KR20090050031A - Method for authenticating right for purchase - Google Patents

Abstract

The present invention relates to a method for authenticating a purchase right of a user for a purchased item, wherein the server performs post-issuance processing of the predetermined purchase right storage information for the predetermined item with an IC card or an IC chip, and the IC card or the IC chip. Receiving the purchase right storage information post-issued to the IC card or IC chip transmitted from the terminal device through the communication network at the server when purchasing the used goods, and using the received purchase right storage information received from the server to the purchased goods. And a step of authenticating the purchase right of the user of the IC card or the IC chip, wherein the purchase right storage information includes purchase right information including one or more of user personal information, purchased goods information, and a purchase approval code. The user identification information, the secret key information, and the user's purchase rights usage history for the purchased item. It includes.

Purchase, management

Description

How to Authenticate a User's Purchase Rights for Purchased Items {Method for Authenticating Right for Purchase}

1 is a block diagram functionally expressing an internal configuration of an IC card applied to the present invention.

Figure 2 is a detailed configuration of the purchase right storage information according to a preferred embodiment of the present invention.

Fig. 3 is a simplified diagram showing an embodiment of the functional configuration of the card terminal apparatus.

4 is a simplified diagram of a system for purchasing and managing a purchase right authentication method article according to a preferred embodiment of the present invention.

Fig. 5 is a simple flow diagram of a process of post-issuing a card user a purchase right in which an IC card (or IC chip) is made through an online method according to a preferred embodiment of the present invention.

Figure 6 is a simple flow diagram for a process of authenticating a card user's IC card (or IC chip) purchase rights for a purchased item through an online method according to a preferred embodiment of the present invention.

7 is a simple flowchart of a process of authenticating a card user's IC card (or IC chip) purchase right for a purchased item in an offline manner according to a preferred embodiment of the present invention.

<Description of main parts of drawing>

100: IC card or IC chip 105: input and output interface

110: processor unit 115: memory unit

120: IC chip storage information 125: Purchase rights storage information

According to the present invention, a process of post-issuing predetermined purchase right storage information of a predetermined item in a server with an IC card or an IC chip, and at the time of purchasing an item using an IC card or an IC chip, is transmitted from a server to a terminal device through a communication network. Receiving purchase right storage information post-issued by the IC card or IC chip, and authenticating the purchase right of the IC card or IC chip user for the purchased goods by using the received purchase right storage information at the server Wherein the purchase right storage information includes purchase personal information, purchase goods information, purchase right information including one or more purchase approval codes, user identification information, secret key information, and purchase goods. Regarding how to authenticate a user's purchase right for a purchased item that includes one or more pieces of usage information of the user's purchase right for Will.

An IC card (or IC chip) is a generic term for a card made by mounting an IC chip on a plastic card of a normal credit card size, and includes a processor part and a memory part, or simply a memory part and a contact type with an external device. Or communication with a contactless interface.

Among the IC cards (or IC chips) described above, the processor unit and the memory unit have their own arithmetic capabilities, so that the identification or processing of a password (for example, a PIN (Personal Identification Number)) is possible. As a result, it is being used as a financial card such as a credit card, debit card, check card, prepaid card, electronic wallet, and financial common network. The IC card (or IC chip) is almost impossible to duplicate due to the characteristics of the medium, and is provided with features to ensure confidentiality, authentication, authentication, integrity, and nonrepudiation. The present invention uses the above-described IC card (or IC chip).

Purchasing Cards are generally used in existing commodity purchasing systems, which are equipped with commodity purchasing companies (eg, corporate card members with purchase card functionality) and / or customers (eg, purchase card functionality). Personal card member), etc., to pay the purchase price for the purchased goods by the card, and the goods delivery company (e.g., the purchaser card merchant) receives payment from the purchasing agent's payment bank (e.g., the card company). .

For the purchase card, the payment agency bank (e.g., the card company) enters into a purchase card agreement with the goods purchaser and / or the customer (e.g., the card member) and the goods delivery company, and the purchase card to the goods purchaser and / or the customer. Issue a.

