KR101009913B1 - Method for providing online payment service, payment module and payment approval server - Google Patents

Abstract

PURPOSE: An online payment service providing method, a payment module and a payment approval server for supplying an online payment service are provided to secure reliability about payment information and securely manage important information by secluding the access of a user. CONSTITUTION: A payment information issuer(580) transmits information for effecting a request for issuing the payment information to an issuing server. If the request for issuing is verified, the payment information issuer receives the payment information from the issuing server. A push information processor(510) receives the transaction information requesting payment from the payment request message received from the push server. A payment information processor(540) decodes the saved payment information.

Description

How to provide online payment service, payment module and payment authorization server {METHOD FOR PROVIDING ONLINE PAYMENT SERVICE, PAYMENT MODULE AND PAYMENT APPROVAL SERVER}

The disclosed technology relates to a method for providing an online payment service, a payment module, and a payment approval server.

With the establishment of wired and wireless network infrastructures and the development of Internet technologies, the market for e-commerce, which enables commerce activities in the online space, is also growing. Electronic commerce is a general term for trading goods, services, etc. using electronic media such as the Internet, and trading activities include trading activities that provide advertisements, marketing, and services along with general product transactions. Representative examples of electronic commerce include internet shopping or cyber shopping, in which a homepage or a virtual store of the Internet is built to sell goods or provide a service. Transactions are usually paid in electronic money, such as credit cards or digital cash. Such payments require a credit card payment system or a digital cash payment system using Secure Transaction Technology (STT) and Secure Electronic Payment Protocol (SEPP). In addition, in order to secure transactions, an electronic authentication system to which SSL (Secure Socket Layer), S-HTTP (Secure-HTTP), or the like is applied is required.

Meanwhile, as new communication technologies, new terminal technologies, and the like are developed, and problems related to the conventional trading system are found, there is a demand for developing a technology that enables payment of the transaction price more safely and conveniently.

The technical problem to be achieved by the disclosed technology is to provide an online payment service providing method, payment module and payment approval server.

A first aspect of the disclosed technology to achieve the above technical problem is that when the shopping mall server receives an online payment request for a specific transaction from the browser, the transaction information for the transaction requesting the payment and the terminal identifier of the payment terminal to perform the payment Transmitting to the payment approval server; Extracting, by the payment approval server, a connection number of a payment terminal corresponding to the terminal identifier, and transmitting the extracted connection number and the transaction information to a push server; Transmitting, by the push server, a payment request message including the transaction information to the payment terminal by referring to the connection number; When the payment terminal receives the payment request message, the payment module of the payment terminal, which is driven separately from the browser, decrypts previously stored payment information and transmits the decrypted payment information to the payment approval server. step; And verifying the received payment information and transaction information by the payment approval server to approve the requested online payment.

According to a second aspect of the disclosed technology, a push information processor receives transaction information requesting payment from a payment request message received from a push server, and outputs the transaction information; A payment information storage unit in which payment information necessary for online payment is pre-encrypted and stored; A payment information processing unit which decrypts the stored payment information and provides it to a secure communication processing unit when a payment command for the payment requested transaction is input from a user; And a payment module operable at a payment terminal including a secure communication processor configured to transmit the decrypted payment information to a payment approval server.

The third aspect of the disclosed technology to achieve the technical problem is to receive the transaction information for the online payment requested through the user's browser and the terminal identifier of the payment terminal to perform the payment from the shopping mall server, A payment request processor for transmitting the transaction information to a push server so that a payment request message including the transaction information is pushed to a terminal; Security for receiving payment information required for the online payment when a payment command of the user is input to the payment module in response to receiving the payment request message from the payment module of the payment terminal that is driven separately from the browser. Communication unit; And a payment approval unit which verifies the received payment information and approves the requested online payment.

Embodiments of the disclosed technology may have effects including the following advantages. However, since the embodiments of the disclosed technology are not meant to include all of them, the scope of the disclosed technology should not be understood as being limited thereto.

According to the disclosed technology, there is an advantage that it is possible to provide an online payment service even in a security-enhanced sandbox model. In addition, according to the disclosed technology, it is possible to provide a plurality of online payment means together, it is possible to conveniently manage a plurality of credit cards, bank cards and the like.

In addition, according to the disclosed technology, there is an advantage that can provide a more secure payment service. For example, in the disclosed technology, information for payment is encrypted and stored, and access by a user is blocked so that important information can be safely managed. In addition, there is an advantage that it is possible to ensure the reliability of the payment information transmitted to the approval server for payment approval.

1 is a view for briefly explaining a credit card payment method in a conventional internet shopping mall.
2 is a diagram illustrating an online payment system according to an embodiment of the disclosed technology.
3 is a flowchart illustrating a method for providing an online payment service by the online payment system of FIG. 2 according to an embodiment of the disclosed technology.
4 is a flowchart illustrating a method of issuing an online card according to an embodiment of the disclosed technology.
5 is a block diagram illustrating a payment module that is driven in a payment terminal according to an embodiment of the disclosed technology.
6 is a block diagram illustrating a payment approval server according to an embodiment of the disclosed technology.

