WO2020184815A1

WO2020184815A1 - One time password-based mobile automatic payment method and system using same

Info

Publication number: WO2020184815A1
Application number: PCT/KR2019/017736
Authority: WO
Inventors: 강민; 목인경
Original assignee: 강민
Priority date: 2019-03-14
Filing date: 2019-12-13
Publication date: 2020-09-17
Also published as: KR102040100B1

Abstract

Disclosed is a mobile automatic payment method comprising the steps of: receiving, by a service server, user identification information from a payment progress device; providing, by the service server, another device with a near field communication unit name of any one device from among the payment progress device and a mobile device corresponding to the user identification information; and receiving, by the service server, from the payment progress device or the mobile device, information indicating whether or not near field communication is possible between the payment progress device and the mobile device. When the service server determines that the near field communication is possible between the payment progress device and the mobile device, the service server is configured to execute a subsequent step for approving a payment request requested from the payment progress device by using a payment source according to the user identification information. Also, the any one device is configured to broadcast the near field communication unit name of the any one device.

Description

One-time password-based mobile automatic payment method and system using the same

The present invention relates to a one-time password (OTP)-based mobile automatic payment method and a system using the same, and more specifically, an OTP-based mobile in which mobile payment is automatically made without a user directly manipulating a mobile device during a transaction. It relates to an automatic payment method and a system using the same.

Recently, as smartphones have become a necessity, various mobile payments using smartphones have been provided. In general, mobile payments are complicated by taking out a mobile device, running a payment application, selecting a payment method, and going through a security authentication process.

In order to simplify the complexity of the payment, there are methods such as simple payment, in which payment is made when the payment method is contacted with the affiliated store terminal using short-range communication technology, or simple payment is made by entering the payment password registered in advance in the mobile electronic wallet app. It is being proposed.

However, this simple payment method is also a method that is possible only when the mobile device is taken out, and there is a problem that a waiting time may occur in the process, since the mobile device must be taken out to run the application. In addition, in the case of a payment password, there is a risk of leakage of the payment password, which may cause security problems.

Accordingly, the present invention was created to solve the above problems, and an object of the present invention is to simplify the mobile payment process, and if the user inputs the identification information previously set in the payment processing device without separate operation of the mobile device It is to provide a mobile automatic payment method and system based on One Time Password (OTP) that automatically makes mobile payments.

In addition, an object of the present invention is to provide an OTP-based mobile automatic payment method and system that enhances the security of mobile payments using OTP.

In the payment processing device installed with a mobile automatic payment program using a One Time Password (OTP) according to an embodiment of the present invention for achieving this purpose and an OTP-based mobile automatic payment method of a mobile device, (a) payment Receiving, by the processing device, user identification information and a payment request; (b) receiving, by a service server, the user identification information, payment processing device identification information, and payment information from the payment processing device, and recognizing the user's mobile device based on the user identification information; (c) the service server checking the validity of the payment processing device using a mobile automatic payment program using OTP installed in the payment processing device; (d) authenticating each other by the payment processing device and the mobile device using OTP generated by the mobile automatic payment program using the OTP; (e) determining, by a financial institution server, whether payment is possible using the user identification information and payment information; And (f) when the (c) to (e) steps are satisfied, the service server approving the payment request.

The user identification information may be matched with the mobile device.

The step (b) comprises: receiving, by the service server, an OTP of a payment processing device generated from a mobile automatic payment program using an OTP installed in the payment processing device; And checking, by the service server, the validity of the payment processing device using the payment processing device identification information and the OTP of the payment processing device. It may include.

The step (b) includes: receiving, by the service server, at least one of real-time location information or communication access information of the payment processing device; It may further include.

The mobile device may be characterized in that the short-range communication mode is turned on by receiving a short-range communication activation signal from the service server.

The short-range communication may be one of Bluetooth communication, high frequency communication, RFID communication, beacon communication, NFC communication, and Wi-Fi.

The step (d) includes, by the mobile device, broadcasting a first OTP generated from a mobile automatic payment program using an OTP installed in the mobile device according to a command of the service server; Broadcasting, by the payment processing device, a second OTP generated in a mobile automatic payment program using an OTP installed in the payment processing device according to a command of the service server; And detecting, by the mobile device and the payment processing device, each other's short-range communication unit names for a predetermined time by short-range communication. And when the mobile device detects the second OTP and the payment processing device detects the first OTP, the mobile device and the payment processing device are authenticated with each other.