Existing goods purchase system using the purchase card issued as described above has a function to prevent some tax evasion on the purchased goods, but does not authenticate the legitimacy of the goods purchasing company and / or the customer who purchases the goods, and It can be difficult to keep track of which customers have been purchased.

An object of the present invention for resolving the above problems is the step of post-processing the predetermined purchase rights storage information for a given item in the server with the IC card or IC chip, and when purchasing the item using the IC card or IC chip, Receiving, at the server, the purchase right storage information post-issued to the IC card or IC chip transmitted from the terminal device through the communication network, and using the received purchase right storage information at the server, the IC card for the purchased item. Or authenticating a purchase right of the IC chip user, wherein the purchase right storage information includes user right information, purchase goods information, purchase right information including one or more purchase authorization codes, and user identification. A purchase that includes one or more pieces of information, private key information, and usage history information of a user's purchase rights for the purchased item. The present invention provides a method of authenticating a user's purchasing right for an article.

A user's purchase right authentication method for a purchased item according to the present invention comprises the steps of post-issuing the predetermined purchase right storage information for a predetermined item in a server with an IC card or an IC chip, and using an IC card or an IC chip. When purchasing an item, receiving, by the terminal device, the purchase right storage information post-issued to the IC card or IC chip transmitted by the terminal device through a communication network, and using the received purchase right storage information from the server for the purchased item. And a step of authenticating a purchase right of the IC card or the IC chip user, wherein the purchase right storage information includes purchase right information including one or more of user personal information, purchased goods information, and a purchase approval code; One or more user identification information, secret key information, and usage rights information of a user's purchase rights for a purchased item. And that is characterized.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

For example, in the case of issuing an IC card (or IC chip) according to the present invention, the card issuing agency must first grasp the credit of the card user (e.g., a commodity purchaser and / or customer). Databases of credit card companies, financial institutions and / or credit rating agencies may be used.

In addition, when issuing (or post-issuance) a card user's purchase right for a purchase item on the IC card (or IC chip) as purchase right storage information, the goods management server purchases the goods for the card user. If the cardholder is a commodity purchasing company, a procedure is established to verify that the company is authorized to purchase the goods, or if the cardholder is a commodity customer, It is clear that a procedure is carried out to verify that the goods have a qualification in the field to which they belong.

In addition, according to the embodiment of the present invention, the information included in the purchase right storage information issued (or post-issued) to the IC card (or IC chip) may include card user personal information, purchased goods information, and / or a purchase authorization code. Includes purchase rights information, authorized certificates, secret keys, and details of the card user's purchase rights usage for the purchased items, which is a preferred implementation for efficiently explaining the purchase rights in the form of an IC card (or IC chip). It is only an example, and it is obvious that the information included in the purchase right storage information can be added or deleted, etc. according to the intention of the operator.

1 is a block diagram functionally expressing the internal configuration of the IC card 100 applied to the present invention.

With reference to IC chip specifications including ISO / IEC 7816 and / or ISO / IEC 14443, the smart card's ICC is based on the power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), An input / output interface 105 for communicating with the card terminal device (e.g., exchanging commands or data, etc.) via a contact point such as programming power supply (VPP), and / or input / output (I / O), a central process unit (CPU), A processor unit 110 including at least one computing element including a micro process unit (MPU) and / or a coprocessor, a read only memory (ROM), a random access memory (RAM), and an electrically (EPPROM) And a memory unit 115 including at least one memory device including an Erasable and Programmable Read Only Memory (FM), a flash memory (FM), and the like. In particular, at least one of the memory devices manages and operates an internal resource of a smart card. Chip operating system A chip operating system (COS) is provided, and at least one of the remaining memory elements is provided with at least one IC card (or IC chip) storing information 120 for providing a service using a smart card.

In particular, the IC chip storage information 120 included in the memory unit 115 on the IC chip included in the smart card is a data storage unit for storing a data set corresponding to data or information read and used by the card terminal program. And / or a program processing unit for storing and driving program code (eg, JAVA Applet) that can be used by the card terminal program, and the like. The data storage unit may be provided only, or the data storage unit and the program processor may be provided together.

