KR20080029119A - How to approve electronic payment using a swap push message - Google Patents

Abstract

The present invention provides a payment approval method of an electronic commerce transaction, after the payment approval server generates an approval number, transmitting a confirmation number confirmation request message to a mobile terminal of the customer via a mobile communication network, Accessing a payment approval server, inputting a password and confirming the approval number, inputting an approval number to the customer computer, and transmitting the authorization number to the payment approval server, and approval of the payment approval server transmitted from the customer computer. It provides an electronic payment approval method comprising the step of determining whether the number matches the authorization number sent by the user.

According to the present invention, in the payment system that checks the approval number through the mobile terminal and performs the electronic payment, only the approval number confirmation request message is transmitted through the WAP to the mobile terminal of the customer, and the customer must enter the password on the WAP page for the approval number. Since the transmission of the other person using the duplicated mobile terminal can be prevented from performing the electronic payment without permission.

Description

Approval method of electronic payment using WAP push message}

1 is a configuration diagram showing an example of a conventional electronic payment system

2 is a signal flow diagram illustrating an electronic payment approval process according to an embodiment of the present invention.

* Explanation of symbols for the main parts of the drawings *

10: customer computer 12: mobile terminal

20: shopping mall server 30: payment approval server

40: mobile service provider server 50: Internet network

60: mobile network

The present invention relates to a method for approving an electronic payment, and more particularly, to an electronic payment approval method for improving security by allowing a predetermined approval number required for electronic payment to be confirmed through a wireless application protocol (WAP).

With the explosive growth of e-commerce through internet shopping malls, payment methods for goods or services are also becoming more diverse, such as credit card payments, bank transfers, telephone bill payments, and mobile phone bill payments.

However, in the case of credit card payment or bank transfer among such electronic payment, most of the information is encrypted and transmitted using an encryption module for security because it is necessary to input the credit card information or the account information of the buyer.

However, since the encrypted transmission is only for preventing the leakage of information generated in the communication process, it does not help to prevent electronic payments performed by the user who stolen or acquired another person's credit card or mobile terminal and used it maliciously. to be.

Therefore, in recent years, in order to increase the security of the payment process by checking whether the person making the payment is the customer, the payment server sends a predetermined authorization number to the mobile terminal of the customer by SMS message, so that the user inputs it through the computer. The method of approving the payment is also used only when the entered number and the transmitted authorization number match.

There are various types of electronic payment systems using the approval number, but the following describes the payment system introduced in Patent No. 466400 with reference to FIG. 1.

The electronic payment system is characterized in that the electronic payment using the subscriber authentication key generation program installed in the subscriber computer 10 and the subscriber credit information provided by the mobile communication service provider server 40, The mobile communication service provider server 40, the shopping mall server 20, and the payment approval that communicate with the mobile terminal 12 through the computer 10, the mobile terminal 12, and the mobile communication network 60 of the mobile communication subscriber. Server 30.

In this case, the computer 10, the mobile communication service provider server 40, the shopping mall server 20, and the payment approval server 30 communicate with each other through the Internet network 50.

The electronic payment process through this system is as follows.

First, the mobile communication subscriber's computer 10 needs to download and install a subscriber authentication key generation program from the payment approval server 30. In this process, payment related information such as mobile terminal number, resident registration number, account number, etc. Register at 30).

In this state, when the subscriber accesses the shopping mall server 20 and orders the goods, the shopping mall server 20 requests the payment progress to the payment approval server 30, and the payment approval server 30 displays the payment webpage of the subscriber. It is provided to the computer 10.

The subscriber selects whether to pay in the usual way using a credit card or the like on the payment page or to use the subscriber authentication key generation program.

If the user selects to use the subscriber authentication key generation program, the shopping mall server 20 requests payment approval to the payment approval server 30, and the payment approval server 30 sends the subscriber credit information to the mobile communication service provider server 40. Request and receive the result.

The payment approval server 30 determines whether to approve payment based on the subscriber information received from the mobile service provider server 40. If the payment approval is approved, the payment approval server 30 generates a predetermined approval number and sends the mobile terminal in the form of an SMS message. 12).

After confirming the approval number received by the mobile terminal 12, the mobile communication subscriber inputs it through the payment screen of the computer 10 and transmits it to the shopping mall server 20, and the shopping mall server 20 sends the received approval number. The payment is transmitted to the approval server 30 again.

