KR20220155790A - Method for card payment self-authentication using small payment amount as authentication number - Google Patents

Abstract

The present invention relates to a method for card payment self-authentication using a small payment amount as an authentication number, which comprises the steps of: (a) receiving, by a main server, payment request information including user card information and user personal information from an online merchant server; (b) generating, by the main server, an authentication number and requesting a small payment of an amount corresponding to the authentication number to a card company server corresponding to the user card information; (c) receiving, by the main server, the small payment amount in the micropayment approval message received by the user terminal from the card company server from the online merchant server; and (d) performing, by the main server, authentication by determining whether the authentication number and the small payment amount match, and requesting cancellation of the small payment to the card company server. The present invention can prevent new phishing scams.

Description

Card payment identity authentication method using the small payment amount as the authentication number {METHOD FOR CARD PAYMENT SELF-AUTHENTICATION USING SMALL PAYMENT AMOUNT AS AUTHENTICATION NUMBER}

The present invention relates to a card payment identity authentication method using a small amount payment amount as an authentication number, and more particularly, to a card payment identity authentication method using a mobile phone number of a card owner registered with a card company and a text message for a small amount payment. it's about

Recently, card company customers can authenticate themselves as the subject of the transaction by methods such as public certificates, biometrics, and mobile phone authentication in order to conduct transactions through cards and accounts issued in an online environment.

In the case of a card or account issued by a credit card company, it is common to open in the user's own name, and when the user is authenticated, payment and remittance through the card or account are possible.

However, in the case of cards and accounts, there is a risk that the transaction subject may be abused by a third party other than the party or agent, and phishing scams such as voice phishing and kakao talk phishing may occur.

Recently, phishing scams such as voice phishing and kakaotalk phishing have been prevalent, and according to the statistics released by the Financial Supervisory Service, the damage caused by phishing scams in 2020 last year was identified as KRW 235.3 billion, which is approximately 25,859 cases. lost.

Of these, fraudulent attempts were counted in the order of institution impersonation type (29.3%), loan impersonation type (18.3%), and transaction impersonation type (15.2%). damage is occurring.

As the criminal methods evolve day by day, the response method must be flexible and broad, so it is necessary to have a way to authenticate that the user or agent is the subject of the transaction carried out in a different way from the existing method. .

The present invention is to solve the problems of the prior art described above, and is an authentication method for reducing card payment accidents caused by phishing scams such as voice phishing and kakaotalk phishing. Its purpose is to provide an authentication method.

The problems to be solved by the present invention are not limited to the problems mentioned above, and other problems not mentioned will be clearly understood from the description below.

As a technical means for achieving the above-described technical problem, a card payment identity authentication method using a small payment amount as an authentication number according to an embodiment of the present invention is (a) the main server receives the user's card information and Receiving payment request information including user's personal information; (b) generating an authentication number by the main server and requesting a micropayment of an amount corresponding to the authentication number to a card company server corresponding to the user's card information; (c) receiving, by the main server, the micropayment amount in the micropayment approval message received by the user terminal from the card company server from the online merchant server; and (d) performing authentication by determining, by the main server, whether the authentication number and the small-amount payment amount match, and requesting cancellation of the small-amount payment to the card company server; It may contain.

In addition, the online merchant server is a server of an Internet page that sells products and services online, and the card company server stores at least one user's personal information, mobile phone number, and account number in a DB, and the micropayment It may be to perform a message for the micropayment to the user terminal.

In addition, the authentication number is an amount for the small amount payment and may be generated as a random number of at least three digits.

In the step (c), the user terminal may receive a micropayment approval message of an amount corresponding to the authentication number as the card company server transmits the micropayment approval message to the user terminal.

In addition, the step (c) may include requesting an authentication number from the online affiliated store server to receive the authentication number by providing a pop-up window or a web page requesting input of the authentication number to the user terminal.

Also, in the step (c), the payment subject appearing in the small-amount payment approval message may be a company that operates the main server.

