KR101172871B1 - Method and system of secure payment using onetime authentication information - Google Patents

Abstract

The present invention stores the electronic certificate in the secure payment authentication server, the server generates an electronic signature, so that the operating system can make a secure payment from a variety of terminals, payment using the one-time authentication information mapped to the card number By proceeding the process, and relates to a secure payment method and system for removing the risk of card number exposure.
In accordance with an embodiment of the present invention, a secure payment method includes receiving a card number input from a buyer by a secure payment authentication server; Generating, by the secure payment authentication server, disposable authentication information mapped to the received card number; Transmitting, by the secure payment authentication server, the one-time authentication information and card identification information mapped to the one-time authentication information to a terminal; Receiving, by the secure payment authentication server, the secure payment password and one-time authentication information input from the purchaser from the terminal; Verifying, by the secure payment authentication server, the received secure payment password and one-time authentication information and generating an electronic signature based on the verification; Encrypting, by the secure payment authentication server, the generated electronic signature and transaction information, and transmitting the encrypted data and the one-time authentication information to the terminal; Transmitting, by the terminal, the encrypted data and the one-time authentication information to a payment relay server; Receiving, by the secure payment authentication server, the encrypted data and one-time authentication information from the payment relay server; The secure payment authentication server decrypting the encrypted data received from the payment relay server and performing authentication; Transmitting, by the secure payment authentication server, an authentication result to the payment relay server; And transmitting, by the payment relay server, a payment approval request to the purchase company server.

Description

Safe payment method and system using one-time authentication information {METHOD AND SYSTEM OF SECURE PAYMENT USING ONETIME AUTHENTICATION INFORMATION}

The present invention relates to a safe payment method and system, and more particularly, to a safe payment method and system for helping a buyer to make a safe and simple payment through one-time authentication information.

Conventionally, customers often see and purchase goods directly, and payment for purchases is mostly made through cash transactions between customers and businesses.

Recently, however, more and more customers purchase goods at home or in the office through Internet shopping, home shopping advertisements, or delivery order phones. This can be efficient in terms of time, cost and fitness.

In addition, as communication develops, a case in which a customer accesses an Internet shopping mall server through various electronic devices is increasing. However, since various electronic devices may have different operating systems (OSs), there is a problem that a separate process may be required for each electronic device in order to support a payment service through various electronic devices.

Meanwhile, since payment information data including a card number and the like may be stored by a payment gateway (PG) company or a value-added network (VAN) company, a security risk such as exposing the card number may exist.

Therefore, there is a need for the introduction of a secure payment system that allows simple and secure payment through various electronic devices in accordance with the purchase taste of buyers.

An object of the present invention is to provide a secure payment method and system for storing an electronic certificate in a secure payment authentication server, and allowing the server to generate an electronic signature, so that the operating system can safely make payments in various terminals.

It is still another object of the present invention to provide a secure payment method and system for eliminating the risk of exposing a card number by performing a payment process using disposable authentication information mapped to a card number.

In order to achieve the above object, the present invention comprises the steps of receiving a card number input from the buyer secure payment authentication server; Generating, by the secure payment authentication server, disposable authentication information mapped to the received card number; Transmitting, by the secure payment authentication server, the one-time authentication information and card identification information mapped to the one-time authentication information to a terminal; Receiving, by the secure payment authentication server, the secure payment password and one-time authentication information input from the purchaser from the terminal; Verifying, by the secure payment authentication server, the received secure payment password and one-time authentication information and generating an electronic signature based on the verification; Encrypting, by the secure payment authentication server, the generated electronic signature and transaction information, and transmitting the encrypted data and the one-time authentication information to the terminal; Transmitting, by the terminal, the encrypted data and the one-time authentication information to a payment relay server; Receiving, by the secure payment authentication server, the encrypted data and one-time authentication information from the payment relay server; The secure payment authentication server decrypting the encrypted data received from the payment relay server and performing authentication; Transmitting, by the secure payment authentication server, an authentication result to the payment relay server; And the payment relay server provides a secure payment method comprising the step of transmitting a payment approval request to the purchase company server.

