KR100637409B1 - Unsigned method and system for financial card sales slip in mobile payment - Google Patents

Abstract

Non-signing method and system for financial card sales slips in mobile payments are required to check identity and sales slips without having to write a signature in the customer's signature column when paying with a mobile device (cell phone, PDA, smartphone) equipped with an IC chip card. To prevent forgery and alteration. The present invention has a built-in algorithm for generating an authentication value in the IC chip card mounted on a mobile device such as a mobile phone or PDA, card issuer key, card issue information, card password, IC chip card random number Create your own authentication value by entering the value, and send the generated authentication value along with the card information to the merchant's mobile payment terminal via IR / RF / Bluetooth communication, and sign the customer signature on the sales slip output from the card inquiry machine when the transaction is approved. Is configured to print an authentication value. Therefore, the present invention can solve the inconvenience caused by signing the sales slip at the card user and the card merchant by identifying the identity of the customer without signing the sales slip, and verifying the legality through verification at the card issuing agency when a problem is raised. It can provide the effect to prevent the sales document forgery and forgery at the source.

Mobile payment, financial card, sales slip, unsigned

Description

A finance card receipt no sign method in mobail settlement of accounts and system}

1 is a flow chart for explaining a financial card self-identification method of a general plastic form,

2 is a flowchart illustrating a method for authenticating a financial card in a conventional mobile payment;

3a-3b is a block diagram showing a mobile payment system to which the present invention is applied,

4 is a flowchart illustrating a method of authenticating a financial card in the mobile payment system of FIG. 3;

5 is a view showing an example of a sales slip generated by the present invention.

<Description of the symbols for the main parts of the drawings>

10: mobile device 15: IC chip

20: card inquiry machine 25: mobile payment device

30: card company

The present invention relates to an IC chip-based mobile card payment, in particular, by generating an authentication value for verifying the identity in the mobile IC chip card to print on the transaction approval sales slip so that the customer can be authenticated without signing the sales slip The present invention relates to a financial card sales slip account unsigned method and system for mobile payment.

Recently, as a payment method, a large number of plastic magnetic cards and plastic IC cards that are easier to use and carry than cash are used. The types of cards vary depending on the type of payment, including credit cards, check cards, debit cards, and gift cards. Such a plastic magnetic or IC-attached card is signed by the card holder after confirming the approval details on the transaction approval sales slip to confirm whether the card is used by the merchant that uses the card during the commerce. The signature is compared to the signature on the sales slip to confirm that the person who used the card is correct.

This is in accordance with the provisions of Article 19, Paragraph 2 of the Credit Finance Act, which states that "each time a credit card merchant makes a transaction with a credit card, the credit card must be checked for fair use by the person." Therefore, the merchant checks the signature on the back of the plastic card and the sales slip visually to check whether the customer is using the card, and if it is correct, it recognizes it as a normal transaction and if it is wrong, it checks the identity through the identification card request. . The plastic card self-authentication method will be briefly described with reference to FIG. 1.

1 is a view showing a general plastic (magnetic stripe or IC) card processing flow.

In Figure 1, when the customer provides the card to the merchant owner for payment (①), the merchant is swapping the card provided by the customer to the credit card inquiry machine (CAT) or POS card reader (MSR), contact / contactless (RF) method to read the card information and input the amount of use, service charges, etc., and the installment months in the case of an installment transaction (②). Then, in order to confirm the validity of the card, a card approval machine (CAT / POS) is connected to the card company (applicable card issuer) via a van network (VAN) connected to the transaction (③). The card company determines whether the card is approved for use, and responds to the card inquiry requester for transaction approval via VAN (④). If the result of the transaction approval request is approved, the card inquiry machine (CAT / POS) outputs the transaction details along with the approval number in the sales slip (⑤). The merchant asks for the signature of the customer in the signature column of the printed sales slip (⑥), and the customer passes the signed sales slip to the merchant (7). The merchant checks the identity of the customer by comparing the signature on the back of the card with the customer signature on the sales slip (⑧), and then provides the customer with a card return and a sales slip receipt (⑨).

On the other hand, there is a mobile IC card that is used in a mobile phone as a substitute for a card in the form of a plastic (magnetic strip or IC) card. Since a number of prior arts have already been disclosed with regard to financial transactions using this mobile IC card, the description is omitted here.

This mobile IC card identity authentication will be briefly described with reference to FIG. 2.