The description of the disclosed technique is merely an example for structural or functional explanation and the scope of the disclosed technology should not be construed as being limited by the embodiments described in the text. That is, the embodiments may be variously modified and may have various forms, and thus the scope of the disclosed technology should be understood to include equivalents capable of realizing the technical idea.

On the other hand, the meaning of the terms described in the present application should be understood as follows. The terms " first ", " second ", and the like are used to distinguish one element from another and should not be limited by these terms. For example, the first component may be named a second component, and similarly, the second component may also be named a first component. When a component is referred to as being "connected" to another component, it should be understood that there may be other components in between, although it may be directly connected to the other component. On the other hand, when an element is referred to as being "directly connected" to another element, it should be understood that there are no other elements in between. On the other hand, other expressions describing the relationship between the components, such as "between" and "immediately between" or "neighboring to" and "directly neighboring to", should be interpreted as well. Singular expressions should be understood to include plural expressions unless the context clearly indicates otherwise, and terms such as "include" or "have" refer to features, numbers, steps, operations, components, parts, or parts thereof described. It is to be understood that the combination is intended to be present, but not to exclude in advance the possibility of the presence or addition of one or more other features or numbers, steps, operations, components, parts or combinations thereof.

Each step may occur differently from the stated order unless the context clearly dictates the specific order. That is, each step may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. The terms defined in the commonly used dictionary should be interpreted to coincide with the meanings in the context of the related art, and should not be interpreted as having ideal or excessively formal meanings unless clearly defined in the present application.

1 is a view for briefly explaining a credit card payment method in a conventional internet shopping mall. In the conventional domestic PC-based Internet shopping environment, only the credit card payment service using Microsoft's ActiveX or a separate plug-in function was provided. However, there is a limitation that such a service cannot be used when the sandbox model is applied. Therefore, in payment terminals such as smart phones to which the sandbox security model is strictly applied, it is difficult to pay the transaction price of an internet shopping mall with a credit card. In particular, browsers, which are general client programs that access shopping malls, cannot perform security processing for electronic payments such as digital signatures in their own environment and cannot use plug-in functions such as ActiveX. It has become an obstacle for cyber shopping and cyber payment services. The sandbox model is a program that runs programs within a protected area. It is a security model that prevents adverse effects from external factors. The sandbox model considers applets sent over the network untrusted and restricts access to system resources according to security policies within the sandbox. Thus, only applets that are allowed file access by the sandbox can do so. The portion of the applet's access to resources is automatically restricted through a sandbox, so the user does not have to consider security in the system and is excellent in terms of user convenience.

Referring to Figure 1 describes a conventional credit card payment method as follows. The user makes internet shopping through a browser of a PC, which is a user terminal, and requests a payment for a product to be purchased in an internet shopping mall (S105). The shopping mall transmits transaction information such as an affiliated store ID, a transaction ID, a transaction product, a transaction amount, and a transaction date and time to the user's PC (S110). When the user's PC is provided with the transaction information, the user clicks the secure click application (S115). The secure click application is a plug-in (ActiveX) program for interfacing with a web browser to provide an internet credit card payment service. When the secure click application is driven, the user inputs the number of the credit card to be paid to the secure click application (S120). The assured click server transmits a personal confirmation message to the assured click application (S125). The personal confirmation message is a personal confirmation phrase that the user directly inputs during the secure click service sign-up process and is displayed on the secure click payment screen. Personal confirmation messages are used to prevent phishing. That is, the user may check whether the personal confirmation message displayed on the screen is correct by the phrase inputted by the user, and confirm that the personal confirmation message is a reliable click service provided by the corresponding card company rather than an arbitrary company pretending to provide a safe click service. After confirming the personal confirmation message, the user inputs the authentication password and CVC number for the card payment, the assured click application transmits the input information together with the transaction information to the assured click server (S130). The assured click server requests the approval of the transaction from the server of the credit card company (S1135), and the credit card company transmits the result of approving the transaction based on the received information to the assured click server (S140). The assured click server provides the transmitted approval result to the assured click application (S145), the assured click application provides the received approval result to the web browser (S150), and the web browser provides the received approval result to the shopping mall server. (S155). The shopping mall makes a request for confirming whether to approve the secure click server again (S160), receives the approval result from the secure click server (S165), and checks this to complete the purchase payment step.

Internet credit card payment method in the conventional PC described above has a problem that it is difficult to implement in the sandbox model. In the sandbox model, web browsers and secure click applications are restricted to mutual data access by programs running within different protection zones. For example, the web browser is restricted from providing transaction information data received from the shopping mall server to the secure click application (S115), and the secure click application is restricted from providing the approval result received from the secure click server to the web browser (S150). ). Therefore, the sandbox model cannot provide a card payment service in the same manner as the conventional method.

