KR20200086930A - Apparatus and method for security payment - Google Patents

Abstract

The present invention relates to a secure payment system, and more specifically, the secure payment system according to an embodiment is composed of a store terminal, a customer terminal, and a payment server, wherein the store terminal generates a payment code in response to information generated by the customer terminal, thereby performing secure payment. The secure payment system includes a QR code generation unit generating a QR code including a unique value corresponding to user information, a communication unit receiving a payment approval, and a display unit displaying the amount of payment.

Description

Secure payment device and method{APPARATUS AND METHOD FOR SECURITY PAYMENT}

It relates to a secure payment device and method. More specifically, in performing payment in an online or offline store, a payment system having security is implemented using a smartphone.

Recently, various types of electronic payment systems have been used. There are various electronic systems for electronic payment, such as mobile electronic payment, Kakao Pay, Samsung Pay, and Apple Pay.

One of them is a payment system using a QR code. QR codes are two-dimensional barcodes that contain payment-related information and are used in both online and offline payments. Sometimes security can be an issue in electronic payments using these QR codes. If there is only a QR code that performs payment, payment can be made regardless of the user, and thus, payment may be made.

Therefore, there is a need for a secure electronic payment technology using a QR code that is meaningful only to a specific user.

Korean Patent Registration No. 10-1683349 (Announcement date of December 20, 2016) proposes an authentication service providing system using QR codes. This invention relates to an authentication service providing system that prevents the theft of authentication information due to forgery of QR codes.

According to an embodiment, a store terminal performing secure payment, comprising: a QR code generating unit used to perform payment of a customer terminal and generating a QR code including a unique value corresponding to user information received from the customer terminal; A communication unit receiving user information and payment approval from the customer terminal; And a display unit displaying the generated QR code, whether the payment is approved, and a payment completion amount when payment is approved.

According to another embodiment, the QR code may be a disposable QR code that cannot decrypt information included in the QR code unless a corresponding value corresponding to the unique value is used.

According to another embodiment, the QR code is also disclosed a store terminal consisting of a disposable QR code further comprising at least one of the user information, the store information and payment amount information.

According to another embodiment, the communication unit is also provided with a store terminal receiving through the microphone when the customer terminal transmits the unique value using sound.

According to one side, the security information is transmitted to the payment server to receive payment approval, and the customer terminal performing payment by approving the payment recognizes a QR code including a unique value corresponding to user information generated by the store terminal. QR code recognition unit; A processing unit for extracting payment store information and payment amount information from the QR code using a corresponding value corresponding to the unique value; And a communication unit that transmits a unique value corresponding to the user information to the store terminal, transmits the payment store information and payment amount information to a payment server, receives a payment approval from the payment server, and transmits it to the store terminal. The customer terminal is started.

According to another side, the communication unit may also be a customer terminal that transmits the unique value to the store terminal using at least one wireless communication means among Bluetooth, NFC, and WiFi.

Alternatively, the communication unit may transmit the unique value to the store terminal using sound.

According to another aspect, the processing unit is provided with a customer terminal that generates a unique value corresponding to the user information and a corresponding value corresponding to the unique value.

According to another side, it is possible for the customer terminal to further include a display unit that displays whether the payment is received from the payment server and whether the payment is approved and the payment completion amount.

According to an embodiment, in a payment server performing secure payment, the payment is received from a customer terminal extracting payment store information and payment amount information using a corresponding value corresponding to a unique value by recognizing a QR code generated by the store terminal A communication unit receiving the store information and the payment amount information and transmitting whether to approve the payment to the customer terminal; And a processing unit that processes whether to approve payment using the payment store information and the payment amount information.

According to another date and time example, a payment server is disclosed, which is a one-time QR code that cannot decode information included in the QR code unless the corresponding value corresponding to the unique value is used.

According to another embodiment, when receiving the request for canceling the payment from the customer terminal, the communication unit transmits to the customer terminal whether or not the payment cancellation request is approved, and the processing unit receives the payment cancellation request. A payment server capable of canceling payment processing for approval is also presented.

According to one embodiment, in a method of operating a payment server performing secure payment, a customer terminal that recognizes a QR code generated by a store terminal and extracts payment store information and payment amount information using a corresponding value corresponding to a unique value Receiving the payment store information and the payment amount information from; A processing unit processing whether to approve payment using the payment store information and the payment amount information; And transmitting the payment approval status to the customer terminal.

