WO2017222169A1

WO2017222169A1 - Method for approving payment made using smart card, card company server executing same, and smart card

Info

Publication number: WO2017222169A1
Application number: PCT/KR2017/004904
Authority: WO
Inventors: 김성원; 이지호; 한강
Original assignee: 비씨카드(주)
Priority date: 2016-06-20
Filing date: 2017-05-11
Publication date: 2017-12-28
Also published as: KR101872279B1; KR101857073B1; KR101756598B1; KR20170142831A; WO2017222178A1; KR101756594B1; KR101872278B1; WO2017222175A1; WO2017222177A1; KR20170142821A; WO2017222170A1; KR101852016B1; KR101766597B1; KR20170142829A; KR20170142817A; KR20170142825A; KR20170142818A; KR101896455B1; KR101910915B1; KR101760622B1

Abstract

According to one embodiment of the present invention, a method for a card company server approving a payment made using a smart card is provided, the method for approving a payment made using a smart card comprising the steps of: (a) when a payment approval request is received from a smart card, checking information on the number of payment attempts made using the smart card during a predetermined time period, or information on the time at which the last payment attempt was made; (b) putting a hold on the payment approval request if it is verified that the number of payment attempts made during the predetermined time period exceeds a preset, predetermined number of payment attempts, or if it is verified that the difference between the time at which the last payment attempt was made and the time at which the payment approval request was received exceeds a preset, predetermined time interval; and (c) processing the payment approval request if user authentication for the smart card is successful.

Description

Payment authorization method using smart card, card company server and smart card performing the same

The present invention relates to a payment approval method using a smart card, a card company server and a smart card for performing the same. If the attempt condition corresponds to a predetermined condition, the user authentication is performed to allow the payment to be approved according to the result of the user authentication. The present invention relates to an authorization method, a card company server for performing the same, and a smart card.

Recently, as consumers benefit from various payment services as well as payment methods, the rate of use of payment cards or membership cards has increased rapidly.

However, the popular card that receives the payment authorization request has no choice but to perform one benefit or payment for each card company or card type, so the user must carry a plurality of cards owned by the consumer and use the card as needed. Therefore, the inconvenience of having a card for payment or point accumulation from the user's point of view.

In addition, since a card that is generally used to receive a payment approval request does not have a separate security function, payment is performed or points are earned simply by proximity, contact, insertion, or stripe processing to a payment terminal. Since there is a problem of card theft, a weak security problem is emerging.

Therefore, when a user uses a payment card, there is an increasing demand for a system for ensuring the convenience of holding a card that enables the use of a plurality of cards with only one card and the security of the use of the card. In order to solve the above-mentioned problems, an urgent situation is urgent.

The present invention is to solve the above-mentioned problems of the prior art, by checking the number of payment attempt information or the final payment attempt time information using a smart card for a certain time, when the payment attempt conditions correspond to a predetermined specific condition, the user By performing authentication, the payment can be approved according to the result of user authentication, thereby providing a payment approval method using a smart card to prevent unauthorized payment service using a smart card of another person, a card company server and a smart card performing the same. It aims to do it.

The objects of the present invention are not limited to the above-mentioned objects, and other objects that are not mentioned will be clearly understood from the following description.

According to an embodiment of the present invention for achieving the above object, in the card company server, a method for approving payment using a smart card, (a) when a payment approval request is received from a smart card, for a predetermined time Confirming the payment attempt count information or the final payment attempt time information; (b) it is confirmed that the number of payment attempts during the predetermined time exceeds a predetermined predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time when the payment approval request is received exceeds a predetermined time. If it is determined that the payment is authorized, withholding the payment approval request; And (c) if the user authentication for the smart card is made, comprising the step of processing the payment approval request, a payment approval method using a smart card is provided.

In the step (c), confirming the user authentication information received from the user terminal, and if it is determined that the received user authentication information matches the pre-stored user authentication information, approving the payment approval request received from the smart card. It may include.

The user terminal may be linked with the smart card to enable short-range wireless communication.