Referring to FIG. 1, the purchase right storage information 125 is extracted by the card terminal program and used by the card terminal program and a data storage unit for storing information required to authenticate the purchase right of the card user for the purchased item. And a program processing unit specific to an IC card (or IC chip) for performing read / write control on at least one or more information stored in the data storage unit and a function of discriminating the data.

2 is a detailed configuration diagram of the purchase right storage information 125 according to a preferred embodiment of the present invention.

Referring to FIG. 2 according to a preferred embodiment of the present invention, the data storage unit 200 of the purchase right storage information 125 includes a personal information storage unit 205, a purchase item information storage unit 210, and a card user; A purchase right information storage unit including a purchase approval code storage unit 215, an authorized certificate storage unit 220, a secret key storage unit 225, a purchase right usage history storage unit 230, and a mileage or discount coupon; Other information storage unit 235 and the like are functionally provided.

In addition, the program processor 240 controls the data determination unit 250 for determining data input / output through the input / output interface 105 and reading or storing information stored in the data storage unit 200. Read / write control unit 245 and the like. In particular, the program processor 240 is part of the COS configuration provided on the IC card (or IC chip), or is linked to a part of the COS configuration.

3 is a simplified diagram showing an embodiment of the functional configuration of the card terminal device 300. As shown in FIG.

When a card user inserts an IC card (or IC chip) into the card insertion unit 305, the card user includes the IC card (or IC chip) in the purchase information obtained by converting the IC card (or IC chip) through the card interface 310 provided in the card insertion unit 305. The purchase right program and / or the purchase right data set included in the purchased purchase right storage information 125 are exchanged with the operation unit 315 of the card terminal device 300.

The card user uses at least one input device including a keyboard, a mouse, or a touch pad screen to provide personal information of the card user corresponding to the requirements of the screen output unit 335 (for example, a card user purchases an item. If not, enter the business registration number, or if the card user purchases goods, such as a social security number) and / or a secret key. The key data input through the input device is provided to the calculator 315 through the user interface 330.

The memory 320 in the computing unit 315 corresponds to the card card (or IC chip) storage information, and the card terminal corresponding to the purchase right storage information 125 corresponding to the IC card (or IC chip) purchase right. A program is provided, and the purchase right storage information 125 exchanges purchase right authentication related data. The operation of the operation unit 315 and other peripheral devices (eg, output devices) is performed by the processor 325.

The personal information and / or secret key of the card user input through the user interface 330 is used in the card user's purchase right authentication process for the purchase item performed by the operation unit 315. Both the case of authenticating offline in the card terminal device 300 and the case of authenticating online at the goods purchase server through the communication processor 340 may be performed.

For example, if a purchase authentication code for authenticating the purchase authorization code included in the purchase right storage information 125 is provided in the storage unit 350 of the card terminal device 300, the card user's purchase right authentication process for the purchased item is provided. Is preferably made offline in the card terminal device (300).

In addition, if the purchase authentication code is provided in the goods management server, for example, the card user's purchase right authentication process for the purchased goods may be performed online in the card terminal device 300 and / or the goods purchase management server. That is, the purchase authorization code included in the purchase right storage information 125 is encrypted and transmitted to the product purchase server through the communication processing unit 340 to authenticate the purchase right through a process in which the product purchase server is compared with the purchase authentication code. Alternatively, the purchase authentication code may be received from the goods purchase server through the communication processing unit 340 to the card terminal device 300 to authenticate the purchase right through a process of comparing with the purchase approval code.

The purchase right authentication related data inputted through the user interface 330 or extracted and / or generated by the calculator 315 in the process of authenticating the purchase right of the card user for the purchased goods as described above is displayed on the screen output unit ( 335 is displayed on the screen, or output to the output device.

4 is a simplified diagram of a system for purchasing and managing a purchase right authentication method article according to a preferred embodiment of the present invention.