The step (d) includes the steps of measuring, by the mobile device, a first distance from the mobile device to the payment processing device by short-range communication; Measuring a second distance from the payment processing device to the mobile device by short-range communication of the payment processing device; And determining, by the service server, whether the first distance and the second distance are within a set distance by receiving the first distance and the second distance. It may further include.

The step (d) comprises: receiving, by the service server, an OTP of a mobile device generated by a mobile automatic payment program using an OTP installed in the mobile device; And checking, by the service server, the validity of the mobile device by using the OTP of the mobile device. It may further include.

The user identification information may be matched with the mobile device.

The user identification information may include at least one payment source, and the user identification information may have a different value for each payment source.

An OTP-based mobile automatic payment system according to another embodiment of the present invention includes a mobile device having a short-range communication function and installed with a mobile automatic payment program using OTP; A payment processing device in which a mobile automatic payment program using the OTP is installed, and for a user to request a payment online or offline; And the OTP generated by the mobile automatic payment program using the OTP installed in the mobile device and the payment processing device, respectively, to check the validity of the mobile device and the payment processing device, and generated in the mobile automatic payment program using the OTP. A service server for approving the payment request when the mobile device and the payment processing device are authenticated with each other through the OTP and short-range communication; It may include.

The service server receives the OTP of the payment processing device generated by the mobile automatic payment program using the OTP installed in the payment processing device, and uses the payment processing device identification information and the OTP of the payment processing device. It can be characterized by confirming justification.

The mobile device and the payment processing device broadcasting a first OTP generated by a mobile automatic payment program using an OTP installed in the mobile device; Broadcasting, by the payment processing device, a second OTP generated in a mobile automatic payment program using an OTP installed in the payment processing device according to a command of the service server; And detecting, by the mobile device and the payment processing device, each other's short-range communication unit names for a predetermined time by short-range communication. And, when the mobile device detects the second OTP and the payment processing device detects the first OTP, the mobile device and the payment processing device are authenticated with each other.

In the service server, the distance measured by the mobile device from the mobile device to the payment processing device by short-range communication and the distance measured by the payment processing device from the payment processing device to the mobile device by short-range communication are all set distances. If determined to be within, it may be characterized in that the payment request is approved.

According to another aspect of the present invention, the service server, receiving user identification information from the payment processing device; Providing, by the service server, a name of a short-range communication unit of the payment processing device to a mobile device corresponding to the user identification information, and providing a name of a short-range communication unit of the mobile device to the payment processing device; And receiving, by the service server, information indicating whether short-range communication between the payment processing device and the mobile device is possible, from the payment processing device or the mobile device. At this time, when the service server determines that short-range communication between the payment processing device and the mobile device is possible, a subsequent step of approving a payment request requested from the payment processing device using a payment source according to the user identification information The mobile device is configured to broadcast the name of the short-range communication unit of the mobile device, and the payment processing device is configured to broadcast the name of the short-range communication unit of the payment processing device.

In this case, the subsequent step may be executed only when the service server determines that short-range communication is possible between the payment processing device and the mobile device.

In this case, the name of the near field communication unit of the payment processing device may be a second OTP generated by the payment processing device, and the name of the near field communication unit of the mobile device may be a first OTP generated by the mobile device.

As described above, according to the exemplary embodiment of the present invention, since payment is made even if the mobile device is not taken out and held, the time taken to execute the application of the mobile device is omitted, thereby enabling fast payment.

In addition, payment is simplified because there is no need to take out a mobile device.

In addition, according to an embodiment of the present invention, since a One Time Password (OTP) is used, there is no problem of leakage of a payment password, and security can be improved.

In addition, according to an embodiment of the present invention, since the short-range communication mode is turned on by receiving a short-range communication activation signal from the service server, unnecessary battery consumption of the mobile device can be prevented.

1 is a system diagram of a mobile automatic payment system based on One Time Password (OTP) according to an embodiment of the present invention.