In the step (c), if the user authentication information received from the user terminal is checked, and the received user authentication information is confirmed to match the pre-stored user authentication information, the number of payment attempts using the smart card for the predetermined time period Alternatively, the method may include deleting final payment attempt time information.

In the step (b), it is confirmed that the number of payment attempts during the predetermined time does not exceed a predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time at which the payment approval request is received is preset. If it is confirmed that the predetermined time does not exceed, it may include the step of approving the payment approval request without holding.

In the step (c), confirming the user authentication information received from the user terminal, and if it is determined that the received user authentication information does not match with the previously stored user authentication information, approving the payment authorization request received from the smart card. Rejecting.

On the other hand, according to another embodiment of the present invention, a smart card, a method for supporting a payment using a smart card, the method comprising: (a) obtaining a payment request for a predetermined goods or services; And (b) transmitting a payment approval request corresponding to the payment request to a card company server to check the number of payment attempt information or the final payment attempt time information using a smart card for a predetermined time, or to support the card company server to confirm. It may be determined that the number of payment attempts during the predetermined time exceeds a predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time when the payment approval request is received is a predetermined time. If it is confirmed that the excess, the obtained payment authorization request is suspended, the smart card, if the user authentication for the smart card is made, the smart card to receive the processing result for the payment authorization request from the card company server Provided is a payment approval support method.

On the other hand, according to another embodiment of the present invention, when the payment approval request is received from the smart card, the payment attempt information check unit for confirming the payment attempt count information or the final payment attempt time information using the smart card for a predetermined time; Confirm that the number of payment attempts during the predetermined time exceeds a predetermined predetermined number of payment attempts, or that the difference between the time of the last payment attempt and the time at which the payment approval request is received exceeds the predetermined time. A payment approval request control unit to hold the payment approval request; And when the user authentication for the smart card is made, a card company server including a payment authorization request processing unit for processing the payment authorization request is provided.

The payment approval request processing unit may check the user authentication information received from the user terminal, and if it is determined that the received user authentication information matches the pre-stored user authentication information, the payment approval request received from the smart card may be approved. have.

The payment approval request processing unit checks the user authentication information received from the user terminal, and if it is determined that the received user authentication information matches the pre-stored user authentication information, the number of payment attempts using the smart card for the predetermined time. Alternatively, the last payment attempt time information may be deleted.

The payment approval request control unit may determine that the number of payment attempts during the predetermined time does not exceed a predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time at which the payment approval request is received is preset. If it is confirmed that the predetermined time does not exceed, the payment approval request can be approved without holding.

The payment approval request processing unit checks the user authentication information received from the user terminal, and if it is determined that the received user authentication information does not match with the previously stored user authentication information, approves the payment approval request received from the smart card. You can refuse.

On the other hand, according to another embodiment of the present invention, a processor; A payment request obtaining unit obtaining a payment request for predetermined goods or services; And a communication unit which transmits a payment approval request corresponding to the payment request to a card company server, confirms the number of payment attempt information or the final payment attempt time information using a smart card for a predetermined time, or supports the card company server to verify the payment. The number of payment attempts during the predetermined time period is determined to exceed a predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time at which the payment approval request is received exceeds the predetermined time period. If it is confirmed, the obtained payment authorization request is suspended, and when the user authentication for the smart card is made, a smart card is provided which receives a processing result of the payment authorization request from the card company server.

According to one embodiment of the present invention, since the payment authorization request information using the smart card is confirmed, and a user authentication procedure is required as necessary, there is an advantage that security against fraudulent payment is secured when using the smart card payment service. .

In addition, according to an embodiment of the present invention, since the user authentication procedure is performed according to a pre-set payment authentication service provision condition, only the smart card owner can use the smart card payment service, so that a non-owner smart card Through this, there is an effect that can prevent the problem of smart card fraud using a payment service.

In addition, according to an embodiment of the present invention, when the user authentication is completed, since the received payment attempt information and the final payment attempt time information for a predetermined time are deleted, the payment attempt proceeds after the user authentication is completed. It is possible to prevent the error of checking the number of payment attempt information or the confirmation of the last payment attempt time information that may occur due to the cumulative record of the completed number of payment attempts or time information.