2 is a view showing a mobile payment flow based on the conventional IC chip.

In Figure 2, when the merchant owner requests a mobile card payment to the customer (①), the customer enters the password of the card to be paid through a mobile device such as a mobile phone or PDA (②). In the IC chip card embedded in the mobile device, the password entered by the customer and the password stored in the IC chip are compared and verified (③) .In case of an error, the user is required to re-enter the password. Deliver to mobile device (④). The mobile device transmits the card information transmitted from the IC chip card to the mobile payment terminal of the affiliate store using near infrared communication or near field communication, and the mobile payment terminal transmits the card information to the card inquiry machine (⑤). Merchant inputs transaction amount such as usage amount, service fee, etc. in installment transaction and installment transaction number (6) in card inquiry machine (CAT / POS), and through VAN network to which card inquiry device is connected to verify card validity. Request transaction approval from card company (the card issuer) (⑦). The card company judges whether the card is approved for use and responds to the card inquiry requesting transaction approval via VAN company (⑧). If the card inquiry request is approved, the card inquiry system displays the transaction details along with the approval number in the sales slip. Output (⑨). The merchant asks for the signature of the customer in the signature column of the sales slip (⑩), and the customer handwritten the signature on the sales slip and delivers the signed sales slip to the merchant (⑪). Merchants provide customers with a copy of the sales slip (전).

However, the above mobile IC card does not have embossing information that can identify the outside of the identity, and also cannot sign on the surface of the IC card, so even if the merchant receives the customer's signature on the sales slip, the identity can be verified. There is no problem.

Of course, the mobile card allows transactions after verifying the PIN (PIN) for identity verification at the time of payment of the mobile card in order to verify identity verification, but there is a way to accurately verify (post-validation) the identity verification on the sales slip. There is no way to prevent this when the sales slip is forged or altered.

Therefore, an object of the present invention is to verify the identity (PIN) to verify the identity of the mobile payment in order to solve the above-mentioned problems, and if the identity is correct after confirming the password generated by the mobile IC chip card transaction Method of unsigned financial card sales slip in mobile payment, which is delivered to the approval terminal (CAT / POS) and printed on the sales slip to be used as a personal identification mark so that customers can be authenticated without signing the sales slip. In providing the system.

In order to achieve the above object, the financial card sales slip signature-free method in the mobile payment of the present invention, in the method of verifying the identity at the time of payment using a mobile device equipped with an IC chip card, (1) input through the mobile device Comparing and verifying the password of the card to be paid and the previously stored password in the IC chip card; (2) generating an authentication value through an algorithm embedded in the IC chip card if the password verification is correct; Transmitting the generated authentication value and card information to a mobile payment device of an affiliate store through a mobile device; and (4) validating the validity of the card in the card inquiry machine when the authentication value and the card information are transmitted through the mobile payment device. (5) if the use of the card is approved, the authentication value is printed on the customer signature column of the sales slip by the identification identification mark. Printing and outputting.

Financial card sales slip unsigned system in the mobile payment of the present invention, in the mobile payment system, the card is issued and stored, if the customer is compared to verify the password entered through the mobile device and the password stored in the IC chip card built-in An IC chip for generating a personal authentication value using an algorithm that has been used, and the IC chip is mounted and used as a mobile card. The IC chip transmits a customer password that is input during the mobile payment to the IC chip and generates an authentication value and card information generated by the IC chip. A mobile device for transmitting the information to the mobile payment device, a mobile payment device for receiving the card information and the authentication value from the mobile device and transmitting the card information and the authentication value to the card inquiry device, and when the card information and the authentication value are transmitted from the mobile payment device, Enter the amount and request a transaction approval, and if it receives a response, approve the transaction with the authorization number. A card inquiry machine for outputting a sales slip, and a card company system that receives a transaction approval request of the card inquiry machine and determines whether to approve the use of the corresponding card, and responds to a transaction approval to the card inquiry machine. Characterized by identifying the authentication by printing the authentication value in the signature column of the.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

3A-3B show the configuration of a mobile payment system to which the present invention is applied. The system shown in FIG. 3A includes an IC chip card 15 in which a card is issued and stored, and a mobile device 10 such as a cellular phone or a PDA for mounting the IC chip card 15 into a socket for use as a mobile card. Here, the IC chip card 15 has a built-in algorithm for generating a personal authentication value as shown in Fig. 3b. 3A system is also installed on the merchant side and the mobile payment terminal 25 for receiving the card information including the authentication value through communication with the mobile device 10 equipped with the IC chip card 15, and received authentication It is provided with a card inquiry machine (CAT / POS) 20 for receiving the card information including the value and requesting the transaction approval and receiving the response to output the sales slip. 3 and 3 will be described in detail with reference to FIGS. 4 and 5.

