KR20220045444A - Server and method for providing payment service for unregistered card - Google Patents

Abstract

Disclosed is a method for a server to provide a payment service for an unregistered card. According to an embodiment of the present invention, the method for the server to provide the payment service for the unregistered card comprises: a step of receiving an application for a simple authentication service for the unregistered card; a step of activating the simple authentication service based on the acquired connecting information (CI) and the card number as the application for the simple authentication service is received; a step of receiving the application for a simple payment service for the unregistered card; a step of connecting and registering the simple payment service to user information based on the information acquired in the process of activating the simple authentication service and the user information on the user who has applied for the simple payment service; and a step of performing the payment for the unregistered card based on the simple payment service. The present invention aims to provide a method for a server to provide a payment service for an unregistered card, which is capable of improving user convenience.

Description

Server and method providing payment service for bearer card {SERVER AND METHOD FOR PROVIDING PAYMENT SERVICE FOR UNREGISTERED CARD}

The present invention relates to a server and method for providing a payment service for an anonymous card, and more particularly, to activate a simple authentication service for an anonymous card based on CI (Connecting Information) and a card number, and to provide a simple authentication service By registering the simple payment service for the bearer card based on user information in connection with the user information, it relates to a technology that supports the user to use the simple payment by registering the bearer card as his or her own simple payment method like his or her name card.

The simple payment service is provided in a smart pay method that supports payment by using a user's personal smartphone as a terminal and using a simple method such as pre-authentication without a complicated authentication procedure such as a public certificate.

Conventional simple payment services (eg, Kakao Pay, Samsung Pay, etc.) are a method in which individual users sign up through identity authentication for each user, such as checking the name of a mobile phone subscriber. can be registered as

As such, according to the prior art, if the owner of the card is a company name or an unnamed card such as a prepaid card, there is a disadvantage that it cannot be registered in the simple payment service. development is required.

Korean Patent No. 10-1062661, corporate card usage method by user

An embodiment of the present invention is to solve the problems of the prior art described above, and provides a server and method for supporting a user to use a simple payment by registering an anonymous card as his or her own simple payment means like his or her own name card. can do.

The technical problem to be solved is not limited to the technical problems as described above, and various technical problems may be further included within the scope obvious to those skilled in the art.

According to a first aspect of the present disclosure, there is provided a method for a server to provide a payment service for an anonymous card, the method comprising: receiving an application for a simple authentication service for the anonymous card; activating the simple authentication service based on the CI (Connecting Information) and card number obtained by receiving the application for the simple authentication service; receiving an application for a simple payment service for the anonymous card; registering the simple payment service in connection with the user information based on information acquired in the process of activating the simple authentication service and user information about a user who has applied for the simple payment service; and performing a payment for the anonymous card based on the simple payment service.

In addition, activating the simple authentication service may include: verifying the validity of the anonymous card based on the CI and the card number; and registering the application details for the simple authentication service.

In addition, the step of registering the simple payment service in association with the user information may include: determining whether the user is a legitimate user of the anonymous card based on the user information; and registering the simple payment service in connection with the user information when the user is the party user.

In addition, the step of determining whether the user is the party user for the anonymous card may include: receiving, from an external server, information indicating whether the user identified according to the CI is the party user for the anonymous card; may include

In addition, the step of determining whether the user is the party user for the anonymous card may include: obtaining, from a database, information indicating whether the user identified according to the CI is the party user for the anonymous card; may include

In addition, the step of registering the simple payment service in connection with the user information; performing authentication for the CI and the card number in response to the application for the simple payment service; and generating a token number based on a result of authentication for the CI and the card number.

In addition, the user information may include first user information and second user information, and a first token number corresponding to the first user information and a second token number corresponding to the second user information may be different from each other. .

In addition, the step of performing a payment for the anonymous card; may perform a payment for the anonymous card according to the simple payment service based on the token number.

In addition, the method includes the steps of determining a user who has paid for the anonymous card based on the token number; and storing usage history information indicating a user who has paid for the anonymous card.

In addition, performing the payment for the anonymous card; receiving a payment request for the anonymous card based on the user information; determining whether the CI is generated in the user terminal; performing additional authentication when the CI is generated in the user terminal; and performing payment for the anonymous card based on the result of performing the additional authentication.

According to a second aspect of the present disclosure, a server for providing a payment service for an anonymous card includes: a receiving unit configured to receive an application for a simple authentication service for the anonymous card and an application for a simple payment service for the anonymous card; and activating the simple authentication service based on the CI (Connecting Information) and card number obtained upon receiving the application for the simple authentication service, and activating the simple authentication service as the application for the simple payment service is received Based on the information obtained in the process and user information about the user who applied for the simple payment service, the simple payment service is registered in connection with the user information, and the payment for the bearer card is performed based on the simple payment service It may include a processor;

In addition, the processor may verify the validity of the anonymous card based on the CI and the card number, and register the application details for the simple authentication service.