The effects of the present invention are not limited to the above-described effects, but should be understood to include all the effects deduced from the configuration of the invention described in the detailed description or claims of the present invention.

1 is a view schematically showing the configuration of a payment approval system using a smart card according to an embodiment of the present invention.

Figure 2 is a block diagram showing the configuration of a smart card and card company server according to an embodiment of the present invention.

3A and 3B are flowcharts illustrating a process of approving a payment using a smart card according to an embodiment of the present invention.

Hereinafter, with reference to the accompanying drawings will be described the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is "connected" to another part, it includes not only "directly connected" but also "indirectly connected" with another member in between. . In addition, when a part is said to "include" a certain component, this means that it may further include other components, without excluding the other components unless otherwise stated.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Referring to FIG. 1, a payment approval system using a smart card according to an embodiment of the present invention includes a smart card 100, a card company server 200, and a user terminal 300.

First, not only the smart card 100 and the card company server 200 but also the card company server 200 and the user terminal 300 may be connected to each other by a communication network, where the communication network may select its communication mode such as wired and wireless. It can be configured without. Local area network (LAN), metropolitan area network (MAN: Metropolitan Area Network), it may be configured with a variety of communication networks such as wide area network (WAN).

In addition, the smart card 100 and the user terminal 300 may be interworked with each other through short-range wireless communication such as Bluetooth and Near Field Communication (NFC), and may mutually transmit and receive information through short-range wireless communication. .

The smart card 100 refers to a device including one or more card information in an integrated circuit (IC) chip in one card. In other words, when any one of the one or more card information stored by the user is selected, a device for allowing payment or point accumulation for the selected card can be performed. The smart card 100 includes a short range wireless communication module as well as a display unit and one or more control means, so that the smart card 100 can interwork with the mobile terminal and transmit and receive information.

The smart card 100 may be provided in the form of a card plate, and may be provided with a display unit that may externally display service status information, stored card information, and the like, which is stored in the smart card 100. It may be provided with one or more control means for selecting information.

The smart card 100 may be recognized by the user at the affiliated store terminal and the payment may be attempted, or the smart card 100 may be attempted by the control button input by the user.

The smart card 100 may obtain a payment request for a predetermined goods or service.

The smart card 100 may transmit a payment approval request corresponding to the payment request to the card company server 200 when a payment approval request for a predetermined goods or service is obtained, that is, a payment is attempted by the user.

After the smart card 100 transmits the payment approval request to the card company server 200, the smart card 100 checks the payment attempt count information or the final payment attempt time information using the smart card 100 for a predetermined time, or the card company server 200. Can help you verify.

The smart card 100 determines that the number of payment attempts for a predetermined time exceeds the predetermined number of payment attempts in the card company server 200, or the difference between the time of the last payment attempt and the time at which the payment approval request is received is previously determined. If it is determined that the predetermined time is exceeded, the obtained payment approval request may be suspended.

When the user authentication for the smart card is made, the smart card 100 may receive the payment approval result requested from the card company server 200, and display the payment approval result through the provided display unit.

The card company server 200 may receive a payment approval request from the smart card 100. The payment approval request may include information on the number of payment attempts using the smart card and the final payment attempt time information for a predetermined time.

The card company server 200 may check whether the information on the number of payment attempts received for a predetermined time exceeds a predetermined number of payment attempts.

When the card company server 200 determines that the received payment attempt information for a predetermined time exceeds a predetermined predetermined payment attempt number, the card company server 200 suspends the received payment approval request and sends the user authentication information to the user terminal 300. An input request can be sent.

According to an embodiment of the present invention, when the card company server 200 determines that the received payment attempt information for a predetermined time does not exceed a predetermined predetermined number of payment attempts, the card company server 200 does not hold the received payment approval request. Without the request, the payment can be accepted.

The card company server 200 may check whether a difference between the received final payment attempt time and the payment approval request time is exceeded a predetermined time.

