KR20220015027A - Method and system for payment based on smart device and card including bio authentication function - Google Patents

Abstract

According to one embodiment of the present invention, a payment method by interworking between a card and a user terminal comprises: a step of transmitting, by the user terminal, an identification authentication request to the card; a step of receiving, by the user terminal, information on an identification authentication result based on biometric information autonomously performed by the card; and a step of generating, by the user terminal, payment request information including card information received from the card and transmitting the information to a card company server if the identification authentication result is successful.

Description

Card and smart device-based payment method and system with biometric authentication function

The present invention relates to a card and smart device-based payment method and system having a biometric authentication function.

In general, a card is used to substitute cash with credit as collateral, and has the following names depending on its purpose. There are transportation cards for paying for transportation on buses and subways, cash cards that can only withdraw cash from automatic teller machines, and credit cards that guarantee payment by credit card companies. Of course, there are many cards that provide the functions of a transportation card, a cash card, and a credit card in a single card.

In such a card, a magnetic strip on which user information is recorded is attached to one side, or an IC chip is embedded. In addition, the card's unique number, user name, and expiration date are embossed and stamped, and a user's photo is printed on one side of the card, or a hologram for preventing counterfeiting may be embossed.

However, even if such a card is not a legitimate holder, a person who acquires it can use it to pay for goods, and also has a risk that it can be used for cash service or online payment if personal information such as a payment password is known. For example, even if a person who acquires a lost card purchases an item at an offline store such as a convenience store and makes a payment, there is almost no case of verifying the identity, so the payment proceeds normally.

In addition, in the case of Korea, most of the responsibility for card loss is passed on to the customer. Therefore, the person who loses the card also bears the burden of suspending the use of the card so that it cannot be used immediately upon finding out the fact of the loss.

Means for preventing such illegal use of the card have been developed, but there is no technology capable of quickly and accurately determining the true owner of the card. Therefore, there is a problem in that the actual card owner cannot fundamentally prevent economic damage due to this.

In addition, in order to accurately identify the actual owner, the user information registered with the card company and the current holder must be accurately compared to determine the authenticity of the user almost completely. However, every time a card is used, a card company employee must accompany the card company to verify the authenticity of the holder. If the card use is approved in this way, economic and time inconveniences occur, and the number of people who do not use the card increases rapidly. Clearly, there was a problem in that the frequency of use of the card decreased, which became an obstacle in establishing a credit society.

SUMMARY OF THE INVENTION It is an object of the present invention to solve the problems of the prior art described above.

It is an object of the present invention to fundamentally prevent illegal use of a card by allowing the card itself to determine whether or not the true owner is the true owner when making a payment through a card.

Another object of the present invention is to maximize information security by preventing the external leakage of card information by enabling payment processing to be completed through interworking between the card and the smartphone.

Objects of the present invention are not limited to the objects mentioned above, and other objects not mentioned will be clearly understood from the description below.

According to an embodiment of the present invention for achieving the above object, there is provided a payment method by interworking between a card and a user terminal, the method comprising: transmitting, by the user terminal, a user authentication request to the card; receiving, by the user terminal, information on a biometric information-based identity authentication result performed by the card itself; and generating, by the user terminal, payment request information including card information received from the card, and transmitting the information to a card company server when the identity authentication result is successful.

In the payment method, the payment request information further includes affiliate store information and payment amount information, and the affiliate store information is obtained by the user terminal from a payment support server based on location information or by recognizing an affiliate store identification code. It may be obtained, or may be obtained by a method directly input by a user.

Transmitting the identity authentication request may include supplying power required for biometric information recognition and authentication to the card.

According to another embodiment of the present invention, there is provided a card having a biometric information-based identity authentication function, comprising: a biometric information recognition module including a driving electrode and a reference electrode in contact with the user's skin surface; a driving signal generator providing a square wave signal to the driving electrode; an output signal processing unit for processing an output signal according to the provision of the square wave signal; a control unit for performing identity authentication based on an output value of the output signal processing unit; and a short-range communication module for transmitting the result of the user authentication to the user terminal, the card is provided.