In addition, the processor may determine whether the user is a party user for the anonymous card based on the user information, and if the user is the party user, the simple payment service may be registered in connection with the user information. there is.

In addition, the processor may receive, from an external server, information indicating whether the user identified according to the CI is the party user for the anonymous card.

In addition, the processor may obtain information indicating whether the user identified according to the CI is the party user for the anonymous card from the database.

In addition, the processor may perform authentication on the CI and the card number in response to the simple payment service application, and generate a token number based on a result of authentication on the CI and the card number.

In addition, the user information may include first user information and second user information, and a first token number corresponding to the first user information and a second token number corresponding to the second user information may be different from each other. .

In addition, the processor may perform payment for the anonymous card according to the simple payment service based on the token number.

In addition, the processor may determine a user who paid for the anonymous card based on the token number, and store usage history information indicating the user who made a payment for the anonymous card.

In addition, the processor receives a payment request for the anonymous card based on the user information, determines whether the CI is generated in the user terminal, and performs additional authentication when the CI is generated in the user terminal and payment for the anonymous card may be performed based on the result of performing the additional authentication.

A third aspect of the present disclosure may provide a computer-readable recording medium in which a program for implementing the method according to the first aspect is recorded. Alternatively, the fourth aspect of the present disclosure may provide a computer program stored in a recording medium to implement the method according to the first aspect.

According to an embodiment of the present invention, it is possible to improve user convenience by supporting a user to use a simple payment by registering an anonymous card as his or her own simple payment means like his or her own registered card.

In addition, by activating the simple authentication service for the corporate-owned bearer card based on the corporate administrator's consent, it is possible to restrict the registration of the bearer card to the individual's pay only by users who have been previously agreed by the corporation.

In addition, by simply authenticating the user based on the simple authentication service that is activated whenever a user wants to register an anonymous card on various simple payment platforms, card registration is performed efficiently without complicated corporate consent procedures in each pay. User convenience can be improved.

In addition, as payment is performed through a token number that is limitedly used in the simple payment service requested for registration, security for the token number can be strengthened and damage can be minimized even when the token number is leaked.

In addition, it is possible to easily check the actual user information of the public card by managing the payment details based on the user's CI.

It should be understood that the effects of the present invention are not limited to the above-described effects, and include all effects that can be inferred from the configuration of the invention described in the detailed description or claims of the present invention.

1 is a configuration diagram illustrating an example of the configuration of a payment system according to an embodiment.
2 is a schematic block diagram illustrating an example of a configuration of a server according to an embodiment.
3 is a flowchart illustrating an example of a method in which a server provides a payment service for an anonymous card according to an embodiment.
4 is a flowchart illustrating an example of a method for a server to activate a simple authentication service for an anonymous card according to an embodiment.
5 is a flowchart illustrating an example of a method for a server to register a simple payment service for an anonymous card in association with user information according to an embodiment.
6 is a flowchart illustrating an example of a method in which a server performs a payment for an anonymous card based on a simple payment service for an anonymous card according to an embodiment.
7 is a flowchart illustrating an example of an operation in which a first server supports a user's application for a simple authentication service according to an embodiment.
8 is a flowchart illustrating an example of an operation in which the first server receives an application for a simple authentication service for an anonymous card according to an embodiment.
9 is a flowchart illustrating an example of an operation in which a first server provides manager information for approval of an applied simple authentication service, according to an embodiment.
10 is a flowchart for explaining an example of an operation in which the first server provides details of a request for a simple authentication service, according to an embodiment.

Terms used in the embodiments are selected as currently widely used general terms as possible while considering functions in the present invention, but may vary according to intentions or precedents of those of ordinary skill in the art, emergence of new technologies, and the like. In addition, in a specific case, there is a term arbitrarily selected by the applicant, and in this case, the meaning will be described in detail in the description of the corresponding invention. Therefore, the term used in the present invention should be defined based on the meaning of the term and the overall content of the present invention, rather than the name of a simple term.

In the entire specification, when a part “includes” a certain element, it means that other elements may be further included, rather than excluding other elements, unless otherwise stated. In addition, the “… wealth", "… The term “module” means a unit that processes at least one function or operation, which may be implemented as hardware or software, or a combination of hardware and software.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those of ordinary skill in the art can easily carry out the embodiments of the present invention. However, the present invention may be implemented in several different forms and is not limited to the embodiments described herein.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

1 is a configuration diagram illustrating an example of the configuration of a payment system according to an embodiment.

Referring to FIG. 1 , a payment system according to an embodiment may include a server 100 , one or more user terminals 200 , and may further include one or more administrator terminals 300 .

The server 100 according to an embodiment may provide a payment service for an anonymous card. Here, the bearer card refers to a card that can be used by many, for example, a corporate card whose owner is a company name, a card that can be used by many because the user of the card is not named, or the owner of the card is not specified. It may be a non-prepaid card. In contrast to this, the named card refers to a card that can only be used by a named individual, and may be, for example, a personal card in which the owner of the card is an individual, or a corporate card in which the user of the card is named.

