KR20220063107A - Method for servicing mobile payment using qr code and payment server using them - Google Patents

Abstract

The present invention relates to a mobile payment service providing method using a quick response (QR) code. The method comprises: a step (a) in which when QR code generation request information including affiliated store terminal identification information and user's payment cost information is obtained from an affiliated store terminal, a payment server generates QR code information including payment server information and challenge information and transmits the generated QR code information including payment server information and challenge information to the affiliated store terminal such that a user mobile terminal of the user obtains the QR code information through interaction with the affiliated store terminal and transmits the QR code information to a payment provider server corresponding to a payment method of the user mobile terminal in response to the user's confirmation signal for the payment cost information; and a step (b) in which when QR code authentication request information including challenge information is obtained from the payment provider server, the payment server checks whether the challenge information obtained from the payment provider server and the challenge information transmitted to the affiliated store terminal match, and transmits QR code authentication result information obtained by performing QR code authentication to the payment provider server, and when payment approval information according to the QR code authentication result information is obtained from the payment provider server, the payment server performs a payment for the payment cost information. According to the present invention, a user is able to perform mobile payment using a common QR code regardless of payment service providers.

Description

A method of providing a mobile payment service using a QR code and a payment server using the same

The present invention relates to mobile payment, and more particularly, to a method of providing a mobile payment service using a QR code and a payment server using the same.

In general, payment refers to the act of liquidating the bond/debt relationship between transaction parties that occurs according to various economic activities, such as real and financial transactions, through the transfer of monetary value. It is a service that provides the movement of money and money between

Currently, credit or debit cards are widely used as a means of payment and settlement.

These credit cards or check cards support the magnetic stripe reader (MSR) method and the IC card of the EMV protocol method. Value Added Network), the payment is made by transferring it to the credit card company.

Meanwhile, recently, a mobile payment service using a QR code that allows payment to be made by a merchant terminal, for example, a user's mobile terminal recognizing a QR code provided by a POS, transmits payment approval information to a payment service provider server, is gradually expanding is becoming

However, in the mobile payment service using such a conventional QR code, since the QR code is different for each payment provider, the merchant terminal can provide each QR code corresponding to the payment users through a contract with each payment provider. there should be If the user cannot provide the QR code corresponding to the payment provider corresponding to the desired payment method, the mobile payment using the payment method presented by the user cannot be performed.

In addition, since the affiliate store must confirm the payment method that the user wants to use and set a payment operator corresponding to the payment method the user wants through the affiliate store terminal and perform the payment, not only must the user confirm the payment method to each user, It is inconvenient to have to set the affiliated store terminals one by one in response to each of them.

In addition, since the affiliate store must perform the settlement in a non-uniform way for each payment provider, there is an inconvenience in that the settlement must be performed individually for each payment provider.

An object of the present invention is to solve all of the above problems.

Another object of the present invention is to enable a mobile payment to be performed using a common QR code regardless of a payment provider.

In addition, another object of the present invention is to enable a mobile payment to be performed using a common QR code regardless of a user's payment method.

Another object of the present invention is to enable a user to perform mobile payment for various payment methods without a separate setting for an affiliated store terminal.

In addition, another object of the present invention is to enable easy settlement regardless of settlement methods of payment providers when settlement of affiliated stores.

According to an embodiment of the present invention for achieving the above object, in a method of providing a mobile payment service using a QR (Quick Response) code, (a) the affiliated store terminal identification information and the user's payment cost information from the affiliated store terminal When the QR code generation request information including obtaining the QR code information through the interaction of and transmitting the QR code information to a payment service provider server corresponding to the payment method of the user mobile terminal in response to the user's confirmation signal for the payment cost information ; and (b) when QR code authentication request information including the challenge information is obtained from the payment service provider server, the payment server matches the challenge information obtained from the payment service provider server and the challenge information transmitted to the merchant terminal The QR code authentication result information that has performed the QR code authentication is transmitted to the payment service provider server by checking whether the making a payment; A method comprising:

In step (a), the QR code generation request information further includes an affiliated store distributed identifier (DID) corresponding to the affiliated store terminal, and the payment server causes the affiliated store terminal to use the affiliated store private key of the affiliated store terminal. to add the signed merchant signature value to the QR code generation request information and transmit it, or to request the merchant signature value from the merchant terminal in response to the QR code generation request information to cause the merchant terminal to send the merchant signature value to acquire the affiliated store signature value by transmitting the value, and to obtain the affiliated store public key corresponding to the affiliated store DID from the blockchain network using the affiliated store DID, or have a resolver server obtain the affiliated store DID from the blockchain network The affiliate store terminal may be verified by obtaining the affiliate store DID document corresponding to the affiliate store DID, obtaining the affiliate store public key from the affiliate store DID document, and verifying the affiliate store signature value using the affiliate store public key.

The affiliated store signature value may include signing at least one of the affiliated store terminal identification information and the payment cost information using the affiliated store private key, or a signature verification value further included in the QR code generation request information with the affiliated store private key. It may be signed using .

In the step (a), the QR code generation request information further includes an affiliated store distributed identifier (DID) corresponding to the affiliated store terminal, and the payment server causes the affiliated store terminal to obtain an affiliated store VP (verifiable present) - the affiliated store VP includes an affiliated store VC (verifiable credential) and an affiliated store signature value signed by the affiliated store VC with the affiliated store private key to be transmitted by adding to the QR code generation request information, or to the affiliated store in response to the QR code generation request information Obtain the affiliated store VP by requesting the affiliated store VP from the terminal to have the affiliated store terminal transmit the affiliated store VP, (i) using the affiliated store DID to obtain the affiliate store public key corresponding to the affiliated store DID from the blockchain network or by having the resolver server obtain the merchant DID document corresponding to the merchant DID from the block chain network using the merchant DID to obtain the merchant public key from the merchant DID document, and use the merchant public key to check the signature value of the affiliated store, (ii) obtain a public key corresponding to the authentication authority DID from the blockchain network using the authentication authority DID included in the affiliated store VC, or have a resolver server authenticate the authentication Obtain the certificate authority DID document corresponding to the certificate authority DID from the blockchain network using the authority DID to obtain the certificate authority public key from the certificate authority DID document, and use the certificate authority public key to obtain the affiliated store The affiliated store terminal may be verified by checking the certificate authority signature value included in the VC.

In step (a), the QR code information further includes a payment server DID corresponding to the payment server, and the payment server receives the payment server signature value signed using the payment server private key of the payment server. Send in addition to QR code information, or transmit the payment server signature value to the affiliated store terminal in response to the payment server signature value request from the affiliated store terminal so that the affiliated store terminal uses the payment server DID to make the blockchain To obtain a payment server public key corresponding to the payment server DID from the network, or to obtain a payment server DID document corresponding to the payment server DID from the blockchain network using the payment server DID through a resolver server. The payment server may be verified by obtaining the payment server public key from the payment server DID document and verifying the payment server signature value using the payment server public key.

