KR20030088603A - System and Method for Settlement Using Wireless Terminal - Google Patents

Abstract

The present invention provides a payment system and method using a wireless terminal to perform a user authentication based on the electronic certificate so that payment can be made stably.

In the payment method using a wireless terminal, a user authentication system provides user authentication information to a POS terminal to pay for a product, and the user authentication system receives user authentication information and product purchase history from the POS terminal, and receives the user authentication system. Transmitting a purchase confirmation message to the wireless terminal number included in the authenticated user authentication information; as the user who receives the purchase confirmation message performs the electronic signature, the user authentication system receives the encrypted electronic signature value; After verifying whether the user is a legitimate user by decrypting the electronic signature value, if the user is a legitimate user, transmitting the purchase details to the billing server, performing the payment processing at the billing server and transmitting the processing result to the user authentication system.

According to the payment system and method as described above, it is possible to improve the reliability of the payment using the wireless terminal.

Description

Payment system and method using a wireless terminal {System and Method for Settlement Using Wireless Terminal}

The present invention relates to a payment system and method using a wireless terminal, and more particularly, to a payment system and method using a wireless terminal to perform a user authentication based on the electronic certificate to make a stable payment.

With the development of communication technology and the proliferation of portable wireless terminals, wireless terminals have become an essential element of life for modern people. As the use of wireless terminals has become more common, various services have been proposed to provide more useful and systematic information to users of wireless terminals, and many of them have been implemented in practice.

As one example, payment services for users who purchase goods on the Internet to pay for the goods using a wireless terminal have already been popularized. Recently, a wireless card has a credit card or a built-in credit card function for offline use. A service that enables payment of a purchased product to a wireless terminal is being executed.

However, the offline electronic payment service currently in service has a problem that reliability cannot be guaranteed because other users can authenticate the user even if the wireless terminal is lost. A payment method using a wireless terminal currently being used will be described with reference to FIG. 4.

When the user of a wireless terminal who has purchased a product offline intends to make a payment with the wireless terminal (S401), the user terminal (RF chip, barcode, etc.) of the wireless terminal is read by the POS terminal and the user information (password, etc.) is inputted. S402). Thereafter, the purchase details of the user are input and transmitted together with the terminal information and the user information to the wireless network operator (S403). The wireless network operator authenticates whether the user is a legitimate user according to the transmitted terminal information and the user information (S404), and when the user is authenticated as the legitimate user, requests that the payment be made to the charging server (S405). Here, the charging server may be any one of a wireless network operator, a bank, and a card company as the wireless terminal user selects a payment method.

The billing server makes a payment according to the user information and the purchase price information transmitted from the wireless network provider (S406), and transmits the payment result to the wireless network provider (S407). Thereafter, the wireless network operator transmits that the payment has been processed to the POS terminal (S408), and accordingly outputs a receipt from the POS terminal (S409) and provides it to the user.

As such, in the current offline payment method using a wireless terminal, payment can be made only if the wireless terminal and simple user information can be presented. Therefore, security cannot be maintained when the wireless terminal is lost or stolen, thereby making inappropriate payment by a third party. Will be monetary and mentally damaged.

On the other hand, recently, public key infrastructure (PKI) authentication technology in wireless terminals has been actively researched and standardized. Since the wireless communication environment needs to easily expose information and use limited resources, the PKI structure in the wired communication environment cannot cope with the wireless communication environment properly. The wireless PKI technical standard is designed to establish appropriate security measures in wireless communication environment, to ensure interoperability of certificates among accredited certification bodies, and to ensure interoperability between related products.

The present invention has been made to solve the above problems, and provides a payment system and method using a wireless terminal that can improve the security of the user authentication when paying for goods purchased offline using a wireless terminal. There are technical challenges.

Another technical problem of the present invention is a payment system and method using a wireless terminal that can improve the reliability of electronic payments by performing user authentication using a wireless terminal equipped with a PKI module when paying for goods off-line. To provide.