2 is a block diagram of a mobile device providing an OTP-based mobile automatic payment method according to an embodiment of the present invention.

3 is a block diagram of a service server providing an OTP-based mobile automatic payment method according to an embodiment of the present invention.

4 is a block diagram of a payment processing device providing an OTP-based mobile automatic payment method according to an embodiment of the present invention.

5 is a flowchart illustrating an OTP-based mobile automatic payment method according to an embodiment of the present invention.

6 is a flowchart illustrating an OTP-based mobile automatic payment method according to an embodiment of the present invention.

Since the description of the present invention is merely an embodiment for structural or functional description, the scope of the present invention should not be construed as being limited by the embodiments described in the text. That is, since the embodiments can be modified in various ways and have various forms, the scope of the present invention should be understood to include equivalents capable of realizing the technical idea. In addition, since the object or effect presented in the present invention does not mean that a specific embodiment should include all of them or only those effects, the scope of the present invention should not be understood as being limited thereto.

Meanwhile, the meaning of terms described in the present application should be understood as follows.

Terms such as "first" and "second" are used to distinguish one component from other components, and the scope of rights is not limited by these terms. For example, a first component may be referred to as a second component, and similarly, a second component may be referred to as a first component.

Singular expressions are to be understood as including plural expressions unless the context clearly implies otherwise, and terms such as "include" or "have" refer to implemented features, numbers, steps, actions, components, parts, or It is to be understood that it is intended to designate that a combination exists and does not preclude the presence or addition of one or more other features or numbers, steps, actions, components, parts, or combinations thereof. Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

In each step, the identification code (for example, a, b, c, etc.) is used for convenience of explanation, and the identification code does not describe the order of each step, and each step is clearly in a specific order in context. Unless otherwise stated, it may occur differently from the specified order. That is, each of the steps may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

The present invention can be implemented as computer-readable codes on a computer-readable recording medium, and the computer-readable recording medium includes all types of recording devices storing data that can be read by a computer system. . Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like, and are implemented in the form of a carrier wave (for example, transmission over the Internet). Also includes. Further, the computer-readable recording medium is distributed over a computer system connected by a network, so that the computer-readable code can be stored and executed in a distributed manner.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the field to which the present invention belongs, unless otherwise defined. Terms defined in commonly used dictionaries should be construed as having meanings in the context of related technologies, and cannot be construed as having an ideal or excessive formal meaning unless explicitly defined in the present application.

Referring to FIG. 1, an OTP-based mobile automatic payment system according to an embodiment of the present invention includes a short-range communication 100, a mobile device 200, a service server 300, a payment processing device 400, and a financial institution server 500. Includes.

The short-range communication 100 means short-range communication that can be utilized to perform the OTP-based mobile automatic payment method according to an embodiment of the present invention. The short-range communication 100 may be one of Bluetooth communication, high-frequency communication, RFID communication, beacon communication, NFC communication, and Wi-Fi, but is not limited thereto.

In addition, the short-

range communication units

270 and 470 may be integrally included in the mobile device 200 and the payment processing device 400 described in detail below, or may be provided detachably.

The mobile device 200 refers to a mobile device that is carried by a user during mobile automatic payment using an OTP-based mobile automatic payment method, and has a short-range communication and communication function through a communication company, thereby serving as an authentication means for payment. This may include smartphones, tablet PCs, mobile PCs, and various wearable devices.

The mobile device 200 is equipped with a mobile automatic payment program (not shown) using OTP in order to perform the OTP-based mobile automatic payment method according to an embodiment of the present invention, and the user uses the mobile device 200 You may have already signed up for membership and automatically logged in to a mobile automatic payment program using OTP.

The service server 300 includes the mobile device 200 and the payment processing device 400 when a user has already registered as a member and is automatically logged into a mobile automatic payment program using OTP through the mobile device 200. Mobile automatic payment program using the OTP installed in the mobile device 200 and the payment processing device 400 by activating the mobile automatic payment program when the distance between them is connected by wire or wireless to the specified specific distance. Each of the OTPs generated in (not shown) may be received to authenticate the mobile device 200 and the payment processing device 400, and approve a payment request.