In addition, in the step (d), the main server requests the card company server to cancel the small-amount payment for the small-amount payment, and determines whether the small-amount payment amount transmitted by the user terminal and the previously generated authentication number match. If they match, it is judged as authentication success, and if the small-amount payment amount transmitted by the user terminal does not match the previously generated authentication number more than a certain number of times or the small-amount payment amount is not transmitted within a preset time, authentication fails. , and the authentication result may be provided to the user terminal.

In addition, (e) after the step (d), when the authentication result is determined to be authentication success, providing a card payment approval request for the goods and services sold by the affiliated store server to the card company server; and (f) the card company server performing a card payment in response to the card payment approval request and providing a payment message for the card payment approval to the user terminal.

In addition, in the main server that performs the card payment identity authentication method using the small amount payment amount as the authentication number, the main server stores a program for performing the card payment identity authentication method using the small amount payment amount as the authentication number. ; and a processor for executing the program, wherein the method includes: (a) receiving, by a main server, payment request information including user card information and user personal information from an online merchant server; (b) generating an authentication number by the main server and requesting a micropayment of an amount corresponding to the authentication number to a card company server corresponding to the user's card information; (c) receiving, by the main server, the micropayment amount in the micropayment approval message received by the user terminal from the card company server from the online merchant server; and (d) performing authentication by determining, by the main server, whether the authentication number and the small-amount payment amount match, and requesting cancellation of the small-amount payment to the card company server; It may contain.

The present invention can prevent various phishing scams by proposing a method for preventing new phishing scams such as voice phishing and kakaotalk phishing, which have recently become popular.

According to the present invention, a random number is generated at the same time as a user performs a credit card payment, and a micropayment approval message corresponding to the random number can be provided to the user terminal.

At this time, since the micropayment approval message is transmitted to the mobile phone number registered in the user's name, the user can quickly notice that an unintended transaction occurs in the card or account registered in the user's name.

In addition, since the authentication process is carried out while the user is making a card payment, the accident of leaking and abusing the user's personal information by impersonating the user's acquaintance by approaching the user's acquaintance like the recently popular voice phishing method can be prevented in advance.

Furthermore, according to a preferred embodiment of the present invention, even if personal information is leaked by impersonating an acquaintance of a user used in various existing phishing scams and the crime proceeds to the actual payment stage, the authentication number is sent as a small-amount payment text message during the payment process. Since it is provided to the user terminal in the form of , damage can be prevented if the user does not directly input the authentication number.

As described above, there is a fraudulent method of changing a KakaoTalk profile that has recently become popular to an acquaintance of the user and making the user pay for a specific site or product.

More specifically, the profile of the child's name on the KakaoTalk messenger is sending text messages by connecting to a computer because the mobile phone is broken, and since there is an urgent need to pay, the scam requires a photo of the credit card, password, and a copy of the ID to pay with the victim's card. It's a trick.

In this new type of scam, victims hand over their credit card photos, passwords, and a copy of their identification card, and receive a flurry of text messages confirming the card's payment, taking damage equal to the amount paid.

According to a preferred embodiment of the present invention, this method also adopts a method in which a user authentication procedure is performed during the payment process, and the payment is performed only when the authentication number is entered, so damage caused by phishing fraud can be prevented in advance. .

1 is a structural diagram of a card payment system using a small amount of payment as an authentication number according to an embodiment of the present invention.
2 is a block diagram showing the internal configuration of a server according to an embodiment of the present invention.
3 is an exemplary view of a micropayment approval message provided to a user terminal according to an embodiment of the present invention.
4 is a flowchart illustrating the operation of a card payment system using a small amount of payment as an authentication number according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail so that those skilled in the art can easily practice the present invention with reference to the accompanying drawings. However, the present invention may be embodied in many different forms and is not limited to the embodiments described herein. And in order to clearly explain the present invention in the drawings, parts irrelevant to the description are omitted, and similar reference numerals are attached to similar parts throughout the specification.