In one embodiment, the server 100 may correspond to a server associated with an operator that provides or supports an anonymous card-based payment service, and provides all types of wired and wireless communication devices that can be connected to a terminal or other servers through a network. may include For example, the server 100 may be implemented as a card company server operated by a card company (eg, BC Card) that provides a payment service using an anonymous card (eg, a public card in the name of a corporation), and one or more user terminals ( 200) and the manager terminal 300, and the like, may be connected through a network. Here, the network may be configured through various communication networks such as wired and wireless, for example, a local area network (LAN), a metropolitan area network (MAN), and a wide area network (WAN: wide area network). Network), etc., may be composed of various communication networks.

The user terminal 200 according to an embodiment represents a computing device that can be used by a user who uses a payment service for an anonymous card, for example, the user provides a simple authentication service and a simple payment service for a corporate public card. It may be an individual user belonging to a corporation who wants to apply.

The manager terminal 300 according to an embodiment represents a computing device that can be used by an administrator activating a simple authentication service applied for an anonymous card, for example, the manager It may be an accountant belonging to a legal entity who is authorized to approve or reject certification services.

In one embodiment, the user terminal 200 and the manager terminal 300 are implemented as a mobile phone, a smart phone, a personal digital assistant (PDA), a portable multimedia player (PMP), a tablet PC, etc., respectively, and the server 100 through a wireless communication network. ) includes all types of handheld-based wireless communication devices that can be connected to, or includes wired and wireless communication devices that are implemented as desktop PCs, tablet PCs, laptop PCs, etc. and can be connected to the server 100 through a network can do.

In an embodiment, the user terminal 200 and the manager terminal 300 may each install an anonymous card service application provided by the server 100 and store it in the memory. For example, the server 100 is an app store server (not shown) to which various applications are uploaded to an anonymous card service application including a computer program implementing a method of providing a payment service for an anonymous card, which will be described below. can be transmitted to and registered, and the user terminal 200 and the manager terminal 300 can access the app store server based on the operation of the user and the manager, respectively, to download and install the anonymous card service application, and through the installed application It is connected to the server 100 and can transmit and receive various information for application, inquiry, approval, cancellation, etc. of a simple authentication service for an anonymous card.

For convenience, the user terminal 200 and the administrator terminal 300 have been described separately, but the present invention is not limited thereto, and can be collectively understood as a terminal that can be used by a user or an administrator, and the distinction between the user and the administrator is in the system. It may be determined based on the use rights granted to the registered personal account.

On the other hand, it can be understood by those of ordinary skill in the art that other general-purpose components in addition to the components shown in FIG. 1 may be further included in the payment system. For example, the payment system includes a plurality of simple payment service servers (not shown) each providing a plurality of different simple payment services (eg, Samsung Pay, Kakao Pay, etc.), and an authentication server (not shown) that performs identity authentication for users. time) may be further included, or according to another embodiment, some of the components shown in FIG. 1 may be omitted.

2 is a schematic block diagram illustrating an example of the configuration of the server 100 according to an embodiment, and FIG. 3 is a method of the server 100 according to an embodiment providing a payment service for an anonymous card It is a flowchart for explaining an example.

2 to 3 , the server 100 according to an embodiment may include a receiver 110 and a processor 120 .

In step S310, the receiving unit 110 according to an embodiment may receive an application for a simple authentication service for an anonymous card. For example, the processor 120 is connected to the user terminal 200 through the anonymous card service application installed in the user terminal 200, and guide information for the simple authentication service and a menu for application, inquiry and cancellation of the simple authentication service information may be provided, and the receiving unit 110 may receive application information for the simple authentication service from the user terminal 200 through this (refer to FIG. 8 ).

In an embodiment, the application information for the simple authentication service may include one or more of card information including a card number of an anonymous card, CI (Connecting Information), and user consent for CI use. Here, CI represents customer identification information for identifying a user, and in one embodiment, a certification authority may identify a user instead of a resident registration number by issuing it through identity authentication (eg, mobile phone authentication, public certificate, etc.) for the user. It may mean unique identification information of an individual that allows it, and in another embodiment, it may be individual identification information (eg, resident registration number) issued by a national institution.

In step S320, the processor 120 according to an embodiment may activate the simple authentication service for the anonymous card based on the CI (Connecting Information) and the card number obtained upon receiving the application for the simple authentication service. For example, the processor 120 may acquire, store and manage the CI and card number from the received application information of the simple authentication service, and check whether a key value including the stored CI and card number is valid It can be determined whether to activate the simple authentication service for the bearer card.

In an embodiment, the processor 120 may acquire a CI for a user who has applied for a simple authentication service based on the authentication of the individual. For example, when an application for a simple authentication service is received, the processor 120 may control the user authentication (eg, mobile phone authentication) to proceed in conjunction with the user terminal 200 and the authentication server. If successful, the CI issued through authentication from the user terminal 200 or the authentication server may be received and stored as a key value corresponding to the user who applied for the simple authentication service.

