KR20120122450A - Payment system using mobile authentication and method thereof - Google Patents

Abstract

Disclosed are a payment system and method through mobile authentication. The payment system authenticates the product purchase information through communication with a second communication terminal that can access a page related to the product purchase information when the first communication terminal connected to the Internet site where the product purchase is possible requests authentication for the product purchase information. Authentication processing unit for processing; And a payment processing unit configured to process a payment amount based on product purchase information based on information authenticated through the second communication terminal at the request of the first communication terminal.

Description

PAYMENT SYSTEM USING MOBILE AUTHENTICATION AND METHOD THEREOF}

Embodiments of the present invention relate to a system and method for separating payment and authentication to perform payment in a more secure environment.

As the use of the Internet and mobile communication terminals has become commonplace, a method of authenticating a service requiring self authentication among web services using a user's mobile communication terminal has been generally used.

For example, if the user needs to authenticate the user when paying at the web service using a PC, the user transmits the authentication number to the mobile terminal using a short message service (SMS), and then the user The authentication number received by the terminal is directly entered into a web page through a PC.

Conventionally, an ActiveX module, an ISP certificate, etc. are required for security and payment for each PC, such as performing an authentication process by executing ActiveX in Internet Explorer of a PC. In addition, there is a concern about hacking of personal credit information in the process of inputting personal credit information such as card information through a PC when using a PC to pay a card on the Internet.

There is provided a payment system and method that provides a payment environment without hacking personal credit information when paying from the Internet to a PC.

Provided is a payment system and method for providing a payment environment that does not require security and payment related ActiveX module installation, ISP certificate installation, and the like.

Provided are a payment system and a method for conveniently performing authentication procedures in an environment in which security and payment related modules are not supported or an individual portable terminal such as a tablet PC or a smart phone according to an Internet browser.

There is provided a payment system and method for separating payment from the payment process and performing payment in a more secure environment.

When the first communication terminal connected to the Internet site where the product is available for purchase requests authentication for the product purchase information, authentication of the product purchase information is processed through communication with a second communication terminal that can access the page related to the product purchase information. An authentication processing unit; And a payment processing unit configured to process a payment amount according to product purchase information based on information authenticated through the second communication terminal at the request of the first communication terminal.

According to one side, if the identification number of the second communication terminal is input from the first communication terminal inputs the product purchase information for the second communication terminal, the user accesses the page through the second communication terminal payment means If payment information related to the information is input, authentication of the payment information may be performed.

According to another aspect, the authentication processing unit may provide the first communication terminal with the processing result according to the authentication.

According to another aspect, the multi-dimensional code generated based on the product purchase information is displayed on the page provided to the first communication terminal through the Internet site, and the product purchase information is extracted by scanning the multi-dimensional code in the second communication terminal The page may be provided automatically. In this case, the authentication processing unit may perform authentication on the payment information when the user inputs the payment information related to the payment method on the page through the second communication terminal.

According to another aspect, the second communication terminal may be installed with a code scanning application for scanning the multi-dimensional code to extract the product purchase information.

According to another aspect, when the product purchase information is extracted in conjunction with the code scanning application, the second communication terminal may install a payment related application that provides a page according to the product purchase information. In this case, the authentication processing unit may perform authentication by receiving payment information from a user in association with a payment related application.

In the authentication processing unit, when the first communication terminal connected to the Internet site where the product can be purchased requests authentication for the product purchase information, the authentication processing unit communicates with the second communication terminal that can access the page related to the product purchase information. Processing the authentication; And in the payment processing unit, processing a payment amount according to the product purchase information based on information authenticated through the second communication terminal at the request of the first communication terminal.

In the case of making payment on the Internet by accessing the Internet through a communication terminal, the authentication process is separated from the payment process and the authentication process is performed with a communication device of a heterogeneous environment different from the communication terminal currently connected to the Internet. Payment service can be provided.

The authentication process for personal credit information is conducted in a heterogeneous environment that is different from the environment that maintains access to the Internet, which can solve hacking concerns about personal credit information.

Since the authentication process is separated from the payment process, there is no need to install and execute various payment and security related modules for each communication terminal, so the authentication process can be performed regardless of the browser and the OS.

Instead of a communication terminal connected to an internet site where a product can be purchased, payment can be conveniently performed anytime and anywhere by using another communication terminal carried by the user at any time for the authentication process.

1 is a block diagram illustrating an internal configuration of a payment system for performing an authentication process separately in a payment process according to an embodiment of the present invention.
2 is a diagram for describing a payment process between a payment system and a first communication terminal / second communication terminal according to an embodiment of the present invention.
3 is a flowchart illustrating a payment method for separating and performing an authentication procedure in a payment process according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating an internal configuration of a payment system for performing an authentication process separately in a payment process according to an embodiment of the present invention.