Throughout the specification, when a part is said to be "connected" to another part, this includes not only the case where it is "directly connected" but also the case where it is "electrically connected" with another element interposed therebetween. . In addition, when a certain component is said to "include", this means that it may further include other components without excluding other components unless otherwise stated.

In this specification, a "unit" includes a unit realized by hardware, a unit realized by software, and a unit realized using both. Further, one unit may be realized using two or more hardware, and two or more units may be realized by one hardware. On the other hand, '~ unit' is not limited to software or hardware, and '~ unit' may be configured to be in an addressable storage medium or configured to reproduce one or more processors. Therefore, as an example, '~unit' refers to components such as software components, object-oriented software components, class components, and task components, processes, functions, properties, and procedures. , subroutines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays and variables. Functions provided within components and '~units' may be combined into smaller numbers of components and '~units' or further separated into additional components and '~units'. In addition, components and '~units' may be implemented to play one or more CPUs in a device or a secure multimedia card.

A “user terminal” referred to below may be implemented as a computer or portable terminal capable of accessing a server or other terminals through a network. Here, the computer is, for example, a laptop, desktop, laptop, VR HMD (for example, HTC VIVE, Oculus Rift, GearVR, DayDream, PSVR, etc.) equipped with a web browser, etc. can include Here, the VR HMD is for PC (for example, HTC VIVE, Oculus Rift, FOVE, Deepon, etc.), for mobile (for example, GearVR, DayDream, Stormtrooper, Google Cardboard, etc.), and for console (PSVR) and It includes all independently implemented Stand Alone models (eg, Deepon, PICO, etc.). A portable terminal is, for example, a wireless communication device that ensures portability and mobility, and includes not only a smart phone, tablet PC, and wearable device, but also Bluetooth (BLE, Bluetooth Low Energy), NFC, RFID, and ultrasonic waves (Ultrasonic). , various devices equipped with communication modules such as infrared, Wi-Fi, and LiFi. In addition, "network" refers to a connection structure capable of exchanging information between nodes such as terminals and servers, such as a local area network (LAN), a wide area network (WAN), and the Internet. (WWW: World Wide Web), including wired and wireless data communications networks, telephone networks, and wired and wireless television communications networks. Examples of wireless data communication networks include 3G, 4G, 5G, 3rd Generation Partnership Project (3GPP), Long Term Evolution (LTE), World Interoperability for Microwave Access (WIMAX), Wi-Fi, Bluetooth communication, infrared communication, ultrasonic communication, visible light communication (VLC: Visible Light Communication), LiFi, and the like, but are not limited thereto.

A server according to an embodiment of the present invention may include a memory in which a card payment authentication method program (or application) using a small amount payment amount as an authentication number is stored and a processor that executes the above program. Here, the processor may perform various functions according to the execution of programs stored in memory.

The present invention relates to a card payment user authentication method using a small amount of payment as an authentication number, and provides an online authentication method using a micro payment approval message 410 provided to a mobile phone number of a card owner registered with a card company. is to do

First, with reference to FIG. 1, a credit card payment user authentication method system using a small amount payment amount as an authentication number according to an embodiment of the present invention will be described.

A card payment identity authentication method system using a small amount payment amount as an authentication number according to an embodiment of the present invention includes a main server 100, an online merchant server 200, a card company server 300, and a user terminal 400. include

In the present invention, the main server 100 performs micropayment by receiving card information about a card under the user's name received from the user terminal 400 through the online merchant server 200, thereby generating a micropayment approval message 410 It is a technology that can authenticate the identity of the user who has requested the current payment when an authentication number is provided to the user and the user inputs the authentication number corresponding to the correct micropayment amount.

The online merchant server 200 is an Internet page server that sells goods or services online, and communicates with the card company server 300 through the main server 100 to send and receive information about users and cards under their names. , It may be to transmit and receive user information and an authentication number or micropayment amount from the user terminal 400 .