If the card company server 200 determines that the difference between the received final payment attempt time and the payment approval request time is exceeded, the user terminal 300 suspends the received payment approval request. User authentication information input request can be sent to the.

According to an embodiment of the present invention, the card company server 200, when it is confirmed that the difference between the time of the last payment attempt received and the time when the payment approval request is received exceeds a predetermined time, the received payment approval request It is possible to approve the request received payment without having to withhold.

When the card company server 200 receives the user authentication information requested from the user terminal 300, the card company server 200 may check the received user authentication information.

If the card company server 200 confirms that the received user authentication information matches any one of the user authentication information registered in advance in the database (not shown) in the card company server 200, the payment request received from the smart card 100 Can be approved.

According to an embodiment of the present invention, the card company server 200 receives the user authentication information, and the card company server 200 receives the user authentication information. The user authentication information is registered in advance in a database (not shown) in the card company server 200. If it is confirmed that does not match any of the information, the payment request received from the smart card 100 can be rejected.

The card company server 200 may delete the payment attempt count information and the final payment attempt time information using the smart card 100 for a predetermined time when the user authentication through the user terminal 300 is completed.

The user terminal 300 includes all kinds of handheld based wireless communication devices equipped with a touch screen panel such as a mobile phone, a smart phone, a personal digital assistant (PDA), a portable multimedia player (PMP), a tablet PC, and the like. In addition, it can also include devices with the foundation to install and run applications, such as desktop PCs, tablet PCs, laptop PCs, and IPTV with set-top boxes.

The user terminal 300 may install an application that provides a smart card payment authentication service and store it in a memory. For example, the user terminal 300 may download and install a smart card payment authentication service providing application after accessing an app store server (not shown) in which various applications are uploaded. The smart card payment authentication service providing application may provide various services related to the smart card payment authentication service, such as inputting user authentication information and interworking with the smart card 100.

The user terminal 300 may receive a user authentication information input request from the card company server 200.

When the user terminal 300 receives the user authentication information input request from the card company server 200, the user terminal 300 may receive the user authentication information by the user and transmit the user authentication information to the card company server 200.

2 is a block diagram showing the configuration of the smart card 100 and the card company server 200 according to an embodiment of the present invention.

As shown in (a) of FIG. 2, the smart card 100 according to an embodiment of the present invention includes a processor 110, a payment request obtaining unit 120, and a communication unit 130.

The processor 110 checks or confirms the payment attempt count information or the final payment attempt time information using the smart card 100 for a predetermined time, supports the payment approval request hold, and receives the processing result for the payment approval request. You can make sure that all the steps performed within) are processed.

The payment request obtaining unit 120 may obtain a payment request for a predetermined goods or service by the user.

The communication unit 130 may transmit a payment approval request obtained to the card company server 200 when a payment approval request for a predetermined product or service is obtained by the user.

The communicator 130 may transmit the payment approval request obtained to the card company server 200 and check the payment attempt count information or the final payment attempt time information using the smart card 100 for a predetermined time. In other words, the communicator 130 automatically checks the number of payment attempt information or the final payment attempt time information using the smart card 100 for a predetermined time accumulated in a separate storage unit (not shown) in the smart card 100. Can be.

According to an embodiment of the present invention, the communication unit 130 may support the card company server 200 to check the payment attempt count information or the final payment attempt time information using the smart card 100 for a predetermined time. In detail, the communication unit 130 transmits the payment approval request information or the final payment attempt time information for a predetermined time when the payment approval request is transmitted to the card company server 200 whenever the payment approval request is obtained. The payment attempt number information or the final payment attempt time information using the reference numeral 100 may be confirmed.

As shown in Figure 2 (b), the card company server 200 according to an embodiment of the present invention, the payment attempt information check unit 210, payment approval request control unit 220 and payment approval request processing unit 230 It includes.

The payment attempt information verification unit 210 may receive a payment approval request, and the payment approval request may include information on the number of payment attempts using the smart card 100 or the final payment attempt time information for a predetermined time.

