KR20210117825A - Card payment system with enhanced security - Google Patents

Abstract

An objective of the present invention is to provide a card payment system which allows anyone to easily carry out a transaction through a cryptocurrency. According to the present invention, the card payment system (1) based on a blockchain has an infrastructure constructed to make a payment with a cryptocurrency (2) online and comprises: a card (100) to which a unique key for each user is assigned; a member terminal (200) displaying cryptocurrency transaction information, and making a payment with the card to a cryptocurrency exchange server to request a cryptocurrency transaction from a financial server (3); a platform server (300) receiving a payment approval request from the financial server (3), and confirming approval through comparison of the unique key; and an exchange server (400) receiving payment approval information from the platform server (300), and transmitting cryptocurrency balance information of the user to the platform server (300) if the user is verified as a member through comparison of the unique key.

Description

Card payment system with enhanced security}

The present invention relates to a card payment system with enhanced security that allows cryptocurrency to be used for real-life payments.

Crypto-currencies represented by Bitcoin have a common type of transaction ledger called a blockchain.

As an overview, a general user downloads a wallet program of cryptocurrency to his/her computer and installs it on his/her computer. First, it takes about 3 to 7 days because the data is tens of gigabytes. After the synchronization is complete, you can create your own address (concept of an account in a bank) in your wallet and send or receive bitcoins through that address (in the case of bitcoin, the address is a 34-character English (large and small) address starting with 1. Due to the difficulty of this method, there are many services in which a server with full nodes does not unload all nodes as a web wallet service (Blockchain Info, MyEtherWallet, Metamask, etc.).

Here, all cryptocurrencies (Crypto-Currency) running in the block chain system, including Bitcoin, are in the form of a 'private key-public key (address)' between users. The public key is the bank account number. A private key corresponds to a password, which is a pair that only fits each other. For example, in the case of the Bitcoin QT program (user personal wallet program), the private key is encrypted using the user password and stored in the member computer. In the case of the Bitcoin exchange web wallet, the private key is encrypted using the user's password or the server's SALT and stored on the server.

As such, the existing method is a method of storing the private key in the cryptocurrency exchange server or in the member computer.

However, when using a cryptocurrency exchange server, the electronic wallet in the exchange of each member is not an actual electronic wallet on the block chain, but a wallet operated based on the database (DB). That is, when a member uses a cryptocurrency exchange server to inquire about his or her account, the balance registered and stored in the server database (DB) is displayed, but the actual balance in the address is meaningless to the member. In addition, there is a possibility that an insider related to the security of the cryptocurrency exchange will decrypt the encrypted private key stored in the server and use it secretly.

Therefore, it is necessary to create and provide each member's electronic wallet created in the cryptocurrency exchange server as a real transaction electronic wallet that can actually be transacted on the block chain, rather than as an electronic wallet in the form of a database.

However, since a number of confirmation processes are required for the actual transmission of normal cryptocurrency, it is difficult to create a real transaction electronic wallet for each member in the cryptocurrency exchange server, thereby making it difficult to conduct a blockchain transaction in real time.

Therefore, a new transaction brokerage method that can actually create and provide each member's real transaction e-wallet in the cryptocurrency exchange server, and perform block chain transactions in real time, frequently buying and selling, within a short time within this real transaction e-wallet environment. is urgently needed.

KR 10-1673073 B1 KR 10-2019-0114292 A WO 10-2016-163608 A1 WO 10-2016-171349 A2

Therefore, the present invention is to solve the above-mentioned problem, a card that allows anyone to easily make a transaction through cryptocurrency by accessing a platform that links between a financial service company and a cryptocurrency exchange through a card to which a unique key is assigned. To provide a payment system.

In order to achieve the above object, the infrastructure is built so that online payment can be made with the cryptocurrency 2 according to the present invention, and the card payment system 1 based on the block chain is a card 100 with a unique key for each user. ; a member terminal 200 that displays cryptocurrency transaction information and requests a cryptocurrency transaction to the financial server 3 by paying with the card to a cryptocurrency exchange server; Receives a payment approval request from the financial server 3, receives payment approval information from the platform server 300 and the platform server 300 that confirms approval through matching of the unique key, and receives the payment approval information through matching of the unique key When the user is confirmed as a member, it characterized in that it includes an exchange server 400 that transmits the user's cryptocurrency balance information to the platform server 300 .

The present invention has the effect of increasing security and convenience by interworking with an existing payment infrastructure without the need for a payment gateway (PG) or a value-added network (VAN) for online payment.