The card company server 300 can send and receive information about the user and the card in the user's name through the main server 100, and stores personal information, mobile phone number and account number of at least one user in the DB, You can make micropayments.

The user terminal 400 may be any wired or wireless communication device capable of accessing an online environment including a smart phone, tablet PC, desktop PC, etc., and may access the online merchant server 200 to install a specific program, When performing a card payment, an authentication number or a small amount of payment may be entered and transmitted/received based on the above program.

The main server 100 may be connected to and communicate with the online merchant server 200, the card company server 300, and the user terminal 400 by wire or wireless, and may serve as a PG (Payment Gateway) company server. can

In this case, the PG company server is a server of a place of business providing electronic payment service, and refers to a company that acts as an agent for electronic payment service in the electronic commerce market.

Types of electronic payment (internet payment) include credit card, mobile phone, ARS, phone bill, account transfer, etc., and the main server 100 according to an embodiment of the present invention is an integrated electronic payment service that provides the above payment service It may include a server that provides.

Also, referring to FIG. 2 , the main server 100 according to an embodiment of the present invention may include a communication module 110, a memory 120, a processor 130, and a DB 140. .

At this time, the DB 140 stores card information and user information received from the online merchant server 200, and the communication module 110 communicates with the online merchant server 200 and the card company server 300. , The memory 120 may store a program for performing a card payment user authentication method using a small amount payment amount as an authentication number.

In addition, the processor 130 may execute a program for performing a credit card payment user authentication method using the small amount payment amount as an authentication number.

Hereinafter, a process in which the processor 130 executes the above program and performs a credit card payment user authentication method using a small amount payment amount as an authentication number will be described in detail.

First, it is assumed that a user accesses an online merchant server 200 installed with a program for performing a credit card payment user authentication method using a small amount payment amount as an authentication number according to an embodiment of the present invention and purchases a product.

When a user accesses the online affiliated store server 200 through the user terminal 400 , a program related to the main server 100 may be installed in the user terminal 400 .

The above process is for the online merchant server 200 to receive information about the card the user will use for payment from the user terminal 400 and to perform a user authentication process. At this time, the card information is card identification information, information about the user It may include personal information, mobile phone number and account number.

Thereafter, the user determines the product to be purchased and transmits the card payment request to the online merchant server 200 .

At this time, as described above, since the main server 100 according to an embodiment of the present invention may include a PG company server, according to another embodiment of the present invention, the user The process of proceeding with payment may be that the main server 100 provides a payment proxy service between the card company server 300 and the online merchant server 200 .

When the card information of the card that the user has decided to pay is entered, the main server 100 provides a pop-up window or a web page requesting entry of an authentication number to the user terminal 400 based on the program.

The pop-up window or web page provided as above is used to input the amount of the micropayment after the user receives the micropayment approval message.

In addition, the main server 100 generates an authentication number for small amount payment for authentication of the user's identity. In this case, the authentication number may be generated with a random number of at least three digits. Alternatively, it may be an identification code composed of at least one of letters and numbers.

The micropayment amount corresponding to the authentication number generated through the above process is transmitted to the card company server 300 together with the user's card payment request and request for micropayment.

After the card company server 300 actually performs a micropayment with an amount corresponding to the micropayment amount, it transmits a micropayment approval message for the corresponding amount to the user terminal 400 .

The micropayment amount is actually a micropayment amount corresponding to one multiple of the authentication number generated in the main server 100 .

At this time, the card company server 300 identifies the user who has requested the current card payment and small-amount payment based on the user information and card information received from the main server 100 among a plurality of user information stored in the DB of the card company server 300. , The mobile phone number of the identified user may be checked, and a micropayment approval message for the micropayment amount may be transmitted to the user terminal 400 of the identified user.

The user receives the micropayment approval message 410 from the card company server 300 through the user terminal 400 .

In the process described above, the user inputs the micropayment amount through a pop-up window or web page requesting entry of the micropayment amount provided by the main server 100 into the user terminal 400 and transmits the amount to the online affiliated store server 200. have.