The payment processing device 400 is provided with a communication function through short-range communication and a communication company, so that when a user inputs user identification information for payment in an online and offline payment environment, the user does not need to operate the mobile device 200. It means a device that can pay. The payment processing device 400 is all devices that can perform offline payment functions, such as POS (Post Of Sale), kiosk (KIOSK), smartphones and tablet PCs, wearable devices and various mobile communication devices in offline stores. This may be the case.

The payment processing device 400 is equipped with a mobile automatic payment program (not shown) using OTP in order to perform the OTP-based mobile automatic payment method according to an embodiment of the present invention, and the payment processing device 400 is an OTP You may have already signed up and logged in to the mobile automatic payment program using.

The financial institution server 500 refers to a server that determines whether payment is possible using user identification information and payment information mediated through the service server 300. It refers to all companies that provide payment services such as credit card companies, banks, and Internet banks.

2 is a block diagram of a mobile device 200 that provides an OTP-based mobile automatic payment method according to an embodiment of the present invention.

2, a mobile device 200 according to an embodiment of the present invention includes a data transmission/reception unit 210 for transmitting and receiving data to and from the service server 300, an OTP generation unit 230, a distance calculation unit 250, and A short-range communication unit 270 may be included.

The mobile device 200 may generate an OTP in the OTP generation unit 230 using an OTP-based mobile payment program. Since the OTP is generated in synchronization with the OTP generator of the service server, the service server can use it to check the validity of the mobile device 200.

The distance calculating unit 250 may measure a first distance from the mobile device 200 to the payment processing device 400 through short-range communication.

The short-range communication unit 270 may broadcast the name of the short-range communication unit of the mobile device 200 from the service server, and detect the name of the short-range communication unit of the payment processing device.

3 is a block diagram of a service server 300 that provides an OTP-based mobile automatic payment method according to an embodiment of the present invention.

3, the service server 300 according to the embodiment of the present invention includes a data transmission/reception unit 310, an OTP-based mobile automatic payment DB 330, a validity check unit 350, a command unit 370, and a distance. A determination unit 390 and a payment availability check unit 395 may be included.

In the OTP-based mobile automatic payment DB 310, the user's subscription information of a mobile automatic payment program using OTP, user identification information, payment log, mobile device 200 or payment processing device 400 matching each user, identification information, An OTP generation unit 331 and an OTP determination unit 333 for generating OTP in synchronization with OTP generated for each mobile device and payment processing device may be included.

User identification information is set when a user subscribes to a mobile automatic payment program using OTP through the mobile device 200 or before the mobile automatic payment method according to an embodiment of the present invention, and means all information that can identify the user. can do.

For example, it may be a text created by combining some or all of numbers, letters, and special symbols, or a user's biometric information such as a user's fingerprint, voice, or iris, or a vehicle registration number.

The user identification information may be matched 1:1 with the user's mobile device, and a single mobile device may include a plurality of user identification information.

The user identification information may vary depending on the payment source. For example, user identification information may be set differently for each of the user's first card, second card, and third card, so that the user selects a payment card to pay according to the user identification information input to the payment processing device. I can.

For example, if you set up Hong Gil-dong's Samsung Card for 079203 and Hong Gil-dong E-Mart Card for 079202, Hong Gil-dong writes 0792 as his common identification information, and uses 03 and 02 as payment source identification to identify common identification information. When using a plurality of identification information that is a combination of and payment source identification information, each user identification information may be 1:1 matched with the payment source used by the user.

Accordingly, the user can select a payment card using different user identification information without taking out the mobile device.

The service server 300 may receive a short-range communication unit name and a distance calculation value sensed by the mobile device 200 and the payment processing device 400 through the data transmission/reception unit 310.

The OTP generation unit 331 is synchronized with the OTP generation unit of the mobile device or payment processing device on which the mobile automatic payment program is installed to generate the OTP in the same manner. The OTP determination unit 333 determines whether the OTP received from the mobile device and the payment processing device and the OTP generated by the OTP generation unit 331 are the same.

The validity check unit 350 compares the OTP generated in the OTP-based mobile automatic payment DB according to the OTP generation method of the corresponding payment processing device from the identification information of the payment processing device with the OTP generated in the payment processing device. The validity of the payment processing device can be confirmed. In addition, in the OTP-based mobile automatic payment DB, the validity of the payment processing device may be verified by comparing the OTP generated according to the OTP generation method of the corresponding mobile device with the OTP generated by the mobile device.

