KR100405628B1 - Electronic Commercial Transaction Methodd Using Storage Means - Google Patents

Abstract

The present invention stores personal credit / identification / management information and a random number table in an optical storage medium, and selects a payment method by the optical storage medium as a payment means, and authenticates a user using this personal credit / identification / management information and a random number. The present invention relates to an electronic commerce method using an optical storage medium for electronic commerce.

An electronic commerce method in an electronic commerce system using such an optical storage medium includes: a first step of a user selecting a payment method using a storage medium after accessing the electronic commerce server using the terminal to select and order a product; When the terminal reads the random number according to the personal credit / identification / management information and the index from the storage medium and a secret key is input from the user, the terminal transmits the personal credit / identification / management information and the index, the random number, and the secret key to the authentication server. Transmitting a second step; A third step of, when the user confirms the purchase, the e-commerce server confirms a payment date for each product and transmits it to the authentication server, and transmits the transaction result to the information receiving means of the party user of the storage medium; Receives personal credit / identification / management information, index, random number, and secret key sent from the terminal to check the credit status of the card and whether the current user is a party user, and transmits the result to the e-commerce server. A fourth step of generating a secret key for transmitting the information to the information receiving means of the party user of the storage medium; And a fifth step in which the e-commerce server delivers the ordered product to the user according to the user's credit status and personal identification result, and the authentication server performs the payment on the payment date for each product.

Description

Electronic Commercial Transaction Methodd Using Storage Means}

The present invention relates to an electronic commerce method using an optical storage medium, which will be described in more detail. The personal credit / identification / management information and a random number table are stored in an optical storage medium. The present invention relates to a method of electronic commerce using a storage medium that enables electronic commerce by authenticating a user using personal credit / identification / management information and a random number.

The Internet began with the ARPANET for sharing information about military research in the US Department of Defense, and is now a huge, efficient information storage and information delivery medium with numerous computer networks around the world. The Internet is used for various purposes such as e-mail, newsgroups, file transfers, information transmission and retrieval, etc., and as the number of networks connected to the Internet and the number of Internet users increase, the commercial use of the Internet, or electronic commerce, It is spreading rapidly.

Electronic commerce is a transaction in which all or part of a transaction of goods or services is processed by electronic means such as electronic document exchange. E-commerce is similar to commerce in the real world, where all entrepreneurs are involved. In the simplest case of electronic commerce, a cyber mall that provides goods or services, a consumer who purchases goods or services in a store, a virtual bank or credit card company that is involved in a financial relationship with the product, etc. Becomes the subject of.

9 is a block diagram illustrating a structure of a general electronic commerce system, and FIG. 10 is a flowchart illustrating a general electronic commerce process by the system of FIG. 9.

9 and 10, first, a consumer connects to an operator computer 3 of a virtual store, that is, an e-commerce site, through an internet communication network 2 using a terminal connected to the Internet such as a personal computer 1 (S1). . When the consumer finds a product he / she wants to purchase in the e-commerce space, he places an order to purchase the product (S2). The operator computer 3 then asks the user to confirm a payment method such as a credit card number and a password. When the user enters the credit card number to confirm the payment method (S3), the operator computer connects to the credit card company's computer 4 via the VAN and requests an inquiry about the consumer's credit card number and payment amount. At this time, when the authentication confirmation signal is generated from the computer 4 of the credit card company (S4), the operator computer 3 notifies the consumer that the transaction has been established and completes the corresponding electronic commerce (S5).

In the case of a payment method using such a credit card, the use of the credit card is being avoided due to a concern about illegal use of another credit card due to the leakage of the credit card number, which is an obstacle to the activation of electronic commerce.

In other words, in the general e-commerce site authentication process, illegal use of the credit card number occurs because the user only needs to input the credit card number of the user or inputs a simple personal information such as a social security number or a password of the credit card. In this case, the user is economically and mentally harmed.