That is, when the user inputs the micropayment amount provided from the card company server 300 into the pop-up window or web page of the online merchant server, the online merchant server authenticates that the subject requesting the payment is the person using the user terminal 400 can do.

Next, the main server 100 receives the micropayment amount transmitted by the user terminal 400 from the online affiliated store server 200, and determines whether the micropayment amount transmitted by the user terminal 400 matches the previously generated authentication number. If they match, an authentication result message is transmitted to the user terminal 400 so that the user can grasp the authentication result.

At this time, the main server 100, when the pre-generated authentication number and the received small-amount payment amount match, the authentication result message is initially a message about payment approval for the card payment request and is received by the user currently making the payment It may be a text message including content about authentication of a user whose identity matches the card information and user information.

On the other hand, if the main server 100 does not match the micropayment amount transmitted by the user terminal 400 through the above process and the previously generated authentication number more than a certain number of times or if the micropayment amount is not input for more than a predetermined time, The authentication result message can be a text message including a message about payment refusal for the initial card payment request and information about the identity of the user that does not match the card information received by the user who is currently making the payment and the user information have.

At the same time as the authentication result message is provided to the user terminal 400 as described above, the main server 100 transmits a micropayment cancellation request to the card company server 300 for the micropayment used for authentication.

The card company server 300 may cancel the micropayment in response to the micropayment cancellation request and provide a refund for the micropayment amount used for authentication.

Through this, the user can get back all of the micropayment amount used for authentication after the authentication process is over, even though the user actually made the micropayment with the user's card. Since micropayments are used for authentication to some extent, after micropayments are made and authentication is performed, a cancellation request is sent to the card company server regardless of the authentication result. In addition, in the step of generating the authentication number, the PG company operating the main server may indicate the payment subject in the micropayment approval message sent by the card company server to the user terminal in response to the micropayment request. Since the PG company is performing it for the purpose of authentication, the payment subject is the PG company, not the online merchant.

Thereafter, the card company server 400 may perform a card payment for the first card payment request and provide a card payment approval message for the card payment to the user terminal 400 .

In the following, for example, it is assumed that a user with the name 'Hong Gil-dong' wants to purchase product A at a price of 9,000 won sold by 'ABC Co., Ltd.' with a 'OOOO' card of 'OOOO' card company under his name let me explain

The user accesses the online merchant server 200 of 'ABC Inc.' through the user terminal 400 .

At this time, a program related to the main server 100 is installed in the user terminal 400 (hereinafter, user terminal) of 'Hong Gil-dong' (hereinafter, user), and the online affiliate store server 200 (hereinafter, hereinafter, online affiliate store) of 'ABC Inc.' The server) can receive micropayment request information including information about a card to be used by the user for payment and user information from the user terminal 400 .

The user transmits a card payment request for the product A to the online merchant server 200 through the user terminal 400 .

The online merchant server 200 requests card information and user information about a card to be used for payment from the user terminal 400 .

When the card information and user information are transmitted to the online merchant server 200 by the user terminal 400, the online merchant server 200 transmits the micropayment request information including the provided card information and user information to the main server 100. convey

The main server 100 generates an authentication number for micropayment consisting of 3-digit random numbers. At this time, when the authentication number is generated as '111' by the main server 100, the authentication number generated by the main server 100 A payment request for 111 won, which is a small amount of payment corresponding to '111', and the above-described card information and user information are transmitted to the card company server 400.

Next, the card company server 300 (hereinafter referred to as the card company server) of the 'OOOO' card used for payment by the user uses the user information and card information received from the main server 100 in the DB of the card company server 300 to present the current A user requesting payment may be identified, the mobile phone number of the identified user may be checked, a micropayment for the received 111 won may be performed, and a micropayment approval message may be transmitted to the user terminal 400 of the identified user.