1 is a view for explaining the configuration of a payment system using a wireless terminal according to the present invention;

2 is a schematic block diagram of a wireless terminal according to the present invention;

3 is a flowchart illustrating a payment method using a wireless terminal according to the present invention;

4 is a flowchart illustrating a conventional payment method using a wireless terminal.

<Description of the symbols for the main parts of the drawings>

10: wireless terminal 20: POS terminal

30: user authentication system 40: billing server

50: PKI Module 60: Electronic Certificate

70: user authentication information providing means

The present invention for achieving the above technical problem is a method for performing a payment using a wireless terminal having a public key-based authentication module, a user authentication system for receiving user information and purchase history from the POS terminal to perform user authentication In the communication network having a billing server connected to the user authentication system and paying for the goods purchased by the user, the user authentication by providing the user authentication information to the POS terminal to pay for the goods, Receiving, by the system, the user authentication information and the product purchase history from the force terminal; Transmitting, by the user authentication system, a purchase confirmation message including a product purchase history to a wireless terminal number extracted from the user authentication information; Receiving, by the user authentication system, an electronic signature value encrypted by the public key based authentication module as a user who receives the purchase confirmation message performs an electronic signature; Decrypting the received electronic signature and confirming that the user is a legitimate user, and transmitting the purchase details to the billing server in case of a legitimate user; And performing a payment processing at the billing server and transmitting the processing result to the user authentication system.

Here, the user authentication information may be provided through the user authentication information providing means mounted in the wireless terminal, or may be provided using any available means capable of authenticating the user offline, such as an ID card or a credit card. In addition, the user authentication information providing means may be implemented by any one of a bar code reflecting the user authentication information, a short-range wireless communication chip including the user authentication information, in particular the short-range wireless communication chip IrFM, any of the wireless interface including a Bluetooth chip It can be configured as one. The billing server may be any one of a billing server of a wireless network operator, a billing server of a bank company, a billing server of a credit card company, and a billing server of an electronic money provider.

In addition, the present invention is a system for paying the price of goods using a wireless terminal equipped with a public key-based authentication module, the user authentication information and product purchase information from the POS terminal for payment of goods purchase price of the user of the wireless terminal A user authentication system that receives a transmission, transmits a purchase history to the wireless terminal, receives an encrypted electronic signature value from the wireless terminal that has received the purchase history, and decrypts the electronic signature value to perform user authentication; And a billing server connected to the user authentication system and configured to pay for the corresponding goods when the user of the wireless terminal is determined to be a legitimate user by the user authentication system.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view for explaining the configuration of a payment system using a wireless terminal according to the present invention, Figure 2 is a schematic block diagram of a wireless terminal applied to the present invention, Figure 3 using a wireless terminal according to the present invention It is a flowchart for explaining a payment method.

1 and 2, the wireless terminal 10 is equipped with a PKI module 50 including an electronic certificate 60 used for electronic signature, and capable of short-range wireless communication with the force terminal 20. Environment is provided, and user authentication information providing means 70 may be provided as needed. As the user inputs the user authentication information to the force terminal 20 by using any one of the user authentication information providing means 70, the identification card, and the credit card of the wireless terminal 10, the force terminal 20 is a wireless terminal ( 10) The information, the user authentication information and the purchase history is transmitted to the user authentication system 30 to request that the user is authenticated as a legitimate user.

The user authentication system 30 issues and manages a public key certificate uniquely distributed to each wireless terminal 10, and encrypts the electronic signature value transmitted by the user of the wireless terminal 10 using his private key. This part performs user authentication by decrypting the digital signature value with the user's public key. When the POS terminal 20 requests user authentication, the user authentication system 30 notifies the wireless terminal 10 of the purchase history, and the PKI of the wireless terminal 10 is performed as the user of the wireless terminal 10 performs an electronic signature. The module 50 receives the encrypted electronic certificate 60 to perform user authentication. If it is determined that the user is a legitimate user by the electronic signature, the user authentication system 30 transmits the purchase history to the billing server 40 to process the corresponding amount.