Referring to FIG. 4 according to a preferred embodiment of the present invention, a purchase right authentication type goods purchase and management system includes a card user 445 corresponding to an item purchasing company and / or a customer, and a card affiliate store corresponding to an item delivery company ( 450), the card company corresponding to the payment agency 440, and the purchase right issued to the IC card (or IC chip) (for example, the purchase right issued (or post-issued) to the IC card (or IC chip) of the card user). It consists of a goods management server 405 that manages the purchase rights and purchase process of the card user 445 for the purchased goods through the storage information 125, and converts the IC card (or IC chip) to the card user online. A purchase right approval server 435 is added to perform a predetermined purchase right approval process for issuing (or postissuing) a purchase right.

The card user 445 is an item purchasing company and / or a customer who is authorized to purchase a specific item from the goods management agency 400. The card user 445 is provided with a purchase right that is an IC card (or IC chip). According to a preferred embodiment of the present invention, the purchase right, which is converted into an IC card (or IC chip) as described above, is purchased by the goods management server 405 through a predetermined purchase right approval process for the card user 445. The rights storage information 125 is generated and issued (or post-issued) to the IC card (or IC chip).

Card merchant 450 is a goods delivery company that has been approved for the handling and sale of a particular product from the goods management institution 400, the card terminal device 300 provided in the card merchant 450 is a purchase right as shown in Figure 3 Authentication function is provided.

Accordingly, the card user 445 purchases the goods, and provides the card terminal device 300 provided in the card merchant 450 to purchase the IC card (or IC chip) of the card user 445 for the purchased goods. (For example, the purchase right of the card user 445 for the purchased goods from the IC card (or IC chip) provided with the purchase right storage information is transferred to the operation unit 315 through the user interface 330 of the card terminal device 300.) The card terminal device 300 authenticates the purchase right of the card user 445 for the purchased goods in an offline or online manner by using the purchase right information 125, and the authentication process is normally performed (for example, After the purchase right of the card user for the purchased goods is authenticated), the card terminal 300 performs the payment process for the purchased goods.

In the case where the payment agency 440 is authorized to purchase the card user 445 for the purchased item through the IC card (or IC chip) purchase right, the purchase price of the item (eg, the card user) according to the payment processing Position) or an agency that pays for the delivery of goods (eg, from a card merchant), and corresponds to a general term of a card company, a value added network (VAN) company, or a card slip purchase bank.

The goods management server 405 is a management server operated by a goods management institution 400 for the purpose of managing the distribution of specific goods. According to a preferred embodiment of the present invention, the goods management server 400 is a purchase right provider. 410, the purchase authentication information D / B 430, the purchase right authentication unit 420, the purchase goods management unit 415, and / or the goods management information D / B 425.

The purchase right providing unit 410 of the goods management server 405 performs a predetermined approval process for the card user 445 (for example, a process of judging whether the card user is eligible for purchase and / or handling of a specific item). The card user 445 may be provided with an IC card (or IC chip) purchase right.

According to a preferred embodiment of the present invention, the purchase right providing unit 410 provides the card user 445 with respect to a particular purchase item through a predetermined approval process relating to the purchase of the particular purchase item for the card user 445. Issuing an IC card (or IC chip) issued with the purchase right storage information 125, or an IC card having an open platform among the IC cards (or IC chips) possessed by the card user 445 ( Alternatively, an IC card (or an IC chip) may be purchased through a process of post-issuing the purchase right storage information 125 for a specific purchased item.

In addition, in the present invention, a predetermined approval process relating to the purchase of a particular purchase item for the card user 445 may be performed through, for example, the card user 445 submitting documents related to the handling of the purchase item and reviewing the documents. Alternatively, when the card user 445 inputs a license number related to the handling of purchased goods, the certificate number is transmitted to a server of the corresponding certification management institution (for example, the purchase right approval server shown) to perform an online examination.