In an embodiment, the processor 120 may verify the validity of the anonymous card based on the obtained CI and card number. For example, when the user information corresponding to the collected CI matches the user information of the user who has applied for the simple payment service, the processor 120 determines that the input card number, expiration date, password, unique card number, etc. are anonymous. It can be verified whether the value matches the value set on the card, whether the validity period remains and can be used, whether the corresponding card is a card for which registration of the simple payment service is allowed, and the like.

In an embodiment, the processor 120 may register the application details for the simple authentication service. For example, the processor 120 may include one of user information (eg, ID, user name, company name, department, rank, etc.), CI, card information, application date, and validation result for a user who has applied for a simple authentication service. You can create, store and manage application details including the above in the database.

In an embodiment, the processor 120 may activate the simple authentication service for the anonymous card based on whether approval for the registered application details is obtained. Here, approval means approval by a corporation that is the owner of the bearer card or an administrator designated by the corporation. For example, when the processor 120 receives an application for a simple authentication service for a public card owned by the corporation A from the user terminal 200 of the first user belonging to the corporation A, the processor 120 performs simple authentication according to the above-described operation. After registering the service application details, based on the previously stored corporate information of corporation A, user information about a second user designated as an accountant with approval authority is obtained, and the second user is transferred to the manager terminal 300 of the second user. can request approval review of the registered application details by sending a message indicating that the application details of the registered simple authentication service are newly registered by being designated as the accounting manager, You can activate the simple authentication service for that public card only when approval is received for it.

Accordingly, the user can apply for the simple authentication service for the public card through the application installed on his/her smartphone, the server 100 may register the application details in the database, and the manager may apply for the simple authentication service installed on his/her smartphone. Through the application, you can inquire detailed application details regarding the user who applied, card number, application date, etc., and approve or reject the application.

In an embodiment, the processor 120 may receive an approval for the application details from the manager terminal 300 based on the authentication of the corporation according to a preset method. For example, when input information regarding whether to approve the simple authentication service applied for is received from the manager terminal 300, the processor 120 works with the manager terminal 300 and the authentication server to authenticate the corporation (eg: corporate accredited certificate) can be controlled to proceed, and only when the authentication is successful, the approval by the administrator can be processed and the simple authentication service can be activated.

In an embodiment, the preset method may include at least one of identity authentication for an administrator and corporate authentication for a corporation, and may be determined based on an authentication setting by a corporation. For example, the processor 120 interlocks with the manager terminal 300 and the authentication server to perform all authentication (eg, mobile phone authentication) for the administrator and corporate authentication (eg, corporate accreditation certificate) for the corresponding corporation in stages. It can be controlled so as to be possible, and only when all authentication is successful, the simple authentication service can be activated. In this case, in the registered application details, approval step information indicating to which stage authentication has been performed by the administrator may be stored and managed. Also, there may be a plurality of managers according to the setting by the corporation.

In an embodiment, the processor 120 may store and manage the approval details for the registered application details. For example, the processor 120 may include user information (eg, ID, user name, company name, department, rank, etc.) about the administrator who has approved the registered application details, whether or not to approve, the reason for whether to approve, the date of approval, and The application details may be updated to include the approval details including one or more of the approval step information.

In step S330, the receiving unit 110 according to an embodiment may receive an application for a simple payment service for an anonymous card. In an embodiment, the user terminal 200 registers a bearer card in a simple payment service (eg, Samsung Pay) provided by a specific simple payment service provider (eg, Samsung Electronics) through a bearer card service application, or The simple payment service application information may be transmitted to the receiver 110 through the simple payment platform provided by the corresponding simple payment service server (eg, Samsung Pay server).

In an embodiment, the application information for the simple payment service may include one or more of card information including a card number of an anonymous card, CI, and user consent for CI use. In an embodiment, the CI included in the simple payment service application information may be obtained as a result of user authentication (eg, mobile phone authentication) performed in conjunction with a certification authority in the simple payment service application process.

In step S340, the processor 120 according to an embodiment provides the simple payment service for the bearer card to the user information based on the information obtained in the process of activating the simple authentication service and the user information about the user who applied for the simple payment service. It can be registered in conjunction. For example, the processor 120 compares the CI and card information included in the application information of the simple payment service with the CI and card information included in the application details of the simple authentication service for the previously activated corresponding anonymous card. Based on the user information, it can be determined whether to register the bearer card in the simple payment service.

In an embodiment, the processor 120 may determine whether the user is a legitimate user of the anonymous card based on user information about the user who has applied for the simple payment service. In an embodiment, the processor 120 may receive information indicating whether the user identified according to the CI is a legitimate user for the anonymous card from a database or an external server.

For example, the processor 120 may determine whether or not the user is a political party based on the application details of the simple authentication service for the corresponding bearer card from the database based on the card number included in the application information of the simple payment service. there is. For another example, the processor 120 may receive information on whether the user is a party user from an external server in which the above-described function for determining whether the user is a party user is separately implemented, and for another example, CI, card It is also possible to register the application details of the simple payment service including the number and user information, and determine whether or not the user is a party user based on the receipt of the approval of the corporate server (not shown) or the manager terminal 300 for this.