1 is a block diagram of a conventional card payment system.
2 is a block diagram of a card payment system according to the present invention.
3 is a conceptual diagram of a card payment system according to the present invention.
4 is a conceptual diagram between a card payment system financial server, a platform server, and an exchange server according to the present invention.
5 is a flowchart of a method of using the card payment system according to the present invention.
6 is a view showing a service subscription and address import process according to an embodiment of the card payment system according to the present invention.
7 is a diagram illustrating a service login process according to an embodiment of the card payment system according to the present invention.
8 is a view showing a sending and receiving process according to an embodiment of the card payment system according to the present invention.
9 is a view showing a storage and backup process according to an embodiment of the card payment system according to the present invention.

Hereinafter, cryptocurrency is a concept that includes all digital cryptocurrencies such as Bitcoin, Bitcoin Cash, Ethereum, Litecoin, Namecoin, Dogecoin, and Ripple traded on the exchange.

In the prior art, as shown in FIG. 1 , a customer made a transaction with a check card or a credit card through a credit card company to an affiliated store affiliated with the card company. However, this has the inconvenience of having to go through a payment gateway (PG) or a value-added network (VAN) company for payment.

In addition, it is impossible to buy and sell frequently in a short period of time in this way because a number of confirmation processes are required for the actual transmission of normal cryptocurrency. In order to solve this problem, the card payment system of the present invention creates an electronic wallet that can actually perform a block chain transaction on the exchange server 400, and uses this real transaction electronic wallet and the card 100 including the unique key to be fast and stable. It enables fast response through real-time processing of orders/conclusions by allowing block chain transactions to take place.

That is, when investors deposit an amount corresponding to cryptocurrency in a bank through the platform, users pay with the card 100 through the member terminal 200, the card company proceeds with the payment with the money deposited in the bank, which is the platform server It is reflected in (300) and the payment is made in conjunction with the virtual currency exchange.

To this end, the infrastructure is built so that online payment can be made with the cryptocurrency 2 according to the present invention, and the card payment system 1 based on the block chain has a unique key for each user as shown in FIGS. 2 to 3 . granted card 100; a member terminal 200 that displays cryptocurrency transaction information and requests a cryptocurrency transaction to the financial server 3 by paying with the card to a cryptocurrency exchange server; Receives a payment approval request from the financial server 3, receives payment approval information from the platform server 300 and the platform server 300 that confirms approval through matching of the unique key, and receives the payment approval information through matching of the unique key When the user is confirmed as a member, it characterized in that it includes an exchange server 400 that transmits the user's cryptocurrency balance information to the platform server 300 .

Communication between the member terminal 200 , the financial server 3 , the platform server 300 , and the exchange server 400 of the card payment system according to the present invention is wired communication or wireless communication. When such a wired/wireless communication network (not shown) is implemented as a wireless communication network, a wireless mobile communication network consisting of a base transceiver station (BTS), a mobile switching center (MSC), and a home location register (HLR). can be used for data communication. In addition, when a wired/wireless communication network (not shown) is implemented as a wired communication network, it may be implemented as a network communication network, and data communication may be performed according to an Internet protocol such as TCP/IP (Transmission Control Protocol/Internet Protocol).

Therefore, when the cryptocurrency payment system according to the present invention is used as shown in FIG. 4 , the platform server 300 is a platform that connects an exchange and a financial service company, and other cryptocurrencies are transferred between the platform and the exchange of the platform server 300 . It processes real-time transactions that convert to cryptocurrency, and the balance is reflected according to the payment approval result by converting the own cryptocurrency (BEP) of the platform server 300 into mileage between the platform and the bank (financial service company).

The member terminal 200 is a terminal used by a user registered as a member in the financial server 3, the platform server 300 and the exchange server 400, and not only a smartphone but also a desktop PC ( desktop PC), tablet PC (tablet PC), slate PC (slate PC), notebook computer (notebook computer) and the like may be applicable. Of course, the terminal to which the present invention is applicable is not limited to the above-described types, and it is natural that all terminals capable of communicating with an external device may be included.

In addition, in the case of the card 100, a card including at least one of a magnetic card or an IC chip embedded with a semiconductor-based integrated circuit so as to store information about a unique key, or the NFC function of the user's smartphone may be used. do.

To this end, the member terminal 200 is installed with a wallet application 210 for trading cryptocurrency, accesses a cryptocurrency exchange to display cryptocurrency transaction information, and also provides a cryptocurrency transaction to the exchange server 400 ( You can request to sell or buy cryptocurrency).

The cryptocurrency wallet application 210 is a kind of software that operates on an operating system (OS), and is a program designed to directly perform a specific function for a user or other application programs.

In the present invention, the cryptocurrency wallet application used in a member's mobile terminal such as a smartphone or a member-only terminal for payment may be software designed to be applied to a mobile device, and the cryptocurrency wallet application is a browser-based application that accesses the web. It may be implemented in the form of an application, a native application produced according to the terminal depending on the terminal operating system, or a hybrid application combining them.

The cryptocurrency wallet application 210 generates transaction information data and transmits it to the financial server 3 as described above, and generates and fragments security data.

