token mapped to biometric information (S340). It is determined whether the biometric authentication token mapped to the biometric information is received from the biometric authentication server (S350), and when the biometric authentication token mapped to the biometric information is received from the biometric authentication server, the card authentication token mapped to the biometric authentication token is retrieved. (S360). The biometric payment service server provides the retrieved card authentication token to the merchant terminal, so that the merchant terminal performs credit card payment using the card authentication token (S380).

However, if the biometric authentication token mapped to the biometric information is not received from the biometric authentication server, a message is sent to the merchant terminal informing that the credit card payment using the biometric information is impossible.

Meanwhile, when the type of biometric authentication information of the user received from the affiliated terminal is not biometric information, it is determined whether the type of biometric authentication information of the user received from the affiliated terminal is a biometric authentication token (S390). When the type of biometric authentication information of the user received from the merchant terminal is a biometric authentication token, steps S360 and S380 described above are performed.

Meanwhile, the above-described embodiments of the present invention can be written as a program executable on a computer, and can be implemented on a general-purpose digital computer that operates the program using a computer-readable recording medium.

The computer-readable recording medium includes magnetic storage media (eg, ROM, floppy disks, hard disks, etc.), optical reading media (eg, CD-ROMs, DVDs, etc.) and carrier waves (eg, the Internet). Storage media).

The present invention has been described with reference to the embodiments shown in the drawings, but these are merely exemplary, and those skilled in the art will understand that various modifications and other equivalent embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention should be determined by the technical spirit of the appended claims.

10: network 30: biometric authentication server
50: card management server 70: user terminal
80: merchant terminal 90: credit card payment server
100: biometric authentication service server

Claims (12)

A biometric information registration unit for requesting and registering a biometric authentication token assigned to the user biometric information to the biometric authentication server when receiving user biometric information from a user terminal or a merchant terminal ;
When receiving the user's credit card information from the user terminal or the merchant terminal, a card information registration unit for requesting and registering a card authentication token assigned to the credit card information; And
And a payment information providing unit that retrieves a card authentication token mapped to the biometric authentication information received from the merchant terminal when the payment is made using the biometric authentication information from the merchant terminal and provides it to the merchant terminal. .
The biometric authentication service device according to claim 1,
Biometric authentication payment service characterized in that it further comprises a user authentication unit for authenticating a user using at least one of the user identifier, the pre-registered user biometric information, and the user terminal identifier received from the user terminal or the merchant terminal. Device.
The method of claim 1, wherein the payment information providing unit
A mapping storage unit mapping the biometric authentication token of the user and the card authentication token to each other and registering and storing the mapping authentication unit;
A search unit that searches the mapping database unit for a card authentication token mapped to the biometric authentication information based on the biometric authentication information received from the merchant terminal; And
And a card information providing unit providing the retrieved card authentication token to the merchant terminal.
The method of claim 3, wherein the payment information providing unit
Biometric authentication payment service device further comprises an authentication type determining unit for determining the type of biometric authentication information or the format of biometric information received from the merchant terminal.
The method of claim 4, wherein the authentication type determination unit
Determine whether the biometric authentication information received based on the identifier of the biometric authentication information received from the merchant terminal is recognized by the merchant terminal or is biometric information of the user received from the user terminal or the biometric authentication token received by the merchant terminal from the user terminal. Biometric authentication payment device, characterized in that.
The method of claim 5, wherein the search unit
When receiving the user's biometric information from the merchant terminal, the biometric authentication information assigned to the user's biometric information is received from the biometric authentication server by transmitting the biometric information of the received user to the biometric authentication server. Biometric authentication payment service device, characterized in that for retrieving the card authentication token mapped to the mapping database unit.
The method of claim 5, wherein the search unit
When receiving a user's biometric authentication token from the merchant terminal, the biometric authentication payment service device, characterized in that the mapping database unit searches for a card authentication token mapped to the received user's biometric authentication token.
The method of claim 3, wherein the biometric information registration unit
When receiving a request to register user biometric information from a user terminal or a merchant terminal, the biometric authentication token corresponding to the user biometric information is transmitted from the biometric authentication server to the user biometric information received from the user terminal or the merchant terminal. Biometric authentication payment service device characterized in that it receives the assignment.
The method of claim 8, wherein the biometric information registration unit
When receiving the biometric information and the biometric information type identifier to be registered from the user terminal or the merchant terminal , the biometric authentication server managing the biometric information in the corresponding format based on the biometric information format, and the biometric information type biometric information and biometric information Biometric authentication payment service device, characterized in that for receiving and receiving a biometric authentication token corresponding to the type identifier of the biometric information from the biometric authentication server.
The payment information providing unit of claim 9
Biometric authentication payment service device characterized in that the biometric authentication token received for each type identifier of the biometric information is mapped to a card authentication token allocated to the same credit card information and stored.
The payment information providing unit of claim 9
Biometric authentication payment service device characterized in that the biometric authentication token received for each type identifier of the biometric information is mapped to the card authentication token allocated to the user's selected credit card information and stored.
The method of claim 3, wherein the card information registration unit
When receiving a request for registration of credit card information from the user terminal or the merchant terminal, the credit card information received from the user terminal or the merchant terminal is transmitted to a card management server and corresponding to the credit card information from the card management server Biometric authentication payment service device, characterized in that by receiving the card authentication token and storing the registration.

Images