In an embodiment, when the user is a party user for the anonymous card, the processor 120 may register the simple payment service in association with user information. In an embodiment, the processor 120 may perform authentication for CI and card number in response to an application for a simple payment service, and may generate a token number based on a result of authentication for CI and card number. there is. For example, the processor 120 checks the application details of the simple authentication service registered in the database and activated in advance, and checks whether there is an application history that matches the CI and card number included in the application information of the simple payment service. can perform simple authentication, and if authentication is successful, a token number is generated as a payment method corresponding to the card number according to the stored token generation algorithm, It can be registered as a payment method.

Here, the token number represents virtual card information corresponding to the card number, and in one embodiment, may include a unique identification number for identifying the bearer card in a specific simple payment service. For example, when the simple payment service for which registration of a public card is requested is Samsung Pay, the server 100 uses Samsung Pay, which is limited in use so that it can be used for simple payment only when payment is made through a payment method called Samsung Pay. It is possible to generate a token number of , and register it in the Samsung Pay server and the user terminal 200 . Since a financial accident may occur if the card number is exposed, damage can be minimized even in the event of an information leakage accident by issuing a token number that is limitedly used in each pay as a virtual card number that replaces the card number.

In short, the server 100 may receive an application for a simple authentication service for a public card from a user through steps S310 to S320, register the application details, and activate it based on administrator approval, and from the user through steps S330 to S340 You can receive an application to register a public card in one or more specific simple payment pay (eg Samsung Pay, Kakao Pay, etc.) According to the authentication result to authenticate whether the user is a user, token information corresponding to the card number can be generated and registered in the corresponding simple payment pay.

Accordingly, in the subsequent payment process, the user can repeatedly use the simple payment service through a public card previously registered in an individual's pay without a complicated corporate authentication process, and even when registering a public card in various other pay User convenience can be remarkably improved because registration can be done easily through simple authentication that has already been activated without an additional authentication process by a corporation.

In an embodiment, the user information about the user who applied for the simple payment service may include first user information and second user information, and corresponds to the first token number corresponding to the first user information and the second user information The second token number to be used may be different from each other.

For example, according to the result of application and approval of the simple authentication service, there may be a plurality of users allowed for simple authentication for the bearer card, including the first user and the second user, and the simple payment service for the bearer card is not provided. When each application is made in the first user terminal and the second user terminal, the processor 120 provides a first token number and a second token that can be used for simple payment only when payment is made through first user information (eg, ID, terminal identification number, etc.) 2 Only when payment is made through user information (eg, ID, terminal identification number, etc.), the second token number usable for simple payment may be issued with different values.

In an embodiment, the processor 120 may limit the validity period of the token number to a preset first value, and if the remaining validity period of the token number is within the second preset value, a message recommending renewal of the token number It can be transmitted to the user terminal 200 .

In one embodiment, the processor 120 may determine the validity period of the token number based on the registration number of the simple payment service for the bearer card when renewing the token number, for example, a simple payment service registered with a public card As the number of tokens increases (eg, Samsung Pay, Kakao Pay, Naver Pay), each token number can be managed to have a small validity period in inverse proportion to the renewal.

In an embodiment, the processor 120 may determine the validity period of the token number differently based on the type of simple payment service (eg, Samsung Pay, Kakao Pay).

In step S350, the processor 120 according to an embodiment may perform a payment for an anonymous card based on the simple payment service. In an embodiment, the processor 120 may perform a payment for an anonymous card according to a simple payment service based on the token number. For example, when the token number is issued to the user terminal 200 according to the above-described operation and registered in the simple payment service, the processor 120 may store and manage the token number in correspondence with the card number and CI, Whenever a simple payment request is received through the registered easy payment service, payment can be performed using the stored token number.

In an embodiment, the receiving unit 110 may receive a payment request for an anonymous card based on user information, and the processor 120 may determine whether the CI is generated in the user terminal 200, and the CI is When generated in the user terminal 200, additional authentication may be performed, and payment for the anonymous card may be performed based on the result of the additional authentication.

For example, in the case of obtaining CI from the authentication server through self-authentication for a user in conjunction with a certification authority in the process of applying for the simple authentication service, the processor 120 may send a payment request for an anonymous card to the simple payment service. Payment can be performed based on the authentication result according to the first preset method (eg, app simple payment password), and CI authentication information stored in the user terminal 200 or the user terminal 200 in the simple authentication service application process If CI is obtained according to the input information of , payment may be performed based on the authentication result according to the second method (eg, mobile phone authentication) preset for additional authentication when a payment request for an anonymous card is received.

The processor 120 according to an embodiment may determine a user who has paid for the anonymous card based on the token number, and may store usage history information indicating the user who has paid for the anonymous card. For example, when the payment is performed through the token number registered in the simple payment service, the processor 120 detects user information matching the token number from the application details of the simple authentication service registered in the database, the token number, It is possible to update the usage history information for the bearer card by reflecting the user information who made the payment, the date of use, the payment amount, the payment destination, and the like.