The output signal processing unit may output an impedance characteristic of the output signal.

The impedance characteristic may be an impedance magnitude, a phase, a reactance, or a change characteristic of the output signal.

The change characteristic of the output signal may be information about a time taken for the output signal to rise from a minimum value to a specific value between a minimum value and a maximum value.

According to another embodiment of the present invention, it is coupled with the user terminal, comprising the steps of transmitting a user authentication request to the card; Receiving information on a biometric information-based self-authentication result performed by the card itself; and when the identity authentication result is successful, an application stored in a computer-readable recording medium for executing the step of generating payment request information including card information received from the card and transmitting it to a card company server is provided.

According to an embodiment of the present invention, since the card itself determines whether or not the true owner is the true owner when making a payment through the card, illegal use of the card can be fundamentally blocked.

According to the embodiment of the present invention, since the payment processing is completed through the linkage between the card and the smartphone, leakage of card information to the outside can be prevented.

1 is a diagram schematically showing the configuration of a card and smartphone interworking based payment system according to an embodiment of the present invention.
2 and 3 are diagrams for explaining the configuration of a card according to an embodiment of the present invention.
4 is a diagram illustrating a waveform of a signal related to a biometric information authentication process according to an embodiment of the present invention.
5 is a view for explaining a payment method based on card and smartphone linkage according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS [0012] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS [0010] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS [0010] Reference is made to the accompanying drawings, which show by way of illustration specific embodiments in which the present invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the present invention. It should be understood that the various embodiments of the present invention are different but need not be mutually exclusive. For example, certain shapes, structures, and characteristics described herein with respect to one embodiment may be implemented in other embodiments without departing from the spirit and scope of the invention. In addition, it should be understood that the location or arrangement of individual components within each disclosed embodiment may be changed without departing from the spirit and scope of the present invention. Accordingly, the following detailed description is not intended to be taken in a limiting sense, and the scope of the present invention, if properly described, is limited only by the appended claims, along with all scope equivalents to those claimed. Like reference numerals in the drawings refer to the same or similar functions throughout the various aspects.

Hereinafter, in order to enable those of ordinary skill in the art to easily practice the present invention, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram schematically showing the configuration of a card and smartphone interworking-based payment system according to an embodiment of the present invention.

Referring to FIG. 1 , a system according to an embodiment of the present invention may include a card 100 , a user terminal 200 , and a card company server 300 .

The card 100 according to an embodiment is a concept including all cards that can be used as a payment method for purchasing goods or services, such as a transportation card, a cash card, a debit card, a check card, and a credit card.

The card 100 according to an embodiment displays a card number, an expiration date, information of a card holder, a CVC code, and the like. These information may be displayed together on one side of both sides of the card, and some information and the remaining information may be displayed on different sides.

The card 100 according to an embodiment is provided with a biometric information recognition module 110 . At the time of card payment, the user's biometric information (eg, fingerprint or sweat information, etc.) is recognized by the biometric information recognition module 110 , and the biometric information recognized within the card 100 itself is authenticated.

The authentication result is transmitted to the smart phone 200, and upon successful authentication, payment may be performed through card information transmitted to the user terminal 200 together with the authentication result.

This will be described in detail later.

The user terminal 200 according to an embodiment has a calculation function and may be implemented in any form as long as it is a device capable of communicating with the outside. For example, it may be implemented as a smart phone, a tablet PC, a laptop notebook, a PDA, etc., but is not limited thereto.

An application (not shown) for payment processing according to the present invention may be installed in the user terminal 200 . When an application is run in the user terminal 200 and the card 100 is brought into contact with the user terminal 200, a biometric authentication command may be transmitted to the card 100 in a short-distance communication method. According to this command, the card 100 may go through a self-authentication process through biometric authentication. The authentication result is again transmitted to the user terminal 200. Upon successful authentication, the user terminal 200 sends a payment request including the acquired affiliate store information, the payment amount information, and the card 100 information to the card company server 300. It is sent and processed so that credit card payment can be approved.

The card 100 and the user terminal 200 may communicate using a short-range communication method such as NFC communication, but is not limited thereto.