The payment server signature value is one that at least one of the payment server information and the challenge information is signed using the payment server private key, or a signature verification value that is further included in the QR code information is the payment server private key It may be signed using

In step (a), the QR code information further includes a payment server DID corresponding to the payment server, and the payment server includes: a payment server VP - the payment server VP pays a payment server VC and a payment server VC - including the payment server signature value signed using the server private key - is added to the QR code information and transmitted, or the payment server VP to the merchant terminal in response to a transmission request from the merchant terminal to the payment server VP to have the affiliated store terminal (i) obtain the payment server public key corresponding to the payment server DID from the blockchain network using the payment server DID, or by using the payment server DID through a resolver server Obtain a payment server DID document corresponding to the payment server DID from the blockchain network to obtain the payment server public key from the payment server DID document, and use the payment server public key to obtain the payment server signature value (ii) obtain a certificate authority public key corresponding to the certificate authority DID from the blockchain network using the certificate authority DID included in the payment server VC, or have a resolver server use the certificate authority DID to obtain a certification authority DID document corresponding to the certification authority DID from the blockchain network to obtain the certification authority public key from the certification authority DID document, and use the certification authority public key to include in the payment server VC The payment server may be verified by verifying the certified certification authority signature value.

In step (a), the payment server may cause the user mobile terminal to obtain the payment cost information through interaction with the affiliated store terminal so that the user can check the payment cost information.

In addition, according to an embodiment of the present invention, in a method of providing a mobile payment service using a QR (Quick Response) code, (a) a QR including identification information of the affiliated store terminal from the affiliated store terminal and the user's payment cost information When the code generation request information is obtained, the payment server generates QR code information including a challenge signature value signed with the payment server private key, payment server information, and payment server DID, and transmits it to the merchant terminal. A payment operator corresponding to a payment method of the user mobile terminal, allowing the user's mobile terminal of the user to acquire the QR code information through interaction with the affiliated store terminal, and in response to the user's confirmation signal for the payment cost information sending the QR code information to a server; and (b) the payment server transmits the challenge information to the payment service provider server in response to a request for the challenge information from the payment service provider server, thereby causing the payment service provider server to be included in the QR code information. Obtain a payment server public key corresponding to the payment server DID from the block chain network using the payment server DID, or use the payment server DID through a resolver server to obtain the payment server DID from the block chain network Acquire a payment server DID document to obtain the payment server public key from the payment server DID document, check the challenge signature value using the payment server public key to perform QR code authentication, and the payment service provider performing payment for the payment cost information when payment approval information according to the QR code authentication is obtained from the server; A method comprising:

In addition, according to an embodiment of the present invention, there is provided a payment server for providing a mobile payment service using a QR (Quick Response) code, comprising: a memory in which instructions for providing a mobile payment service using the QR code are stored; and a processor that performs an operation for providing the mobile payment service using the QR code according to the instructions stored in the memory. Including, the processor, (I) when the QR code generation request information including the merchant terminal identification information and the user's payment cost information is obtained from the merchant terminal, the QR code information including the payment server information and the challenge information is generated and transmits it to the affiliated store terminal so that the user mobile terminal of the user acquires the QR code information through interaction with the affiliated store terminal, and responds to the user's confirmation signal for the payment cost information. A process for transmitting the QR code information to a payment provider server corresponding to a payment method of a terminal, and (II) when QR code authentication request information including the challenge information is obtained from the payment provider server, from the payment provider server By checking whether the acquired challenge information and the challenge information transmitted to the merchant terminal match, the QR code authentication result information obtained by performing the QR code authentication is transmitted to the payment service provider server, and the QR code is authenticated from the payment service provider server When payment approval information according to the result information is obtained, a payment server that performs a process of performing a payment for the payment cost information is provided.

The QR code generation request information further includes an affiliated store distributed identifier (DID) corresponding to the affiliated store terminal, and the processor allows the affiliated store terminal to obtain the affiliated store signature value signed using the affiliated store private key of the affiliated store terminal. In addition to the QR code generation request information to transmit, or by requesting the affiliated store signature value to the affiliated store terminal in response to the QR code generation request information, the affiliated store terminal transmits the affiliated store signature value to obtain the affiliated store signature value. acquire and use the merchant DID to obtain the merchant public key corresponding to the merchant DID from the blockchain network, or have a resolver server use the merchant DID to obtain the merchant DID document corresponding to the merchant DID from the blockchain network to obtain the affiliated store public key from the affiliated store DID document, and verifying the affiliated store terminal by verifying the affiliated store signature value using the affiliated store public key.

The affiliated store signature value may include signing at least one of the affiliated store terminal identification information and the payment cost information using the affiliated store private key, or a signature verification value further included in the QR code generation request information with the affiliated store private key. It may be signed using .

The QR code generation request information further includes an affiliated store distributed identifier (DID) corresponding to the affiliated store terminal, and the processor causes the affiliated store terminal to obtain an affiliated store VP (verifiable present) - the affiliated store VP is an affiliated store verifiable credential (VC) and a merchant signature value that signed the merchant VC with the merchant private key to be transmitted by adding it to the QR code generation request information, or by requesting the merchant VP to the merchant terminal in response to the QR code generation request information Acquire the affiliated store VP by causing the affiliated store terminal to transmit the affiliated store VP, (i) obtain the affiliated store public key corresponding to the affiliated store DID from the blockchain network using the affiliated store DID, or have a resolver server Obtain the merchant DID document corresponding to the merchant DID from the blockchain network using the merchant DID to obtain the merchant public key from the merchant DID document, and use the merchant public key to verify the merchant signature value, , (ii) using the certificate authority DID included in the affiliated store VC to obtain a certificate authority public key corresponding to the certificate authority DID from the blockchain network, or have a resolver server use the certificate authority DID to obtain the block chain Acquire the certificate authority DID document corresponding to the certificate authority DID from the network to obtain the certificate authority public key from the certificate authority DID document, and use the certificate authority public key to obtain a certificate authority signature value included in the affiliate store VC By confirming the affiliated store terminal can be verified.

The QR code information further includes a payment server DID corresponding to the payment server, and the processor adds a payment server signature value signed using the payment server private key of the payment server to the QR code information to transmit or , by transmitting the payment server signature value to the affiliated store terminal in response to the payment server signature value request from the affiliated store terminal, so that the affiliated store terminal uses the payment server DID to respond to the payment server DID from the blockchain network to obtain a payment server public key, or to obtain a payment server DID document corresponding to the payment server DID from the blockchain network using the payment server DID through a resolver server, and from the payment server DID document to the payment server The payment server may be verified by obtaining a public key and verifying the payment server signature value using the payment server public key.