In Figure 4, when the merchant owner requests the mobile card payment to the customer (①), the customer enters the password of the card to be paid through the mobile device 10, such as a mobile phone or PDA (②). The IC chip card 15 mounted on the mobile device 10 compares and validates the password entered by the customer and the password stored in the IC chip, or compares the identity by an identity authentication algorithm without storing the customer's payment password (PIN). Verify (③), in case of an error, request for re-entry, and if the password is correct, the authentication value is generated using the input password, the corresponding card issuer key and card information, and a random number generated from the IC card (Get Challenge command). ④). In general, the "Get Challenge" command is a command that generates a random number to execute the "External Auth" command, which is used to authenticate the external (access device, other card, etc.) on the card. Random number is used to prevent the same sales slip authentication value. The algorithm used to generate the authentication value uses a certified encryption function such as a hash function, a data encryption standard (DES), and a seed (SEED), and is embedded in the IC chip card 15. As shown in Fig. 3B, the algorithm embedded in the IC chip card 15 generates an authentication value using the card issuing engine key KEY, the card issuing information, the card password, and a random number as input values. Here, the card issuing agency key is a key value that is generated by the card issuing institution and managed so that only the card issuing institution is known and is stored in the IC chip card 15 when the card is issued. The card issuing information is stored in the IC chip card 15 as card information issued by the card issuing institution, i.e., card number, valid authority, and the like. The card password is a value that only the customer knows and the value set as the card password when the customer applies for the card and is not stored in the IC chip card 15 as the password directly input by the customer when the card is used. The random number is a value generated by the " Get Challenge &quot; command in the IC chip card 15, and is composed of 16 bytes or a partial combination (From-TO).

As shown in FIG. 3B, the authentication value is generated by concatenating the result value and the random number generated through the algorithm.

The IC chip card 15 transmits the corresponding card information and the generated authentication value to the mobile device 10 (⑤), and the mobile device 10 transmits the transmitted card information and the authentication value to near-infrared (IR) communication or near-field. Radio wave (RF) communication or Bluetooth communication to the mobile payment terminal 25 of the merchant and the mobile payment terminal 25 transmits the card information to the card inquiry machine (6) (⑥). Herein, the mobile device 10 and the mobile payment terminal 15 communicate with each other by IR / RF / Bluetooth, and the mobile payment terminal 25 and the card inquiry device 20 communicate with each other in serial communication. The merchant enters the transaction amount, such as the amount used, service charges, and installment transactions in the card inquiry machine (CAT / POS) 20 (⑦), and the card inquiry machine 20 checks the validity of the card. A transaction approval request is made to the card company (the card issuer) 30 through the connected VAN network (⑧). The card company 30 determines whether or not to approve the use of the corresponding card, and responds to the card inquiry machine 20 requesting the transaction approval through the VAN company (⑨), and the card inquiry machine 20 receives the card approval request result. If approved, the transaction details along with the approval number are printed on the sales slip (전). In this case, as shown in FIG. 5, a personal authentication value such as “7F45 1A3B BC9C” is printed in the customer signature column, so that the customer does not need to sign a separate letter. The merchant provides the customer with one copy of the sales slip receipt printed with his / her authentication value (⑪).

When the customer or the merchant owner requests the card company for the authenticity of the sales slip as necessary (⑫), the card company will check the card information printed on the sales slip and the customer ledger to verify the authenticity and authenticity of the requested sales slip. The authentication value is calculated through an algorithm based on the card password, the card issuing agency key, and the random number printed on the sales slip, and the authentication value is configured through the combination with the random number and compared with the authentication value printed on the sales slip. Determine and notify the requesting party of the results (iii). Here, the authentication value may be used for verification along with the approval number in addition to the purchase text for the validity of the sales slip at the time of purchase.

As described above, the method and system for the unsigned financial card sales slip in the mobile payment of the present invention, by using the card by generating a personal authentication value from the IC chip card at the time of mobile payment to be printed on the sales slip instead of the customer handwritten signature, card use Customers and card merchants can eliminate inconveniences caused by signing sales slips, shorten the time for approval of card transactions, and when the issue is raised, legality can be verified through verification by the card issuing agency to prevent counterfeiting and forgery of sales slips. It can prevent unfair card transactions and avoid the risk of fraudulent purchase of sales slips.