In order to achieve the above object, the present invention receives a card number input from a purchaser, generates one-time authentication information mapped to the received card number, and uses the one-time authentication information and the card identification information mapped to the one-time authentication information. And receive the secure payment password and one-time authentication information input from the purchaser from the terminal, verify the received secure payment password and the one-time authentication information, generate an electronic signature based on the verification, and generate the Encrypts the electronic signature and transaction information, transmits the encrypted data and the one-time authentication information to the terminal, receives the encrypted data and the one-time authentication information from a payment relay server, and receives the encrypted data received from the payment relay server. Decrypting data, performing authentication, and paying Secure payment authentication server sends the authentication result to the server; A terminal for transmitting the encrypted data and the one-time authentication information to the payment relay server; And it provides a secure payment system comprising a payment relay server for transmitting a payment approval request to the purchase company server.

According to an embodiment of the present invention, the electronic certificate may be stored in the secure payment authentication server and stored in the secure payment authentication server. Therefore, the secure payment service can be extended to various devices (terminals) having various operating systems. In other words, the buyer can easily proceed with the card payment regardless of the device (terminal).

According to an embodiment of the present invention, by generating the disposable authorization information mapped to the card number to proceed with the payment, there is an effect that can prevent the card number is exposed.

1 is a block diagram illustrating a safe payment system related to an embodiment of the present invention.
2 is a view for explaining a secure payment method associated with an embodiment of the present invention.
3 is a view for explaining the process of issuing an electronic certificate related to an embodiment of the present invention.
4 and 5 are diagrams showing an embodiment of the present invention.

The terms used in this specification will be briefly described and the present invention will be described in detail.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. Also, in certain cases, there may be a term selected arbitrarily by the applicant, in which case the meaning thereof will be described in detail in the description of the corresponding invention. Therefore, the terms used in the present invention should be defined based on the meanings of the terms and the contents throughout the present invention, rather than the names of the simple terms.

Throughout the specification, the term 'card' refers to a means for paying for the purchase of goods or services, and specifically, a credit card, a debit card, a transportation card, a check in the form of a physical card or a micro chip. Cyber money, cyber coupons, cyber points, etc. that exist on a card or online. Hereinafter, a secure payment method of the present invention will be described using an example of a credit card, but this is for convenience of description and any form of payment card can be applied in the same principle.

Throughout the specification, 'transaction information' means information on a buyer's transaction details. The transaction information includes information on a purchased product (commodity code, date of manufacture, expiration date, product price, manufacturer, color, size, quantity of products, etc.), information on an affiliated store (online shopping mall) (name of affiliated store, affiliated store owner, affiliated store code, The website address of the merchant, etc.), information on the date and time of purchase, the card name, whether the card is installed, and the number of months of payment.

Throughout the specification, the 'electronic certificate' is to verify the identity of the counterparty, verify the fact that the contents of the document are not altered or forged, and to secure the transaction safety by preventing damage by third parties. The digital certificate may include serial number, expiration date, name of the issuing organization and algorithm of the digital signature used by the issuing organization, information about the user, and the version of the certificate.

Throughout the specification, 'encryption' refers to the conversion of information into an unknown format (cipher text). The information can be protected by storing the information in a form of cipher text in a storage device or transmitting it through a communication line.

Meanwhile, in the entire specification, 'decryption' refers to a process of converting a cipher text into plain text by an encryption algorithm as a reverse process of the encryption process.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

1 is a block diagram illustrating a safe payment system related to an embodiment of the present invention.

As shown in FIG. 1, according to an embodiment of the present invention, the secure payment system 100 includes a terminal 110, a secure payment authentication server 120, a payment relay server 130, and a purchaser server 140. It may include.

The terminal 110 and the secure payment authentication server 120 may be connected to a mobile communication network or the Internet. In this case, the terminal 110 and the secure payment authentication server 120 may use Secure Socket Layer (SSL) communication. The terminal 110, the payment relay server 130, the payment relay server 130, the secure payment authentication server 120, the payment relay server 130, and the purchase company server 140 may be connected to the Internet or a dedicated network.