2 is a diagram illustrating an online payment system according to an embodiment of the disclosed technology. Referring to FIG. 2, the online payment system 200 includes a user terminal 210, a shopping mall server 220, a payment approval server 230, a push server 240, and a payment terminal 250. The user terminal 210 refers to a terminal equipped with a wired or wireless communication module so that a user can access the shopping mall server 220 online by driving a browser and request a payment for a product to be purchased. The user terminal 210 may be, for example, a general PC, laptop, netbook, smart phone, PDA, or the like. The payment terminal 250 refers to a terminal on which a payment module for accessing the payment approval server 230 online and for allowing a user to make a payment is driven. The payment terminal 250 may be, for example, a PC, a notebook computer, a tablet PC, a smart phone, a PDA, or the like. According to an embodiment, the payment terminal 250 may be a separate terminal from the user terminal 210 as shown in FIG. 2, or may be the same terminal as the user terminal 210 as shown in FIG. 2. . Even when the payment terminal 250 and the user terminal 210 are the same terminal, the browser and the payment module operate independently. The shopping mall server 220 refers to a server that provides an e-commerce service online. For example, there is an internet shopping mall server that sells clothes, bags, books, and the like. The payment approval server 230 is a server that approves the payment requested by the user, and may include a credit card payment approval server or a bank payment approval server.

According to the present embodiment, when the shopping mall server 220 receives a payment request from the user terminal 210 (S210), the shopping mall server 220 sends a transaction information to a browser of the user terminal 210 (S110). Unlike this, the transaction information is transmitted to the payment approval server 230 (S220). The payment approval server 230 receiving the transaction information may directly connect with the payment module of the payment terminal 250 based on the transaction information and perform a payment process (S260 to S270). According to the present embodiment, since the web browser and the payment module operate independently, the present invention can be applied to a security-enhanced sandbox model. In addition, payment module (e.g., card number, CVC number, card expiration date, etc.) necessary for payment is encrypted and stored, and it is difficult to be tampered, duplicated or deleted by the user, thereby providing a more secure payment service. There is an advantage that it can. In addition, according to the disclosed technology, security of a communication channel between the payment module and the payment approval server 230 may be enhanced or an electronic signature module may be easily added, thereby providing a service with enhanced security.

On the other hand, according to an embodiment, the payment approval server 230 may make a payment confirmation request to the push server 240 to be connected to the payment module of the payment terminal 250 (S240). The push server 240 receiving the payment confirmation request transmits a message for requesting payment confirmation to the payment terminal 250 (S250). In this case, the push server 240 may be, for example, a mobile communication company server. The payment terminal 250 receiving the message requesting confirmation of payment may be connected to the payment approval server 230 by driving a payment module for performing payment. If the payment module is connected to the payment approval server 230, S260 to S270 is performed to proceed with the payment process. The payment approval server 230 transmits the approval result to the shopping mall server 220 in response to the payment approval check request (S280) of the shopping mall server 220 (S290).

3 is a flowchart illustrating a method for providing an online payment service by the online payment system of FIG. 2 according to an embodiment of the disclosed technology. While shopping at a shopping mall provided by the shopping mall server 220 through the user terminal 210, the user may request an online payment for a product to be purchased. In one example, the online payment may be performed using a previously issued online card.

In operation S305, the user terminal 210 requests an online payment for a transaction that the user wants to pay to the shopping mall server 220. The shopping mall server 220 may receive a terminal identifier (hereinafter, referred to as a TID) input from a user together with an online payment request from the user terminal 210. Alternatively, unlike FIG. 3, when the shopping mall server 220 stores the user's TID in advance, the user may not input the TID separately. In this case, the shopping mall server 220 may request a user to log in to authenticate the user. The TID is an identifier for identifying the payment terminal 250 that performs online payment. For example, when the online card is issued, the TID is generated to correspond to any one payment terminal 250 of the user, and is bound with the connection number of the corresponding payment terminal 250 to the payment approval server 230. Can be stored. The connection number means a number used by the payment approval server 230 to connect to the payment terminal 250. For example, the connection number may be a telephone number, an Internet Protocol (IP) address, a Media Access Control (MAC) address, or the like.

In step S310, the shopping mall server 220 transmits the transaction information for the transaction requesting the payment and the TID of the payment terminal 250 to perform the payment to the payment approval server 230. The transaction information may include, for example, a merchant ID, a transaction ID, a transaction product, a transaction amount, a transaction date, and the like, but is not limited thereto.

In operation S315, the shopping mall server 220 transmits the transaction information and the TID to the payment approval server 230 and then informs the user terminal 210 that the payment request is completed. For example, the shopping mall server 220 may transmit a payment request completion message to the user terminal 210 to output the payment request completion message to the browser.

In operation S320, the payment approval server 230 checks the validity of the received transaction information. For example, the payment approval server 230 determines whether the shopping mall server 220 that has transmitted the transaction information is an authorized merchant based on the received transaction information, or whether the transaction information has not been forged or altered in the transmission process. Etc. can be confirmed. The payment approval server 230 may prevent the financial accident by checking the validity of the transaction information in this way.