In one embodiment, the upper limit of the amount that can be easily paid through the above-described first token number and second token number may be different from each other. For example, when the processor 120 receives administrator approval for the application details of the simple authentication service applied by the first user and the second user, respectively, payment is possible for a preset time through the first user and the second user It is possible to receive each of the manager's limit setting information for the accumulated payment amount or the payment amount that can be paid at one time, and determine whether to approve the payment according to the limit setting information corresponding to the first token number or the second token number when payment is made. can

In an embodiment, the receiver 110 may include a communication module capable of performing wired/wireless communication with one or more terminals or servers. In addition, in one embodiment, the processor 120 may be implemented as a CPU (Central Processing Unit) that can control the overall operation of the server 100, and is electrically connected to the receiver 110 to control the data flow. can

In addition, those of ordinary skill in the art can understand that other general-purpose components in addition to the components shown in FIG. 2 may be further included in the server 100 . According to an embodiment, the server 100 may further include a database for storing data generated throughout the operation, a user interface for receiving a user input, and a display for visualizing output information.

4 is a flowchart illustrating an example of a method in which the server 100 activates a simple authentication service for an anonymous card according to an embodiment, and FIG. 5 is a server 100 according to an embodiment. It is a flow chart for explaining an example of a method of registering a simple payment service for user information in connection with user information, and FIG. 6 is a server 100 according to an embodiment. It is a flowchart for explaining an example of a method of performing payment.

4 to 6 may be understood with reference to all embodiments in which the server 100 disclosed in FIGS. 1 to 3 provides a payment service for an anonymous card.

The server 100 according to an embodiment may include a first server 100a, a second server 100b, and a third server 100c.

In one embodiment, the first server 100a corresponds to a web server that provides a web service for providing a simple authentication service for an anonymous card to a user, for example, the above-described anonymous card service application (eg, Wild Biz channel) to receive an application request for a simple authentication service for an anonymous card from the user terminal 200 , and may receive an approval result for the application details of a registered simple authentication service from the manager terminal 300 .

In one embodiment, the second server 100b corresponds to a TSP (Token Service Provider) server for generating a token number, for example, a simple payment for an anonymous card from the user terminal 200 or a simple payment service server. Receives an application for service, transmits the requested CI and card number to the third server 100c, receives an authentication result from the third server 100c in response to this, and generates a token number based on the authentication result You can register for the simple payment service in connection with user information.

In one embodiment, the third server 100c corresponds to a public server (eg, a HOST server) that performs all of the above-described functions, for example, an application for a simple authentication service received from the first server 100a. Storing and managing the details in the database, activating the simple authentication service for the anonymous card based on the approval information of the simple authentication service received from the first server 100a, and from the second server 100b When an application for simple payment service is received, authentication results are generated by performing authentication on the received CI and card number based on the application details of the activated simple authentication service, and simple payment service for an anonymous card from the user terminal 200 is requested, payment can be made, and usage history information can be stored and managed according to the user who made the payment.

4, in step S401, the first server 100a receives the application for simple authentication service for the anonymous card from the user terminal 200, and in the process of receiving the application for simple authentication service in step S402, CI and Obtaining a card number, and transmitting the application details of the simple authentication service including the user who applied for the simple authentication service in step S403, CI and card number to the third server 100c, in S404 the third server 100c Step It is possible to verify the validity based on the received card number, and to store and manage the application details of the simple authentication service further including the validation result in the database.

For example, as shown in FIG. 8 , the first server 100a provides guide information on the simple authentication service to the user terminal 200 through the anonymous card service application that is easy to access by the user, and provides information on the simple authentication service. Card information including card number, expiration date, password, card unique number, etc. for application and application information for simple authentication service including user consent for CI collection may be received from the user terminal 200 .

In step S405, the first server 100a receives approval of the simple authentication service for the application details of the simple authentication service registered from the manager terminal 200, and in step S406, the CI and card number of the user who applied for the simple authentication service , transmits to the third server 100c the approval details of the simple authentication service, including information on the manager who approved the simple authentication service, whether or not to approve, and the date of approval, and in step S407, the third server 100c transmits the received approval details The simple authentication service may be activated based on the basis, and the application details of the simple authentication service may be updated based on the approval details.

For example, as shown in FIG. 10 , the first server 100a transmits the application details of one or more simple authentication services waiting for the manager's approval to the manager terminal 200 through the anonymous card service application that is easy to access by the user. It can provide and facilitates administrator's approval review by visualizing information on the user's ID, user name, card number, application date, approval status, approval date, cancellation status, cancellation date, validity, etc. of the user who applied for the simple authentication service can support you to

Referring to FIG. 5 , the second server 100b according to an embodiment receives an application for a simple payment service for an anonymous card from the user terminal 200 in step S501, and receives an application for a simple payment service in step S502. In the process of obtaining a CI and card number, the CI and card number obtained in step S503 are transmitted to the third server 100c to request authentication whether the user who applied for the simple payment service is a political party user, and in step S504 3 The server 100c performs authentication on the CI and card number received from the second server 100b based on the CI and card number in the application details registered in the database, and returns the authentication result in step S505 Transmitting to the second server 100b, the second server 100b in step S506 generates a token number as a virtual card number corresponding to the card number based on the received authentication result, and the token generated in step S507 The number is issued to the user terminal 200, and in step S508, the user terminal 200 may register the user information and the token number in association with the simple payment service.