The purchase authentication information D / B 430 of the goods management server 405 authenticates the purchase right converted into an IC card (or IC chip) issued (or post-issued) to the card user 445, thereby providing the card user ( A D / B for storing information required for authenticating the purchase right of 445, and the card user personal information of the purchase right information 125 included in the purchase right obtained by the IC card (or IC chip) of the card user 445; It includes at least one or more of the matching information, information matching the purchase item information, and / or information matching the purchase authorization code.

According to the present invention, the purchase authentication information D / B 430 is preferably provided in the goods management server 405, or may be provided in the storage unit 350 of the card terminal device 300 of the goods delivery company. Do. For example, when the purchase authentication information D / B 430 is provided in the goods management server 405, the purchase rights authentication process of the card user 445 for the purchased goods is made online through the goods management server 405. Or, if the purchase authentication information D / B (430) is provided in the card terminal device 300 of the goods delivery company, the card user's purchase rights authentication process for the purchased goods is made offline in the card terminal device (300) It is possible.

The purchase right authentication unit 420 of the goods management server 405 purchases authentication information provided in the purchase authentication information D / B 430 and an IC card (or IC chip) issued (or post-issued) to the card user 445. ), And compares the purchase right information 125 included in the purchased right, and authenticates the purchase right of the card user 445 with respect to the purchased goods from the comparison result.

According to the present invention, the purchase right authentication unit 420 is preferably provided in the goods management server 405, or may be provided in the storage unit 350 of the card terminal device 300 of the goods delivery company. For example, when the purchase right authentication unit 420 is provided in the goods management server 405 (in this case, the purchase authentication information D / B is preferably provided in the goods management server together with the purchase right authentication unit), The purchase right authentication process of the card user 445 for the goods is performed online through the goods management server 405, or when the purchase right authentication unit 420 is provided in the card terminal device 300 of the goods supply company. If the purchase authentication information D / B 430 is provided in the goods management server 405, the purchase right authentication process of the present invention is performed online (eg, from the purchase authentication information D / B 430) of the card user 445. If the purchase authentication information is received in the card terminal device 300), or if the purchase authentication information D / B 430 is provided in the card terminal device 300, the purchase right authentication process of the present invention is a card terminal device ( Done offline at 300) It is possible.

The purchase goods management unit 415 of the goods management server 405 uses the purchase rights obtained by converting the IC card (or IC chip) into the purchase right authentication process of the card user 445 for the purchased goods, and the payment processing for the purchased goods. Is performed, the purchase right information of the card user 445 who purchased and paid for the goods extracted and / or generated in the purchase right authentication process and / or the payment processing process from the card terminal device 445, and the purchased goods information. Receiving and storing the item management information D / B 425 and managing the distribution process for a specific item using the purchase right information and the purchase item information stored in the item management information D / B 425. It is characterized by.

The goods management information D / B 425 of the goods management server 405 authenticates the purchase right of the card user 445 with respect to the purchased goods by using the purchase right that is converted into an IC card (or IC chip), and the purchased goods. After the payment processing is performed, the D / B storing the purchase right information and the purchased goods information of the card user 445 received from the card terminal device 300, the goods management authority 400 is the goods management information D By querying / B 425, it is possible to manage and / or control the distribution process of managed goods.

5 is a simple flowchart illustrating a process of post-issuing a purchase right obtained by converting an IC card (or an IC chip) to a card user according to a preferred embodiment of the present invention.

Specifically, in FIG. 5, a card user uses a card management device 405 of a card terminal device 300 (for example, a client computer equipped with an IC card (or IC chip) terminal function) to manage a particular purchased item. The card user through the predetermined purchase right approval process based on the purchase right approval information, and the goods management server 405 based on the purchase right approval information. The process of generating and issuing the purchase right storage information 125 for the purchased goods in the IC card (or IC chip) of the. However, FIG. 5 illustrates an embodiment of post-issuance through online among various methods of issuing (or post-issuance) an IC card (or IC chip) purchase right according to the present invention. Those skilled in the art will clearly understand the various methods of providing the card user with the IC card (or IC chip) the right to purchase the purchased goods on the basis of FIG. 5.