In operation S325, the payment approval server 230 extracts a connection number of the payment terminal 250 corresponding to the TID. For example, the payment approval server 230 may search for the payment terminal 250 corresponding to the TID received from the issuance information database DB, and receive the connection number of the searched payment terminal 250 from the issuance information DB. have. The issue information DB stores the TID and the connection number of the payment terminal 250 corresponding thereto in advance.

In operation S330, the payment approval server 230 transmits the extracted connection number and the transaction information to the push server 240. According to an implementation example, the transaction information transmitted to the push server 240 may include detailed transaction information or may be summary transaction information that does not include detailed transaction information.

In operation S335, the push server 240 receiving the transaction information from the payment approval server 230 generates a payment request message (hereinafter referred to as PRM) including the transaction information. The push server 240 transmits the generated PRM to the payment terminal 250 with reference to the connection number.

The disclosed technology has the effect that the shopping mall server 220 can not directly transmit the PRM to the payment terminal 250 to prevent financial accidents such as phishing accidents. That is, according to the present embodiment, the connection number of the payment terminal 250 is safely managed in the issuance information DB, and the shopping mall server 220 is blocked from accessing the connection number of the payment terminal 250. Therefore, the malicious shopping mall server can be prevented from transmitting the PRM to the user's payment terminal 250 falsely.

In operation S340, the payment terminal 250 receives the PRM, and drives a payment module to process the received PRM. For example, the PRM may include information about a program to process it. Upon receiving the PRM, the payment terminal 250 may output information about a program (that is, a payment module) to be processed on the screen to induce a user to drive the corresponding program. According to an embodiment, when the payment module is driven, the payment module outputs transaction information included in the PRM on the screen. The transaction information output on the screen may include detailed transaction information, or may include only summary transaction information without detailed transaction information. If only summary transaction information is output on the screen, the user may request more detailed transaction information. According to the embodiment, when the payment terminal 250 receives only the summary transaction information from the push server 240, the payment terminal 250 is directly connected to the payment approval server 230 from the payment approval server 230 Detailed transaction information can be received. According to an embodiment, the user terminal 250 or the payment approval server 230 may perform a user authentication procedure before providing detailed transaction information to the user.

The payment terminal 250 may receive a payment command for a transaction output from a user who checks transaction information. According to an embodiment, the payment module may include a plurality of online payment means. For example, the payment module may store a plurality of online cards and payment information for each online card, and the user may select one of the plurality of online cards to proceed with payment. For example, the payment module may output an identifier of the available online card on the screen, and the user may select one of the identifiers displayed on the screen to proceed with the payment.

In step S345, the payment module receives the authentication information from the user of the payment terminal 250. The authentication information is information for user authentication, and may include, for example, a password, a certificate, and biometric information (fingerprint, etc.) set by the user.

If the user inputs a payment command, in step S350, the payment module decrypts the payment information. Payment information is pre-issued when an online card is issued, and is encrypted and stored in a payment module. The payment information may include credit card payment information or bank account transfer information as follows, but is not limited thereto. Credit card payment information may include a credit card identifier, a credit card number, a card expiration date and a Card Verification Code (CVC) number. Bank account transfer information may include a bank account identifier, an account number and an account password. According to an embodiment, the payment information may be encrypted based on the authentication information of the user and the unique number of the payment terminal 250. If there is a payment request, the payment module may decrypt payment information based on the authentication information and the unique number of the payment terminal 250. In this case, if any one of the authentication information and the unique number does not match when the card is issued, the payment information cannot be used. Therefore, the payment information can be duplicated and used by another terminal or by a user who does not know the authentication information. For example, the unique number of the payment terminal 250 may be a device number of the terminal, a Universal Subscriber Identity Module (USIM) number, and the like.

If the decryption of the payment information is normally performed, the payment module transmits the decrypted payment information to the payment approval server 230 to request payment approval. According to an embodiment, the payment module electronically processes the payment information to be transmitted so that the payment module can prove that the payment module has created the electronic document and that the content has not been forged or altered in the transmission and reception process. In this case, the payment module has an advantage of having a non repudiation function of the transmitted payment information. For example, in step S355, the payment module electronically processes the payment information. The payment module establishes a secure communication channel between payment approval servers 230. In step S360, the payment module transmits the payment information subjected to the electronic signature processing to the payment approval server 230 through the formed secure channel. According to another embodiment, the payment module may not implement the electronic signature function, as shown in FIG. 3. In this case, the payment module may transmit payment information to the payment approval server 230 through the formed secure channel. According to an embodiment, the payment information may be encrypted and transmitted. In addition, according to an embodiment, the payment module may transmit the transaction information to the payment approval server 230 together with the payment information or sequentially. Transaction information, like payment information, may be electronically signed or transmitted encrypted.

When the payment module transmits the electronic signature to the payment information and the transaction information, the payment approval server 230 verifies the electronic signature of the received payment information and the transaction information in step S365. The payment approval server 230 verifies the received payment information and transaction information when the electronic signature is verified.