That is, a micropayment approval message for a micropayment amount of 111 won corresponding to the authentication number '111' provided from the main server 100 can be transmitted to the mobile phone number of 'Honggildong'.

Referring to FIG. 3, the user terminal 400 receives, from the card company server 300, a portion of user information, the name of the credit card company, the name of the main server requesting the micropayment, information on the date and time of payment, and the small amount corresponding to the micropayment amount. A payment approval message may be provided in the form of a text message.

At this time, in the entire specification of the present application, the message means all types of messages such as short message, SMS, and message on a messenger application.

At this time, the payment amount of 111 won as an example is actually approved for payment, and may be used to provide the authentication number in the form of a micropayment approval message. After that, since approval is canceled, the micropayment amount is not withdrawn from the user's account.

Thereafter, the user checks a text message about the micropayment through the user terminal 400 and inputs the micropayment amount, that is, '111' to the online affiliated store server 200 .

The online merchant server 200 forwards the authentication number received from the user terminal 400 to the main server 100, and the main server 100 determines whether the received micropayment amount matches the previously generated authentication number .

When it is determined that the micropayment amount received by the main server 100 matches the previously generated authentication number, the main server 100 sends an authentication result message including information about a successful authentication result to the user terminal 400. can transmit

Thereafter, the credit card company server 300 allows the card payment to be made for product A worth 9,000 won, which user 'Hong Gil-dong' wants to purchase.

If it is determined that the received micropayment amount and the previously generated authentication number do not match, the main server 100 may transmit an authentication result message including information about a failed authentication result to the user terminal 400 .

At this time, if the micropayment amount received more than a predetermined number of times and the previously generated authentication number do not match or if the micropayment amount is not input within a predetermined time, the main server 100 also allows the user currently making the payment to receive An authentication result message including card information and user information that does not match the identity of the user may be transmitted.

Hereinafter, with reference to FIG. 4, an operation sequence of a card payment user authentication method using a small amount payment amount as an authentication number according to an embodiment of the present invention will be described.

First, the user may perform a card payment request to the online merchant server 200 through the user terminal 400 according to an embodiment of the present invention (S101).

The online merchant server 200 transmits micropayment request information including card information and user information to the main server 100 (S102).

The main server 100 generates an authentication number for micropayment (S103), and transmits a micropayment request, card information, and user information with a micropayment amount corresponding to the generated authentication number to the card company server 300 (S104). .

The card company server 300 performs a micropayment with the micropayment amount corresponding to the authentication number with the user terminal 400 of the identified user (S105), and sends a micropayment approval message for the micropayment amount to the user terminal 400. Transmit (S106).

The user terminal 400 transmits the micropayment amount corresponding to the received micropayment approval message to the online affiliated store server 200 (S107).

The affiliated store server 200 transfers the received micropayment amount to the main server 100 (S108).

The main server 100 compares the authentication number previously generated in step S103 with the received small-amount payment amount to determine whether they match (S109).

Thereafter, the main server 100 transmits an authentication result message to the user terminal 400 (S110).

At the same time, the main server 100 transmits a micropayment cancellation request to the card company server 300 to the user terminal 400 (S111).

Subsequently, when authentication is successful, the main server 100 transmits a card payment request corresponding to the card payment request requested by the user terminal 400 to the card company server 300 in step S101 (S112).

Thereafter, the card company server 300 performs card payment (S113) and transmits a card payment approval message to the user terminal 400 (S114).

An embodiment of the present invention may be implemented in the form of a recording medium including instructions executable by a computer, such as program modules executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. Also, computer readable media may include all computer storage media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data.

Although the methods and systems of the present invention have been described with reference to specific embodiments, some or all of their components or operations may be implemented using a computer system having a general-purpose hardware architecture.

The above description of the present invention is for illustrative purposes, and those skilled in the art can understand that it can be easily modified into other specific forms without changing the technical spirit or essential features of the present invention. will be. Therefore, the embodiments described above should be understood as illustrative in all respects and not limiting. For example, each component described as a single type may be implemented in a distributed manner, and similarly, components described as distributed may be implemented in a combined form.