The user can select a payment method before requesting a payment. The methods of payment include payment with a wireless communication service fee, payment from a bank deposit, payment by credit card, and electronic money. have. In addition, depending on which payment method the user selects, the billing server may be one of a billing server of a wireless network operator, a billing server of a bank, a billing server of a credit card company, and a billing server of an electronic money provider.

In addition, the user authentication information providing means 70 may be implemented by any one of a radio interface such as a barcode reflecting user authentication information and a short range wireless communication chip (eg, IrFM, Bluetooth chip) including user authentication information.

Referring to Figure 3 describes how a user pays for goods using a wireless terminal offline.

As the user of the wireless terminal 10 intends to purchase a product selected offline by using the wireless terminal 10 (S301), the user authentication information providing means 70, an identification card, a credit card, and the like includes unique information of the user. The user authentication information is input to the force terminal 20 by one of the means. The user authentication information may be an ID, a social security number, a wireless terminal number, and the like. The user authentication information providing means 70 may provide a user information to the POS terminal 20 using the user authentication information providing means 70. It may be implemented by any one of a wireless interface such as a barcode reflecting authentication information and a short range wireless communication chip (eg, IrFM, Bluetooth chip) including user authentication information. At this time, although not shown, the user of the wireless terminal 10 further performs a process of selecting a payment method. As a payment method, there is a method of paying with a wireless terminal fee, a method of paying from a bank deposit, a method of paying by a credit card, a method of using electronic money, and the like.

Subsequently, the POS terminal 20 transmits the input user authentication information and the product purchase information to the user authentication system 30 to request whether the user is a legitimate user (S302). Upon receiving the authentication request, the user authentication system 30 extracts the wireless terminal number and the purchase details from the user authentication information received from the POS terminal 20, and transmits the purchase history information and the payment information to the corresponding wireless terminal 10. (S303). The purchase history is preferably transmitted using a short service method.

Upon receiving the purchase confirmation message including the purchase information and the payment information, the wireless terminal 10 checks the corresponding details and electronically signs using the electronic certificate 60 and the private key included in the wireless terminal 10. (S304). The digital signature value is encrypted in the PKI module 50 and transmitted to the user authentication system 30 (S305), and the user authentication system 30 receiving the digital signature decrypts the received information with the public key distributed to the user. Check whether it is (S306). In the present invention, as described above, the purchase information transmitted from the POS terminal 20 to the user authentication system 30 is confirmed by the user's wireless terminal 10, and if the purchase details are correct, the electronic signature is performed, so that the seller purchases Manipulation or forgery of information or payment information can be prevented.

If the user verification result of the user authentication system 30 is determined to be a legitimate user, the user authentication system 30 transmits an approval message including user information, payment method, purchase history, etc. to the billing server 40 to process the payment. Request (S307). The billing server 40 may be any one of a billing server of a wireless network operator, a billing server of a bank, a billing server of a credit card company, and a billing server of an electronic money provider according to which payment method the user selects.

Receiving the approval message, the charging server 40 performs a payment process according to the purchase price (S308), and transmits the result to the user authentication system 30. Thereafter, the user authentication system 30 transmits the payment approval result to the POS terminal 20 (S310), issues a receipt at the POS terminal (S311), and provides the user with a payment process.

As can be seen from the above description, the user of the wireless terminal 10 encrypts the electronic certificate by using his / her own private key to encrypt the digital certificate, and the user authentication system 30 applies the public key distributed to the user. By decrypting the encrypted electronic certificate, user authentication can be performed while maintaining security.

This solves the problem of not being able to accurately authenticate the user in the offline payment method that simply combines the credit card function with the wireless terminal, and the seller manipulates the transaction history, which may damage the user and the seller in the commerce using the wireless terminal. Can be prevented. The user can also select the payment method for the commodity as he / she desires, thereby improving the efficiency of using the low-use electronic money offline.