In the present embodiment, when making a payment on the Internet by accessing the Internet through a communication terminal, the payment process separates the authentication procedure from the payment process and performs an authentication procedure with a communication device of a heterogeneous environment different from a communication terminal currently connected to the Internet. It can provide an environment.

In the present specification, a communication terminal corresponding to a subject requesting a payment for a product that a user wants to purchase by accessing the Internet is referred to as a 'first communication terminal', and performs a authentication process for a payment requested by the first communication terminal. The terminal will be referred to as a 'second communication terminal'. Here, the first communication terminal may be not only a general PC but also a tablet PC, a smart TV, a smart phone, and the like, and the second communication terminal may be a tablet PC, a smart phone, or a feature phone capable of performing an authentication procedure of a payment means. And so on. The first communication terminal and the second communication terminal means all communication devices that can access the Internet, but may be used in a heterogeneous environment to perform a payment process.

As shown in FIG. 1, the payment system 100 according to an embodiment may be configured with an authentication processor 110 and a payment processor 120.

The authentication processing unit 110 performs a role of performing an authentication procedure in a payment process supported by the payment system 100. Specifically, the authentication processing unit 110 provides the user's product purchase information to the second communication terminal when the user requests authentication for the product purchase information through the first communication terminal connected to the Internet site where the product can be purchased. Thereafter, the authentication of the product purchase information may be processed through communication with the second communication terminal. First, as an example for providing product purchase information to a second communication terminal, the authentication processing unit 110 provides a message for supporting access to a page related to product purchase information through a callback URL short message service (callback URL SMS). It can be transmitted to the communication terminal. In this case, the page related to the product purchase information may refer to a service page (hereinafter, referred to as an "authentication page") for authenticating a payment method to be used to pay a payment amount according to the product purchase information. As another example, when the payment related application for the payment service provided in the present embodiment is installed in the second communication terminal, the authentication processing unit 110 converts the user's product purchase information into the payment related application installed in the second communication terminal. Can transmit In this case, the payment related application may be provided in the form of a smart phone application, a feature phone VM (virtual machine), and the like, and when the product purchase information is received from the authentication processing unit 110, the authentication page for the received product purchase information may be provided. Can be. For the above two examples, the authentication processing unit 110 may receive an identification number (for example, a mobile phone number) of the second communication terminal to be used in the authentication procedure from the user through the first communication terminal, the received identification The number may be used to transmit product purchase information to a second communication terminal that the user has accepted to use for the authentication procedure. As another example for providing product purchase information to the second communication terminal, the authentication processing unit 110 generates a multi-dimensional code based on the product purchase information and then multi-dimensional code on the page of the Internet site provided to the first communication terminal. Can be displayed. In other words, when the user accesses the Internet site through the first communication terminal, selects a product to purchase, and requests a multi-dimensional code for the product purchase information of the selected product, the authentication processing unit 110 is generated based on the product purchase information. The multidimensional code is displayed on the screen displayed on the first communication terminal. Here, the multidimensional code refers to an information providing method for recording and providing information such as a QR code, a data matrix, a maxi code, and the like. Accordingly, the user may acquire product purchase information included in the multi-dimensional code by scanning the multi-dimensional code displayed on the first communication terminal by using the second communication terminal. In this case, the second communication terminal is installed and driven with a camera function to scan the multi-dimensional code to extract the information contained in the code is installed and run, furthermore, the product purchase information extracted from the multi-dimensional code in conjunction with the code scan application Payment related applications that can provide an authentication page for may be installed and run. Here, the code scan application and payment related applications may be provided in the form of a smartphone application, a feature phone virtual machine (VM), and the like. That is, in the present embodiment, the product purchase information for the second communication terminal in a heterogeneous environment is different from that of the first communication terminal by using a method of displaying a multi-dimensional code on the page of the Internet site provided to the first communication terminal. Can provide. Subsequently, when the user accesses an authentication page using a second communication terminal and inputs payment information related to a payment method, the authentication processor 110 authenticates the payment information input from the user through interworking with a financial institution / communication server. Can be performed. In addition, the authentication processing unit 110 may receive the authentication processing result of the payment information of the user from the financial institution / communication company server and provide the received authentication processing result to the first communication terminal.

The payment processing unit 120 performs a payment processing for product purchase information according to a user's request when the authentication processing is completed in the authentication processing unit 110. The user may confirm the authentication processing result in the connection environment through the first communication terminal and request a final purchase request, that is, payment for product purchase information. In this case, when the payment request of the user is received from the first communication terminal, the payment processing unit 120 performs payment based on product purchase information through interworking with a financial institution / communication server based on the payment information authenticated through the second communication terminal. The amount can be settled. In addition, the payment processing unit 120 may receive a payment processing result from a financial institution / communication company server and provide the received payment processing result to the first communication terminal.