The payment server signature value is one that at least one of the payment server information and the challenge information is signed using the payment server private key, or a signature verification value that is further included in the QR code information is the payment server private key It may be signed using

The QR code information further includes a payment server DID corresponding to the payment server. - including the payment server signature value is added to the QR code information and transmitted (i) obtain a payment server public key corresponding to the payment server DID from the blockchain network using the payment server DID, or use the payment server DID through a resolver server to obtain the payment server from the blockchain network obtain a payment server DID document corresponding to the DID to obtain the payment server public key from the payment server DID document, and verify the payment server signature value using the payment server public key; (ii) the Obtain a public key corresponding to the certification authority DID from the blockchain network using the certification authority DID included in the payment server VC, or have a resolver server authenticate the certification authority from the blockchain network using the certification authority DID to obtain a certificate authority DID document corresponding to the authority DID to obtain the certificate authority public key from the certificate authority DID document, and to use the certificate authority public key to verify the certificate authority signature value included in the payment server VC By doing so, it is possible to verify the payment server.

The processor may cause the user mobile terminal to obtain the payment cost information through interaction with the affiliated store terminal so that the user can check the payment cost information.

In addition, according to an embodiment of the present invention, there is provided a payment server for providing a mobile payment service using a QR (Quick Response) code, comprising: a memory in which instructions for providing a mobile payment service using the QR code are stored; and a processor that performs an operation for providing the mobile payment service using the QR code according to the instructions stored in the memory. Including, the processor, (I) when the QR code generation request information including the merchant terminal identification information and the user's payment cost information is obtained from the merchant terminal, the challenge signature value signed with the payment server private key, the payment By generating QR code information including server information and payment server DID and transmitting it to the affiliated store terminal, the user mobile terminal of the user acquires the QR code information through interaction with the affiliated store terminal, and the payment A process for transmitting the QR code information to a payment service provider server corresponding to a payment method of the user mobile terminal in response to the user's confirmation signal for cost information, and (II) to the challenge information from the payment service provider server By transmitting the challenge information to the payment service provider server in response to a request for Obtain a server public key or obtain a payment server DID document corresponding to the payment server DID from the blockchain network using the payment server DID through a resolver server, and obtain the payment server public key from the payment server DID document to obtain, and to verify the challenge signature value using the payment server public key to perform QR code authentication, and to obtain payment approval information according to the QR code authentication from the payment service provider server, the payment cost information A payment server is provided that performs a process for performing a payment for a customer.

In addition to this, a computer-readable recording medium for recording a computer program for executing the method of the present invention is further provided.

According to the present invention, the following effects are obtained.

According to the present invention, mobile payment can be performed using a common QR code regardless of payment provider.

According to the present invention, mobile payment can be performed using a common QR code regardless of the user's payment method.

According to the present invention, it is possible to perform mobile payment for various payment methods of the user without separate setting for the affiliated store terminal.

The present invention makes it possible to conveniently perform settlement regardless of settlement methods of payment providers when settlement of affiliate stores.

1 schematically shows a system for providing a mobile payment service using a QR code according to an embodiment of the present invention;
2 schematically illustrates a method of providing a mobile payment service using a QR code according to an embodiment of the present invention;
3 schematically illustrates a method of providing a mobile payment service using a QR code according to another embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS [0012] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS [0010] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS [0010] Reference is made to the accompanying drawings, which show by way of illustration specific embodiments in which the present invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the present invention. It should be understood that the various embodiments of the present invention are different but need not be mutually exclusive. For example, certain shapes, structures, and characteristics described herein with respect to one embodiment may be implemented in other embodiments without departing from the spirit and scope of the invention. In addition, it should be understood that the location or arrangement of individual components within each disclosed embodiment may be changed without departing from the spirit and scope of the present invention. Accordingly, the detailed description set forth below is not intended to be taken in a limiting sense, and the scope of the present invention, if properly described, is limited only by the appended claims, along with all scope equivalents as those claimed. Like reference numerals in the drawings refer to the same or similar functions throughout the various aspects.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings in order to enable those of ordinary skill in the art to easily practice the present invention.

1 schematically shows a system for providing a mobile payment service using a QR code according to an embodiment of the present invention, wherein the payment system includes user mobile terminals 100, affiliated store terminals 200, and payment servers ( 300 ), payment service provider servers 400 , and a blockchain network 500 .

First, the user mobile terminal 100 is a mobile terminal corresponding to a user using a service at an affiliated store, and may be a principal paying a fee corresponding to the service used. In this case, the mobile payment app for performing mobile payment may be installed in the user mobile terminal 100 , and the mobile payment app may correspond to a payment provider corresponding to a payment method for the user to pay a fee. In addition, although FIG. 1 shows that different mobile payment apps corresponding to different payment providers are installed in each of the user mobile terminals 100 , the present invention is not limited thereto. The same can be applied even when a plurality of mobile payment apps are installed. In addition, the user mobile terminal 100 may be a mobile terminal such as a smart phone or a tablet, but the present invention is not limited thereto, and may include any mobile computing device capable of recognizing a QR code.

Next, the affiliated store terminal 200 is a terminal corresponding to the affiliated store that provides a service to the user, and may be a payment request subject that makes a payment request to the user mobile terminal 100 using a QR code for the service provided to the user. there is. At this time, the merchant terminal 200 requests the payment server to generate a QR code in response to the payment cost information input by the merchant, and displays the QR code obtained from the payment server so that the user mobile terminal 100 sends the QR code. can make it recognizable. In addition, the merchant terminal 200 is issued a merchant DID (decentralized identifier) through the block chain network, and the merchant personal identity (PI) matching the issued merchant DID and the merchant DID or the merchant VC that authenticates the merchant PI by the authentication authority (verifiable credentials) can be stored.

Next, the payment server 300 is a subject that provides a mobile payment service, and generates a QR code for mobile payment in response to a QR code generation request from the affiliated store terminal 200, and interacts with the payment service provider server Through this, the result of performing the payment for the user's payment cost information may be transmitted to the affiliated store terminal. At this time, the payment server 300 receives a payment server DID through the block chain network, and the payment server DID and the payment server PI matching the payment server DID or the payment server PI may be stored in the payment server VC certified by the certification authority. .

Also, the payment server 200 may include a memory in which instructions for providing the mobile payment service are stored and a processor that performs an operation for providing the mobile payment service according to the instructions stored in the memory.

In addition, the payment server 300 may include, but is not limited to, a personal computer (PC), a mobile computer, a PDA/EDA, a mobile phone, a smart phone, a tablet, a server, and the like, and a portable game machine having a wired/wireless communication function, It may include any computing device that performs a computing operation, such as a digital camera, personal navigation device, and the like.

Specifically, payment server 300 is typically a computing device (eg, a device that may include computer processors, memory, storage, input and output devices, and other components of existing computing devices; electronic devices such as routers, switches, etc.) A desired system using a combination of communication devices; electronic information storage systems such as network attached storage (NAS) and storage area networks (SANs)) and computer software (ie, instructions that cause the computing device to function in a particular way). performance may be achieved.