The command unit 370 is a short-range communication device activation command unit 371 that issues an activation command of the short-range communication unit to the mobile device, and transmits the name of each short-range communication unit to the mobile device and the payment processing device, and the mobile device and the payment processing device Instructing the broadcasting command unit 373 and the mobile device to calculate the first distance from the mobile device to the payment processing device and the second distance from the payment processing device to the mobile device. A distance calculation command unit 375 may be included.

The distance determination unit 390 may determine whether the mobile device and the payment processing device are within a distance in which short-range communication is possible from a distance received from the mobile device and the payment processing device.

In addition, it may further include a payment availability check unit 399 to check whether the payment source can be settled through the financial institution server.

4 is a block diagram of a payment processing device 400 that provides an OTP-based mobile automatic payment method according to an embodiment of the present invention.

4, the payment processing device 400 according to the embodiment of the present invention includes an input unit 405, a data transmission/reception unit 410, an OPT generation unit 430, and a distance calculation unit 450 into which identification information is input by a user. ) And a short-range communication unit 470 may be included.

The user may input user identification information through the input unit 405. The input unit 405 may be embedded in the payment processing device 400 or may be attached separately.

The payment processing device 400 may generate an OTP in the OTP generation unit 430 by an OTP-based mobile payment program. Since the OTP is generated in synchronization with the OTP generation unit of the service server, the service server can use it to check the validity of the payment processing device 400.

The distance calculating unit 450 may measure a second distance from the payment processing device 400 to the mobile device 200 by short-range communication.

The short-range communication unit 470 may broadcast the name of the short-range communication unit of the payment processing device 400 from the service server, and detect the name of the short-range communication unit of the mobile device.

5 and 6 are flowcharts illustrating an OTP-based mobile automatic payment method according to an embodiment of the present invention.

5 and 6, the OTP-based mobile automatic payment method according to an embodiment of the present invention begins when a user inputs user identification information into the input unit 405 of the payment processing device 400 and requests a payment ( S100).

As described above, the user identification information is all information that can identify the user, for example, a character created by combining some or all of numbers, characters, special symbols, etc., or a user's biometrics such as a user's fingerprint, voice, iris It may be information, and may be a vehicle registration number.

When the user's identification information is input, the payment processing device 400 generates an OTP in the OTP generation unit 430 of the payment processing device 400 installed with a mobile automatic payment program using OTP (S150), and the data The user identification information, the payment processing device identification information, payment information, and the OTP of the payment processing device 400 are transmitted to the service server 300 through the transmission unit 410 (S200).

The service server 300 checks the validity of the payment processing device 400 using the identification information of the payment processing device 400 and the OTP of the payment processing device 400 received in step S200 (S300). By comparing the OTP generated by the OTP generation unit 331 corresponding to the identification information of the payment processing device 400 with the OTP of the payment processing device received from the payment processing device 400, the payment processing device 400 Justification can be checked.

The OTP-based mobile automatic payment DB 330 of the service server 300 has an OTP generation unit for each payment processing device, and the OTP generation unit is interlocked with the payment processing device 400 to generate OTP in the same manner. Therefore, the payment processing device 400 compares the OTP generated by the OTP generation unit 331 of the OTP-based mobile automatic payment DB 330 of the service server 300 with the OTP generated by the payment processing device 400 You can check the justification of

At this time, in order to increase the reliability of the validity check of the payment processing device 400, the service server 300 includes location information of the payment processing device 400, such as GPS, cell ID information, or the payment processing device 400. You can receive more information on the connection of the mobile operator. The legitimacy of the payment processing device may be further confirmed by using information when signing up for a mobile automatic payment program using OTP of the payment processing device 400 and the received location information or communication company access information.

When the validity of the payment processing device 400 is confirmed in step S300, the short-range communication unit activation command unit 371 of the service server 300 is a mobile device matching the user identification information received from the payment processing device 400. The short-range communication unit activation command is given to the device 200 (S400), and if the validity of the payment processing device 400 is not confirmed, the process returns to step S200.