In operation S370, the payment approval server 230 verifies the received payment information and transaction information. For example, the payment approval server 230 may verify that the payment information and transaction information include valid contents by comparing the payment information and the transaction information with the contents stored in the payment approval server 230. The payment approval server 230 approves the requested online payment when the payment information and the transaction information are verified.

In steps S375 and S380, the payment approval server 330 transmits the approval result of the online payment in step S370 to the payment terminal 250 and the shopping mall server 220.

4 is a flowchart illustrating a method of issuing an online card according to an embodiment of the disclosed technology. The online card issuing system includes a user terminal 210, a payment terminal 250, a card issuer 410, and an issuing server 420.

In operation S405, a user who wants to issue an online card logs in to the card issuer 410 web page through the user terminal 210. An online card is a card issued to enable online card payment in an online payment system. For example, an online card may include a credit card, a debit card (check card), or the like that can be used online. A user who logs in to the card issuer 410 web page requests an online card issuance.

In operation S410, the user inputs online card issuing information into the user terminal 210. Information for issuing an online card is information necessary for issuing an online card. For example, the information for issuing the online card may include a phone number of a terminal (ie, payment terminal 250) on which the online card is to be installed. As another example, the information for issuing the online card may include an offline card number to be associated with the online card, an authentication number for authenticating the offline card number, and the like.

In operation S415, the user terminal 210 transmits the input online card issuing information to the card issuer 410. In step S420, the card issuer 410 authenticates the received online card issuing information. For example, the card issuer 410 may check whether the received phone number is a phone number in the user's name. In another example, the card issuer 410 may verify whether the received offline card number is a card in the user's name or by using the received authentication number. Offline card authentication can be performed.

In operation S425, the card issuer 410 generates an authentication key when the received information is authenticated. In one example, the authentication key may be a one-time secret authentication key. In operation S430, the card issuer 410 transmits the generated authentication key and the online card issuing information (eg, a phone number of the payment terminal) received from the user terminal 210 to the issuing server 420. In step S435, the card issuer 410 transmits the authentication key to the user terminal 210.

The user who has received the authentication key may receive an online card using the payment terminal 250. For example, after the user executes a payment module pre-installed in the payment terminal 250, the payment module requests an online card issuance. The payment module that is requested to issue an online card is connected to an issuing server 420 to perform an online card issuing procedure.

According to an embodiment of the present disclosure, in step S440, the payment module that is requested to issue an online card requests a user to input an authentication key. The user inputs the authentication key received at the user terminal 210 to the payment module. In step S445, the payment module transmits the authentication key received from the user to the issuing server 420, and requests issuance of the online card. The payment module may transmit a terminal number (eg, a phone number, a device number, a MAC address, etc.) of the payment terminal 250 to the issuing server 420 together with the authentication key. According to another embodiment, the issuing module requests issuance of the online card to the issuing server 420, and receives an authentication key from the user according to the authentication key request of the issuing server 420, and receives the authentication key from the user. You can also send.

In operation S450, the issuing server 420 authenticates the online card issuing request of the payment terminal 250 using the received authentication key. According to an embodiment, the issuing server 420 may receive the terminal number of the payment terminal 250 and authenticate it.

In step S455, when the authentication of the received authentication key or the terminal number of the payment terminal 250 is performed, the issuing server 420 generates the payment information for the online card and the terminal identifier (TID). The online card payment information is information necessary for performing a card payment online in the payment terminal 250, and may include a card number of the online card, an online card CVC authentication number, an expiration date of the online card, and the like. The TID is an identifier for identifying each payment terminal 250 by assigning it to each payment terminal 250.

In operation S460, the issuing server 420 issues the generated payment information and the TID to the payment terminal 250. The issuing module that has received the TID outputs the TID on the screen, so that the user can recognize the TID and use it for online card payment. In operation S465, the payment module that receives the payment information receives user authentication information from the user.

In operation S470, the payment module encrypts the payment information by using the input user authentication information as an encryption key. According to an embodiment, the payment module may generate an encryption key with a unique number of the payment terminal 250 together with user authentication information, and may encrypt payment information using the generated encryption key.

There is no limitation on how to physically implement the payment approval server 230 and the issuing server 420. For example, the payment approval server 230 and the issuing server 420 may be physically implemented in one device or distributed in a plurality of devices. In addition, according to the embodiment, the payment approval server 230 may implement a payment approval server so as to perform a function of the issuing server 430 functionally.

5 is a block diagram illustrating a payment module that is driven in a payment terminal according to an embodiment of the disclosed technology. According to an embodiment, the payment module 500 of FIG. 5 may be applied to the payment module described with reference to FIGS. 2 to 4 as it is. Referring to FIG. 5, the payment module 500 may include a push information processor 510, a user authentication unit 520, a payment information storage unit 530, a payment information processor 540, an electronic signature processor 550, and secure communication. The processor 560 includes a receipt manager 570 and a payment information issuer 580.