Since the mobile communication network, the Internet, and a dedicated network may use a network configuration and a communication protocol widely used in the related art, a detailed description thereof will be omitted.

The terminal 110 may be implemented in various forms. For example, the terminal 110 described in the present specification may be an IPTV (Internet Protocol Television), a mobile phone, a smart phone, a personal computer (PC), a notebook computer, a portable multimedia player (PMP), Digital broadcasting terminal, PDA (Personal Digital Assistants), navigation, and the like.

IPTV (Internet Protocol Television) refers to an interactive television service that provides information service, video content, and broadcasting to a television receiver using high-speed Internet. IPTV is a type of digital convergence in that it is a convergence of the Internet and television.

The terminal 110 may include a communication unit, a user input unit, an output unit, a memory, an interface unit, a controller, a power supply unit, and the like.

The communication unit may include one or more components that allow communication between the terminal 110 and the communication system or between the terminal 110 and a network in which the terminal 110 is located. For example, the communication unit may include a broadcast receiving module, a mobile communication module, a wired internet module, a wireless internet module, a short range communication module, and a location information module.

The user input unit generates input data for controlling the operation of the terminal 110 by the user. The user input unit may include a key pad, a dome switch, a touch pad (constant voltage / capacitance), a jog wheel, a jog switch, a remote control, and the like. In particular, when the touch pad has a mutual layer structure with the display unit 151 described later, this may be referred to as a touch screen.

The interface unit serves as an interface with all external devices connected to the terminal 110. For example, a wired / wireless headset port, an external charger port, a wired / wireless data port, a memory card port, a port for connecting a device having an identification module, an audio I / O port, Video input / output (I / O) ports, earphone ports, and the like.

The output unit is for outputting an audio signal, a video signal, or an alarm signal. The output unit may include a display unit, a sound output module, an alarm unit, and the like. The display unit displays and outputs information processed by the terminal 110. For example, when the terminal 110 is in an image receiving mode, the display unit displays the received image, UI, or GUI.

The sound output module outputs audio data received from a communication unit or stored in a memory in a call signal reception, a call mode or a recording mode, a voice recognition mode, a broadcast reception mode, and the like. In addition, the sound output module outputs a sound signal related to a function (eg, a call signal reception sound, a message reception sound, etc.) performed in the terminal 110. The sound output module may include a speaker, a buzzer, and the like.

The memory may store a program for processing and controlling the controller, or may perform a function for temporarily storing input / output data (for example, a phone book, a message, a still image, a video, etc.).

The memory may be a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (e.g. SD or XD memory, etc.), RAM (RAM, Random Access Memory (SRAM) Static Random Access Memory (ROM), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM (Programmable Read-Only Memory) magnetic memory, magnetic disk, optical disk It may include one type of storage medium. In addition, the terminal 110 may operate a web storage that performs a storage function of a memory on the Internet.

In addition, the controller typically controls the overall operation of the terminal 110. For example, it performs related control and processing for voice call, data communication, video call, card payment processing and the like. The power supply unit receives an external power source and an internal power source under the control of a controller to supply power for operation of each component.

According to an embodiment of the present invention, the secure payment authentication server 120 may be a server for providing a secure payment service that allows the purchaser to securely perform the card payment using the terminal 110.

According to an embodiment of the present invention, when the secure payment password is generated, the secure payment authentication server 120 may issue an electronic certificate mapped to the card number. The secure payment authentication server 120 may store the electronic certificate in a database.

In addition, according to an embodiment of the present invention, the secure payment authentication server 120 may generate an electronic signature by receiving the secure payment password entered by the buyer. Therefore, no matter what kind of terminal 110 or which operating system (OS) is used, it is possible to use the secure payment system 100 according to an embodiment of the present invention without having to develop a payment system for each terminal 110. do.

This is because it is possible to generate an electronic signature in the secure payment authentication server 120, the terminal 110 does not need to install a separate encryption program (application) for each operating system (OS). Therefore, according to one embodiment of the present invention, it is possible to reduce the cost and effort for developing a specific application to be installed separately according to the operating system of each terminal 110.