As such, those skilled in the art will appreciate that the present invention can be implemented in other specific forms without changing the technical spirit or essential features thereof. Therefore, the above-described embodiments are to be understood as illustrative in all respects and not as restrictive. The scope of the present invention is shown by the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. do.

As described above, according to the present invention, by performing a user authentication using a wireless terminal equipped with a PKI module and paying the product price only when the user is authenticated as a legitimate user, the seller can accurately authenticate the user and the user. Since the seller can prevent damages that may be caused by manipulating the purchase information, it is possible to improve the reliability of the payment using the wireless terminal.

In addition, the user can select the payment method that the user wants from among various payment methods such as payment with the wireless communication service fee, payment with a bank deposit, payment with a credit card balance, and payment with electronic money. It is possible to improve the utilization rate of the electronic money which has a low usage rate offline.

In addition, there is no need to carry a separate payment method such as credit card, cash, etc., so that you can escape from the risk of theft. If you lose your wireless terminal, you can use the PKI-based electronic authentication method. Material damage can be reduced.

Claims (12)

A method of performing a payment using a wireless terminal having a public key based authentication module, the method comprising: a user authentication system receiving user information and a purchase history from a POS terminal and performing user authentication, wherein the user is connected to the user authentication system In a communication network having a billing server that pays for purchased goods, Receiving, by the user authentication system, the user authentication information and the product purchase history from the force terminal as the user intends to pay the product price by providing user authentication information to the force terminal; Transmitting, by the user authentication system, a purchase confirmation message including a product purchase history to a wireless terminal number extracted from the user authentication information; As the user receiving the purchase confirmation message performs an electronic signature, the user authentication system receiving an electronic signature value encrypted by the public key based authentication module; Decrypting the received electronic signature and confirming that the user is a legitimate user, and transmitting the purchase details to the billing server in case of a legitimate user; Performing payment processing at the billing server and transmitting a processing result to the user authentication system; Payment method using a wireless terminal comprising a. According to claim 1, The user authentication information is a payment method using the wireless terminal provided by any one of the user authentication information providing means mounted on the wireless terminal, the user's identification card, credit card. The method of claim 2, The user authentication information providing means is a payment method using a wireless terminal implemented by any one of a bar code reflecting user authentication information, a short-range wireless communication chip containing user authentication information. According to claim 1, The wireless terminal is a payment method using a wireless terminal for performing wireless communication with the force terminal by any one of a wireless interface including an IrFM, Bluetooth chip. According to claim 1, Receiving user authentication information and product purchase history from the wireless terminal in the user authentication system further comprises the step of receiving a payment method selected from the wireless terminal. The method of claim 5, The payment method may be any one of a method of paying with a wireless communication service fee, a method of paying from a bank deposit, a method of paying by a credit card, and a method of using electronic money. According to claim 1, The purchase confirmation message is a payment method using a wireless terminal for transmitting in a short service method. A system for making a payment for a product using a wireless terminal equipped with a public key based authentication module, Receiving the user authentication information and the product purchase information from the POS terminal for payment of the goods purchase price of the user of the wireless terminal, transmits the purchase history to the wireless terminal, encrypted electronic signature from the wireless terminal received the purchase history A user authentication system that receives a value and decrypts the digital signature value to perform user authentication; And A billing server connected to the user authentication system and configured to pay for the goods when the wireless terminal user is found to be a legitimate user by the user authentication system; Payment system using a wireless terminal having a. The method of claim 8, The wireless terminal further comprises a user authentication information providing means for storing user information payment system using a wireless terminal. The method of claim 9, The user authentication information providing means is a payment system using a wireless terminal to implement any one of a bar code, a short-range wireless communication chip. The method of claim 10, The wireless terminal is a payment system using a wireless terminal for wireless communication with the POS terminal by a wireless interface including an IrFM, Bluetooth chip. The method of claim 8, The billing server is a billing system of a wireless network operator, a billing server of a bank company, a billing server of a credit card company, a billing server of an electronic money provider.