The short-range communication unit 270 of the mobile device 200 turns on the short-range communication unit 270 according to the short-range communication unit activation command of the short-range communication unit activation command unit 371 of the service server, so that the mobile device 200 Can prevent battery consumption. In addition, since the mobile device 200 is automatically turned on according to the short-range communication unit activation command, the user can proceed with payment without taking out the mobile device 200. The short-range communication unit 270 of the mobile device 200 may turn off the short-range communication mode when payment is completed from the service service.

After that, in step S500, the broadcasting command unit 373 of the service server 300 transmits the name of the short-range communication unit of the payment processing device 400 to the mobile device 200, and It is ordered to broadcast the name of the local area communication department. In addition, the broadcasting command unit 373 of the service server 300 transmits the name of the short-range communication unit of the mobile device 200 to the payment processing device 400, and the broadcasting command unit 375 performs the payment process. Instructs to broadcast the name of the local area communication unit of the device 400.

At this time, the name of the short-range communication unit of the mobile device 200 is the first OTP generated by the OTP generation unit 230 of the mobile device 200, and the name of the short-range communication unit of the payment processing device 400 is a payment processing device ( This is the second OTP generated by the OTP generation unit 430 of 400). Therefore, the first OTP may be separate from the OPT used to check the validity of the mobile device 200, and the second OTP may be separate from the OTP used to check the validity of the payment processing device 400. I can.

The OTP-based mobile automatic payment DB 330 of the service server 300 has an OTP generation unit for each payment processing device and a mobile device, and the OTP generation unit is interlocked with the corresponding payment processing device or mobile device to generate OTP in the same manner. do. That is, the OTP generation unit of the service server 300 generates the same OTP as the first OTP generated by the mobile device 200 and the second OTP generated by the payment processing device 400, respectively. Accordingly, the broadcasting command unit 373 of the service server 300 transmits the second OTP of the payment processing device 400 to the mobile device 300 and transmits the first OTP of the mobile device 300. Command to broadcast. In addition, the first OTP of the service server 300 is transmitted to the payment processing device 400, and a second OTP of the payment processing device 400 is instructed to broadcast.

That is, the OTP-based mobile automatic payment method according to the embodiment of the present invention uses the OTP generated by the OTP generation unit by the mobile automatic payment program using OPT, instead of the name of the short-range communication unit of the mobile device and the payment processing device. And the payment processing device detect each other. Therefore, since the mobile device and the payment processing device detect each other by generating a new OTP whenever there is a payment request, the accuracy is higher than that of the method in which the mobile device and the payment processing device detect each other based on the conventional short-range communication unit name. It increases, and security is strengthened.

In addition, the distance calculation command unit 375 of the service server 300 issues a distance calculation command using short-range communication to the mobile device 200 and the payment processing device 400 (S550).

Accordingly, the mobile device 200 broadcasts the first OTP generated by the mobile device 200 (S600) and detects the second OTP generated by the payment processing device 400 using short-range communication ( S650), the payment processing device 400 broadcasts the second OTP generated in the payment processing device 400 (S600) and detects the first OTP generated in the mobile device 200 using short-range communication. Do (S650). When the mobile device 200 does not detect the second OTP or the payment processing device 400 does not detect the first OPT, the mobile device 200 and the payment processing device 400 are Payment cannot proceed because the payment program cannot be used.

When the mobile device 200 detects the second OTP and the payment processing device 400 detects the first OTP (S730), the distance calculation unit 250 of the mobile device 200 The first distance from 200 to the payment processing device 400 is calculated and the value is sent to the service server 300, and the distance calculation unit 450 of the payment processing device 400 is the payment processing device The second distance from 400 to the mobile device 200 is sent to the service server 300.

The distance determination unit 390 of the service server 300 determines whether the first distance and the second distance are within a set distance (S740). The set distance is a distance at which the mobile device 200 and the payment processing device 400 can detect each other through short-range communication.

In this case, in order to improve security in the payment process, the validity of the mobile device 200 may be additionally checked. The OTP is generated by the OTP generation unit 230 of the mobile device 200 (S760) and transmits the OTP to the service server 300 (S770). The OTP determination unit 333 of the service server 300 includes the OTP generated by the OTP generation unit 331 corresponding to the identification information of the mobile device 200 and the OTP of the mobile device transmitted from the mobile device 200. It is possible to check the validity of the mobile device 200 by comparing (S780).