According to an embodiment of the present invention, the payment relay server 130 is a server that plays a role of mediating the payment can be made in the middle of the terminal 110, the shopping mall server and the purchase company server 140. . The payment relay server 130 may be a single server or may be composed of a plurality of servers. For example, the payment relay server 130 may include a payment gateway as a first payment relay server and a value-added network (VAN) server as a second payment relay server.

The payment gateway is a credit card company or bank that the buyer deals with on behalf of the seller (shopping mall) so that the buyer can use the credit card on the internet or transfer the account in the electronic commerce through an internet shopping mall or the like. It is a kind of electronic payment agency that provides a service that removes a certain fee and pays the remaining amount to the seller after collecting money from the company.

The value-added network (VAN) provides voice or data information that has added value such as accumulating, processing, and converting information beyond a simple transmission function by directly owning a line or renting or using a line of a carrier. A comprehensive and complex set of services.

The purchaser server 140 refers to a server of the purchaser that can substantially pay the payment. The purchase company server 140 may include a card company server, a financial company server.

Hereinafter, a safe payment method using the safe payment system 100 will be described in detail with reference to FIG. 2.

2 is a view for explaining a secure payment method associated with an embodiment of the present invention.

According to one embodiment of the present invention, the secure payment authentication server 120 may receive the card number input from the purchaser [1 step]. The purchaser may input a card number through a user input unit of the terminal 110. In this case, the secure payment authentication server 120 may receive the card number input by the purchaser from at least one of the terminal 110, the shopping mall server, and the payment relay server 130.

According to an embodiment of the present invention, the secure payment authentication server 120 may generate disposable authentication information mapped to the received card number [step ②]. The one-time authentication information means authentication information that is used once for a payment in a specific transaction.

The one-time authentication information is information mapped to a card number used for a specific transaction, and may replace the card number. For example, the one time authentication information may include a serial number. The one-time authentication information is not visible to the buyer.

As a result, according to an embodiment of the present invention, after the secure payment authentication server 120 receives the card number from the buyer, the card number may no longer be exposed during the payment process.

Meanwhile, according to one embodiment of the present invention, the one-time authentication information may be one-time authentication information directly mapped to the card number, or may be one-time authentication information mapped indirectly through the card number and the intermediate information.

That is, according to the first embodiment of the present invention, the secure payment authentication server 120 may generate one-time authentication information by directly mapping with the card number. In addition, according to the second embodiment of the present invention, the secure payment authentication server 120 may generate one-time authentication information by mapping with an identification number of a pre-stored electronic certificate mapped with the card number. That is, according to the second embodiment, the secure payment authentication server 120 extracts an electronic certificate based on the received card number, and generates one-time authentication information by mapping with the identification number of the extracted electronic certificate. .

Both the first and second embodiments of the present invention are common in that the generated one-time authentication information becomes a means for replacing the card number.

According to one embodiment of the present invention, the secure payment authentication server 120 may transmit the one-time authentication information and card identification information mapped to the one-time authentication information to the terminal 110.

Card identification information mapped to the one-time authentication information means information for enabling the purchaser to identify the card. The card identification information may include a card product name, a card company name, an identification number, and the like. However, according to an embodiment of the present invention, the card identification information may not include a card number.

for example. When the card is a gift card issued by AA card company, the card identification information may be displayed as "AA gift 554". In this case, 554 may be a number that is not related to the card number.

According to an embodiment of the present invention, the secure payment authentication server 120 may receive the secure payment password and one-time authentication information input from the purchaser from the terminal 110 [step ④].

In this case, the secure payment authentication server 120 verifies the received secure payment password and one-time authentication information, and generates an electronic signature based on the verification [step ⑤].

According to an embodiment of the present invention, the secure payment authentication server 120 may extract a pre-stored electronic certificate using the one-time authentication information.

When the received secure payment password matches the preset secure payment password, the secure payment authentication server 120 generates an electronic signature using the extracted electronic certificate.