Referring to FIG. 6 , in step S601 , the third server 100c according to an embodiment receives a simple payment request for an anonymous card from the user terminal 200 through a token number registered in the simple payment service, and in step S602 performs payment based on the token number, stores usage history information for the bearer card based on the token number and CI in step S603, and transmits the simple payment result for the bearer card to the user terminal 200 in step S604 can

For convenience, although not shown in FIGS. 5 to 6 , in an embodiment, the server 100 or the user terminal 200 is a simple payment service server (eg, Samsung Pay server) that provides a simple payment service (eg, Samsung Pay). ) to perform the above-mentioned functions.

7 is a flowchart illustrating an example of an operation in which the first server 100a supports a user's application for a simple authentication service according to an embodiment.

As shown in FIG. 7 , the first server 100a according to an embodiment is implemented as a web server and a web channel (eg, Wild Biz) that is easy to access by the user through the anonymous card service application installed in the user terminal 200 . channel) can be provided. Accordingly, when the user terminal 200 logs in to the anonymous card service application as a user account, the first server 100a provides a guide menu, an application menu, an inquiry/cancellation menu, etc. for the simple authentication service to the user terminal ( 200), receives an application for the simple authentication service through the application menu, provides the application details for the simple authentication service related to the user account through the inquiry/cancellation menu, or pre-activated simple authentication based on a user request Interruption of service may be received.

As shown in FIG. 8 , the first server 100a provides a first user input for card information (eg, card number, password, etc.) and credit information (eg, CI information collection) through the application menu of the simple authentication service. ) may receive from the user terminal 200 the application information for the simple authentication service including a second user input indicating whether the user agrees to the user's consent.

In an embodiment, the first server 100a may limit the number of usable users of the simple authentication service for the anonymous card to a preset value (eg, 1 (person)). For example, if the number of users is limited to one, the first server 100a may provide an existing user with a simple authentication service of a public card corresponding to the input card number that is already activated and used by another user. The first message indicating that it is being used by the user and the second message guiding the method of deleting the existing user (eg, deleting the existing user after logging in, deleting the accountant, etc.) are transmitted and output as a pop-up message from the user terminal 200 can make it happen

In an embodiment, when the simple authentication service of the public card corresponding to the input card number is not being used by another user, the first server 100a interworks with an authentication server of a certification authority to authenticate the user (eg, : mobile phone authentication), and when identity authentication is successfully completed, CI is obtained as an authentication result from the authentication server or user terminal 200, and application information including the card number and CI is transmitted to the third server 100c can be transmitted, and accordingly, the third server 100c registers the application details of the simple authentication service in the database as described above to complete the application process for the simple authentication service by the user.

As shown in FIG. 9 , in one embodiment, the first server 100a is an administrator who is authorized to approve and activate the applied simple authentication service as the application process for the simple authentication service by the user is completed. can provide information about

For example, when the manager information of the corresponding corporation stored in the database is read based on the corporation information obtained from the card number, the first server 100a reads manager information (eg, person in charge name, department name, etc.) and After approval, a first guide message indicating that the simple authentication service can be used may be provided and displayed on the user terminal 200 .

For another example, if the first server 100a does not read the manager information of the corresponding corporation stored in the database based on the corporation information obtained from the card number or the manager setting method is set according to each corporation, it indicates that the manager is not designated. A hyperlink for accessing the displayed second guide message and guide information for manager designation may be provided and displayed on the user terminal 200 .

In an embodiment, the first server 100a communicates with a corporation server or a corporation terminal in advance for manager setting by a corporation or manager designation by a user to obtain information on the manager or manager setting method.

As shown in FIG. 10 , in one embodiment, when the application for the simple authentication service is completed, the first server 100a displays the application details of the simple authentication service registered in the database through the inquiry/approval/cancellation menu to the user terminal 200 ) to support the user's inquiry work, and to provide the user terminal 200 with the application details and approval/rejection selection menus of one or more simple authentication services waiting for the administrator's approval after the user has been designated as the administrator and the administrator's approval operation , and by providing the user terminal 200 with application details and cancellation menus of all simple authentication services related to the user or administrator, it is possible to support the operation of the user or administrator to stop the activated simple authentication service.

Meanwhile, the above-described method can be written as a program that can be executed on a computer, and can be implemented in a general-purpose digital computer that operates the program using a computer-readable recording medium. In addition, the structure of the data used in the above-described method may be recorded in a computer-readable recording medium through various means. The computer-readable recording medium includes a storage medium such as a magnetic storage medium (eg, ROM, RAM, USB, floppy disk, hard disk, etc.) and an optically readable medium (eg, CD-ROM, DVD, etc.) do.