The communication unit of such a computing device may transmit/receive a request and a response to/from another computing device that is interlocked. As an example, such a request and a response may be made by the same TCP session, but is not limited thereto, for example, UDP data It may be transmitted and received as a gram.

In addition, the processor of the computing device may include a hardware configuration such as a micro processing unit (MPU) or a central processing unit (CPU), a cache memory, and a data bus. In addition, the operating system may further include a software configuration of an application for performing a specific purpose.

Next, the payment provider server 400 is a subject that performs payment for mobile payment, and authenticates the QR code through interaction with the payment server 300 using the QR code information obtained from the user mobile terminal 100 . The result can be checked, and payment approval for the user can be confirmed through the authentication result for the QR code.

On the other hand, the system providing the mobile payment service may further include a block chain network (500). At this time, the blockchain network 500 shares the distributed ledger by a plurality of blockchain nodes, generates blocks by distributed consensus, and stores the generated blocks in the distributed ledger in the form of a chain. It creates a DID according to the request and can store data corresponding to the DID in the distributed ledger. And, the blockchain network 500 may process data related to DID through a registered identity contract.

And, although FIG. 1 shows three user terminals 100 and payment service provider servers 400, respectively, the number of user terminals 100 and payment service provider servers 400 is not limited to a specific number.

A method of providing a mobile payment service using a QR code according to an embodiment of the present invention through the system configured as described above will be described with reference to FIG. 2 .

First, after providing a service to a user in an affiliated store, in order to charge a fee for the provided service, the affiliated store owner or affiliated store-related worker inputs payment cost information for the cost that the user has to pay in the affiliated store terminal 200 . (S1) You can.

Then, the affiliated store terminal 200 may transmit (S2) information on the QR (quick response) code generation request including the affiliated store terminal identification information and the user's payment cost information to the payment server 300 . In this case, the affiliate store terminal identification information may be unique identification information of the affiliate store terminal 200 .

And, the payment server 300 generates QR code information for mobile payment in response to the QR code generation request information from the affiliated store terminal 200, and transmits the QR code information to the affiliated store terminal 200 (S3). there is.

In this case, the QR code information may include payment server information and challenge information. The payment server information is information indicating that the subject that generated the QR code information is the payment server 300, and may be information set in advance to identify the payment server 300 in the mobile payment system, but the present invention is limited thereto. It is not, and may include various pieces of information related to the payment server 300 . In addition, the challenge information is information used for QR code authentication, and any information that can be used for QR code authentication, such as a nonce generated using a random number function, a timestamp for the time when the QR code information is generated, etc. can be

Then, the merchant terminal 200 generates and displays a QR code including the payment server information and the challenge information using the QR code information obtained from the payment server 300, so that the user can use the QR code through the user mobile terminal 100 Information may be acquired (S4). In contrast, the affiliated store terminal 200 transmits QR code information to the user mobile terminal 100 through short-range wireless communication such as Bluetooth, NFC (Near Field Communication), RFID (Radio Frequency Identification), and a beacon to the user mobile terminal ( 100) to obtain QR code information. That is, the user mobile terminal 100 can be made to acquire QR code information through interaction with the affiliated store terminal.

Thereafter, the user mobile terminal 100 may allow the user to confirm payment cost information through a mobile payment app that the user intends to use for payment. As an example, the mobile payment app of the user mobile terminal 100 may display a “payment authentication” icon so that the user can click the “payment authentication” icon to confirm payment for the cost. At this time, the user mobile terminal ( 100) obtains payment cost information through interaction with the affiliated store terminal 200 so that the user confirms payment information for payment cost information (S5) and authenticates payment for payment cost information (S6). .

And, when the authentication of the payment information by the user, the user mobile terminal 100, that is, the mobile payment app of the user mobile terminal 100 in response to the user's confirmation signal for the payment cost information, the user mobile terminal 100 ) of the payment method, that is, the payment service provider server 400 corresponding to the mobile payment app, may transmit (S7) QR code information including payment server information and challenge information.

In this case, the user's mobile terminal, that is, the mobile payment app, may additionally transmit payment authentication completion information indicating that the user has performed payment authentication for payment costs and payment cost information to the payment service provider server 400 .

Then, the payment service provider server 400 uses the payment server information included in the QR code information to check whether the QR code information obtained from the user mobile terminal 100 is valid. 300), and may transmit the QR code authentication request information to the payment server 300 (S8). In this case, the QR code authentication request information may include challenge information included in the QR code information obtained from the user mobile terminal 100 .

Then, when the payment server 300 obtains QR code authentication request information including the challenge information from the payment service provider server 400, the challenge information obtained from the payment service provider server 400 and the challenge transmitted to the merchant terminal 200 By checking whether the information matches or not, QR code authentication can be performed. That is, whether the payment server 300 matches the challenge information included in the QR code information transmitted to the merchant terminal 200 and the challenge information included in the QR code authentication request information transmitted from the payment service provider server 400 can be checked to perform QR code authentication.

Thereafter, the payment server 300 transmits the QR code authentication result information that confirms whether the challenge information obtained from the payment service provider server 400 and the challenge information transmitted to the merchant terminal 200 match or not to the payment service provider server 400 . It can be transmitted (S9).

Then, the payment provider server 400 determines whether to approve the user's payment cost with reference to the QR code authentication result information transmitted from the payment server 300, and the user mobile terminal 100 according to the QR code authentication result information When it is confirmed that the QR code information obtained from is valid, payment approval information may be transmitted to the payment server 300 (S10).

And, the payment server 300 performs payment for the user's payment cost in response to payment approval information from the payment service provider server 400, and transmits the payment completion information to the affiliated store terminal S200 (S11) by giving, You can enable merchants and users to confirm that the payment has been completed.

Through this, the merchant terminal 200 provides users with a common QR code through interaction with the payment server 300 irrespective of the user's payment method, that is, the type of mobile payment apps used by the users, each of the mobile payment apps to transmit a common QR code to each payment provider server 400 corresponding to each of the mobile payment apps, and each of the payment service provider servers 400 is common through interaction with the payment server 300 You can check the validity of the QR code so that the payment can be made.

Accordingly, the affiliated store terminal 200 provides only a common QR code regardless of the user's payment method, thereby effectively operating mobile payment using the QR code.

On the other hand, the present invention can improve the reliability of the mobile payment system using a QR code by performing mutual verification between the affiliated store terminal 200 and the payment server 300 based on a distributed identifier (DID) based on a blockchain network, , A method of providing a mobile payment payment service through mutual verification using DID will be described with reference to FIG. 3 . Hereinafter, detailed descriptions of parts that can be easily understood from the contents described with reference to FIG. 2 will be omitted.

First, after providing a service to a user in an affiliated store, in order to charge a fee for the provided service, the affiliated store owner or affiliated store-related worker inputs payment cost information for the cost that the user has to pay in the affiliated store terminal 200 . (S31) can be done.