1 shows an operation flow of a secure payment system using a QR code according to an embodiment.
2 shows a configuration of a store terminal according to an embodiment.
3 shows a configuration of a customer terminal according to an embodiment.
4 shows a configuration of a payment server according to an embodiment.
5 illustrates a state in which a customer visits a store and performs payment according to an embodiment.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. However, the scope of rights is not limited or limited by these embodiments. The same reference numerals in each drawing denote the same members.

The terminology used in the description below has been selected to be general and universal in the related technical field, but may have other terms depending on technology development and/or changes, conventions, and preferences of the technician. Therefore, the terms used in the following description should not be understood as limiting the technical idea, but should be understood as exemplary terms for describing the embodiments.

Also, in certain cases, some terms are arbitrarily selected by the applicant, and in this case, detailed meanings will be described in the corresponding description. Therefore, the terms used in the description below should be understood based on the meaning of the term and the entire contents of the specification, not just the name of the term.

The QR (Quick Response) code is a two-dimensional matrix type code that includes various information in a rectangular horizontal and vertical grid pattern. The QR code can store up to 7,089 characters and up to 4,296 characters, and has better recognition speed, recognition rate, and resilience than ordinary barcodes.

Banks, credit card companies, airlines, etc. can use QR cards to provide payment services, and retailers, such as department stores and discount marts, use flyers, newspaper advertisements, and QR codes posted on the website instead of discount coupons that were shipped to their homes. In addition to discount coupons, events or promotional items can be provided.

This QR code can be recognized and used by all users, so when using it for payment, an incorrect payment may occur. Therefore, a secure electronic payment technology using a code that is meaningful only to a terminal of a specific user is proposed.

1 shows an operation flow of a secure payment system using a QR code according to an embodiment. The secure payment system using a QR code according to an embodiment may include a store terminal 110, a customer terminal 120, and a payment server 130.

First, an operation sequence of the secure payment system will be briefly described when a customer visits a store and performs payment. The customer terminal 120 transmits the user information to the store terminal 110 (101). The store terminal 110 generates 102 a QR code using the received user information. The generated QR code is recognized by the customer terminal 120 using the QR code recognition unit 103. The customer terminal 120 transmits the payment related information extracted from the QR code to the payment server 130 (104). The payment server 130 checks whether payment is possible using the payment information and, if possible, performs payment. Then, the payment approval is transmitted to the customer terminal 120 (105). The customer terminal 120, which has received payment approval, transmits (106) the payment approval to the store terminal 110 again. Finally, the store terminal 110 displays whether the payment is approved and if the payment is approved (107). A secure payment system using a QR code may operate according to the series of processes. Below, each step is examined in detail.

In the step of transmitting (101) user information from the customer terminal 120 to the store terminal 110, the user information is information related to the customer visiting the store and may be transmitted in a unique value form. Information transmitted in the form of a unique value is included in a QR code and can be checked only through a corresponding value when the QR code is recognized. Therefore, it is configured such that another user without a corresponding value cannot decrypt the QR code even if the QR code is recognized.

The step 101 of transmitting the user information may be transmitted using various communication methods such as Bluetooth or WiFi. Also, in some cases, it may be transmitted using a sound signal. By way of example, but not limitation, the sound signal may be a sound signal in an audible region or an audible region.

By using the sound transmitted from the customer terminal 120 does not require a separate device, it is possible only by including a microphone capable of receiving the sound in the store terminal 110.

The store terminal 110 generates 102 a QR code using a unique value including user information received from the customer terminal 120. Since the generated QR code includes a unique value, even if any customer scans the QR code, the contents of the information included in the QR code cannot be known, and only the customer who has transmitted the unique value can check the information. . Therefore, there is an effect that can prevent incorrect payment using a QR code.

In addition, in the case of generating a QR code, the store terminal 110 generates a QR code including payment related information. By way of example, but not limitation, the payment related information may include store information and payment amount information. The store information may include a payment account number of a store or a store number subscribed to a card company.