The push information processing unit 510 receives a PRM (payment request message) from the push server 240. The push information processing unit 510 is provided with transaction information requesting the payment from the PRM. The push information processing unit 510 outputs the transaction information included in the PRM, so that the user can know the transaction information. For example, the push information processor 510 may output transaction information on the screen. The output transaction information may be summary transaction information or may include detailed transaction information. When the output transaction information is summary transaction information, the payment module 500 may request detailed transaction information from the payment approval server 230 and receive it.

The user authentication unit 520 receives user authentication information from a user. For example, a user who confirms the transaction information displayed on the screen may accept the payment request for the transaction. When accepting the payment request, the user authentication unit 520 receives user authentication information from the user. As another example, the user authentication unit 520 may proceed with a user authentication procedure without a user's payment request acceptance procedure. The user authentication information is information for authenticating a user of the payment terminal 500 and may include a password, a certificate, and biometric information.

The payment information storage unit 530 stores payment information necessary for online payment. For example, payment information may include credit card payment information (credit card number, expiration date, CVC number, etc.), debit card payment information (debit card number, expiration date, CVC number, etc.), bank card account transfer information (account number, password, etc.). ) May be included. Payment information may be stored encrypted.

The payment information processing unit 540 decrypts the payment information stored in the payment information storage unit 530 and provides it to the secure communication processing unit 560. For example, the payment information processing unit 540 may encrypt and store payment information based on the user authentication information input from the user and the unique number of the payment terminal 500. In this case, the payment information processing unit 540 may receive the user authentication information from the user authentication unit 520, and decode the payment information based on the user authentication information and the unique number of the payment terminal 500. As another example, the payment information processing unit 540 may decrypt and encrypt using user authentication information or information other than the unique number of the payment terminal 500.

The electronic signature processing unit 550 is provided with the decoded payment information from the payment information processing unit 540 and electronically processes the payment information. According to an embodiment, the electronic signature processing unit 550 may process the electronic signature with the transaction information. The electronic signature processing unit 550 provides the electronically signed electronic document to the secure communication processing unit 560.

The secure communication processor 560 transmits the transaction information and the payment information to the payment approval server 230 through the secure channel. According to an embodiment, as shown in FIG. 5, transaction information and payment information may be provided from the electronic signature processing unit 550. In this case, the transaction information and payment information may be electronically signed to indicate that the electronic document is a reliable. According to another embodiment, unlike shown in FIG. 5, the transaction information may be provided from the push information processor 510 or the payment information processor 550, and the payment information may be provided after being decoded from the payment information processor 540. have. According to an embodiment, the secure communication processing unit 560 may further include a configuration for transmitting the encrypted transaction information and payment information. In addition, according to an embodiment, when the payment is approved, the secure communication processing unit 560 may receive a payment approval message from the payment approval server 230.

The receipt manager 570 manages a payment approval message received from the secure communication processor 560. The receipt manager 570 manages a transaction product, a transaction amount, a transaction date and time included in the payment approval message.

The payment information issuing unit 580 is a module for receiving payment information. In order to use the online card, the user must request the issuance of the online card in advance and receive payment information from the payment terminal 250. The payment information issuing unit 580 receives a request for issuing payment information from the user. The payment information issuing unit 580 that is requested to issue payment information transmits information (eg, an authentication key) for verifying the payment information issuance request to the issuing server 420. The payment information issuing unit 580 receives the payment information from the issuing server 420 when the issuing request is verified at the issuing server 420. According to an embodiment, the payment information is encrypted and stored in the payment information storage unit 530.

6 is a block diagram illustrating a payment approval server according to an embodiment of the disclosed technology. According to an embodiment, the payment approval server 600 of FIG. 6 may be applied to a portion described with respect to the payment approval server of FIGS. 2 to 4 as it is. Referring to FIG. 6, the payment approval server 600 includes a payment request processing unit 610, a secure communication unit 620, an electronic signature verification unit 630, a payment approval unit 640, and an issue request processing unit 650. .

The payment request processor 610 receives transaction information about a transaction requesting an online payment from the shopping mall server 220 and a TID of the payment terminal 250 to perform the payment, and based on the TID, the payment terminal ( The transaction information is transmitted to the push server 240 such that the payment request message is pushed to 250. According to an embodiment, the payment request processing unit 610 may include a payment request verification unit 612 and a push request processing unit 614. The payment request verification unit 612 verifies the validity of the transaction information received from the shopping mall server 220. The push request processing unit 614 extracts the connection number of the payment terminal 250 corresponding to the TID, referring to the issuing information DB, and extracts the connection number and the extracted connection number so that the transaction information is pushed to the payment terminal 250. The transaction information is transmitted to the push server 240.

The secure communication unit 620 receives payment information necessary for the requested online payment from the payment terminal 250 through a secure channel. For example, the payment terminal 250 receiving the transaction information from the push server 240 transmits the payment information necessary for the payment to the payment approval server 230 when the user wants to pay for the transaction. According to an embodiment, the payment terminal 250 may transmit the electronic signature process on the payment information.

