KR20020009062A - The Operating System of Processing to use encryption algorithm of User-certification and Credit-card data of a electronic commercial transaction on Computer networks - Google Patents

Abstract

PURPOSE: An electronic commerce method is provided to encode a user certification value and a card number by using a random number table so that it can prevent others from using credit card data by stealth though a credit card is stolen or hacking occurs at a web server system. CONSTITUTION: The method comprises steps of a user accessing a web site, the user inputting an ID and a password, a web server checking if an error occurs at a user certification, the web server allowing the user to access a shopping mall in the case that no error occurs at the user certification, the user selecting wanted commodities and a payment method at the shopping mall site, a payment server requesting the user to input a user certification value in the case that the user selects a credit card settlement as the payment method, the payment server checking if there exists an error at the user certification value, the payment server requesting the user to insert the member card in a card processing device installed at a user computer, the payment server decoding the card number, read from the member card, and the user certification, registered at the payment server, the payment server checking if there exists an error at the user certification value by comparing the decoded number with the input number(ST113), the payment server transmitting payment data to a corresponding card company(ST114), the payment server receiving payment approval data from the card company(ST115), the payment server storing the payment approval data or outputting payment error data(ST116,ST117), and completing the payment step(ST120).

Description

The operating system of processing to use encryption algorithm of User-certification and Credit-card data of a electronic commercial transaction on Computer networks}

The present invention relates to an electronic commerce using a computer network, which prevents another person from stealing the user's card information even if the user's membership card distributed offline is lost or copied, or the web server is hacked. It relates to an operating system and a path using a user authentication and card information encryption algorithm that makes it possible to secure the security of payment.

Due to the rapid development of communication technology, many people in the past have lived through the web network, and with the advent of the credit society, most adults own more than one credit card.

This explosive increase in the number of users of the web network generalized the construction of e-commerce sites for the sale of goods on the web, and the use of credit cards, a by-product of the credit society, has become a common payment method. .

However, behind the rapid development and popularization of communication technology, there are frequent cases of hacking a website and stealing huge amounts of other credit information stored in a web server. If you lose your card by using a real credit card or a card with credit card information (an input device such as a CD or RF / non-RF card), or if your card information is hacked while in transit, you will be protected almost unprotected. I'm watching. In addition, the encryption that is performed by leading companies as a means of guaranteeing the safety of customers also constitutes an encryption algorithm embedded with a pure card value, so that the damage to the user is unreasonable when decrypted by others.

Therefore, in order to solve this problem, the present invention encrypts the user authentication value and the card information set by the user using a membership card embedded with a random number provided in the offline state when the user accesses the website. The user authentication place value and card information place value corresponding to the random number table embedded in the membership card of the user are left. The result is that even if the web server is hacked, there is only the user authentication place value and card information place value that cannot be inferred without the random number, and the user's membership card is acquired and copied. Also, the lost membership card has only a random number irrelevant to user authentication and card information. This means that the user's authentication information and card information do not exist anywhere on the user's membership card or web server. Through such a series of processes, the operating system and the path using the user authentication and card information encryption algorithm are made, and the purpose of secure e-commerce payment is achieved by preventing the theft of card information by others.

1A and 1B are a flowchart of an operating system and a path using a user authentication and card information encryption algorithm in an electronic commerce using a computer network of the present invention.

Figure 2 is a flow chart of the membership operating system and path using the user authentication and credit information encryption algorithm in the present invention

Figure 3 is a block diagram of an operating system and path using user authentication and credit information encryption algorithm in electronic commerce using a computer network of the present invention.

Fig. 4 is a diagram showing card information subject to encryption and decryption in the present invention.

5 is a diagram showing definitions and examples of a random number sequence and a random number table serving as means for encryption and decryption in the present invention.

Fig. 6 is a diagram showing definitions of card information place values resulting from card information encryption and an example of encryption in the present invention.

Fig. 7 is a diagram showing the definition of user authentication place value resulting from user authentication encryption and an example of encryption in the present invention.

<Explanation of symbols for the main parts of the drawings>

110: Random number input device attached to the user's computer.

120: your computer

130: Web access network (TCP / IP, leased line, etc.)