The payment attempt information checking unit 210 may check the payment attempt count information using the smart card 100 for a predetermined time. Method for checking the number of payment attempt information, a method for receiving and confirming the number of payment attempt information accumulated for a predetermined time from the smart card 100, or each time a payment request is received from the smart card 100 check attempt information check unit 210 ) May be a method of recording the number of payment requests received from the smart card 100 for a predetermined time and checking the accumulated number of records, but is not limited thereto.

The payment attempt information verification unit 210 may check the final payment attempt time information. The final payment attempt time information checking method may include receiving and confirming the final payment attempt time information recorded in the smart card 100 from the smart card 100 or checking the payment attempt information when the payment request is received from the smart card 100. The unit 210 may separately record the payment request reception time in a database (not shown) in the card company server 200 and check the information based on the stored final payment attempt time information, but is not limited thereto.

The payment attempt information checking unit 210 may check both payment attempt count information and final payment attempt time information using the smart card 100 for a predetermined time.

The payment approval request control unit 220 checks the information on the number of payment attempts using the smart card 100 for a predetermined time, so that the number of payment attempts for a predetermined time generated by the smart card 100 exceeds a predetermined number of predetermined payment attempts. If it is confirmed that the payment is approved, the user terminal 300 may transmit a request for inputting user authentication information.

On the other hand, the payment approval request control unit 220 checks the information on the number of payment attempts using the smart card 100 for a predetermined time, and the predetermined number of predetermined payment attempts for the predetermined number of payment attempts occurring in the smart card 100 for a predetermined time. If it is confirmed that does not exceed, may not transmit the user authentication information input request to the user terminal (300).

For example, assuming that the predetermined predetermined number of payment attempts is five times within 10 minutes, when the information on the number of payment attempts for a predetermined time period is seven times within 10 minutes, the payment approval request control unit 220 requests the requested payment. If the approval is withheld, the user authentication information input request is transmitted to the user terminal 300, and if the number of payment attempt information for a predetermined time period is three times within 10 minutes, the payment approval request control unit 220 is the user terminal 300. ) Does not send the user authentication information input request.

The payment approval request control unit 220 checks the final payment attempt time information, and when it is determined that the difference between the confirmed final payment attempt time and the time when the payment approval request is received exceeds a predetermined time, the requested payment approval The operation may be suspended and the user authentication information input request may be transmitted to the user terminal 300.

On the other hand, the payment approval request control unit 220 checks the final payment attempt time information, and if it is determined that the difference between the confirmed final payment attempt time and the time when the payment approval request is received does not exceed a predetermined time, the user The terminal 300 may not transmit a request for inputting user authentication information.

For example, if the predetermined predetermined time is 10 minutes and the time when the payment authorization request is received is 3:00 pm, the final payment attempt time confirmed is 2:30 pm, the final payment attempt time and the payment authorization request Since the received time difference is 30 minutes, the payment approval request controller 220 suspends the requested payment approval, transmits a user authentication information input request to the user terminal 300, and the confirmed final payment attempt time is pm In the case of 2:55, since the difference between the time of the final payment attempt and the time at which the payment approval request is received is 5 minutes, the payment approval request controller 220 does not transmit the user authentication information input request to the user terminal 300.

When the payment approval request control unit 220 checks both the number of payment attempt information and the final payment attempt time information using the smart card 100 for a predetermined time, the predetermined payment attempt for which the number of payment attempts for the predetermined period of time is confirmed is preset. If it is determined that the number of times is exceeded, or the difference between the confirmed final payment attempt time and the time at which the payment authorization request is received is determined to exceed the predetermined time, the requested payment authorization The operation may be suspended and the user authentication information input request may be transmitted to the user terminal 300.

According to an embodiment of the present invention, when the payment approval request control unit 220 checks both the number of payment attempt information and the final payment attempt time information using the smart card 100 for a predetermined time, the payment for the confirmed predetermined time If the number of attempts does not exceed the predetermined number of payment attempts, and the difference between the confirmed final payment attempt time and the time when the payment approval request is received does not exceed the predetermined time, the user terminal 300 ) May not transmit the user authentication information input request.