The electronic signature verification unit 630 verifies the electronic signature of the payment information. When the payment terminal 250 has electronically signed the payment information, the electronic signature verification unit 630 verifies this. The electronic signature verification unit 630 may verify the electronic signature and confirm that the electronic document is created in the payment terminal 250 and that the written content is not forged or tampered with during the transmission and reception process.

The payment approval unit 540 verifies the received payment information and approves the requested online payment. For example, the payment approval unit 540 may check the validity of the payment information by comparing the previously stored payment information and the payment information received from the payment terminal 250. When the validity of the payment information is confirmed, the payment approval unit 540 determines whether to approve the online payment. In addition, according to an embodiment, the payment approval unit 540 may check the validity of the transaction information by comparing the previously stored transaction information and the received transaction information. Transaction information may be transmitted from the payment terminal 250 together with the payment information.

The issue request processor 650 is a module for processing a request for issuing payment information according to an online card issue request. If the issuing request processor 650 receives a request for issuing payment information from the payment terminal 250, the issuing request processor 650 verifies the issuing request. The issue request processor 650 generates the requested payment information and issues it to the payment terminal 250 when the issue request is verified. According to an embodiment, the issue request processing unit 650 may include an issue request verification unit 652 and an issue information generation unit 654. The issue request verification unit 652 receives verification information for verifying the issue request from the payment terminal 250 and verifies the issue request based on the verification information. If the issue request is verified, the issue information generation unit 654 generates the requested payment information to be issued to the payment terminal 250.

Each of the modules and applications mentioned above correspond to a set of instructions for performing one or more functions described so far. These modules (ie, instruction sets) need not be implemented as individual software programs, procedures, or modules, and various subsets of these modules may be integrated or rearranged in various embodiments.

Although the disclosed method and system have been described with reference to the embodiments illustrated in the drawings for clarity, this is merely exemplary and various modifications and equivalent other embodiments are possible to those skilled in the art. Will understand. Therefore, the true technical protection scope of the disclosed technology should be defined by the appended claims.

Claims (16)