A card user inserts an IC card (or IC chip) into the card terminal device 300, and performs a process of determining the validity of the IC card (or IC chip) (500), ISO / IEC 7816 and / or EMV. According to regulations and the like, validity such as confidentiality, authentication, integrity, and nonrepudiation of an IC card (or IC chip) is authenticated through a process such as a PIN input.

If the validity of the IC card (or IC chip) is not authenticated (505), the process of converting the purchase right for the purchased item into an IC card (or IC chip) to the card user is terminated.

On the other hand, if the validity of the IC card (or IC chip) is authenticated (510), the card user is connected to the goods management server 405 through the card terminal device 300, and the goods management server 405 According to the user interface 330, an item to be purchased is selected (515).

When the item to be purchased is selected as described above, the card user uses the interface provided by the goods management server 405 through the card terminal device 300 to provide the purchase right of the goods management server 400. 410, the purchase right approval information (for example, a license number for authenticating the handling of the purchased goods), and the purchase right of the card user for the purchased goods from the purchase right providing unit 410, the IC card (or IC chip) to request post-issuance (520).

Upon receiving the purchase right approval information from the card user, the purchase right providing unit 410 transmits the purchase right approval information to the purchase right approval server 435 (for example, the certificate management server) to approve the purchase right provided by the card user. The validity of the information is determined (525).

According to a preferred embodiment of the present invention, if the purchase right approval server 435 is entitled to handle the goods in the purchase right approval information provided by the card user, the purchase right approval information may be added to the purchase right approval information 410. The result of the validation is returned, and if it is not qualified to handle the item, a validation error is returned.

If the validity of the purchase right approval information as described above is not authenticated (530), the goods management server 405 transmits and outputs a purchase right approval error message to the card terminal device 300, and then purchases the purchased goods to the card user. The process of issuing post-issuance by converting the purchase right for the IC card (or the IC chip) into the process (535).

On the other hand, if the validity of the purchase right approval information is authenticated (540), the purchase right providing unit 410 of the goods management server 405 for the purchase goods to be post-issued by the card user's IC card (or IC chip) Generate the purchase right storage information 125 (545), and transmits the purchase right storage information 125 generated as described above to the card terminal device 300 to post-issue to the card user's IC card (or IC chip) (550).

If the card user's purchase right for the particular purchased item is converted into an IC card (or IC chip) through the above process, the purchase right providing unit 410 of the goods management server 405 performs the IC card (or IC chip) as described above. Generate the purchase authentication information required for authenticating the purchased purchase right information (555), and convert the purchase authentication information generated for authenticating the purchase right information into an IC card (or IC chip) as described above. Stored in B (430) (560).

According to the present invention, the purchase authentication information D / B 430 is both provided in the goods purchase server 405, the case of being provided in the card terminal device 300 storage unit 350 of the goods delivery company, etc. If the purchase authentication information D / B 430 is provided in the card terminal device 300 storage unit 350 of the goods delivery company, the purchase right providing unit 410 through the at least one communication means The purchase authentication information is provided to the card terminal device 300 and stored in the purchase authentication information D / B 430 provided in the storage unit 350 of the card terminal device 300.

6 is a simplified flowchart of a process of authenticating a card user's IC card (or IC chip) purchase right for a purchased item through an online method according to a preferred embodiment of the present invention.

6 according to a preferred embodiment of the present invention is for the preferred case where the purchase authentication information D / B 430 and the purchase right authentication unit 420 is provided in the goods management server 405 as shown in FIG.

When the card user determines the purchased goods from the goods delivery company, the card user preferentially provides the IC card (or IC chip) provided with the purchase right storage information 125 for the purchased goods for the payment processing for the purchased goods. (Eg, a purchase right in which an IC card (or IC chip) is made) is inserted into the card terminal device 300 of the goods delivery company, and the item purchase validity of the IC card (or IC chip) is determined (600).

Referring to Figure 2 in accordance with a preferred embodiment of the present invention, the purchase right storage information 125 for the purchased goods is provided with a secret key storage unit 225, the card user through the card terminal device 300 the secret Through the process of inputting the secret key stored in the key storage unit 225 is authenticated the validity of the goods purchase for the IC card (or IC chip).