When the user authentication for the smart card 100 is made, the payment approval request processor 230 may process the payment approval request. That is, in other words, the payment approval request processor 230 may process the requested payment approval according to the user authentication result for the smart card 100.

When the payment approval request processor 230 performs user authentication through the user terminal 300, the payment approval request processor 230 may receive the requested user authentication information from the user terminal 300.

When the payment approval request processing unit 230 performs user authentication through the user terminal 300, the user authentication information received from the user terminal 300 is checked, and the plurality of user authentications in which the received user authentication information is registered in advance. If it is confirmed to match any one of the information, it is possible to approve the requested payment from the smart card (100). The pre-registered user authentication information may be matched with user terminal identification information and stored in a database (not shown) in the card company server 200.

When the payment approval request processing unit 230 performs user authentication through the user terminal 300, the user authentication information received from the user terminal 300 is checked, and the plurality of user authentications in which the received user authentication information is registered in advance. If it is confirmed that does not match any of the information, it is possible to reject the requested payment from the smart card 100.

For example, assuming that user authentication information "3Q8EJJDK6" is received at the user terminal 300, when it is confirmed that "3Q8EJJDK6" exists in a database (not shown) in the card company server 200, the payment approval request processing unit If the approval of the payment request received from the smart card 100 and "3Q8EJJDK6" does not exist in the database (not shown) in the card company server 200, the payment approval request processing unit 230 is Decline the requested payment.

In detail, when the payment approval request processor 230 performs user authentication through the user terminal 300, the payment approval request processor 230 receives user terminal identification information as well as user authentication information from the user terminal 300, thereby receiving the received user terminal identification information. And whether the user authentication information corresponds, and whether the registration of the received user authentication information in the card company server 200 can be further confirmed.

For example, assuming that user authentication information of "3Q8EJJDK6" is registered in advance in a database (not shown) in the card company server 200 so that user authentication information of "3Q8EJJDK6" is registered in advance, identification information of "1234567890" is obtained. When the user authentication information "3Q8EJJDK6" is received from the user terminal 300 having, the payment approval request processing unit 230 approves the payment request received from the smart card 100, but has a user identification information of "1234567890" When the user authentication information "6P7DKEJD5" is received from the terminal 300, the payment approval request processing unit 230 rejects the requested payment.

When the payment approval request processing unit 230 performs user authentication through the user terminal 300, if it is confirmed that the user authentication information received from the user terminal 300 matches the pre-registered user authentication information, By deleting the information on the number of payment attempts and the final payment attempt time information using the smart card 100, in order to provide a payment authentication service, there is no error in checking the number of payment attempts or checking the final payment attempt time information. can do.

If the payment approval request processing unit 230 determines that the number of payment attempts using the smart card 100 does not exceed the preset number of payment attempts for a predetermined time, the payment approval request controller 220 may approve the requested payment. Can be.

The payment approval request processing unit 230 determines that the difference between the time of the final payment attempt and the time when the payment approval request is received does not exceed a predetermined time period through the payment approval request control unit 220. You can approve.

According to an embodiment of the present invention, the predetermined number of payment attempts for a predetermined time is set in advance through the payment approval request control unit 220 by confirming both the payment attempt number information and the final payment attempt time information for a predetermined time. If the number of attempts is not exceeded, and it is determined that the difference between the time of the final payment attempt and the time at which the payment approval request is received does not exceed the predetermined time, the payment approval request processing unit 230 may approve the requested payment. Can be.

As shown in FIG. 3A, first, when a payment approval request for a predetermined goods or service is obtained by a user, the smart card 100 may transmit a payment approval request to the card company server 200 (S311). ).

The card company server 200 receiving the payment approval request checks the number of payment attempt information using the smart card 100 for a predetermined time (S312), and the number of payment attempts for a predetermined time exceeds a preset predetermined number of payment attempts. It can be checked whether or not (S313).