Next, when the customer terminal 120 recognizes the QR code, it is possible to check information related to payment. Since the customer terminal 120 is a QR code generated using a unique value when the QR code is recognized 103, it can be decoded using a corresponding value corresponding to the unique value. Therefore, only the corresponding customer terminal 120 that transmits the unique value corresponding to the user information to the store terminal 110 can recognize the QR code and extract payment related information.

The customer terminal 120 may extract payment related information from the QR code and transmit 104 the payment information to the payment server 130. The extracted payment information may include, but is not limited to, store information and payment amount information. The customer terminal 120 may further transmit payment 104 to the payment server 130 by further including payment means information such as a payment account or credit card information of the terminal user in addition to the extracted payment information.

The payment server 130 may perform payment using the received payment information. The payment server 130 performs payment and transmits the payment approval to the customer terminal 120 (105). It is possible to determine whether to approve the payment in consideration of the balance of the customer's payment method or the payment limit. For example, if the payment amount for the payment store is greater than the balance of the customer's payment method, the payment may be rejected, and in the opposite case, the payment may be approved.

Upon receiving the payment approval, the customer terminal 120 transmits (106) the payment approval to the store terminal 110 again. In the case of transmitting (106) whether to approve the payment, the user information may be transmitted using a sound signal in the same manner as in the step of transmitting information (101), or a method using a wireless communication method is also possible.

Finally, the store terminal 110 that has received payment approval may indicate whether payment is approved, and if payment is approved, the payment completion amount may be further displayed (107). For example, if payment is approved, the payment is approved through the display. And the like. Conversely, when payment is rejected, a message such as "unauthorized payment (lack of balance)" may be output.

A series of payment processes have been described in detail, and the configuration of each of the store terminal, the customer terminal, and the payment server will be described in FIGS. 2 to 4.

2 shows a configuration of a store terminal according to an embodiment. The store terminal 200 according to an embodiment may include a QR code generation unit 210, a communication unit 220, and a display unit 230. Let's look at each configuration one by one.

The QR code generator 210 generates a QR code using a unique value corresponding to user information received from the customer terminal. The QR code is a QR code that includes security information and is configured to prevent any customer from extracting the information of the QR code. In addition, the QR code includes payment-related information, and the customer terminal can easily obtain payment-related information by recognizing the QR code.

The communication unit 220 enables the customer terminal and the store terminal 200 to perform wireless communication. Exemplarily but not limited to, it may be a wireless communication chip. In some cases, when the customer terminal transmits a unique value including user information using a sound signal, the communication unit 220 may be a microphone capable of receiving audible or inaudible sound.

The communication unit 220 may receive user information from the customer terminal, and may further receive approval of payment. The customer terminal may perform payment using the QR code generated by the QR code generator and receive the payment result again using a wireless communication method or a sound communication method.

The display 230 may display various information. It may be included on one side of the store terminal to indicate whether the payment is approved to the customer or the store owner. In addition, when payment is approved, it is also possible to display the payment completion amount.

As described above, depending on whether or not the payment is approved, a message such as "28,500 won payment approval completed" or "payment disapproval (lack of balance)" may be output. Also, the display unit 230 may display a QR code generated by the QR code generation unit 210.

3 shows a configuration of a customer terminal according to an embodiment. The customer terminal 300 according to an embodiment may include a QR code recognition unit 310, a processing unit 320, and a communication unit 330.

The QR code recognition unit 310 may be an example camera. The QR code recognition unit 310 may photograph and recognize the QR code generated by the QR code generation unit of the store terminal.

Since the QR code recognized by the QR code recognition unit 310 is a QR code including a unique value so that any customer terminal cannot extract information, only a specific customer terminal 300 can extract information. The information is extracted through the processing unit 320.

The processing unit 320 generates information about the user who is the owner of the customer terminal as a unique value, and generates a corresponding value corresponding to the unique value. The unique value corresponding to the generated user information may be transmitted to the store terminal using the communication unit 330.

The processing unit 320 may also decrypt the recognized QR code. Since the QR code is generated including a unique value, it can be decrypted only when it has a corresponding value corresponding to the unique value. Therefore, the processing unit 320 decodes the recognized QR code using the corresponding value and extracts information.