And, the affiliated store terminal 200 is an affiliated store DID, affiliated store terminal identification information. And QR (quick response) code generation request information including payment cost information of the user may be transmitted to the payment server 300 ( S32 ).

Then, the payment server 300 verifies the merchant terminal 200 through the blockchain network 500 using the merchant DID included in the QR code generation request information to determine whether the merchant terminal 200 is a normally registered merchant terminal. can be checked

That is, the payment server 300 causes the affiliated store terminal 200 to transmit the affiliated store signature value signed using the affiliated store private key of the affiliated store terminal 200 by adding it to the QR code generation request information to obtain the affiliated store signature value or , by requesting an affiliated store signature value to the affiliated store terminal 200 in response to the QR code generation request information from the affiliated store terminal 200 so that the affiliated store terminal 200 transmits the affiliated store signature value, the affiliated store signature value can be obtained. . At this time, the affiliated store signature value is one that at least one of the affiliated store terminal identification information and the payment cost information is signed using the affiliated store private key, or the signature verification value further included in the QR code generation request information is signed using the affiliated store private key. may be one, and the signature verification value may include an arbitrary value such as a nonce and a timestamp.

After that, the payment server 300 obtains the affiliate store public key corresponding to the affiliate store DID from the blockchain network 500 using the affiliate store DID (S33, S34), or causes the resolver server to use the affiliate store DID to obtain a blockchain network ( 500) to obtain an affiliated store DID document corresponding to the affiliated store DID, thereby obtaining the affiliated store public key from the affiliated store DID document.

In addition, the payment server 300 may verify the affiliated store terminal 200 by verifying the affiliated store signature value using the affiliated store public key obtained from the blockchain network 500 using the affiliated store DID (S35). In this case, the verification of the affiliated store signature value may be performed by decrypting the affiliated store signature value using the affiliated store public key and confirming whether the decrypted information matches the information used for the signature. As an example, when the affiliated store signature value is one in which at least one of the affiliated store terminal identification information and the payment cost information is signed using the affiliated store private key, the affiliated store terminal identification information received by the information obtained by decrypting the affiliated store signature value using the affiliated store public key and payment cost information, and if the merchant signature value is a signature verification value signed using the merchant private key, the information obtained by decrypting the merchant signature value using the merchant public key is the received signature The merchant signature value can be verified by checking whether it matches the verification value.

Meanwhile, in the above, the affiliated store terminal 200 is verified using the affiliated store signature value. Alternatively, the affiliated store terminal 200 may be verified using an affiliated store verifiable credential (VC) corresponding to the affiliated store DID.

That is, the payment server 300 causes the affiliate store terminal 200 to transmit the affiliate store VP (verifiable present) by adding it to the QR code generation request information, or to the affiliate store terminal 200 in response to the QR code generation request information. By requesting the affiliated store terminal 200 to transmit the affiliated store VP, it is possible to obtain the affiliated store VP. In this case, the affiliated store VP may include an affiliated store VC (verifiable credential) and an affiliated store signature value in which the affiliated store VC is signed with the affiliated store private key. Also, there may be a plurality of affiliate store VCs included in the affiliate store VP.

Thereafter, the payment server 300 obtains the affiliated store public key corresponding to the affiliated store DID from the blockchain network 500 using the affiliated store DID, or causes the resolver server to use the affiliated store DID to obtain the affiliated store DID from the blockchain network 500 By obtaining the affiliate store DID document corresponding to , the affiliate store public key can be obtained from the affiliate store DID document.

Then, the payment server 300 uses the affiliated store public key to confirm the affiliated store signature value, and uses the authentication authority DID included in the affiliated store VC to obtain the authentication authority public key corresponding to the authentication authority DID from the blockchain network 500 or by having the resolver server obtain the certification authority DID document corresponding to the certification authority DID from the blockchain network 500 using the certification authority DID to obtain the certification authority public key from the certification authority DID document, and the certification authority public key The affiliate store terminal can be verified by using the key to check the certificate authority signature value included in the affiliate store VC.

Next, when the verification of the affiliated store terminal 200 is made, the payment server 300 generates QR code information including payment server DID, payment server information, and challenge information, and sends QR code information to the affiliated store terminal 200 can be transmitted (S36).

Then, the affiliated store terminal 200 verifies the payment server 300 through the blockchain network 500 using the payment server DID included in the QR code information to check whether the payment server 300 is a normally registered payment server. can

That is, the affiliated store terminal 200 causes the payment server 300 to transmit the payment server signature value signed using the payment server private key of the payment server 300 to the QR code information to obtain the payment server signature value. Or, by requesting the payment server signature value to the payment server 300 in response to the QR code information from the payment server 300, the payment server 300 transmits the payment server signature value to obtain the payment server signature value. can At this time, the payment server signature value is that at least one of the payment server information and the challenge information is signed using the payment server private key, or the signature verification value further included in the QR code information is signed using the payment server private key can

Thereafter, the affiliated store terminal 200 obtains the payment server public key corresponding to the payment server DID from the block chain network 500 using the payment server DID (S37, S38), or causes the resolver server to use the payment server DID The payment server public key can be obtained from the payment server DID document by obtaining the payment server DID document corresponding to the payment server DID from the blockchain network 500 .

In addition, the affiliated store terminal 200 verifies the payment server 300 by verifying the payment server signature value using the payment server public key obtained from the blockchain network 500 using the payment server DID (S39). . In this case, the verification of the payment server signature value may be performed by decrypting the payment server signature value using the payment server public key and confirming whether the decrypted information matches the information used for the signature. For example, when the payment server signature value is one of the payment server information and the challenge information signed using the payment server private key, the information obtained by decrypting the payment server signature value using the payment server public key is received by the payment server It is checked whether it matches at least one of the information and the challenge information, and if the payment server signature value is a signature verification value signed using the payment server private key, the payment server signature value is decrypted using the payment server public key You can verify the payment server signature value by checking whether it matches the received signature verification value.

Meanwhile, in the above description, the payment server 300 was verified using the payment server signature value. Alternatively, the payment server 300 may be verified using a payment server verifiable credential (VC) corresponding to the payment server DID.

That is, the affiliated store terminal 200 causes the payment server 300 to transmit the payment server VP (verifiable present) by adding it to the QR code information, or by requesting the payment server VP from the payment server 300 to the payment server 300 . The payment server VP may be obtained by causing the user to transmit the payment server VP. In this case, the payment server VP may include a payment server VC (verifiable credential) and a payment server signature value signed by the payment server VC with the payment server private key. Also, there may be a plurality of payment server VCs included in the payment server VP.

Thereafter, the affiliated store terminal 200 obtains the payment server public key corresponding to the payment server DID from the block chain network 500 using the payment server DID, or causes the resolver server to use the payment server DID to obtain the block chain network 500 ) to obtain a payment server DID document corresponding to the payment server DID, so that the payment server public key can be obtained from the payment server DID document.