The scope of the present invention is indicated by the following claims rather than the detailed description above, and all changes or modifications derived from the meaning and scope of the claims and equivalent concepts should be construed as being included in the scope of the present invention. do.

100: main server 110: communication module
120: memory 130: processor
140: DB 200: online merchant server
300: card company server 400: user terminal
410: micropayment approval message

Claims (9)

In the card payment authentication method using the small amount payment amount as the authentication number,
(a) receiving, by a main server, payment request information including user's card information and user's personal information from an online merchant server;
(b) generating an authentication number by the main server and requesting a micropayment of an amount corresponding to the authentication number to a card company server corresponding to the user's card information;
(c) receiving, by the main server, the micropayment amount in the micropayment approval message received by the user terminal from the card company server from the online merchant server; and
(d) the main server performing authentication by determining whether the authentication number and the small-amount payment amount match, and requesting cancellation of the small-amount payment to the card company server; A card payment identity authentication method using a small amount of payment as an authentication number, which includes a. According to claim 1,
The online merchant server is a server of an Internet page that sells goods and services online,
The card company server stores personal information, mobile phone number, and account number of at least one user in a DB, and performs the micropayment to provide a message for the micropayment to the user terminal. Card payment authentication method using the amount as the authentication number. According to claim 1,
The authentication number is
The card payment identity authentication method using the small amount payment amount as an authentication number, which is generated with at least three digit random numbers as the amount for the small amount payment. According to claim 1,
In step (c),
As the card company server transmits a micropayment approval message to the user terminal, the user terminal receives a micropayment approval message of an amount corresponding to the authentication number, a card payment using the micropayment amount as an authentication number. How to authenticate yourself. According to claim 1,
In step (c),
A card payment identity authentication method using a small payment amount as an authentication number, wherein a pop-up window or a web page requesting entry of an authentication number is provided to the user terminal and a request is made to the online merchant server for an authentication number to receive the authentication number . According to claim 1,
In step (c),
The payment subject appearing in the micropayment approval message is a company operating the main server, and a card payment identity authentication method using the micropayment amount as an authentication number. According to claim 1,
In step (d),
The main server requests the card company server to cancel the small-amount payment for the small-amount payment amount, determines whether the small-amount payment amount transmitted by the user terminal and the previously generated authentication number match, and determines that authentication is successful if they match. If the small-amount payment amount transmitted by the user terminal does not match the pre-generated authentication number more than a certain number of times or the small-amount payment amount is not transmitted within a predetermined time, it is determined that the authentication has failed, and the authentication result is determined as the authentication failure. A card payment identity authentication method using a small payment amount as an authentication number, which is provided to a user terminal. According to claim 1,
(e) after the step (d), if the authentication result is determined to be successful, providing a card payment approval request for the products and services sold by the affiliated store server to the card company server; and
(f) the card company server performing a card payment in response to the card payment approval request, and providing a payment message for the card payment approval to the user terminal; further comprising using the small amount payment amount as an authentication number. One credit card payment authentication method. A main server for performing a card payment identity authentication method using a small amount payment amount as an authentication number, the main server comprising: a memory storing a program for performing a card payment identity authentication method using a small amount payment amount as an authentication number; And a processor for executing the program; includes,
The method,
(a) receiving, by a main server, payment request information including user's card information and user's personal information from an online merchant server;
(b) generating an authentication number by the main server and requesting a micropayment of an amount corresponding to the authentication number to a card company server corresponding to the user's card information;
(c) receiving, by the main server, the micropayment amount in the micropayment approval message received by the user terminal from the card company server from the online merchant server; and
(d) the main server performing authentication by determining whether the authentication number and the small-amount payment amount match, and requesting cancellation of the small-amount payment to the card company server; A main server that performs a card payment identity authentication method using a small amount of payment as an authentication number, including a.

Images