In particular, the existing credit card is easily duplicated when lost, so there is a high possibility of fraud, and the authentication process is simple, so that the user's identity verification process is not completely performed. In addition, because of the above-mentioned reasons, the general users to avoid the e-commerce, thereby making it difficult to operate the e-commerce site has a problem that acts as a factor that hinders the activation of the e-commerce.

The present invention has been made to solve the problems of the prior art as described above, the object of which is that the user directly by card number by performing a user authentication procedure using a personal credit / identification / management information and a random number stored in an optical storage medium An object of the present invention is to provide an electronic commerce method using an optical storage medium that enables electronic commerce to be performed safely without entering.

In addition, another object of the present invention is to reduce the time required to perform the e-commerce by simplifying the user authentication process when the transaction amount is a small amount by varying the user authentication method according to the transaction amount, if the user is a large amount The purpose of the present invention is to provide an electronic commerce method using an optical storage medium that can improve the reliability of user authentication by thoroughly performing the authentication procedure.

In addition, another object of the present invention, after the user orders the goods by sending the order result to the user's registered information receiving means of the party user, and after receiving the order confirmation from the user to determine whether to make a payment, An object of the present invention is to provide an electronic commerce method using an optical storage medium that prevents acts.

In addition, another object of the present invention, by specifying the date of payment on the e-commerce site after the delivery date, giving the user the opportunity to object to the purchase goods before the payment date after delivery of the product, the user's reliability It is to provide an electronic commerce method using an optical storage medium to activate the electronic commerce by improving the.

1 is a block diagram showing an electronic commerce system using an optical storage medium according to the present invention,

2 is a flowchart illustrating an electronic commerce method using an optical storage medium of a client and an electronic commerce server according to the present invention;

3 is an operation flowchart illustrating a personal identification / credit authentication / payment process of the authentication server according to the present invention;

4 is a view showing the structure of an optical storage medium according to the present invention;

5 is a diagram illustrating an example of a random number table stored in an optical storage medium and an authentication server according to the present invention;

6 is an operation flowchart illustrating a random number determination process in a client and a secret key determination process in an e-commerce server according to the present invention;

7 is a diagram illustrating an example of a data model stored in a purchase information database according to the present invention;

8 is a diagram illustrating an example of a data model stored in a payment date database for each product according to the present invention;

9 is a block diagram showing the structure of an electronic commerce system according to the prior art;

10 is a flowchart illustrating an electronic commerce method according to the prior art.

* Explanation of symbols for the main parts of the drawings

11 optical storage medium 12 CD drive

13: Web based terminal 14: Internet

15: e-commerce server 16: authentication server

17: card company

The electronic commerce method in the electronic commerce system using the optical storage medium according to the present invention for achieving the above object, the user accesses the electronic commerce server using the terminal to select and order goods on the storage medium A first step of selecting a payment method; When the terminal reads the random number according to the personal credit / identification / management information and the index from the storage medium and a secret key is input from the user, the terminal transmits the personal credit / identification / management information and the index, the random number, and the secret key to the authentication server. Transmitting a second step; A third step of, when the user confirms the purchase, the e-commerce server confirms a payment date for each product and transmits it to the authentication server, and transmits the transaction result to the information receiving means of the party user of the storage medium; Receives personal credit / identification / management information, index, random number, and secret key sent from the terminal to check the credit status of the card and whether the current user is a party user, and transmits the result to the e-commerce server. A fourth step of generating a secret key for transmitting the information to the information receiving means of the party user of the storage medium; And a fifth step in which the e-commerce server delivers the ordered product to the user according to the user's credit status and personal identification result, and the authentication server performs the payment on the payment date for each product.

Preferably, the random number determination process of the second step may include generating a random number by driving a random number generation algorithm, determining an index using the random number, and determining a random number according to the index. It is characterized by including.

Preferably, the method for generating a secret key for the next transaction of the fourth step includes a method of determining a number based on the number of transactions as a secret key, and a method of determining a random number as a secret key by driving a random number generation algorithm. At least one of the method of determining the index used in the transaction as a secret key, or the method of setting a fixed number set by the user as a secret key.