The digital signature may be generated by encrypting data for some of the transaction information and card information using the buyer's private key included in the electronic certificate. The data used for the electronic signature may include an installment month number, a card type, a payment amount, and the like.

According to an embodiment of the present invention, since the electronic signature may be made in the secure payment authentication server 120, an additional application program for each operating system (OS) such as Windows, Mac, and Linux may be additionally developed. no need. This is because it is compatible with the secure payment process according to an embodiment of the present invention.

According to an embodiment of the present invention, the secure payment authentication server 120 may generate encrypted data by encrypting the generated digital signature and transaction information [step ⑤].

The transaction information may be received by the safe payment authentication server 120 from at least one of the terminal 110, the shopping mall server, and the payment relay server 130.

The transaction information includes information on a purchased product (commodity code, date of manufacture, expiration date, product price, manufacturer, color, size, quantity of goods, etc.), information on a merchant (shopping mall), information on a purchase date and time, and a card. It may include a brand name, whether the card is installed, the number of months to install.

The transaction information may be encrypted. In addition, the transaction information may include transaction identification information. An example of transaction identification information may be a transaction ID (TID).

According to one embodiment of the present invention, the secure payment authentication server 120 may transmit the encrypted data and the one-time authentication information to the terminal 110 [step ⑥]. In this case, the terminal 110 may transmit the encrypted data and the one-time authentication information to the payment relay server 130 [step ⑦].

According to one embodiment of the present invention, the secure payment authentication server 120 receives the encrypted data and the one-time authentication information from the payment relay server 130 [8 step].

In this case, the secure payment authentication server 120 decrypts the encrypted data received from the payment relay server 130. The secure payment authentication server 120 performs an authentication procedure for the decrypted electronic signature and one-time authentication information [step ⑨].

The authentication procedure for the one-time authentication information may be performed by comparing the generated one-time authentication information with the one-time authentication information received from the payment relay server 130.

When the generated one-time authentication information and the received one-time authentication information match, the safe payment authentication server 120 may extract an electronic certificate mapped to the one-time authentication information. The digital signature is generated again using the buyer's private key included in the extracted electronic certificate.

At this time, the secure payment authentication server 120 performs an electronic signature authentication procedure according to whether the newly generated electronic signature matches the electronic signature received and decrypted from the payment relay server 130.

According to an embodiment of the present invention, the secure payment authentication server 120 may transmit an authentication result to the payment relay server 130 [step S].

If the newly generated digital signature and the electronic signature received and decrypted from the payment relay server 130 match, the secure payment authentication server 120 maps the card number, expiration date, etc., to the one-time authentication information. The card information may be transmitted to the payment relay server 130.

In this case, the payment relay server 130 may transmit a payment approval request to the purchase company server 140 on the basis of the received information such as the card number, expiration date [step step].

According to one embodiment of the present invention, instead of the card number, one-time authentication information is secure payment authentication server 120-terminal 110-mall server-payment relay server (PG and / or VAN server) 130-secure payment authentication Since it is transmitted along with the process of the server 120, it is possible to reduce the risk of security incidents due to card number leakage.

In addition, since the electronic signature is made in the secure payment authentication server 120, the payment process may not use the existing Active X method. Therefore, it is not necessary to further develop a separate application for each operating system (OS), and the secure payment authentication server 120 may provide a secure payment service through various terminals 110.

Hereinafter, a process of issuing the electronic certificate will be described with reference to FIG. 3.

 As shown in FIG. 3, according to an embodiment of the present invention, the secure payment authentication server 120 may receive card information from the terminal 110 [1 step]. The card information may include card product information, a card number, an expiration date, and a card verification code (CVC).

In this case, the secure payment authentication server 120 may request authentication of the card information from the purchaser server 140 to check whether the received card information is correct [step ②]. If the card information is correct as a result of the authentication, the secure payment authentication server 120 may provide the buyer to input the secure payment password through the user input unit of the terminal 110.

When the buyer sets and inputs a secure payment password, the secure payment authentication server 120 receives the secure payment password set by the buyer [step ③].