The OTP-based mobile automatic payment DB 330 of the service server 300 has an OTP generation unit for each mobile device, and the OTP generation unit is interlocked with the mobile device 200 to generate OTP in the same manner. Therefore, by comparing the OTP generated by the OTP generation unit 331 of the OTP-based mobile automatic payment DB 330 of the service server 300 and the OTP generated by the mobile device 200, Justification can be checked.

When it is determined that the first distance and the second distance are within a set distance (S740), the service server 300 requests whether payment is possible to the financial institution server 500 (S900).

The financial institution server 500 checks the balance of the payment source according to the user identification information input by the user, and determines whether or not the amount of payment is possible (S900). If the financial institution server 500 determines that payment is possible (S930), whether payment is possible is transmitted to the service server 300 (S950).

Accordingly, when the service server 300 approves the payment request (S970), the OTP-based mobile automatic payment method according to an embodiment of the present invention is terminated. The short-range communication unit 270 of the mobile device 200 may turn off the short-range communication mode when payment is completed from the service service.

That is, in the OTP-based mobile automatic payment method according to the embodiment of the present invention, the legitimacy of the mobile device 200 and the payment processing device 400 is confirmed based on the OTP, and the mobile device 200 and the payment processing device 400 ) Detect each other within a set time by short-range communication, the first distance from the mobile device 200 detected by the mobile device 200 to the payment processing device 400 and the payment detected by the payment processing device 400 When the second distance from the processing device 400 to the mobile device 200 is within the set distance, payment may be made. Therefore, even if the user does not take out the mobile device, if the user's identification information is input into the payment processing device 400, payment is automatically approved by the OTP-based mobile automatic payment method, thereby making the user's payment process convenient. In addition, since the validity of the payment processing device 400 and the mobile device 200 is verified using OTP, security is further improved compared to the conventional mobile automatic payment method.

The OTP-based mobile automatic payment method according to an embodiment of the present invention can be implemented as a computer-readable code on a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices that store data that can be read by a computer system. Examples of the recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like. In addition, the computer-readable recording medium can be distributed over a computer system connected through a network to store and execute computer-readable codes in a distributed manner.

Although the preferred embodiments of the present invention have been described above, the present invention is not limited to the above embodiments, and the embodiments of the present invention are easily changed by those of ordinary skill in the art to which the present invention pertains. It includes all changes to the extent deemed acceptable.

[Explanation of code]

100: near field communication

200: mobile device

210, 310, 410: data transmission and reception unit

230, 430: OTP generation unit

250, 450: distance calculation unit

270, 470: Ministry of Local Communication

300: service server

330: OTP-based mobile automatic payment DB

350: justification check

370: command

390: distance determination unit

395: Payment availability confirmation unit

400: payment processing device

405: input

500; Financial company server

Claims

Transmitting, by the payment processing device, user identification information to a service server;

Providing, by the service server, a name of a short-range communication unit of the payment processing device to a mobile device corresponding to the user identification information, and providing a name of a short-range communication unit of the mobile device to the payment processing device; And

Broadcasting, by the mobile device, the name of the short-range communication unit of the mobile device;

Broadcasting, by the payment processing device, a name of a short-range communication unit of the payment processing device;

Generating, by the mobile device or the payment processing device, information indicating whether short-range communication between the payment processing device and the mobile device is possible, and transmitting the information to the service server; And

When the service server determines that short-range communication between the payment processing device and the mobile device is possible, execute a subsequent step for approving the payment request requested from the payment processing device using a payment source according to the user identification information. Step to do;

Containing,

Mobile automatic payment method.
Receiving, by the service server, user identification information from the payment processing device;

Providing, by the service server, a name of a short-range communication unit of the payment processing device to a mobile device corresponding to the user identification information, and providing a name of a short-range communication unit of the mobile device to the payment processing device; And

Receiving, by the service server, information indicating whether short-range communication between the payment processing device and the mobile device is possible from the payment processing device or the mobile device;