Then, the affiliated store terminal 200 checks the payment server signature value using the payment server public key, and uses the certification authority DID included in the payment server VC to receive the certification authority corresponding to the certification authority DID from the blockchain network 500 . Acquire the public key, or have the resolver server obtain the certification authority DID document corresponding to the certification authority DID from the blockchain network 500 using the certification authority DID to obtain the certification authority public key from the certification authority DID document, The payment server can be verified by using the certificate authority public key to check the certificate authority signature value included in the payment server VC.

Next, when the verification of the payment server 300 is performed, the affiliated store terminal 200 generates and displays a QR code including payment server information and challenge information using the QR code information obtained from the payment server 300 . By doing so, the user can obtain QR code information through the user mobile terminal 100 (S40). In contrast, the affiliated store terminal 200 transmits QR code information to the user mobile terminal 100 through short-range wireless communication such as Bluetooth, NFC (Near Field Communication), RFID (Radio Frequency Identification), and a beacon to the user mobile terminal ( 100) to obtain QR code information. That is, the user mobile terminal 100 can be made to acquire QR code information through interaction with the affiliated store terminal.

Thereafter, the user mobile terminal 100 may allow the user to confirm payment cost information through a mobile payment app that the user intends to use for payment. As an example, the mobile payment app of the user mobile terminal 100 may display a “payment authentication” icon so that the user can click the “payment authentication” icon to confirm payment for the cost. At this time, the user mobile terminal ( 100) obtains payment cost information through interaction with the affiliated store terminal 200, allows the user to confirm payment information for payment cost information (S41), and to authenticate payment for payment cost information (S42). .

And, when the authentication of the payment information by the user, the user mobile terminal 100, that is, the mobile payment app of the user mobile terminal 100 in response to the user's confirmation signal for the payment cost information, the user mobile terminal 100 ) of the payment method, that is, the payment service provider server 400 corresponding to the mobile payment app, may transmit (S43) QR code information including payment server information and challenge information.

In this case, the user's mobile terminal, that is, the mobile payment app, may additionally transmit payment authentication completion information indicating that the user has performed payment authentication for payment costs and payment cost information to the payment service provider server 400 .

Then, the payment service provider server 400 uses the payment server information included in the QR code information to check whether the QR code information obtained from the user mobile terminal 100 is valid. 300), and may transmit the QR code authentication request information to the payment server 300 (S44). In this case, the QR code authentication request information may include challenge information included in the QR code information obtained from the user mobile terminal 100 .

Then, when the payment server 300 obtains QR code authentication request information including the challenge information from the payment service provider server 400, the challenge information obtained from the payment service provider server 400 and the challenge transmitted to the merchant terminal 200 By checking whether the information matches or not, QR code authentication can be performed. That is, whether the payment server 300 matches the challenge information included in the QR code information transmitted to the merchant terminal 200 and the challenge information included in the QR code authentication request information transmitted from the payment service provider server 400 can be checked to perform QR code authentication.

Thereafter, the payment server 300 transmits the QR code authentication result information that confirms whether the challenge information obtained from the payment service provider server 400 and the challenge information transmitted to the merchant terminal 200 match or not to the payment service provider server 400 . It can be transmitted (S45).

Then, the payment provider server 400 determines whether to approve the user's payment cost with reference to the QR code authentication result information transmitted from the payment server 300, and the user mobile terminal 100 according to the QR code authentication result information When it is confirmed that the QR code information obtained from is valid, payment approval information may be transmitted to the payment server 300 (S46).

And, the payment server 300 performs payment for the user's payment cost in response to payment approval information from the payment service provider server 400, and transmits (S47) payment completion information to the affiliated store terminal (S200), You can enable merchants and users to confirm that the payment has been completed.

Meanwhile, in the above, mutual verification was performed using DID between the affiliate store terminal 200 and the payment server 300 using the block chain network-based DID, but the present invention is not limited thereto. The DID may also be issued to the user mobile terminal 100 and the payment service provider server 400 to perform mutual verification when transmitting and receiving information.

And, an entity that is any one of the user mobile terminal 100, the affiliated store terminal 200, the payment server 300, and the payment service provider server 400 generates an entity DID on the blockchain network 500 to create a blockchain network ( 500), the entity public key, entity virtual asset address, and the like, which are entity public information corresponding to the entity DID, may be registered. In this case, the blockchain network 500 may cause the registered identity contract to perform an operation related to the DID. In addition, the identity contract is a smart contract that performs DID-related operations, and may be configured with operation codes for performing DID-related operations to be operated on the blockchain network 500 .

On the other hand, in the above, in response to the QR code generation request information from the affiliated store terminal 200 for performing the user's payment, the payment server 300 generates QR code information and transmits it to the affiliated store terminal 200, In contrast to this, the payment server 300 generates QR code information in advance and transmits it to the affiliated store terminal 200, so that the affiliated store terminal 200 uses the QR code information acquired and stored in advance to perform the user's payment. Thus, the QR code may be obtained by the user mobile terminal 100 .

In the above, the challenge information is included in the QR code information, but in order to improve security, the challenge signature value signed by the payment server private key may be included in the challenge information.

That is, when the QR code generation request information including the affiliated store terminal identification information and payment cost information is obtained from the affiliated store terminal 200, the payment server 300 signs the challenge information with the payment server private key, the challenge signature value, the payment server By generating QR code information including information and payment server DID and transmitting it to the affiliated store terminal 200, the user mobile terminal 100 obtains QR code information through interaction with the affiliated store terminal 200, In response to the user's confirmation signal for payment cost information, the QR code information may be transmitted to the payment service provider server 400 corresponding to the payment method of the user mobile terminal 100 . In addition, the payer server 300 transmits the challenge information to the payment service provider server 400 in response to a request for challenge information from the payment service provider server 400 to make the payment service provider server 400 QR code information Obtain the payment server public key corresponding to the payment server DID from the blockchain network 500 using the payment server DID included in the It is possible to obtain the payment server DID document corresponding to the DID to obtain the payment server public key from the payment server DID document, and to verify the challenge signature value using the payment server public key to perform QR code authentication. Thereafter, the payment server 300 may perform payment for the payment cost information when payment approval information according to QR code authentication is obtained from the payment service provider server 400 .

In this case, as described with reference to FIG. 3 , a process of mutual verification using the entity DID may be performed.

In addition, the embodiments according to the present invention described above may be implemented in the form of program instructions that can be executed through various computer components and recorded in a computer-readable recording medium. The computer-readable recording medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the computer-readable recording medium may be specially designed and configured for the present invention, or may be known and available to those skilled in the computer software field. Examples of the computer-readable recording medium include hard disks, magnetic media such as floppy disks and magnetic tapes, optical recording media such as CD-ROMs and DVDs, and magneto-optical media such as floppy disks. media), and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules for carrying out the processing according to the present invention, and vice versa.