According to an embodiment of the present invention, the secure payment authentication server 120 may issue an electronic certificate based on the received secure payment password [step ④]. In this case, according to one embodiment of the present invention, one-time authentication information may also be generated.

The generated electronic certificate may be stored in the secure payment authentication server 120 [step ⑤]. Therefore, according to an embodiment of the present invention, it may be different from the existing method of storing the electronic certificate in the terminal 110.

According to an embodiment of the present invention, the secure payment authentication server 120 may transmit the issuance information of the electronic certificate to the terminal 110 [step ⑥]. If one-time authentication information is generated together, the safe payment authentication server 120 may also transmit the one-time authentication information to the terminal 110 together with the issuance information.

The issue information may include a card company name, a card brand name, an issue date and time, an identification number, and the like. However, according to an embodiment of the present invention, the card number may not be included in the issuance information.

Hereinafter, with reference to FIGS. 4 and 5, a specific embodiment will be described with reference to a series of processes occurring in the terminal 110 in the secure payment method.

As shown in FIG. 4, according to an embodiment of the present invention, when the purchaser accesses a shopping mall server using an IPTV or a mobile terminal and purchases an item, if the purchaser has not set a secure payment password, The buyer needs to set a secure payment password and issue an electronic certificate before payment.

Accordingly, when the secure payment password is not set, a window for inputting a card number, a password, a CVC, an expiration date, etc. may be provided through the display unit of the terminal 110. The purchaser enters card information such as a card number, a password, a CVC, an expiration date, and the like through a user input unit of the terminal 110.

If the entered card information is correct, the buyer sets a secure payment password. In this case, the secure payment authentication server 120 may receive the card information and the set secure payment password.

The secure payment authentication server 120 generates an electronic certificate based on the card information and the secure payment password. When the electronic certificate is generated, the secure payment authentication server 120 may provide issuance information indicating that the electronic certificate has been issued to the terminal 110.

For example, if Mr. OOO has been issued an electronic certificate for a gift card of ABC card company, the secure payment authentication server 120 has issued a "OOO (ABC gift 554) secure payment service certificate has been issued." It can be transmitted to the terminal 110.

As shown in FIG. 5, when the secure payment password is set in advance and the electronic certificate is already issued, when the buyer wants to make a payment using the terminal 110, information of the shopping mall (payment product) , Card selection) (step 1), the card number is input through the user input unit of the terminal 110 (step 2).

In this case, the secure payment authentication server 120 receives the card number, generates one-time authentication information mapped to the card number, and transmits the card number to the terminal 110 together with the card identification information.

The card identification information may be automatically displayed on the display unit of the terminal 110. Therefore, after confirming the product name, amount, installment, and card identification information, the buyer enters a preset secure payment password if the transaction information is correct [step 3].

The secure payment authentication server 120 receives the secure payment password entered by the purchaser and generates an electronic signature using a pre-stored electronic certificate [step 4]. The electronic signature is to prevent the buyer from denying the transaction.

The generated digital signature and transaction information are encrypted to return to the secure payment authentication server 120 through the terminal 110 and the payment relay server 130 together with the one-time authentication information.

In this case, the secure payment authentication server 120 performs the verification of the one-time authentication information and the electronic signature, and if the data is not forged or tampered with, transmits an authentication result to the payment relay server 130. do.

The payment relay server 130 makes a request for approval to the purchase company server 140, and the purchase company server 140 proceeds with the approval process. As a result, when the payment is approved, the purchase company server 140 may transmit the approval result to at least one of the payment relay server 130, the shopping mall server, and the terminal 110 [5].

In this case, the purchaser may check whether the payment is completed through the display unit of the terminal 110.

Therefore, according to an embodiment of the present invention, when the buyer wants to make a secure payment using the terminal 110, the buyer only needs to input a card number and a secure payment password. That is, according to one embodiment of the present invention, the payment process can be simplified, and the convenience of the buyer can be improved.

According to one embodiment of the present invention, the above-described method can be embodied as computer readable code on a medium on which a program is recorded. The computer readable medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of the computer-readable medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and also implemented in the form of a carrier wave (for example, transmission over the Internet) .