The card company server 300 according to an embodiment performs an operation of approving payment based on the payment request received from the user terminal 200 .

2 and 3 are diagrams for explaining the detailed configuration of the card 100 according to an embodiment of the present invention.

First, referring to FIG. 2 , the card 100 may include a biometric information recognition module 110 , an IC chip 120 , and an antenna 130 .

The biometric information recognition module 110 is a part in contact with the user's skin surface, and preferably, by recognizing the impedance characteristic of the user's skin surface in an electrical manner, it can be used for identity authentication.

In this case, the biometric information recognition module 110 may include a driving electrode 111 for applying a driving signal and a reference electrode 112 connected to a ground terminal as a reference signal.

Meanwhile, the antenna 130 is an antenna provided for transmitting and receiving information and power to and from the user terminal 200 .

Hereinafter, the internal configuration and function of the IC chip 120 will be described in detail with reference to FIG. 3 .

Referring to FIG. 3 , the IC chip 120 may include a power receiver 121 , a driving signal generator 122 , an output signal processor 123 , a controller 124 , and a short-range communication module 125 . have.

The power receiving unit 121 performs a function of receiving power for driving from the battery or the user terminal 200 provided in the card 100 itself. For example, when the card 100 and the user terminal 200 perform short-distance communication, or when an application for payment of the user terminal 200 is driven and a user authentication command is received from the user terminal 200, power can be received together. The power receiver 121 may be configured as an element such as a coil.

The driving signal generating unit 122 performs a function of generating a driving signal to be applied to the driving electrode 111 of the biometric information recognition module 110 based on the power received by the power receiving unit 121 .

For example, as shown in FIG. 4 , a square wave signal Vi(t) having a constant period, preferably a square wave voltage, may be generated. The frequency of the square wave may be a single frequency preferably selected within the range of 500 Hz to 15,000 Hz.

When the square wave signal is applied to the driving electrode 111 and the user's skin comes into contact with the surface of the biometric information recognition module 110, an output signal Vout(t) as shown in FIG. 4 is obtained as a response signal However, the output signal processing unit 123 determines a characteristic of the user's skin, for example, an impedance value based on this signal. For example, the magnitude, phase, and reactance of the impedance value or the time-dependent rise width of the output signal Vout(t) shown in FIG. 4, the time it takes for the output signal Vout(t) to rise to a specific voltage values can be obtained. For example, after the square wave signal Vi(t) is applied, the minimum and maximum values of the output signal Vout(t) are obtained, and the time it takes to rise from the minimum to a specific value between the minimum and maximum is determined by each user. It may be a unique characteristic for , and for authentication through this, the above time value can be derived.

To this end, the output signal processing unit 123 may include an analog-to-digital signal converting unit.

The control unit 124 according to an embodiment performs user authentication based on the value obtained by the output signal processing unit 123 . For example, when the card 100 is issued, a reference value obtained in the same process as the above method may be stored in the memory. By comparing the obtained value with the reference value, user authentication can be performed.

If the comparison result matches, the result value of authentication success is output, otherwise, the result value of failure is output.

This output value is transmitted to the user terminal 200 through the short-range communication module 125 .

5 is a view for explaining a payment method based on card and smartphone linkage according to an embodiment of the present invention.

Referring to FIG. 5 , first, the payment application is driven by the user's manipulation in the user terminal 200 ( S501 ).

Thereafter, the application of the user terminal 200 obtains affiliate store information (S502).

The merchant information acquisition method may be implemented in various ways.

According to an embodiment, when a user holding the card 100 and the user terminal 200 enters a specific affiliated store, location information is obtained by a location positioning sensor mounted on the user terminal 200 and corresponds to the location. affiliated store identification information may be automatically input to the payment application of the user terminal 200 . The affiliate store identification information may be transmitted from another payment support server or affiliate store management server not shown in the drawing.

In addition, according to another embodiment, affiliate store information may be manually input by a user operation within the application of the user terminal 200, and the affiliate store terminal (not shown) provided in the affiliate store or other affiliate store identification information is provided. Merchant information may be obtained through communication with a device or a mark (eg, a QR code, etc.).