When it is confirmed that the number of payment attempts for a predetermined time does not exceed the predetermined number of payment attempts, the card company server 200 does not transmit the user authentication information input request to the user terminal 300, and the confirmation is completed. The payment request received from the smart card 100 may be immediately approved (S314).

On the other hand, if it is determined that the number of payment attempts for a predetermined time exceeds a predetermined number of payment attempts, the card company server 200 suspends the requested payment approval and requests the user terminal 300 to input user authentication information. It may be transmitted (S315).

The card company server 200 may receive the user authentication information requested from the user terminal 300, and may check whether the received user authentication information matches the previously stored user authentication information (S316).

If it is confirmed that the user authentication information received from the user terminal 300 does not match with the previously stored user authentication information, the card company server 200 may reject the requested payment approval (S317).

On the other hand, when it is confirmed that the user authentication information received from the user terminal 300 matches the previously stored user authentication information, the card company server 200 may approve the requested payment (S318).

Thereafter, when the payment approval according to the user authentication is completed, the card company server 200 may transmit the processing result for the requested payment approval to the smart card 100, and the payment using the smart card 100 for a predetermined time. Attempt number information may be deleted (S319).

As shown in FIG. 3B, when the payment approval request for a predetermined goods or service is obtained by the user, the smart card 100 may transmit a payment approval request obtained to the card company server 200 (S321).

The card company server 200 receiving the payment approval request checks the final payment attempt time information (S322), and determines whether the difference between the final payment attempt time information and the time at which the payment approval request is received exceeds a predetermined time. It can be confirmed (S323).

When it is confirmed that the difference between the time of the final payment attempt and the time at which the payment approval request is received does not exceed the predetermined time, the card company server 200 does not transmit the user authentication information input request to the user terminal 300. As soon as confirmation is completed, the payment request received from the smart card 100 may be approved (S324).

On the other hand, if it is determined that the difference between the final payment attempt time and the time when the payment approval request is received exceeds the predetermined time, the card company server 200 withholds the requested payment approval and returns to the user terminal 300. The user authentication information input request may be transmitted (S325).

The card company server 200 may receive the user authentication information requested from the user terminal 300, and may check whether the received user authentication information matches the pre-stored user authentication information (S326).

If it is confirmed that the user authentication information received from the user terminal 300 does not match with the previously stored user authentication information, the card company server 200 may reject the requested payment approval (S327).

On the other hand, if it is confirmed that the user authentication information received from the user terminal 300 matches the previously stored user authentication information, the card company server 200 may approve the requested payment from the smart card 100 (S328). .

Thereafter, when the payment approval according to the user authentication is completed, the card company server 200 may transmit the processing result of the requested payment approval to the smart card 100, and may delete the final payment attempt time information (S329). ).

As described above, according to an embodiment of the present invention, since the payment approval request information using the smart card is checked and a user authentication procedure is required as necessary, security against fraudulent payment is secured when using the smart card payment service. There is an advantage.

The foregoing description of the present invention is intended for illustration, and it will be understood by those skilled in the art that the present invention may be easily modified in other specific forms without changing the technical spirit or essential features of the present invention. will be. Therefore, it should be understood that the embodiments described above are exemplary in all respects and not restrictive. For example, each component described as a single type may be implemented in a distributed manner, and similarly, components described as distributed may be implemented in a combined form.

The scope of the present invention is represented by the following claims, and it should be construed that all changes or modifications derived from the meaning and scope of the claims and their equivalents are included in the scope of the present invention.

100: smart card

110: processor

120: payment request acquisition unit

130: communication unit

200: card company server

210: payment attempt information confirmation unit

220: payment approval request control unit

230: payment approval request processing unit

300: user terminal

Claims

In the method for the card company server to approve payment using a smart card,

(a) if a payment approval request is received from the smart card, checking the number of payment attempt information or the final payment attempt time information using the smart card for a predetermined time;

(b) it is confirmed that the number of payment attempts during the predetermined time exceeds a predetermined predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time when the payment approval request is received exceeds a predetermined time. If it is determined that the payment is authorized, withholding the payment approval request; And