Claims (12)

In the method of identity verification at the time of payment using a mobile device equipped with an IC chip card, (1) comparing and verifying the password of the card to be inputted through the mobile device and the password previously stored in the IC chip card in the IC chip card; (2) generating an authentication value using a password inputted when the password verification is correct, a corresponding card issuing authority key and card issuing information stored, and a random number generated from an IC chip card; (3) transmitting the generated authentication value and card information to a mobile payment device of an affiliate store through an IC chip card or a mobile device; (4) when the authentication value and the card information are transmitted through the mobile payment device, inputting additional information including a transaction amount and an installment month required for payment in the card inquiry machine, and accessing the VAN network to check the validity of the card. ; And And (5) if the use of the card is approved, confirming that the authentication value is printed on the customer signature column of the sales slip and outputting the financial card sales slip without signature. The method according to claim 1, further comprising the step (6) of comparing the authentication value printed on the sales slip with the authentication value generated by the credit card at the card company to determine whether the sales slip is true or false. Journal unsigned method. The method according to claim 1, wherein the step (2) is performed by inputting a password, a corresponding card issuing authority key and card issuing information stored, and a random number to be generated as an input value of an encryption algorithm or a hash function embedded in the IC chip card. The unsigned method of the financial card sales slip in the mobile payment, characterized in that the combination of the resulting value and the random number to generate a user authentication value. 4. The method of claim 3, wherein the step (2) uses a hash function or an authorized encryption algorithm of DES and SEED. 2. The method of claim 1, wherein the step (3) transmits the card information and the authentication value through short-range infrared ray, radio wave (RF) communication, or Bluetooth communication. The method of claim 2, wherein step (6) (6a) If the authenticity of the sales slip is requested by the customer or the merchant owner, calculating the authentication value through an algorithm based on the card information and the random number printed on the sales slip, the card password of the customer ledger, and the card issuer key. ; (6b) constructing an authentication value by combining the calculated authentication value with a random number value and comparing the authentication value printed on the sales slip to determine authenticity; And (6c) a method for not signing a financial card sales slip in a mobile payment, comprising notifying the requesting party of the determination result. In the mobile payment system, The card is issued and stored, IC chip for generating a personal authentication value by using a built-in algorithm if the customer compares and validates the password entered through the mobile device and the stored password; The mobile device is equipped with the IC chip and used as a mobile card, and transmits a customer password input during the mobile payment to the IC chip, and transmits the authentication value and the card information generated in the IC chip to the mobile payment device. A mobile payment device for receiving card information and an authentication value from the mobile device and transferring the received card information and an authentication value to a card inquiry device; When the card information and the authentication value is transmitted from the mobile payment device, a card inquiry machine for inputting a transaction amount and requesting a transaction approval, and receiving a response to the transaction information, outputting the transaction details to the sales slip if the approval is received; And Receiving a transaction approval request of the card lookup machine to determine whether or not the use of the card includes a card company system for responding to the transaction approval to the card inquiry, The card inquiry machine prints the authentication value in the signature column of the sales slip, the financial card sales slip in the mobile payment, characterized in that the identification identification display system. The system of claim 7, wherein the IC chip generates a random number to prevent the same authentication value from appearing. The system of claim 7, wherein the algorithm embedded in the IC chip uses an authorized hash function or encryption algorithm. The IC chip of claim 8 or 9, wherein the IC chip combines a random number value with a result value obtained by storing a card issuing engine key and card issuing information, a generated random number value, and an input password as an input value of the algorithm. Financial card sales slip signature-free system, characterized in that for generating an authentication value. The method of claim 7, wherein the mobile device and the mobile payment device performs near-infrared, radio wave (RF) and Bluetooth communication, The financial card sales slip signature-free system in the mobile payment, characterized in that the serial communication between the mobile payment device and the card inquiry machine. The system of claim 7, wherein the card company system calculates an authentication value through an algorithm based on the card information and the random number value printed on the sales slip, the card password of the customer ledger, and the card issuer key, and the authentication value through the combination of the random number value. The financial card sales slip signature-free system in the mobile payment, characterized in that the post-validation by determining the authenticity by comparing with the authentication value printed on the sales slip by configuring the.

Images