In addition, the payment amount may be input in the payment application (S503).

Steps S502 and S503 may be performed immediately after the payment application is driven (S501), but may be performed during or after S507 of the steps described below.

When the user approaches the card 100 to the user terminal 200, the card 100 and the user terminal 200 perform short-range communication (S504). In this process, the user terminal 200 may transmit a user authentication request to the card 100 ( S505 ), and may also transmit power required for fingerprint recognition and authentication of the card 100 .

The card 100 performs an identity authentication procedure according to the identity authentication request (S506).

The user authentication procedure may be performed in the same manner as described with reference to FIGS. 3 and 4 , but is not limited thereto.

When the identity authentication procedure is completed, the card 100 transmits the identity authentication result to the user terminal 200 (S507). If the identity authentication result is a success, card information (card number, expiration date, etc.) may be transmitted together, and if the identity authentication result is a failure, only information related to the identity authentication failure may be transmitted.

The user terminal 200 checks the identity authentication result after receiving it. If the authentication result is a failure, a corresponding message is output for the user to check, and if the identity authentication result is successful, payment request information is generated (S508).

The payment request information may include affiliate store information and payment amount information obtained in steps S502 and S503, and card information received in step S507. By transmitting payment request information including such information to the card company server 300, the card A payment request is performed (S509).

The card company server 300 that has received the card payment request approves the card payment based on the information included in the request (S510).

According to the embodiment of the present invention, since biometric information-based identity authentication is performed within the card 100 itself, it is possible to fundamentally prevent the card from being used by someone other than the true owner.

According to an embodiment of the present invention, card payment is possible only with the card 100 and the user terminal 200 .

The description of the present invention described above is for illustration, and those of ordinary skill in the art to which the present invention pertains can understand that it can be easily modified into other specific forms without changing the technical spirit or essential features of the present invention. will be. Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive. For example, each component described as a single type may be implemented in a dispersed form, and likewise components described as distributed may be implemented in a combined form.

The scope of the present invention is indicated by the following claims, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention.

100: card
110: biometric information recognition module
120: IC chip
121: power receiver
122: driving signal generator
123: output signal processing unit
124: control unit
125: short-range communication module
200: user terminal

Claims (8)

As a payment method by interworking between a card and a user terminal,
transmitting, by the user terminal, a user authentication request to the card;
receiving, by the user terminal, information on a biometric information-based identity authentication result performed by the card itself; and
and when the identity authentication result is successful, generating, by the user terminal, payment request information including card information received from the card, and transmitting the generated payment request information to a card company server. The method of claim 1,
The payment request information further includes merchant information and payment amount information,
The affiliated store information is obtained by the user terminal obtained from a payment support server based on location information, obtained by recognizing an affiliated store identification code, or obtained by a method directly input by a user. According to claim 1,
The step of transmitting the identity authentication request is,
and supplying power required for biometric information recognition and authentication to the card. A card equipped with a biometric information-based identity authentication function,
a biometric information recognition module including a driving electrode and a reference electrode in contact with the user's skin surface;
a driving signal generator providing a square wave signal to the driving electrode;
an output signal processing unit for processing an output signal according to the provision of the square wave signal;
a control unit for performing identity authentication based on an output value of the output signal processing unit; and
A card comprising a short-distance communication module for transmitting a result of the identity authentication to a user terminal. 5. The method of claim 4,
The output signal processing unit,
and outputting an impedance characteristic of the output signal. 6. The method of claim 5,
The impedance characteristic is a change characteristic of a magnitude, a phase, a reactance, or the output signal of an impedance, the card. 7. The method of claim 6,
The change characteristic of the output signal is time information for the output signal to rise from the lowest value to a specific value between the lowest value and the highest value. Combined with the user terminal,
sending a user authentication request to the card;
Receiving information on a biometric information-based self-authentication result performed by the card itself; and
An application stored in a computer-readable recording medium for executing the step of generating payment request information including card information received from the card and transmitting the information to a card company server when the result of the identity authentication is successful.

Images