A person of ordinary skill in the art related to this embodiment will understand that it may be implemented in a modified form within a range that does not deviate from the essential characteristics of the above description. Therefore, the disclosed methods are to be considered in an illustrative rather than a restrictive sense. The scope of the present invention is indicated in the claims rather than the foregoing description, and all differences within the scope equivalent thereto should be construed as being included in the present invention.

100: server
100a: first server 100b: second server
100c: third server
110: receiver 120: processor
200: user terminal 300: administrator terminal

Claims (21)

A method for a server to provide a payment service for a bearer card, the method comprising:
receiving an application for a simple authentication service for the anonymous card;
activating the simple authentication service based on the CI (Connecting Information) and card number obtained by receiving the application for the simple authentication service;
receiving an application for a simple payment service for the anonymous card;
registering the simple payment service in connection with the user information based on information acquired in the process of activating the simple authentication service and user information about a user who has applied for the simple payment service; and
Method comprising; performing a payment for the anonymous card based on the simple payment service.
The method of claim 1,
The step of activating the simple authentication service is
verifying the validity of the anonymous card based on the CI and the card number; and
Including; registering the application details for the simple authentication service.
The method of claim 1,
The step of registering the simple payment service in connection with the user information is
determining whether the user is a legitimate user for the anonymous card based on the user information; and
When the user is the party user, registering the simple payment service in association with the user information;
4. The method of claim 3,
Determining whether the user is the party user for the anonymous card comprises:
Receiving information from an external server indicating whether the user identified according to the CI is the party user for the anonymous card;
4. The method of claim 3,
Determining whether the user is the party user for the anonymous card comprises:
Obtaining, from a database, information indicating whether the user identified according to the CI is the party user for the anonymous card.
The method of claim 1,
Registering the simple payment service in connection with the user information;
performing authentication on the CI and the card number in response to the simple payment service application; and
Generating a token number based on a result of performing authentication for the CI and the card number; including, a method.
7. The method of claim 6,
The user information includes first user information and second user information,
A first token number corresponding to the first user information and a second token number corresponding to the second user information are different from each other.
7. The method of claim 6,
performing a payment for the bearer card;
A method of performing a payment for the bearer card according to the simple payment service based on the token number.
9. The method of claim 8,
determining a user who has paid for the anonymous card based on the token number; and
Storing usage history information indicating a user who has paid for the anonymous card; further comprising a method.
The method of claim 1,
performing a payment for the bearer card;
receiving a payment request for the anonymous card based on the user information;
determining whether the CI is generated in the user terminal;
performing additional authentication when the CI is generated in the user terminal; and
Comprising; performing a payment for the anonymous card based on a result of the additional authentication.
In the server providing a payment service for the bearer card,
a receiving unit for receiving an application for a simple authentication service for the anonymous card and an application for a simple payment service for the anonymous card; and
Activating the simple authentication service based on the CI (Connecting Information) and card number obtained by receiving the application for the simple authentication service,
Upon receiving the application for the simple payment service, the simple payment service is linked to the user information based on information obtained in the process of activating the simple authentication service and user information about the user who applied for the simple payment service register,
A server comprising; a processor for performing a payment for the anonymous card on the basis of the simple payment service.
12. The method of claim 11,
the processor is
Verifies the validity of the anonymous card based on the CI and the card number;
A server that registers the application details for the simple authentication service.
12. The method of claim 11,
the processor is
determine whether the user is a party user for the anonymous card based on the user information;
When the user is the party user, the server registers the simple payment service in connection with the user information.
14. The method of claim 13,
the processor is
A server for receiving, from an external server, information indicating whether the user identified according to the CI is the party user for the anonymous card.
14. The method of claim 13,
the processor is
A server for obtaining information indicating whether the user identified according to the CI is the party user for the anonymous card from a database.
12. The method of claim 11,
the processor
Perform authentication for the CI and the card number in response to the application for the simple payment service,
A server that generates a token number based on a result of authentication for the CI and the card number.
17. The method of claim 16,
The user information includes first user information and second user information,
A first token number corresponding to the first user information and a second token number corresponding to the second user information are different from each other.
17. The method of claim 16,
the processor is
A server that performs payment for the bearer card according to the simple payment service based on the token number.
19. The method of claim 18,
the processor is
Determining a user who has paid for the anonymous card based on the token number,
A server for storing usage history information indicating a user who has paid for the anonymous card.
12. The method of claim 11,
the processor is
receiving a payment request for the anonymous card based on the user information;
Determining whether the CI is generated in the user terminal,
When the CI is generated in the user terminal, additional authentication is performed,
A server that performs payment for the anonymous card based on a result of performing the additional authentication.
A computer-readable recording medium in which a program for implementing the method of any one of claims 1 to 10 is recorded.

Images