Preferably, the payment date for each product of the third step is determined by adding a certain date to a larger date by comparing a buyer's desired delivery date and a physical delivery date for each product according to a distance after a delivery instruction.

Preferably, the fourth step is characterized in that the authentication server confirms the purchase price range when the user confirms the transaction, and further requires input of additional authentication information according to the purchase price range.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The e-commerce system according to the present invention is as shown in FIG. That is, a client (user) who wishes to purchase a product using an optical storage medium 11 and accesses the Internet 14 using a web-based terminal 13, and stores an electronic catalog for the product. An e-commerce server 15 for providing a product to a client and performing various procedures for selling the product to a client, and a card company by authenticating whether a party user of the client who wants to purchase the product through the e-commerce server 15 and verifying a credit And an authentication server 16 to be settled through (17). The authentication server 16 issues an optical storage medium 11 that can be used for electronic commerce to the user, stores the same random number table as the random number table stored in the optical storage medium 11, and uses the same for user authentication. In addition, the e-commerce server 15 and the authentication server 16 stores information on the information receiving means (e-mail, personal mobile communication and data communication terminal) of the party user of the optical storage medium 11 Send the secret key for the result or transaction.

The client connects to the e-commerce server 15 and the authentication server 16 using a web-based terminal 13 capable of accessing the Internet network, wherein the terminal includes a personal computer capable of accessing the Internet network and a personal mobile communication terminal. Included. Such a terminal has a built-in or connected CD driver 12 for reading data recorded on an optical storage medium. Optical storage media with embedded content include CD-ROMs, CD-RWs, and DVDs. In addition, a smart card may be used instead of the optical storage medium.

2 is an operation flowchart illustrating an electronic commerce method using an optical storage medium of a client and an e-commerce server according to the present invention, Figure 3 is a personal identification / credit authentication / payment method of the authentication server according to an embodiment of the present invention It is an operation flowchart showing.

2 and 3, when the client accesses the e-commerce site through the terminal (C1), the e-commerce server transmits the initial screen to the terminal of the client (E1). When the client performs a process of selecting and ordering goods according to a predetermined procedure (C2), the e-commerce server provides the client with information about the goods / price / delivery according to the procedure (E2).

After the order is completed, the client may select one of payment methods such as a payment method using an optical storage medium, a general credit card payment method, a bank transfer payment method, a debit card payment method, and a bank account payment method. Payment methods other than the payment method using the optical storage medium is a payment method widely used in the existing e-commerce site, the detailed description thereof will be omitted in the present specification to explain the card payment method using the optical storage medium. do.

That is, when the client selects the payment method using the optical storage medium (C3), the authentication server provides the payment screen to the terminal of the client (A1). At this time, the terminal of the client operates the CD drive to read the personal credit / identification / management information and the random number recorded in the optical storage medium (C4). The personal credit / identification / management information includes the card number of the client and the expiration date of the card, and is transmitted together with the random number in the index of the corresponding random number. In addition, the client enters the given secret key into the payment screen (C5). The terminal of the client transmits information for user authentication such as personal credit / identification / management information and random number read from the optical storage medium, and a secret key entered by the client (C6), and the authentication server is configured for this user authentication. Receive information (A2).

The client, which has transmitted the information for user authentication, transmits purchase information about a product to be purchased (C7), and the purchase information of the client is simultaneously transmitted to the e-commerce server and the authentication server. The e-commerce server receives the purchase information of the client (E3) and performs the remaining steps for the e-commerce. Meanwhile, the authentication server receiving the information for the user authentication and the purchase information performs the user authentication process using the received information.

First, referring to the e-commerce process between the client and the e-commerce server, the e-commerce server stores the purchase information of the client in the purchase information database, calculates the payment date for each product (E4) and stores it in the payment date database for each product. At this time, the payment date calculation method for each product is determined by adding a certain date to the larger date by comparing the buyer's desired delivery date and the physical delivery date for each product according to the distance after the delivery instruction.