In addition, although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of the invention.

100: safe payment system
110: terminal
120: secure payment authentication server
130: payment relay server
140: Acquisition server

Claims (10)

Receiving, by the secure payment authentication server, the card number input from the purchaser from the terminal;
Generating, by the secure payment authentication server, disposable authentication information mapped to the received card number;
Transmitting, by the secure payment authentication server, the one-time authentication information and card identification information mapped to the one-time authentication information to a terminal;
Receiving, by the secure payment authentication server, the secure payment password and one-time authentication information input from the purchaser from the terminal;
Verifying, by the secure payment authentication server, the received secure payment password and one-time authentication information and generating an electronic signature based on the verification;
Encrypting, by the secure payment authentication server, the generated electronic signature and transaction information, and transmitting the encrypted data and the one-time authentication information to the terminal;
Transmitting, by the terminal, the encrypted data and the one-time authentication information to a payment relay server;
Receiving, by the secure payment authentication server, the encrypted data and one-time authentication information from the payment relay server;
The secure payment authentication server decrypting the encrypted data received from the payment relay server and performing authentication;
Transmitting, by the secure payment authentication server, an authentication result to the payment relay server; And
And transmitting, by the payment relay server, a payment approval request to the purchase company server.
The method of claim 1, wherein the one-time authentication information mapped to the card number is
And at least one of one-time authentication information directly mapped to the card number and one-time authentication information indirectly mapped through the card number and intermediate information.
The method of claim 1, wherein the terminal
Safe payment method comprising at least one of IPTV, and a mobile terminal.
The method of claim 1, wherein generating the electronic signature
Extracting, by the secure payment authentication server, an electronic certificate based on the received one-time authentication information;
If the secure payment password inputted from the buyer and the secure payment password set by the buyer match, generating the electronic signature by using the private key of the buyer included in the electronic certificate by the secure payment authentication server. Safe payment method characterized in that.
The method of claim 4, prior to the step of extracting the digital certificate:
Receiving, by the secure payment authentication server, card information from a terminal;
If the card information is correct, receiving, by the secure payment authentication server, the secure payment password set by the purchaser;
Issuing, by the secure payment authentication server, an electronic certificate based on the received secure payment password; And
The secure payment method further comprises the step of storing the issued electronic certificate by the secure payment authentication server.
Receive the card number input from the purchaser from the terminal, generate one-time authentication information mapped to the received card number, transmit the one-time authentication information and card identification information mapped to the one-time authentication information to the terminal, and input from the buyer Receiving the secure payment password and one-time authentication information from the terminal, verifying the received secure payment password and one-time authentication information, generating an electronic signature based on the verification, and encrypting the generated electronic signature and transaction information. Transmit the encrypted data and the one-time authentication information to the terminal, receive the encrypted data and the one-time authentication information from a payment relay server, decrypt the encrypted data received from the payment relay server, and perform authentication. Perform the authentication result to the payment relay server. Song secure payment authentication server;
A terminal for transmitting the encrypted data and the one-time authentication information to the payment relay server; And
Safe payment system comprising a payment relay server for transmitting a payment approval request to the purchase company server.
The method of claim 6, wherein the one-time authentication information mapped to the card number is
And at least one of one-time authentication information directly mapped to the card number and one-time authentication information indirectly mapped through the card number and intermediate information.
The terminal of claim 6, wherein the terminal
And at least one of an IPTV and a mobile terminal.
The method of claim 6, wherein the secure payment authentication server
Extract the electronic certificate based on the received one-time authentication information, and if the secure payment password input from the buyer and the secure payment password set by the buyer match, use the private key of the buyer included in the electronic certificate. Secure payment system, characterized in that for generating an electronic signature.
The method of claim 6, wherein the secure payment authentication server
Receiving card information from the terminal, if the card information is correct, receiving the secure payment password set by the buyer, issuing an electronic certificate based on the received secure payment password, and storing the issued electronic certificate Safe payment system, characterized in that.

Images