Referring to Figure 2, the payment process supported by the payment system 100 of the above configuration will be described.

As shown in FIG. 2, when a user accesses an Internet site such as a shopping mall through a first communication terminal, selects a product to purchase, and inputs purchase information (eg, color, quantity, etc.) of the selected product, the first communication terminal may be used. The communication terminal may accept the authentication for the product purchase information of the user to the payment system 100. In this case, the payment system 100 provides the product purchase information of the user to the second communication terminal through communication with the second communication terminal, and the second communication terminal authenticates the product purchase information of the user. You can access the authentication page to perform The connection environment with the authentication page through the second communication terminal is processed by transmitting the product purchase information to the identification number of the second communication terminal input from the user when the user accepts the authentication, and then accessing the product purchase information from the second communication terminal. Or display a multi-dimensional code including product purchase information on a site screen of a seller shopping mall maintaining a connection with a first communication terminal, and scan the multi-dimensional code displayed on the first communication terminal in a second communication terminal having a camera. It can be processed in such a way to access the product purchase information extracted from the multi-dimensional code through the second communication terminal. When a user inputs payment information related to a payment method to be used to pay a payment amount based on product purchase information through an authentication page accessed from a second communication terminal, the payment system 100 receives the received payment information and inputs it from the user. Authentication procedure for payment information can be performed. In addition, the payment system 100 may provide an authentication process result of the user's payment information to the first communication terminal, and thus the user may confirm the authentication process result in an access environment through the first communication terminal. Thereafter, when the user requests final payment, the payment system 100 may process a payment amount according to the product purchase information based on the payment information authenticated through the second communication terminal. In this case, the payment system 100 may provide the payment processing result to the first communication terminal so that the user may check the payment processing result in the connection environment through the first communication terminal.

The payment system 100 is composed of one system combined with a financial institution / telecommunications company server that approves authentication and payment, or composed of a separate system from the financial institution / telecommunications company server to interoperate with the financial institution / telecommunications server The payment process can be performed. In addition, when the payment system 100 is configured as a separate system from the financial institution / communication company server, some components of the payment system 100 may be configured to reside on the financial institution / communication company server side according to the system implementation or service type. In addition, the payment system 100 may provide a payment service for all possible payment methods such as card, account transfer, and mobile through linkage with a payment agent system such as a payment gateway (PG) or a value added network (VAN). have.

According to the above configuration, the payment system 100 according to an embodiment is a second communication terminal in a heterogeneous environment with the first communication terminal when the authentication request for the product purchase information is received in the connection environment through the first communication terminal The authentication process may be performed through the authentication process. If the payment request is received from the first communication terminal after the authentication process, the payment approval may be performed based on the information authenticated through the second communication terminal.

3 is a flowchart illustrating a payment method for separating and performing an authentication procedure in a payment process according to an embodiment of the present invention. In the payment method according to the present embodiment, each step may be performed by the payment system 100 described with reference to FIG. 1.

In step 310, the payment system 100 when the user requests authentication for the product purchase information through the first communication terminal connected to the Internet site available for product purchases the user's product purchase information to the second communication terminal After providing, the authentication procedure for the product purchase information may be performed through communication with the second communication terminal. Here, the method of providing product purchase information for the second communication terminal receives the identification number of the second communication terminal from the user and sends a message through the callback URL short message service to the second communication terminal to access the product purchase information Receiving the identification number of the second communication terminal from the user and transmitting the product purchase information to the payment related application installed and driven in the second communication terminal to access the product purchase information on the payment related application, and with the first communication terminal. Second communication by displaying a multi-dimensional code including product purchase information on a screen of an internet site maintaining a connection, and scanning the multi-dimensional code displayed on the first communication terminal by using a second communication terminal equipped with a camera. The terminal may be processed by accessing the product purchase information extracted from the multidimensional code through the terminal. When the user accesses an authentication page for product purchase information using a second communication terminal and inputs payment information related to a payment method, the payment system 100 is input from the user through interworking with a financial institution / communication server. Authentication of payment information may be performed. At this time, the payment system 100 receives the authentication processing result of the user's payment information from the financial institution / communication company server so that the user can confirm the authentication processing result in the connection environment through the first communication terminal, the received authentication processing result May be provided to the first communication terminal.