In the above, the present invention has been described with specific matters such as specific components and limited embodiments and drawings, but these are provided to help a more general understanding of the present invention, and the present invention is not limited to the above embodiments. , various modifications and variations can be devised from these descriptions by those of ordinary skill in the art to which the present invention pertains.

Accordingly, the spirit of the present invention should not be limited to the above-described embodiments, and not only the claims described below, but also all modifications equivalently or equivalently to the claims described below belong to the scope of the spirit of the present invention. will do it

100: user mobile terminal;
200: merchant terminal,
300: payment server,
400: payment operator server;
500: Blockchain Network

Claims (18)

In the method of providing a mobile payment service using a QR (Quick Response) code,
(a) When the QR code generation request information including the merchant terminal identification information and the user's payment cost information is obtained from the merchant terminal, the payment server generates QR code information including the payment server information and the challenge information, and the merchant terminal By sending to, the user mobile terminal of the user acquires the QR code information through interaction with the affiliated store terminal, and in response to the user's confirmation signal for the payment cost information, the payment means of the user mobile terminal transmitting the QR code information to a payment service provider server corresponding to ; and
(b) when the QR code authentication request information including the challenge information is obtained from the payment service provider server, the payment server matches the challenge information obtained from the payment service provider server and the challenge information transmitted to the merchant terminal The QR code authentication result information obtained by verifying the QR code authentication is transmitted to the payment service provider server, and when payment approval information according to the QR code authentication result information is obtained from the payment service provider server, payment for the payment cost information performing a;
How to include. According to claim 1,
In step (a), the QR code generation request information further includes an affiliated store distributed identifier (DID) corresponding to the affiliated store terminal,
The payment server allows the affiliated store terminal to transmit an affiliated store signature value signed using the affiliated store private key of the affiliated store terminal by adding it to the QR code generation request information, or to the affiliated store in response to the QR code generation request information Obtain the affiliated store signature value by requesting the affiliated store signature value from the terminal to have the affiliated store terminal transmit the affiliated store signature value, and use the affiliated store DID to obtain the affiliated store public key corresponding to the affiliated store DID from the blockchain network or by having the resolver server obtain the merchant DID document corresponding to the merchant DID from the block chain network using the merchant DID to obtain the merchant public key from the merchant DID document, and use the merchant public key A method of verifying the affiliated store terminal by verifying the affiliated store signature value. 3. The method of claim 2,
The affiliated store signature value may include signing at least one of the affiliated store terminal identification information and the payment cost information using the affiliated store private key, or a signature verification value further included in the QR code generation request information with the affiliated store private key. How to sign using . According to claim 1,
In step (a), the QR code generation request information further includes an affiliated store distributed identifier (DID) corresponding to the affiliated store terminal,
The payment server causes the affiliated store terminal to generate a QR code generating request for an affiliated store VP (verifiable present) - the affiliated store VP includes an affiliated store VC (verifiable credential) and an affiliated store signature value that signed the affiliated store VC with the affiliated store private key to transmit the information in addition to or by requesting the affiliated store VP to the affiliated store terminal in response to the QR code generation request information to have the affiliated store terminal transmit the affiliated store VP to obtain the affiliated store VP, (i) the Obtain the merchant public key corresponding to the merchant DID from the blockchain network using the merchant DID, or have the resolver server obtain the merchant DID document corresponding to the merchant DID from the blockchain network using the merchant DID Obtain the merchant public key from the merchant DID document, verify the merchant signature value using the merchant public key, and (ii) authenticate the merchant from the blockchain network using the certificate authority DID included in the merchant VC Obtain a certificate authority public key corresponding to the authority DID, or have a resolver server obtain a certificate authority DID document corresponding to the certificate authority DID from the blockchain network using the certificate authority DID from the certificate authority DID document A method of acquiring the certificate authority public key, and verifying the merchant terminal by using the certificate authority public key to verify a certificate authority signature value included in the merchant VC. According to claim 1,
In step (a), the QR code information further includes a payment server DID corresponding to the payment server,
The payment server adds a payment server signature value signed using the payment server private key of the payment server to the QR code information and transmits, or responds to a request for the payment server signature value from the affiliate store terminal, the affiliate store terminal transmits the payment server signature value to to cause the affiliated store terminal to acquire the payment server public key corresponding to the payment server DID from the blockchain network using the payment server DID, or the payment server DID through a resolver server to obtain a payment server DID document corresponding to the payment server DID from the blockchain network using A method for verifying the payment server by verifying a signature value. 6. The method of claim 5,
The payment server signature value is a signature of at least one of the payment server information and the challenge information using the payment server private key, or a signature verification value further included in the QR code information using the payment server private key How to sign it. According to claim 1,
In step (a), the QR code information further includes a payment server DID corresponding to the payment server,
The payment server, the payment server VP - the payment server VP includes the payment server signature value that signed the payment server VC and the payment server VC using the payment server private key - to the QR code information, or In response to a transmission request for the payment server VP from the affiliated store terminal, the payment server VP is transmitted to the affiliated store terminal so that the affiliated store terminal (i) uses the payment server DID to send the payment server from the blockchain network Obtain a payment server public key corresponding to the DID, or obtain a payment server DID document corresponding to the payment server DID from the blockchain network using the payment server DID through a resolver server, and from the payment server DID document obtain the payment server public key, use the payment server public key to verify the payment server signature value, and (ii) use the certificate authority DID included in the payment server VC to obtain the payment server public key from the blockchain network. Acquire a certification authority public key corresponding to the certification authority DID, or have a resolver server obtain a certification authority DID document corresponding to the certification authority DID from the blockchain network using the certification authority DID to obtain the certification authority DID document A method of verifying the payment server by obtaining the certificate authority public key from the certificate authority public key and verifying the certificate authority signature value included in the payment server VC using the certificate authority public key. According to claim 1,
In step (a),
The payment server allows the user mobile terminal to obtain the payment cost information through an interaction with the affiliated store terminal so that the user can check the payment cost information. In the method of providing a mobile payment service using a QR (Quick Response) code,
(a) When the QR code generation request information including the merchant terminal identification information and the user's payment cost information is obtained from the merchant terminal, the payment server signs the challenge information with the payment server private key, the challenge signature value, the payment server information, and By generating QR code information including payment server DID and sending it to the affiliated store terminal, the user mobile terminal of the user acquires the QR code information through interaction with the affiliated store terminal, and the payment cost information transmitting the QR code information to a payment service provider server corresponding to a payment method of the user mobile terminal in response to the user's confirmation signal; and
(b) the payment server transmits the challenge information to the payment service provider server in response to the request for the challenge information from the payment service provider server, thereby causing the payment service provider server to make the payment included in the QR code information Obtain a payment server public key corresponding to the payment server DID from the blockchain network using a server DID, or use the payment server DID through a resolver server to obtain a payment corresponding to the payment server DID from the blockchain network Obtain a server DID document to obtain the payment server public key from the payment server DID document, check the challenge signature value using the payment server public key to perform QR code authentication, and the payment service provider server performing payment for the payment cost information when payment approval information according to the QR code authentication is obtained from;