140: commerce site web server

150: leased line connecting the commerce site and the card payment server

160: card payment server

170: leased line connecting the card payment server and card company / bank payment server

180: card company / bank payment server

In the electronic commerce using the present invention computer network for this purpose, the operating system and the path using the user authentication and card information encryption algorithm are connected to the website and the user's other information (user name, address, user ID / password, Etc.) and complete the membership registration process by encrypting the user authentication number and card information set by the random number embedded in the membership card (CD, RF / non-RF type card, etc.) supplied offline. Registering a user;

After the user registration step is completed, the user accesses the website, enters a user identification (ID / PASSWORD) process, accesses the commerce shopping mall, selects a number of products desired by the user and selects the card payment as a payment method Early stages of commerce;

Through the initial stage of the e-commerce, the user enters his user authentication value into the window, and the user is required to input the member card value with the random number embedded through the membership card input device. The web server receiving the value decrypts the user authentication value by using the membership card value with the embedded random number table and the user authentication place value stored in the web server when registering the user, and compares the decrypted user authentication value with the user authentication value input from the user. If the values match, the web server decodes the actual card information value by using the member card value embedded with the random number input from the user and the user card information place value stored in the web server when registering the user. An intermediate step of the e-commerce transmitting the card payment value;

The card company, which has received the card payment value through the middle stage of the e-commerce, transmits the approval of the payment and the error value to the commerce site. If the payment is the approval, the commerce site is required for the information and delivery of the item selected by the user. After saving the user's other information (user name, address, user ID, etc.) and the authorization value, the card approval value and product information value are output to the user and terminated. If the card payment is an error, the commerce site displays the error value of the payment. Completion of the e-commerce transaction to end the card payment with the output of; Through this series of steps is characterized in that the payment is completed.

With reference to the accompanying drawings, an operating system and a path using a user authentication and card information encryption algorithm in an electronic commerce using the present invention computer network made as described above will be described in detail.

Fig. 4 is a diagram showing card information subject to encryption and decryption in the present invention. In Fig. 4, (a) shows the components of the card information (20 digits), and (b) shows an example of the card number, the card expiration date, and the card information.

Fig. 5 is a diagram showing definitions and examples of a random number sequence and a random number table serving as means for encryption and decryption in the present invention. In FIG. 5, (d) shows a definition and example of a random number sequence, (e) shows a definition of a random number table and an example of a random number table, and (c) shows components of a random number table (200 digits). It is shown.

Fig. 6 is a diagram showing definition of card information place value resulting from card information encryption and an example of encryption in the present invention. In FIG. 6, (f) shows a definition of card information place value, an example of a place value, and (g) an encryption process in which the card information value generates a card information place value corresponding to a random number table. It is shown. If the card information place value and the random number correspond to each other, the decoding process for generating the card information value is performed in the reverse direction of the arrow.

Fig. 7 is a diagram showing the definition of the user authentication place value resulting from user authentication encryption and an example of encryption in the present invention. In FIG. 7, (h) shows a definition and an example of a user authentication value, (i) defines a user authentication place value, and (j) shows a user authentication value (less than 20 digits) and a random number table. It shows the encryption process to generate the user authentication place value correspondingly. Here, the random number string that does not correspond to the user authentication value is not used, and the decryption process in which the user authentication value is generated when the user authentication place value and the random number table correspond to the reverse direction of the arrow is performed.

2 is a flowchart of a membership operating system and a path using a user authentication and credit information encryption algorithm according to the present invention. In FIG. 2, the user S101 accesses a website (S102), selects a member registration (S103), and inputs other information (user name, address, user ID / password, etc.) of the user in an input window ( In step S104, the user inputs a user authentication value arbitrarily determined by the user and card information ([FIG. 4]) to be used by the user (S105). The web server requests the user to input a user's random number table embedded in a membership card (CD, RF / non-RF card, etc.) supplied offline through the member card input device 110 (S106). If there is an error by calculating whether there is an error in the input value (S107), if there is an error, the error content is output (S108) and the user returns to the step of inputting other information (S104). User authentication value arbitrarily determined by the user using the random number table value, the user's card information value is encrypted ([Fig. 7-j], [Fig. 6-g]) to the payment server 160 user other information, user authentication The place value and the user card information place value are stored (S109), and the user information and the user authentication value are output to the user together with the registration completion message (S110) and the registration is terminated (S111). It should be noted that the web server stores the user authentication position value and the user card information position value without storing the user authentication value and the user's card information value arbitrarily determined by the user.