The payment approval server 30 transmits the approval result to the shopping mall server 20 and the mobile communication service provider server 40 when the received approval number matches the approval number transmitted by the payment approval server 30, and the shopping mall server 20 transmits the approval result. After confirmation, deliver the item to the subscriber.

Recently, in addition to the payment method, in the usual payment process such as credit card payment or mobile terminal payment, the payment screen is sent after sending a predetermined authorization number to the mobile terminal to confirm whether the payment operator is the customer. It is intended to improve security by inputting in the.

However, the recent illegal copying of mobile terminals has been so strong that it becomes a social problem. Thus, the method of transmitting the authorization number through SMS message has a great risk of security problems.

The mobile terminal has built-in ESN (Electronic Serial Number) information, which is a unique serial number for each device. When extracting an ESN from one mobile terminal and inputting it into another mobile terminal, two mobile phones (so-called twin phones) having the same number are used. It is known to be replicable.

Therefore, even if the person who copied another person's mobile device makes an electronic payment under the name of another person, the authorization number is sent to the duplicated mobile device, so that another person can prevent illegally performing the electronic payment using the duplicated mobile device. There is no problem.

SUMMARY OF THE INVENTION The present invention has been made to solve such a problem, and an object of the present invention is to provide a method in which a customer of an electronic commerce cannot make an electronic payment using a duplicated mobile terminal.

The present invention comprises the steps of registering the electronic payment password in the shopping mall server or payment approval server interworking with the shopping mall server to achieve the above object; A client computer accessing a shopping mall server through an internet network and requesting goods or services; Requesting, by the shopping mall server, to proceed with a payment procedure to the payment approval server; Generating, by the payment approval server, an authorization number and transmitting an authorization number confirmation request message to the mobile terminal of the customer via a mobile communication network; Accessing, by the mobile terminal, the payment approval server, inputting a password and confirming the approval number; Inputting an authorization number into the customer computer and transmitting the authorization number to the payment approval server; Determining, by the payment approval server, whether the authorization number sent from the customer computer matches the authorization number sent by the client computer; If the determination result is matched, the payment approval signal is transmitted to the shopping mall server.

The approval number confirmation request message is preferably transmitted in the form of a WAP push message.

The WAP push message may include URL information of the payment approval server, and the mobile terminal may access the wireless Internet to the payment approval server through the URL.

Hereinafter, with reference to the drawings will be described a preferred embodiment of the present invention.

2 is a flowchart illustrating a process of making an electronic payment according to an embodiment of the present invention based on the electronic payment system of FIG. 1 for convenience of description.

First, the mobile communication subscriber accesses the payment approval server 30 through the Internet network 50 and then downloads and installs a predetermined subscriber authentication key generation program on his computer 10. In this process, payment related information, For example, it is preferable to register information such as mobile terminal number, social security number, account number, etc. in the payment approval server 30. (ST10)

The mobile communication subscriber should access the shopping mall server 20 through his computer 10 to order the goods, and may enter the subscriber's mobile terminal number or social security number for the primary identification in ordering process. . (ST20)

Thereafter, the subscriber can select whether to pay in the usual manner using a credit card or the like, or to pay using the subscriber authentication key generation program. If the subscriber chooses to use the subscriber authentication key generation program, the shopping mall server 20 The payment approval server 30 requests payment approval. (ST30)

The payment approval server 30 requests subscriber credit information and the like to the mobile communication service provider server 40 and determines whether the payment is approved after receiving the result. (ST40, ST50)

If the result of the determination is inappropriate, the shopping mall server 20 notifies the approval, and if it is determined that the payment approval server 30 generates a predetermined approval number and transmits it to the mobile communication service provider server 40. (ST60)

The mobile service provider server 40 transmits the approval number confirmation request message to the mobile terminal 12 of the subscriber in the form of a WAP push message. (ST70)

When the subscriber receives the authorization number confirmation request message from his mobile terminal 12, the subscriber may confirm the authorization number by accessing the mobile communication service provider server 40 through the callback URL included in the message.

However, in the embodiment of the present invention, after accessing the mobile communication service provider server 40, a predetermined password must be input to confirm the approval number. Therefore, only the subscriber who knows the password can make electronic payment. Even if you have a duplicated mobile terminal, you will not be able to verify your authorization number without knowing your password. (ST80)

In order to compare the above-mentioned password, the subscriber's password must be registered in advance in the mobile communication service provider server 40 or can be checked at any time in the mobile communication service provider server 40. This can be performed by the following various methods.