How to include. In the payment server that provides a mobile payment service using a QR (Quick Response) code,
a memory in which instructions for providing a mobile payment service using a QR code are stored; and
a processor that performs an operation for providing the mobile payment service using the QR code according to the instructions stored in the memory;
includes,
The processor, (I) when the QR code generation request information including the merchant terminal identification information and the user's payment cost information is obtained from the merchant terminal, generates QR code information including payment server information and challenge information, and the merchant terminal By sending to, the user mobile terminal of the user acquires the QR code information through interaction with the affiliated store terminal, and in response to the user's confirmation signal for the payment cost information, the payment means of the user mobile terminal A process for transmitting the QR code information to a payment service provider server corresponding to, and (II) when QR code authentication request information including the challenge information is obtained from the payment service provider server, the challenge information obtained from the payment service provider server and the challenge information transmitted to the affiliated store terminal matches whether the QR code authentication result information for performing the QR code authentication is transmitted to the payment service provider server, and according to the QR code authentication result information from the payment service provider server When payment approval information is obtained, a payment server that performs a process of performing a payment for the payment cost information. 11. The method of claim 10,
The QR code generation request information further includes an affiliated store distributed identifier (DID) corresponding to the affiliated store terminal,
The processor allows the affiliated store terminal to transmit the affiliated store signature value signed using the affiliated store private key of the affiliated store terminal by adding it to the QR code generation request information, or to the affiliated store terminal in response to the QR code generation request information to request the affiliated store signature value to have the affiliated store terminal transmit the affiliated store signature value to obtain the affiliated store signature value, and to use the affiliated store DID to obtain the affiliated store public key corresponding to the affiliated store DID from the blockchain network Alternatively, the resolver server obtains the affiliate store DID document corresponding to the affiliate store DID from the blockchain network using the affiliate store DID to obtain the affiliate store public key from the affiliate store DID document, and uses the affiliate store public key A payment server that verifies the affiliated store terminal by verifying the affiliated store signature value. 12. The method of claim 11,
The affiliated store signature value may include signing at least one of the affiliated store terminal identification information and the payment cost information using the affiliated store private key, or a signature verification value further included in the QR code generation request information with the affiliated store private key. A payment server that is signed using . 11. The method of claim 10,
The QR code generation request information further includes an affiliated store distributed identifier (DID) corresponding to the affiliated store terminal,
The processor allows the affiliated store terminal to generate an affiliated store VP (verifiable present) - the affiliated store VP includes an affiliated store VC (verifiable credential) and an affiliated store signature value that signed the affiliated store VC with the affiliated store private key - the QR code generation request information to transmit in addition to, or by requesting the affiliated store VP to the affiliated store terminal in response to the QR code generation request information to have the affiliated store terminal transmit the affiliated store VP to obtain the affiliated store VP, (i) the affiliated store VP Obtain the merchant public key corresponding to the merchant DID from the blockchain network using the DID, or have a resolver server obtain the merchant DID document corresponding to the merchant DID from the blockchain network using the merchant DID. Obtain the merchant public key from the merchant DID document, verify the merchant signature value using the merchant public key, and (ii) use the certificate authority DID included in the merchant VC to obtain the certificate authority from the blockchain network Obtain a certificate authority public key corresponding to the DID, or have a resolver server obtain a certificate authority DID document corresponding to the certificate authority DID from the blockchain network using the certificate authority DID, and from the certificate authority DID document A payment server that obtains a certificate authority public key, and verifies the merchant terminal by using the certificate authority public key to verify a certificate authority signature value included in the merchant VC. 11. The method of claim 10,
The QR code information further includes a payment server DID corresponding to the payment server,
The processor adds a payment server signature value signed using the payment server private key of the payment server to the QR code information and transmits, or responds to a request for the payment server signature value from the affiliate store terminal to the affiliate store terminal By transmitting the payment server signature value, the merchant terminal uses the payment server DID to obtain the payment server public key corresponding to the payment server DID from the blockchain network, or the payment server DID through a resolver server to obtain a payment server DID document corresponding to the payment server DID from the blockchain network using the A payment server for verifying the payment server by having to verify a value. 15. The method of claim 14,
The payment server signature value is one that at least one of the payment server information and the challenge information is signed using the payment server private key, or a signature verification value that is further included in the QR code information is the payment server private key A payment server that was signed using 11. The method of claim 10,
The QR code information further includes a payment server DID corresponding to the payment server,
The processor adds a payment server VP - the payment server VP including a payment server signature value that signed the payment server VC and the payment server VC using a payment server private key - to the QR code information and transmits it, or In response to a transmission request for the payment server VP from the affiliated store terminal, the payment server VP is transmitted to the affiliated store terminal so that the affiliated store terminal (i) uses the payment server DID to send the payment server DID from the blockchain network obtain a payment server public key corresponding to obtain a payment server public key, use the payment server public key to verify the payment server signature value, and (ii) use the certificate authority DID included in the payment server VC to authenticate the blockchain network Obtain a certificate authority public key corresponding to the authority DID, or have a resolver server obtain a certificate authority DID document corresponding to the certificate authority DID from the blockchain network using the certificate authority DID from the certificate authority DID document a payment server to obtain the certification authority public key, and to verify the payment server by verifying a certification authority signature value included in the payment server VC using the certification authority public key. 11. The method of claim 10,
The processor is configured to cause the user mobile terminal to obtain the payment cost information through interaction with the affiliated store terminal so that the user can check the payment cost information. In the payment server that provides a mobile payment service using a QR (Quick Response) code,
a memory in which instructions for providing a mobile payment service using a QR code are stored; and
a processor that performs an operation for providing the mobile payment service using the QR code according to the instructions stored in the memory;
includes,
The processor, (I) when the QR code generation request information including the affiliated store terminal identification information and the user's payment cost information is obtained from the affiliated store terminal, the challenge signature value signed with the payment server private key, the payment server information, and By generating QR code information including payment server DID and sending it to the affiliated store terminal, the user mobile terminal of the user acquires the QR code information through interaction with the affiliated store terminal, and the payment cost information A process of transmitting the QR code information to a payment provider server corresponding to a payment method of the user mobile terminal in response to the user's confirmation signal, and (II) responding to a request for the challenge information from the payment provider server and transmits the challenge information to the payment service provider server so that the payment service provider server uses the payment server DID included in the QR code information to obtain a payment server public key corresponding to the payment server DID from the blockchain network to obtain the payment server DID document corresponding to the payment server DID from the blockchain network using the payment server DID through a resolver server to obtain the payment server public key from the payment server DID document, , check the challenge signature value using the payment server public key to perform QR code authentication, and when payment approval information according to the QR code authentication is obtained from the payment service provider server, payment for the payment cost information is performed A payment server that performs the process.

Images