1A and 1B are flowcharts of an operating system and a path using a user authentication and card information encryption algorithm in an electronic commerce using a computer network of the present invention. In Fig. 1A and 1B, the user ST101 accesses a website (ST102), inputs an ID and a password to confirm the user (ST103), and the web server calculates whether there is an error in the user confirmation (ST104). After that, if there is an error, it returns to the website access step (ST102). If there is no error, the user is allowed to access the commerce shopping mall (ST105). A user who accesses the commerce site (ST105) selects a product he wants to purchase (ST106) and selects a payment method (ST107). When the user selects the card payment (ST108), the payment server 160 requests the input of the user authentication value (ST109). If there is an error in the inputted user authentication value (ST110) and if there is an error, the authentication error information is output (ST111) and returned to the step of payment method selection (ST107) .If there is no error, the member installed in the user's computer A user member card value input (ST112) is requested through the card input device 110. The payment server 160 decrypts the user authentication place value using the member card value embedded with the random number input received from the user and the user authentication place value stored in the payment server when registering the user ([FIG. 7]). Compute the error (ST113) by comparing the digit value with the value entered through the user authentication value input process (ST109), and if there is an error, outputs the payment error (ST118) and ends the card payment (ST120). If there is not, the member card value embedded in the random number received from the user and the user card information stored in the web server at the time of user registration are decrypted using the actual card information value ([Fig. 6]) and the card payment value to the card company. Is transmitted (ST114). The payment server receives the value of the card payment result from the card company, calculates whether the card payment result is approved (ST115), if it is an error, outputs a payment error value (ST117), and ends the card payment (ST120). If the user selects the item information, the user other information (user name, address, user ID, etc.) required for the delivery, the payment contents such as the authorization value (ST116) is stored, and then the card approval value and product information value to the user (ST119) and the card settlement ends (ST120).

As described above, the operating system and path using the user authentication and card information encryption algorithm in the electronic commerce using the computer network of the present invention leave the user authentication place value and the card information place value in the web server, not the actual user authentication value and the card information value. Even if a web server is hacked, there exists only a user authentication place value and a card information place value that cannot be inferred without the random number. Also, even if a user's membership card is acquired and copied, it is lost. The membership card has only a random number that is independent of user authentication and card information. Through this series of processes, the present invention has the effect of contributing to the safety of credit information and the activation of electronic commerce by blocking the possibility of personal information hacking that can be stolen offline and online.

Claims (5)

In electronic commerce using computer network, user accesses website and registers other information (user name, address, user ID / password, etc.) in operating system and path using user authentication and card information encryption algorithm and is offline. Using the random number embedded in the membership card (CD, RF / non-RF type card, etc.) supplied by the user, the user authentication number and the card information value set by the user are encrypted with the user authentication place value and the card information place value to the web server. A user registration method of completing a member registration through an encryption operation process of storing the user authentication number and the card information value instead of the user authentication number and the card information value; In e-commerce using a computer network, a random number sequence (10 digits not overlapping from 0 to 9) and a random number table (10 digits not overlapping from 0 to 9) in the operating system and path using user authentication and card information encryption algorithm A membership card encryption method for embedding a bundle of random numbers connected in a user's membership card; In electronic commerce using a computer network, the number of digits of the card information input from the user in the operating system and the path using the user authentication and card information encryption algorithm is stored in each random number column of the random number table embedded in the member card value input by the user. A method of encrypting the position of the number in the random number sequence corresponding to the number of card information by using the corresponding card information place value sequentially; Position of each random number column indicated by each digit of the card information place value by sequentially matching each digit of the card information place value stored in the web server to each random sequence of the random number table embedded in the member card value inputted by the user Decoding the number in the value into a card information value; In electronic commerce using a computer network, the number of digits of the user authentication value input from the user in the operating system and the path using the user authentication and card information encryption algorithms is stored in each random number column of the random number table embedded in the member card value input by the user. A method of encrypting the positions of the numbers in the random number sequence corresponding to the user authentication numbers with the user authentication place values in sequence; Position of each random number string indicated by each digit of user authentication place value by sequentially matching each digit of user authentication place value stored in web server to each random sequence of random number table embedded in the member card value inputted by user Decrypting the number in the value into a user authentication value; A user authentication method for confirming a user through a comparison operation between a user authentication value obtained through the method of decrypting the user authentication value and a user authentication value directly input by the user; According to claim 1, after the user registration step is completed, the user accesses a website, enters a user identification (ID / password) process, accesses a commerce shopping mall, selects a plurality of products desired by the user, and pays the card as a payment method. Through the initial stage of e-commerce selection, the user inputs his / her user authentication value into the payment window and sends it. The user is asked to input a member card value with a random number through the membership card input device. The web server receiving the member card value decrypts the user authentication value using the member card value with the random number embedded and the user authentication value stored in the web server when registering the user.The decrypted user authentication value and the user authentication value input from the user If the value is matched, the web server randomly inputs the user. Decode the actual card information value by using membership card value with embedded table and user card information place value stored in web server when registering user and pay the card payment value (card information value, product information value for payment, product) A user authentication method and a transmission method of payment of an e-commerce transmitting a user identification value required for delivery;