delete In the method of providing an online payment service,
When the issuing server receives a request for issuing an online card from the payment terminal, after authenticating the issuance request, generating a terminal identifier and payment information;
Receiving, by the payment terminal, the terminal identifier and payment information from the issuing server;
Receiving, by the payment terminal, user authentication information from a user, and encrypting the payment information by the user authentication information and a unique number of the payment terminal;
When the shopping mall server receives an online payment request for a specific transaction from a browser, transmitting transaction information about the transaction that requested the payment and a terminal identifier of the payment terminal to perform the payment to a payment approval server;
Extracting, by the payment approval server, a connection number of a payment terminal corresponding to the terminal identifier, and transmitting the extracted connection number and the transaction information to a push server;
Transmitting, by the push server, a payment request message including the transaction information to the payment terminal by referring to the connection number;
When the payment terminal receives the payment request message, the payment module of the payment terminal that is driven separately from the browser decrypts the previously stored payment information and transmits the decrypted payment information to the payment approval server. Making; And
And acknowledging the received payment information and transaction information by the payment approval server to approve the requested online payment. In the method of providing an online payment service,
When the shopping mall server receives an online payment request for a specific transaction from a browser, transmitting transaction information about the transaction that requested the payment and a terminal identifier of a payment terminal to perform the payment to a payment approval server;
Extracting, by the payment approval server, a connection number of a payment terminal corresponding to the terminal identifier, and transmitting the extracted connection number and the transaction information to a push server;
Transmitting, by the push server, a payment request message including the transaction information to the payment terminal by referring to the connection number;
When the payment terminal receives the payment request message, the payment module of the payment terminal, which is driven separately from the browser, decrypts previously stored payment information and transmits the decrypted payment information to the payment approval server. step; And
Verifying the received payment information and transaction information by the payment approval server to approve the requested online payment;
The step of transmitting to the payment approval server,
And receiving, by the payment module, authentication information from a user of the payment terminal, and decrypting the payment information by the input authentication information and a unique number of the payment terminal. In the method of providing an online payment service,
When the shopping mall server receives an online payment request for a specific transaction from a browser, transmitting transaction information about the transaction that requested the payment and a terminal identifier of a payment terminal to perform the payment to a payment approval server;
Extracting, by the payment approval server, a connection number of a payment terminal corresponding to the terminal identifier, and transmitting the extracted connection number and the transaction information to a push server;
Transmitting, by the push server, a payment request message including the transaction information to the payment terminal by referring to the connection number;
When the payment terminal receives the payment request message, the payment module of the payment terminal, which is driven separately from the browser, decrypts previously stored payment information and transmits the decrypted payment information to the payment approval server. step; And
Verifying the received payment information and transaction information by the payment approval server to approve the requested online payment;
The step of transmitting to the payment approval server includes the step of electronically signing the payment information and transaction information,
The approving step may include verifying an electronic signature of the received payment information and transaction information. delete A payment information issuing unit which transmits information for verifying a request for issuing payment information to an issuing server, and issuing the payment information from the issuing server when the issuing request is verified;
A push information processor configured to receive transaction information requesting the payment from a payment request message received from a push server and output the transaction information;
A payment information storage unit in which the payment information necessary for online payment is pre-encrypted and stored;
A payment information processing unit which decrypts the stored payment information and provides it to a secure communication processing unit when a payment command for the payment requested transaction is input from a user; And
Payment terminal comprising a secure communication processing unit for transmitting the decrypted payment information to the payment approval server. A push information processor configured to receive transaction information requesting the payment from a payment request message received from a push server and output the transaction information;
A payment information storage unit in which payment information necessary for online payment is encrypted in advance and stored;
A payment information processing unit which decrypts the stored payment information and provides it to a secure communication processing unit when a payment command for the payment requested transaction is input from a user;
A secure communication processing unit for transmitting the decrypted payment information to a payment approval server; And
A payment terminal including a user authentication unit for receiving user authentication information from a user,
The payment information storage unit encrypts and stores the payment information based on the user authentication information and the unique number of the payment terminal,
The payment information processing unit, the payment terminal for decoding the payment information based on the unique number of the user authentication information and the payment terminal. A push information processor configured to receive transaction information requesting the payment from a payment request message received from a push server and output the transaction information;
A payment information storage unit in which payment information necessary for online payment is pre-encrypted and stored;
A payment information processing unit which decrypts the stored payment information and provides it to an electronic signature processing unit when a payment command for the transaction requested for payment is input from a user;
An electronic signature processing unit for digitally processing the decrypted payment information and providing the decrypted payment information to a secure communication processing unit; And
And a secure communication processing unit for transmitting the electronically signed payment information to a payment approval server. A push information processor configured to receive transaction information requesting the payment from a payment request message received from a push server and output the transaction information;
A payment information storage unit in which payment information necessary for online payment is pre-encrypted and stored;
A payment information processing unit which decrypts the stored payment information and provides it to a secure communication processing unit when a payment command for the payment requested transaction is input from a user;
A secure communication processor for transmitting the decrypted payment information to a payment approval server and receiving a payment approval message from the payment approval server when the payment is approved; And
Payment terminal comprising a receipt management unit for managing the received payment approval message. delete Receive the transaction information for the online payment requested through the user's browser and the terminal identifier of the payment terminal to perform the payment from the shopping mall server, and the payment request message including the transaction information is pushed to the payment terminal. A payment request processor for transmitting the transaction information to a push server;
Security for receiving payment information required for the online payment when a payment command of the user is input to the payment module in response to receiving the payment request message from the payment module of the payment terminal that is driven separately from the browser. Communication unit; And
And a payment approval unit that verifies the received payment information and approves the requested online payment.
The payment request processing unit,
And a payment request verification unit for verifying whether the transaction information received from the shopping mall server is valid information. Receive the transaction information for the online payment requested through the user's browser and the terminal identifier of the payment terminal to perform the payment from the shopping mall server, and the payment request message including the transaction information is pushed to the payment terminal. A payment request processor for transmitting the transaction information to a push server;
Security for receiving payment information required for the online payment when a payment command of the user is input to the payment module in response to receiving the payment request message from the payment module of the payment terminal that is driven separately from the browser. Communication unit; And
And a payment approval unit that verifies the received payment information and approves the requested online payment.
The payment request processing unit,
A payment approval server including a push request processing unit for extracting a connection number of a payment terminal corresponding to the terminal identifier and transmitting the connection number and the transaction information to a push server so that the payment request message is pushed to the payment terminal. . Receive the transaction information for the online payment requested through the user's browser and the terminal identifier of the payment terminal to perform the payment from the shopping mall server, and the payment request message including the transaction information is pushed to the payment terminal. A payment request processor for transmitting the transaction information to a push server;
Security for receiving payment information required for the online payment when a payment command of the user is input to the payment module in response to receiving the payment request message from the payment module of the payment terminal that is driven separately from the browser. Communication unit;
An electronic signature verification unit that verifies the electronic signature on the received payment information; And
And a payment approval unit for approving the requested online payment when the received payment information is verified. An issuing request processor for receiving issuance of payment information for online payment, generating the requested payment information, and issuing the generated payment information to a payment terminal;
The payment request message including the transaction information on the online payment requested through the user's browser and the terminal identifier of the payment terminal to perform the payment from the shopping mall server and including the transaction information in the payment terminal is pushed. A payment request processor for transmitting the transaction information to a push server;
Security for receiving payment information required for the online payment when a payment command of the user is input to the payment module in response to receiving the payment request message from the payment module of the payment terminal that is driven separately from the browser. Communication unit; And
And a payment approval unit for verifying the received payment information and approving the requested online payment. The method of claim 14, wherein the issuance request processing unit,
A payment request server that receives verification information for verifying the issuance request from the payment terminal and verifies whether the issuance request is valid based on the verification information. The method of claim 14, wherein the issuance request processing unit,
If the validity of the issuance request is verified, payment approval server including an issuing information generating unit for generating the requested payment information to be issued to the payment terminal.

Images