When the processing unit 320 extracts information from the QR code, the information may be information related to payment. That is, it may be store information and payment amount information. The store information may be account information of a store terminal owner or information related to a card company.

The communication unit 330 may transmit and receive data to and from a store terminal or payment server using a wireless communication method. The case where the communication unit 330 transmits and receives data to and from a store terminal and a case where data is transmitted and received to and from a payment server will be described separately.

The communication unit 330 may transmit a unique value corresponding to user information to the store terminal. In addition, after the payment attempt is completed, it is possible to transmit whether the payment is approved. Also, the communication unit 330 may transmit payment information to a payment server. It is possible to transmit payment information to a payment server and receive payment approval. The payment approval may be sent back to the store terminal.

According to another embodiment, when a payment cancellation request is made, information related to the payment cancellation request may be transmitted to the payment server, and it is also possible to receive approval of payment cancellation from the payment server. When the payment cancellation is approved, it is also possible to transmit whether the payment cancellation is approved to the store terminal, or, if the payment cancellation is disapproved, it is also possible to transmit the history of the payment cancellation attempt to the store terminal.

4 shows a configuration of a payment server according to an embodiment. The payment server 400 according to an embodiment may include a communication unit 410 and a processing unit 420.

The communication unit 410 may receive payment information from the customer terminal, and transmit the payment approval to the customer terminal. In some cases, it is also possible to receive a request to cancel payment and transmit the payment cancellation approval to the customer terminal.

The processing unit 420 may perform payment using payment information received from the communication unit 410. Payment processing may be performed by using a payment amount and information of a customer's payment method to pay to a store account. Whether the payment amount is greater than the customer's payable amount (account balance or credit card limit) determines whether the payment is approved. When the payment attempt is completed, the communication unit 410 may transmit whether to approve the payment.

In addition, in the case of a request to cancel payment, the processing unit 420 may review the validity of the request to cancel the payment and determine whether to approve the request to cancel the payment.

The process of the secure payment system using a QR code according to an embodiment will be described once again. When a specific customer visits a store and performs payment, a QR code payment system for preventing incorrect payment with other customers may be performed by a store terminal, a customer terminal, and a payment server.

The customer who visited the store is located near the store terminal to select the product and pay the amount. The customer sends a unique value corresponding to the user information to the store terminal using the customer terminal. The store terminal generates a secure QR code that only the customer can decrypt using the unique value. The generated QR code displays a QR code for the customer to view using a display unit. The customer scans the corresponding QR code using the customer terminal, and the customer terminal extracts payment related information from the QR code and transmits it to the payment server. When the payment server processes the payment request and sends the payment approval to the customer terminal, the customer terminal sends the payment approval again to the store terminal. If the store terminal is approved for payment through the display unit and if payment is approved, the payment amount is displayed.

Through this method, even if another customer approves the QR code, the payment related information is not known and a secure payment system capable of preventing erroneous payment can be operated.

The payment system using a QR code according to an embodiment has an effect of continuously generating a QR code for payment because it does not need to use time as a medium when compared to a payment method using OTP (One Time Password).

Specifically, in the case of the OTP method, time is used as a medium. Therefore, under the assumption that the time of the server and the time of the device coincide, a one-time password (or code) is generated, and for a certain period of time, the one-time password is tied to the time and generation of other codes is restricted. For example, when generating a one-time password using OTP when transferring a bank account, the password is maintained for 1 minute. Since the network is not tied to the device, it is not known whether the code has been used or not, so the password is fixed for a predetermined time.

On the other hand, since the payment system using the QR code according to an embodiment does not use time, the password is not fixed even if there is no network, and the effect of continuously generating the QR code corresponding to the user information received from the customer terminal is obtained. have. Therefore, it is possible to simultaneously generate QR codes corresponding to each user information from a plurality of customer terminals.

The device described above may be implemented with hardware components, software components, and/or combinations of hardware components and software components. For example, the devices and components described in the embodiments include, for example, processors, controllers, arithmetic logic units (ALUs), digital signal processors (micro signal processors), microcomputers, field programmable arrays (FPAs), It may be implemented using one or more general purpose computers or special purpose computers, such as a programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions. The processing device may run an operating system (OS) and one or more software applications running on the operating system. In addition, the processing device may access, store, manipulate, process, and generate data in response to the execution of the software. For convenience of understanding, a processing device may be described as one being used, but a person having ordinary skill in the art, the processing device may include a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that may include. For example, the processing device may include a plurality of processors or a processor and a controller. In addition, other processing configurations, such as parallel processors, are possible.