And the cryptocurrency wallet application 210 generates a first unique key based on the transaction information data to approve the transaction of the cryptocurrency.

The cryptocurrency wallet application 210 determines whether the generated first unique key and the second unique key generated by the platform server 300 match, and upon matching, combines the fragmented security data to obtain an electronic signature required for transaction approval. By creating it, you can increase the stability of security.

In addition, the member terminal 200 is characterized in that it further includes a display 220 .

In addition, the display 220 is composed of a touch screen can be used as an input means for manipulating the member terminal (200).

In addition, the member terminal 200 may further include a storage unit 230 for storing the user's transaction command, transaction information data, and security data. The cryptocurrency wallet application 210 determines whether the unique key stored in the storage unit 230 matches the received unique key, and only when they match, the cryptocurrency transaction proceeds.

Next, referring to FIG. 5 , to describe in detail a method of payment through the cryptocurrency payment system 1 according to the present invention, first, the cryptocurrency wallet application 210 is executed.

Thereafter, a user's command is input to the application 210, and the cryptocurrency wallet application 210 generates transaction information data based on this, and the storage unit 230 stores the transaction information data (S110).

Thereafter, the card 100 and the member terminal 200 are linked. (S120)

As described above, the card 100 and the member terminal 200 may be interconnected in a wireless manner, but in consideration of security stability, it is preferable that the card 100 and the member terminal 200 be interconnected in a wired manner.

That is, after the card 100 is connected to the member terminal 200 , the unique key is stored in the card 100 and the member terminal 200 .

More specifically, the exchange server 400 generates a unique key for the member terminal 200 and transmits it to the member terminal 200 through the platform server 300 and the financial server 3, and transmits an interlocking acceptance signal to the member terminal ( 200) to the

And the storage unit 230 stores the unique key. And the cryptocurrency wallet application 210 shows the interlocking acceptance signal transmitted to the user through the display 220, and the input unit 112 inputs the user's interlocking approval command, so that the card 100 and the member terminal 200 are connected. The link is accepted.

Thereafter, the card 100 and the member terminal 200 store the security data. More specifically, a user's command is input, and the cryptocurrency wallet application 210 generates security data based on this. And the cryptocurrency wallet application 210 fragments the security data into a part and the rest, and the storage unit 230 stores a part of the security data.

And the cryptocurrency wallet application 210 transmits the rest of the security data to the member terminal 200 and removes the rest.

And the security member 240 stores the rest of the received security data, thereby completing the interworking process between the card 100 and the member terminal 200 .

Here, the above-described interworking process has been carried out after the creation of the transaction information data, but is not limited thereto, and may be performed immediately after the cryptocurrency wallet application 210 is executed.

Thereafter, a unique key is generated in the member terminal 200 (S130).

More specifically, the application 210 transmits the unique key stored in the security unit 240 to the platform server 300 , and the unique key received by the cryptocurrency wallet application 210 and the unique key stored in the storage unit 230 . It is determined whether or not it matches. (S131)

This is to increase security stability by preventing other transaction devices from being connected to the card 100 other than the member terminal 200 that has undergone the above-described interworking process.

Here, if the unique key does not match, it returns to before the above-mentioned interworking process. Store the unique key. (S132)

And the cryptocurrency wallet application 210 transmits the transaction information data to the member terminal 200, and generates a second unique key based on the received transaction information data (S133).

Thereafter, it is determined whether the private key and the unique key of the card 100 match. (S140)

More specifically, the second unique key and the rest of the security data are transmitted to the storage unit 230 (S141).

Then, the cryptocurrency wallet application 210 determines whether the first unique key stored in the storage unit 230 matches the received second unique key. (S142)

Here, if the first unique key and the second unique key do not match, it returns to the previous transaction information data generation process described above. A digital signature is generated by combining the remaining parts received (S150, 160).

Thereafter, the transaction is made by transmitting the cryptocurrency to the transaction target recipient in the application 210 .

Here, the wallet application 210 transmits the transaction information data and the electronic signature to the exchange server 400 (S170), and the exchange server 400 performs the above-described approval and verification procedures based on this, and then sends the cryptocurrency to the recipient. A transaction is made by sending

As described above, the service system and cryptocurrency transmission method according to an embodiment of the present invention check whether the unique key generated through the user device and the transaction linker matches and fragment security data including important information, and It is stored in a separate storage unit 230 and combined when trading cryptocurrency, so that transaction approval is performed, thereby increasing security stability.

In addition, the security unit 240 of the member terminal 200 destroys the data in the storage unit 230 when an attempt is made to access the member terminal 200 through the unspecified path.