The e-commerce server transmits the payment date for each product calculated above to the authentication server (E5), and transmits the transaction result to the client (E6). At this time, the transaction result is transmitted by using the information receiving means of the registered party user, and uses a data communication service such as an e-mail of the party user or a short message service (SMS) of a personal mobile communication terminal.

On the other hand, if the authentication server receives the personal credit / identification / management information and random number, secret key from the client (A2), and checks the validity period of the card (A3). If the validity period has elapsed, the transaction is stopped. If the validity period has not elapsed, the random number and the secret key according to the index are checked (A4). If the random number and the secret key are wrong, the transaction is invalidated. If the random number and the secret key are correct and the purchase information is received from the client (A5), the range of purchase amount included in the purchase information is checked (A6).

Various authentication means can be used according to the range of purchase amount, and may further require user authentication information such as biometric information (A7), digital signature (A8), and user authentication by electronic authentication (A9) method through a certification authority. Can be done. The authentication server transmits the personal identification result through the various user authentications to the e-commerce server (A10), and receives the payment date for each product from the e-commerce server (A11).

The e-commerce server receives the personal identification and credit result from the authentication server (E7), and if there is no problem in the credit status, instructs delivery of the purchased goods (E8). After the arrival of the product (C9), the client may challenge the transaction result or the delivery product until the payment date (C10). If there is an objection from the client, the e-commerce server confirms the transaction product (E9) and informs the authentication server of the objection result. The authentication server confirms the user objection (A12), if there is no objection, pays for the purchased product (A13), and if there is an objection, cancels the transaction (A14).

As mentioned above, the data structure of the optical storage medium used for electronic commerce is shown in FIG.

Referring to FIG. 4, the optical storage medium includes a head, a personal credit information unit (CDCI), a personal identification information unit (PII), a random number table (RNT), and a personal management information unit (PMI). The head allows reading / writing of data at the head of the optical storage medium. Personal credit information (CDCI: Credit or Debit Card Information) is a channel accessible through the head, the credit card information and debit card information according to the ISO 3554 and ISO 4909 standards are stored. The Personal Identification Information (PII) stores information about a digital signature, biometric information, and a digital certificate to identify a user. The Random Number Table (RNT) stores a plurality of indexes used for personal credit authentication and a random number linked thereto. Personal Management Information (PMI) stores a unique serial number printed so that a user can distinguish it, a transaction code using various cards or cash, and a transaction confirmation contact number. Between each section, a record separator (RS) is used, which is used to identify logical boundaries.

5 is a diagram illustrating an example of a random number table stored in an optical storage medium and an authentication server according to the present invention. In the random number table, an index and a random number are linked to exist in a table format. In the optical storage medium, one random number table is stored, but the authentication server stores random number tables for each optical storage medium.

6 is an operation flowchart illustrating a random number determination process in a client and a secret key determination process in an e-commerce server according to the present invention.

Referring to FIG. 6, the terminal of the client drives a random number generation algorithm to determine a random number (S41) and generates a random number (S42). The random number index is determined by the random number (S43), and the random number corresponding to the index is determined (S44). If a secret key is input from the outside (S45), the terminal of the client transmits the index, the random number, and the secret key to the authentication server (S46). At this time, information about the optical storage medium is also transmitted.

When the authentication server receives information on the index, random number, secret key, and optical storage medium (S47), the received random number by index is compared with the random number by index stored in the server (S48). The key and the secret key stored in the server are compared (S49).

In addition, the authentication server generates a secret key for the next transaction (S50), and transmits the generated next transaction secret key through the information receiving means of the party user of the optical storage medium (S51). This information receiving means includes data communication services such as electronic mail of political party users or SMS of personal mobile communication terminals. The party user receives the next transaction secret key and keeps it well for use in the next transaction (S52).