(c) if the user authentication for the smart card is made, including the step of processing the payment approval request, payment approval method using a smart card.
The method of claim 1,

In step (c),

And checking the user authentication information received from the user terminal, and if the received user authentication information matches the pre-stored user authentication information, approving the payment approval request received from the smart card. Payment authorization method used.
The method of claim 2,

The user terminal is linked to the smart card, characterized in that the short-range wireless communication, payment approval method using a smart card.
The method of claim 1,

In step (c),

Checking the user authentication information received from the user terminal, if it is confirmed that the received user authentication information matches the pre-stored user authentication information, the number of payment attempt information or the final payment attempt time information using the smart card during the predetermined time. Comprising the step of deleting, the payment approval method using a smart card.
The method of claim 1,

In step (b),

It is confirmed that the number of payment attempts during the predetermined time does not exceed the predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time at which the payment approval request is received does not exceed the predetermined time. If it is confirmed, the step of approving the payment approval request without holding, comprising the step of approving payment using a smart card.
The method of claim 1,

In step (c),

Checking the user authentication information received from the user terminal, and if it is determined that the received user authentication information does not match with the previously stored user authentication information, rejecting the payment approval request received from the smart card; How to approve payment using smart card.
In a method for supporting a smart card, payment using the smart card is approved,

(a) obtaining a request for payment for a given good or service; And

(b) transmitting a payment authorization request corresponding to the payment request to a card company server to check the number of payment attempt information or the final payment attempt time information using a smart card for a predetermined time, or to support the card company server to verify the information; Including,

Confirm that the number of payment attempts during the predetermined time exceeds a predetermined predetermined number of payment attempts, or that the difference between the time of the last payment attempt and the time at which the payment approval request is received exceeds the predetermined time. When the payment approval request is withheld,

The smart card,

When the user authentication for the smart card is made, receiving the processing result for the payment approval request from the card company server, payment approval support method using a smart card.
A payment attempt information verification unit that checks payment attempt count information or final payment attempt time information using the smart card for a predetermined time when a payment approval request is received from the smart card;

It is confirmed that the number of payment attempts during the predetermined time exceeds a predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time when the payment approval request is received exceeds the predetermined time. A payment approval request control unit to hold the payment approval request; And

When the user authentication for the smart card is made, the card company server comprising a payment authorization request processing unit for processing the payment authorization request.
The method of claim 8,

The payment approval request processing unit,

Checking the user authentication information received from the user terminal, and if the received user authentication information is confirmed to match the pre-stored user authentication information, approving the payment approval request received from the smart card.
The method of claim 9,

The user terminal is linked with the smart card, characterized in that the short-range wireless communication, card company server.
The method of claim 8,

The payment approval request processing unit,

Checking the user authentication information received from the user terminal, if it is confirmed that the received user authentication information matches the pre-stored user authentication information, the number of payment attempt information or the final payment attempt time information using the smart card during the predetermined time. Deleted, card company server.
The method of claim 8,

The payment approval request control unit,

It is confirmed that the number of payment attempts during the predetermined time does not exceed the predetermined number of payment attempts, or the difference between the time of the last payment attempt and the time at which the payment approval request is received does not exceed the predetermined time. If confirmed, the card company server to approve the payment approval request without holding.
The method of claim 8,

The payment approval request processing unit,

Checking the user authentication information received from the user terminal, and if it is determined that the received user authentication information does not match with the previously stored user authentication information, rejecting the payment approval request received from the smart card.
A processor;

A payment request obtaining unit obtaining a payment request for predetermined goods or services; And

Sending a payment approval request corresponding to the payment request to the card company server, and checks the number of payment attempt information or the final payment attempt time information using a smart card for a predetermined time, or includes a communication unit for supporting the card company server to verify,

Confirm that the number of payment attempts during the predetermined time exceeds a predetermined predetermined number of payment attempts, or that the difference between the time of the last payment attempt and the time at which the payment approval request is received exceeds the predetermined time. When the payment approval request is withheld,

When the user authentication for the smart card is made, the smart card receiving the processing result for the payment authorization request from the card company server.