Including,

When the service server determines that short-range communication between the payment processing device and the mobile device is possible, execute a subsequent step for approving the payment request requested from the payment processing device using a payment source according to the user identification information. Is supposed to be,

The mobile device is adapted to broadcast the name of the short-range communication unit of the mobile device, and

The payment processing device, characterized in that to broadcast the name of the short-range communication unit of the payment processing device,

Mobile automatic payment method.
The method of claim 2,

The service server, prior to the providing step, further comprising the step of receiving a short-distance communication unit name of any one of the payment processing device and the mobile device from the one device,

Mobile automatic payment method.
The method of claim 2, wherein the name of the short-range communication unit of any one of the payment processing device and the mobile device is an OTP generated by the one of the devices.
The method of claim 2, wherein any one of the payment processing device and the mobile device recognizes the name of the short-range communication unit of the other device broadcasted by the other device among the payment processing device and the mobile device. And generating information indicating whether short-range communication is possible between the payment processing device and the mobile device.
The method of claim 2, wherein the subsequent step comprises the step of requesting, by the service server, from a financial institution server whether or not payment is possible using a payment source according to the user identification information.
The method of claim 6,

The subsequent step,

When the service server receives a result that payment is possible using the payment source according to the user identification information from the financial institution server, the service server further comprising the step of approving a payment request from the payment processing device,

Mobile automatic payment method.
The method of claim 2,

Receiving the user identification information,

Receiving, by the service server, the payment processing device identification information from the payment processing device;

Receiving, by the service server, the OTP generated by the payment processing device from the payment processing device;

Generating, by the service server, an OPT according to an OTP generation method corresponding to the payment processing device identification information; And

Comparing, by the service server, the OTP generated by the service server and the OTP generated by the payment processing device to check the validity of the payment processing device;

Including,

It characterized in that the subsequent step for approving the payment request is executed only when the validity of the payment processing device is confirmed,

Mobile automatic payment method.
The method of claim 2, wherein when the payment processing device detects the name of the short-range communication unit of the mobile device and the mobile device detects the name of the short-range communication unit of the payment processing device, the mobile device and the payment processing device are authenticated with each other. Characterized in that, mobile automatic payment method.
The method of claim 2,

Any one of the payment processing device and the mobile device recognizes the name of the short-range communication unit of the other device broadcasted by the other device among the payment processing device and the mobile device, and To measure the distance from the other device,

The service server, characterized in that, by receiving the distance from any one device, and executing a subsequent step for approving the payment request only when the distance is less than a preset distance,

Mobile automatic payment method.
The method of claim 2,

After the step of receiving user identification information from the payment processing device,

The service server further comprising the step of transmitting to the mobile device a short-range communication activation signal instructing the mobile device corresponding to the user identification information to switch the short-range communication mode of the mobile device to an ON state. ,

Mobile automatic payment method.
The method of claim 11,

The process of authenticating each other between the mobile device and the payment processing device,

Receiving, by the service server, the OTP generated by the mobile device from the payment processing device;

Generating, by the service server, an OPT according to an OTP generation method of the mobile device; And

Comparing, by the service server, the OTP generated by the service server and the OTP generated by the mobile device to check the validity of the mobile device;

Including,

Only when the validity of the mobile device is confirmed, performing a subsequent step for approving the payment request,

Mobile automatic payment method.
The method of claim 2, wherein the receiving of the user identification information comprises receiving, by the service server, at least one of real-time location information or communication access information of the payment processing device.
Receiving, by the service server, user identification information from the payment processing device;

Providing, by the service server, a short-range communication unit name of one of the payment processing device and a mobile device corresponding to the user identification information to another device; And

Receiving, by the service server, information indicating whether short-range communication between the payment processing device and the mobile device is possible from the payment processing device or the mobile device;

Including,

When the service server determines that short-range communication between the payment processing device and the mobile device is possible, execute a subsequent step for approving the payment request requested from the payment processing device using a payment source according to the user identification information. Is supposed to be,

The any one device is adapted to broadcast the name of the near field communication unit of the any one device,

Mobile automatic payment method.
15. The method of claim 14, wherein the name of the short-range communication unit of any one device is an OTP generated by the one device.