Here, the method for determining the next transaction secret key by the authentication server includes a method of setting a number based on the number of transactions as a secret key, a method of setting a random number as a secret key by running a random number generation algorithm, and using a previous transaction. There are a method of setting an index as a secret key, a method of setting a fixed number set by a user as a secret key, and the like.

7 is a diagram illustrating an example of a data structure of a purchase information database according to the present invention. In other words, the purchase information database includes a transaction code, a product name, a product code, a buyer's name, a buyer's code, an order date, a delivery date, and a place of delivery.

8 is a diagram illustrating an example of a data structure of a payment date database for each product according to the present invention. That is, the transaction date, the product name, the product code, and the settlement date information are stored in the settlement date database for each product.

While the invention has been described above based on the preferred embodiments thereof, these embodiments are intended to illustrate rather than limit the invention. It will be apparent to those skilled in the art that various changes, modifications, or adjustments to the above embodiments can be made without departing from the spirit of the invention. Therefore, the protection scope of the present invention will be limited only by the appended claims, and should be construed as including all such changes, modifications or adjustments.

As described above, the electronic commerce method using the optical storage medium according to the present invention can accurately determine whether a user is a political party without inputting a credit card number, thereby preventing the illegal use of another person's credit card due to the leakage of the credit card number. There is a preventable effect.

In addition, if the transaction amount is small, the user authentication process can be simplified to reduce the time required for e-commerce, and in the case of a large amount, the user authentication procedure can be thoroughly improved to improve the reliability of user authentication. It can be effective.

In addition, the present invention is notified of the results of the transaction through the information receiving means (e-mail, data communication services such as SMS of the personal mobile communication terminal) possessed by the user, so that the payment is made when the ordered goods are delivered, After giving the user a chance to challenge, it has the effect of strengthening consumer rights.

Claims (9)

delete delete A computer-readable storage medium storing personal credit / identification / management information including a card number and a card expiration date, and a random number table linked to an index and a random number; A web-based terminal which reads out necessary information from the storage medium and transmits it together with a secret key input from a user; A web-based e-commerce server that stores electronic catalogs for products and provides them to the user and performs various procedures for selling the products to the user; And storing the same random number table as the storage medium, receiving information transmitted from the terminal, authenticating whether the user is a party user, verifying a credit, and paying a secret key for a transaction to the party user of the storage medium. In the e-commerce method in the e-commerce system including a web-based authentication server to inform, A first step of a user accessing the e-commerce server using the terminal to select and order a product, and then select a payment method using a storage medium; When the terminal reads a random number according to personal credit / identification / management information and index from the storage medium and a secret key is input from a user, the terminal authenticates the personal credit / identification / management information and index, a random number, and a secret key. Transmitting to the server; A third step of, when the user confirms the purchase, the e-commerce server confirms a payment date for each product and transmits it to the authentication server, and transmits a transaction result to a party user of the storage medium; The authentication server receives the personal credit / identification / management information, the index, the random number, and the secret key transmitted from the terminal to check the credit status of the card and whether the current user is a party user, and sends the result to the e-commerce server. A fourth step of generating a secret key for a next transaction and transmitting the secret key to a party user of the storage medium; And According to the user's credit status and personal identification results, the e-commerce server delivers the ordered goods to the user and the authentication server comprises a fifth step of performing a payment on the payment date for each product using a storage medium E-commerce method. The method of claim 3, wherein The random number determination process of the second step, Generating a random number by driving a random number generation algorithm; and determining an index by using the random number and determining a random number according to the index. The method of claim 3, wherein Secret key generation method for the next transaction of the fourth step, How to set a number based on the number of transactions as a secret key, how to set a random number as a secret key by running a random number generation algorithm, how to set an index used in a previous transaction as a secret key, or a fixed number set by a user An electronic commerce method using a storage medium, characterized in that at least one method of determining a secret key is used. The method of claim 3, wherein The payment date for each product of the third step, E-commerce method using a storage medium, characterized in that by adding a certain date to the larger date by comparing the physical delivery date for each product according to the buyer's desired delivery date and the distance after the delivery instruction. delete delete delete