First, when a mobile communication subscriber downloads a subscriber authentication key generation program from his payment approval server 30 to his computer 10, he registers a password for electronic payment with the payment approval server 30.

Since the ST 60 transmits the password information together with the approval number to the mobile communication service provider server 40, the mobile communication service provider server 40 compares the password information.

Secondly, the electronic payment password is registered in advance in the mobile communication service provider server 40 at the beginning of the mobile terminal subscription.

Third, when registering for the shopping mall server 20, the electronic payment password is registered and if necessary transfers to the payment approval server 30, the payment approval server 30 in the ST 60 with the approval number; When the password information is transmitted to the mobile service provider server 40, the mobile communication service provider server 40 compares the same.

The subscriber accesses the mobile communication provider server 40 through his mobile terminal 12 and inputs the confirmation number through the shopping mall web page to transmit to the shopping mall server 20 (ST90), and the shopping mall server 20 After receiving the approval number transmits it to the payment approval server (30). (ST100)

The payment approval server 30 determines whether the approval number generated and transmitted by the payment approval server 30 matches the approval number received by the shopping mall server 20. (ST110)

If the result of the determination does not match, the shopping mall server 20 notifies the approval failure, and if they match, the approval result is transmitted to the shopping mall server 20, and in this case, it is preferable to transmit the approval result to the mobile communication service provider server 40. . (ST120)

After confirming the approval result, the shopping mall server 20 should transmit a payment completion notice to the subscriber computer 10 and proceed with the procedure of delivering the corresponding item to the subscriber. (ST 130)

On the other hand, in the above description, the procedure of inputting a credit card number or account number is omitted, and electronic payment is performed based on the subscriber information stored in the subscriber computer 10 and the mobile communication service provider server 40 on which the subscriber authentication key generation program is installed. Embodiments of the present invention have been described with reference to the system.

However, the procedure of transmitting the authorization number to the mobile terminal via SMS message and inputting it through the computer can be performed in the case of general credit card payment or bank transfer.

Therefore, in all electronic payment systems in which the approval number is transmitted through the SMS message as well as the system of FIG. 1, it is necessary to prevent the payment approval server performing the payment procedure from transmitting the approval number to the duplicated mobile terminal.

To this end, as shown in the embodiment of the present invention, only the approval number confirmation request message including the callback URL is transmitted from the payment approval server to the subscriber's mobile terminal in the form of a WAP push message, and the received customer receives the payment approval server through the WAP. It is advisable to verify the authorization number only after entering the password.

In this case, the authorization number request message may be transmitted in the form of an SMS message including a callback URL instead of the WAP push. In this case, the access to the payment approval server is preferably performed on the WAP using the callback URL.

According to the present invention, in the payment system that performs the electronic payment by confirming the approval number through the mobile terminal, only the approval number confirmation request message is transmitted through the WAP push to the mobile terminal of the customer, and the customer must enter a password on the WAP page. Since the approval number is transmitted, it is possible to prevent others from performing electronic payment without permission by using a duplicated mobile terminal.

Claims (3)

Registering an electronic payment password in a shopping mall server or a payment approval server interworking with the shopping mall server; A client computer accessing a shopping mall server through an internet network and requesting goods or services; Requesting, by the shopping mall server, to proceed with a payment procedure to the payment approval server; Generating, by the payment approval server, an authorization number and transmitting an authorization number confirmation request message to the mobile terminal of the customer via a mobile communication network; Accessing, by the mobile terminal, the payment approval server, inputting a password and confirming the approval number; Inputting an authorization number into the customer computer and transmitting the authorization number to the payment approval server; Determining, by the payment approval server, whether the authorization number sent from the customer computer matches the authorization number sent by the client computer; Transmitting a payment approval signal to the shopping mall server if the result of the determination is matched, and transmitting a payment failure signal to the shopping mall server; Electronic payment approval method including The method of claim 1, The approval number confirmation request message is an electronic payment approval method, characterized in that transmitted in the form of WAP push message The method of claim 2, The WAP push message includes the URL information of the payment approval server, and the mobile terminal makes a wireless Internet access to the payment approval server through the URL.

Images