In addition, the member terminal 200 allows the user to use the card 100 to link with the financial server 3 , the platform server 300 and the exchange server 400 to provide a cash deposit and withdrawal service function for cryptocurrency transactions. have

In addition, the exchange server 400 generates a real transaction electronic wallet and a personal unique key in which block chain transactions can be made and provides them to each member, and there is a transaction request including the sale or purchase of cryptocurrency from the member terminal 200 In this case, the transaction request information, including the purchase or sale of cryptocurrency requested, is updated on the block chain network processing server with the transaction completion details to the expected trading quantity of the member requesting the transaction.

6 is a diagram illustrating a service subscription and address import process according to an embodiment of the present invention.

Referring to FIG. 6 , a service subscription and address import process according to an embodiment of the present invention may provide a mobile phone identity verification authentication function.

In this case, the mobile phone identity verification authentication function can verify terminal information and user information through mobile phone identity verification when registering for service.

At this time, the mobile phone identity verification authentication function may provide a simple subscription service by sharing personal information with the exchange servers 400 of various cryptocurrency exchanges based on personal identification information such as unique identification information.

In addition, the address import process can import an address (public key) for storing cryptocurrency.

In this case, the address import process can share the address with the recipient by turning the address into an icon based on the messenger format.

At this time, the address import process provides a convenient UI, so that the user can secure convenience.

7 is a diagram illustrating a service login process according to an embodiment of the present invention.

Referring to FIG. 7 , in the service login process according to an embodiment of the present invention, it can be confirmed that login is performed through various authentication functions.

In other words, the service login process is USIM safe through various authentication methods such as ID/password authentication for login, FIDO-based biometric authentication (fingerprint, iris or face recognition, etc.), PIN authentication, OTP authentication, SMS (Secure SMS) or ARS authentication. You can log in to the wallet service.

8 is a diagram illustrating a sending and receiving process according to an embodiment of the present invention.

Referring to FIG. 8 , in the sending and receiving process according to an embodiment of the present invention, in the sending and receiving process, a message-based icon-type address to be sent to the other party can be selected, and cryptocurrency is sent through an authentication function (fingerprint authentication, etc.) and receiving.

At this time, the sending and receiving process may check the transaction details after sending and receiving cryptocurrency.

9 is a diagram illustrating a storage and backup process according to an embodiment of the present invention.

Referring to FIG. 9 , in the storage and backup process according to an embodiment of the present invention, a cryptocurrency secret key or a transaction secret key may be backed up offline or through the platform server 300 . At this time, the platform server 300 may further include a backup storage for backing up the cryptocurrency secret key or the transaction secret key.

In addition, the archiving and backup process can improve security through the multi-segment backup function.

1: Card payment system
2: Cryptocurrency
3: Financial Server
100 : card
200: member terminal
210: wallet application
220: display
230: storage
240: security department
300: platform server
400: Exchange server

Claims (10)

In the card payment system (1) based on the block chain, the infrastructure is built to make online payments with cryptocurrency (2),
Card 100 to which a unique key for each user is granted;
a member terminal 200 that displays cryptocurrency transaction information and requests a cryptocurrency transaction to the financial server 3 by paying the card to the cryptocurrency exchange server;
A platform server 300 that receives a payment approval request from the financial server 3, and confirms approval through matching of the unique key; and
When receiving payment approval information from the platform server 300 and confirming that the user is a member through the verification of the unique key, the exchange server 400 transmits the user's cryptocurrency balance information to the platform server 300 Card payment system comprising a.
The method according to claim 1,
The member terminal 200,
Card payment system, characterized in that the wallet application 210 for transacting cryptocurrency is installed.
The method according to claim 1 or 2,
The member terminal 200,
Card payment system, characterized in that it further comprises a display (220).
4. The method according to claim 3,
The display 220 is composed of a touch screen, card payment system, characterized in that the input means for operating the member terminal (200).
3. The method according to claim 2,
The member terminal 200,
Card payment system, characterized in that it further comprises a storage unit (230) for storing the user's transaction command, transaction information data, and security data.
6. The method of claim 5,
The member terminal 200,
The card payment system according to claim 1, further comprising a security unit (240) that destroys data in the storage unit (230) when access to the member terminal (200) is attempted through an unspecified path.
The method according to claim 1,
The member terminal 200,
A card payment system, characterized in that the user has a cash deposit/withdrawal service function for cryptocurrency transactions in conjunction with the financial server (3), the platform server (300) and the exchange server (400) with the card (100).
The method according to claim 1,
The exchange server 400,
A real transaction electronic wallet and a personal key that can be used for block chain transactions are generated and provided for each member. A card payment system, characterized in that the transaction request information including the requested transaction amount is updated to the transaction completion amount of the transaction request member in the block chain network processing server.
The method according to claim 1,
The card 100,
A card payment system, characterized in that it is a card including at least one of a magnetic card or an IC chip embedded with a semiconductor-based integrated circuit.
The method according to claim 1,
The card 100,
Card payment system, characterized in that the NFC card of the user's smartphone.

Images