The software may include a computer program, code, instruction, or a combination of one or more of these, and configure the processing device to operate as desired, or process independently or collectively You can command the device. Software and/or data may be interpreted by a processing device or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. , Or may be permanently or temporarily embodied in the transmitted signal wave. The software may be distributed on networked computer systems, and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, or the like alone or in combination. The program instructions recorded on the medium may be specially designed and constructed for the embodiments or may be known and usable by those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs, DVDs, and magnetic media such as floptical disks. -Hardware devices specifically configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of program instructions include high-level language code that can be executed by a computer using an interpreter, etc., as well as machine language codes made by a compiler. The hardware device described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

Although the embodiments have been described by the limited drawings, those skilled in the art can make various modifications and variations from the above description. For example, the described techniques are performed in a different order than the described method, and/or the components of the described system, structure, device, circuit, etc. are combined or combined in a different form from the described method, or other components Alternatively, even if replaced or substituted by equivalents, appropriate results can be achieved.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (13)

In the store terminal performing a secure payment,
A QR code generation unit used to perform payment of a customer terminal and generating a QR code including a unique value corresponding to user information received from the customer terminal;
A communication unit receiving user information and payment approval from the customer terminal; And
Display unit for displaying the generated QR code, whether the payment is approved, and the amount of payment completed when payment is approved
Store terminal comprising a.
According to claim 1,
The QR code,
If the corresponding value corresponding to the unique value is not used, the store terminal which is a disposable QR code that cannot decrypt the information included in the QR code.
According to claim 2,
The QR code,
A store terminal that is a disposable QR code further comprising at least one of the user information, the store information and payment amount information.
According to claim 3,
The communication unit,
A store terminal receiving through the microphone when the customer terminal transmits the unique value using sound.
In the customer terminal for transmitting the security information to the payment server to receive the payment approval, and to perform the payment by the payment approval,
A QR code recognition unit for recognizing a QR code including a unique value corresponding to user information generated by the store terminal;
A processing unit for extracting payment store information and payment amount information from the QR code using a corresponding value corresponding to the unique value; And
A communication unit that transmits a unique value corresponding to user information to the store terminal, transmits the payment store information and payment amount information to a payment server, receives payment approval from the payment server, and transmits it to the store terminal
Customer terminal comprising a.
The method of claim 5,
The communication unit,
A customer terminal that transmits the unique value to the store terminal using at least one wireless communication means among Bluetooth, NFC, and WiFi.
The method of claim 5,
The communication unit,
A customer terminal that transmits the unique value to the store terminal using sound.
The method of claim 5,
The processing unit,
A customer terminal generating a unique value corresponding to the user information and a corresponding value corresponding to the unique value.
The method of claim 5,
A display unit that displays whether the payment is received from the payment server and the payment is completed when the payment is approved
Customer terminal further comprising a.
In the payment server for performing secure payment,
Receiving the payment store information and the payment amount information from the customer terminal extracting payment store information and payment amount information by using the corresponding value corresponding to the unique value by recognizing the QR code generated by the store terminal, and receiving the payment A communication unit transmitting whether to approve payment; And
A processing unit that processes payment approval using the payment store information and the payment amount information
Payment server comprising a.
The method of claim 10,
The QR code,
Payment server which is a disposable QR code that cannot decrypt the information included in the QR code unless the corresponding value corresponding to the unique value is used.
The method of claim 11,
The communication unit,
When receiving the request for canceling the payment from the customer terminal, whether to approve the payment cancellation request is transmitted to the customer terminal,
The processing unit,
Payment server for processing whether to approve the payment cancellation request.
In the operation method of the payment server for performing secure payment,
Receiving the payment store information and the payment amount information from a customer terminal extracting payment store information and payment amount information using a corresponding value corresponding to a unique value by recognizing a QR code generated by the store terminal;
A processing unit processing whether to approve payment using the payment store information and the payment amount information; And
Sending payment approval to the customer terminal
Method of operation of the payment server comprising a.

Images