In operation 320, when the authentication process is completed in operation 310, the payment system 100 may process a payment amount based on product purchase information according to a user's request through the first communication terminal. In other words, the payment system 100 may request the final payment for the product purchase information after the user checks the authentication processing result in the connection environment through the first communication terminal. In this case, when the payment request of the user is received from the first communication terminal, the payment system 100 performs payment according to product purchase information through interworking with a financial institution / communication server based on the payment information authenticated through the second communication terminal. The amount can be settled. In addition, the payment system 100 receives the payment processing result from the financial institution / communication company server and transmits the received payment processing result to the first communication terminal so that the user can check the payment processing result in an access environment through the first communication terminal. Can serve as a target.

As described above, according to embodiments of the present invention, when making a payment on the Internet by accessing the Internet through a communication terminal, a communication device in a heterogeneous environment different from a communication terminal currently connected to the Internet by separating an authentication procedure from a payment process. It can provide a payment environment to perform the authentication process. Therefore, since the authentication process for the personal credit information is performed in a heterogeneous environment different from the environment in which the connection with the Internet is maintained, the hacking concern for the personal credit information can be solved. In addition, since the authentication process is separated from the payment process, there is no need to install and execute various payment and security modules such as ActiveX module installation and ISP certificate, so that the authentication process can be performed regardless of the browser and OS. In addition, payment is possible anytime and anywhere by using the other communication terminal carried by the user at any time, instead of the communication terminal connected to the Internet site where the product can be purchased.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined by the equivalents of the claims, as well as the claims.

100: payment system
110: authentication processing unit
120: payment processing unit

Claims (12)

When a first communication terminal connected to an internet site where product purchase is possible requests authentication for product purchase information, authentication of the product purchase information is performed through communication with a second communication terminal that can access a page related to the product purchase information. An authentication processing unit for processing; And
A payment processing unit for processing a payment amount according to the product purchase information based on the information authenticated through the second communication terminal in response to the request of the first communication terminal.
Payment system comprising a. The method of claim 1,
The authentication processing unit,
When the identification number of the second communication terminal is input from the first communication terminal, the product purchase information is provided to the second communication terminal, and a user accesses the page through the second communication terminal and pays the bill. When the relevant payment information is entered, the verification of the payment information is performed.
Payment system characterized in that. The method of claim 1,
The authentication processing unit,
Providing a result of the processing according to the authentication to the first communication terminal;
Payment system characterized in that. The method of claim 1,
On the page provided to the first communication terminal through the Internet site, a multi-dimensional code generated based on the product purchase information is displayed.
The page is automatically provided when the product purchase information is extracted by scanning the multi-dimensional code in the second communication terminal.
The authentication processing unit,
Authenticating the payment information when a user inputs payment information related to a payment method on the page through the second communication terminal;
Payment system characterized in that. 5. The method of claim 4,
The second communication terminal,
Code scanning application for scanning the multi-dimensional code to extract the product purchase information is installed
Payment system characterized in that. The method of claim 5,
The second communication terminal,
When the product purchase information is extracted in conjunction with the code scanning application, a payment related application for providing the page according to the product purchase information is installed.
The authentication processing unit,
Performing authentication by receiving the payment information from the user in association with the payment related application;
Payment system characterized in that. In the payment method of the payment system including the authentication processing unit and the payment processing unit,
In the authentication processing unit, when the first communication terminal connected to the Internet site where the product can be purchased requests authentication for the product purchase information, the product purchase is made through communication with a second communication terminal that can access a page related to the product purchase information. An authentication processing step of processing authentication for information; And
In the payment processing unit, a payment processing step of processing the payment amount according to the product purchase information based on the information authenticated through the second communication terminal at the request of the first communication terminal.
Payment method comprising a. The method of claim 7, wherein
The authentication processing step,
When the identification number of the second communication terminal is input from the first communication terminal, the product purchase information is provided to the second communication terminal,
When the user accesses the page through the second communication terminal and inputs payment information related to a payment method, authentication of the payment information is performed;
Payment method characterized in that. The method of claim 7, wherein
The authentication processing step,
Providing a result of the processing according to the authentication to the first communication terminal;
Payment method characterized in that. The method of claim 7, wherein
On the page provided to the first communication terminal through the Internet site, a multidimensional code generated based on the product purchase information is displayed.
The page is automatically provided when the product purchase information is extracted by scanning the multi-dimensional code in the second communication terminal.
The authentication processing step,
Authenticating the payment information when a user inputs payment information related to a payment method on the page through the second communication terminal;
Payment method characterized in that. The method of claim 10,
The second communication terminal,
Code scanning application for scanning the multi-dimensional code to extract the product purchase information is installed
Payment method characterized in that. The method of claim 11,
The second communication terminal,
When the product purchase information is extracted in conjunction with the code scanning application, a payment related application for providing the page according to the product purchase information is installed.
The authentication processing step,
Performing authentication by receiving the payment information from the user in association with the payment related application;
Payment method characterized in that.

Images