If the validity of purchase of the goods for the IC card (or IC chip) is not authenticated (605), the card terminal device 300 of the goods supply company is a card user for the purchased goods through the IC card (or IC chip). The process of authenticating the purchase right of the user is terminated, and as a result, the purchased item is not delivered to the card user.

On the other hand, if the validity of the goods purchase for the IC card (or IC chip) is authenticated (610), the card terminal device 300 of the goods delivery company extracts the purchased goods information for the goods to be delivered to the card user (615).

According to a preferred embodiment of the present invention, it is preferable that the purchased goods information on the goods to be delivered to the card user is extracted to the card terminal device through a point of sales (POS) terminal device or the like, or a user (for example, a goods delivery company). The card terminal device operator) can be directly input through the card terminal device screen and the user interface (330).

When the purchase goods information on the goods to be delivered to the card user through the above process is extracted or input, the card terminal device 300 of the goods delivery company corresponding to the purchased goods information from the IC card (or IC chip) The process of extracting the purchase right information is attempted (620).

Referring to an IC card (or IC chip) standard such as ISO / IEC 7816, each stored information included in the IC card (or IC chip) has at least one identifier assigned to it. The device 300 may extract purchase right information corresponding to the purchased goods information through the identifier.

If the purchase right information corresponding to the purchased goods information is not extracted in the process (625), the card terminal device 300 determines that there is no purchase right for the purchased goods to the card user, and the purchased goods After outputting a purchase error message for 630, the process of authenticating the purchase right of the card user for the purchased goods is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the purchase right information corresponding to the purchased goods information is extracted (635), the card terminal device 300 reads the purchase right information extracted from the IC card (or IC chip) of the card user, and read as described above The card user purchases right information on the purchased goods and the purchased goods information extracted or input to the card terminal device is encrypted (640).

Referring to FIG. 2 according to a preferred embodiment of the present invention, the purchase right storage information 125 for a purchased item is provided with an authorized certificate storage unit 220, and the card terminal device 300 is disclosed through the authorized certificate. The purchase right information 125 and the purchased item information are encrypted through a public key infrastructure (PKI) and an electronic signature.

As described above, when the purchase right information of the card user and the purchased goods information about the purchased goods are encrypted, the card terminal device 300 may obtain the encrypted purchase right information and the purchased goods information as described above through at least one or more communication means. It transmits to the purchase right authentication unit 420 of the article management server 405 (645).

After receiving the encrypted purchase right information and the purchased goods information from the card terminal device 300 of the goods delivery company, the purchase right authentication unit 420 decrypts the password, and then purchases from the purchase authentication information D / B 430. Search and compare purchase authorization information corresponding to the right information and the purchased item information, and as a result, authenticate the card user's purchase right for the purchased item (650).

If the purchase right of the card user for the purchased goods is not authenticated in the process (655), the purchase right authentication unit 420 of the goods management server 405 is a card terminal device of the goods delivery company through at least one communication means In operation 660, the card user purchase right error for the purchased item is transmitted (660), and the card terminal device 300 outputs an error message corresponding to the purchase right error. The process of authenticating the purchase right is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the purchase right of the card user for the purchased goods is authenticated (665), the purchase right authentication unit 420 of the goods management server 405 to the card terminal device 300 of the goods delivery company through at least one or more communication means The card user's purchase right authentication result of the purchase item is transmitted (670), and the card terminal device 300 processes the payment for the purchase item based on the purchase right authentication result (675).

The payment processing process for the purchased goods as described above is dependent on each payment means and payment system, and the card terminal device 300 determines whether the payment is completed.

If the payment processing for the purchased goods is completed (680), the card terminal device 300 transmits to the goods management server 405 (for example, the purchase rights authentication unit of the goods management server) that the payment for the purchased goods is completed. The goods management server 405 (eg, the purchased goods management unit of the goods management server) stores the purchase right information and the purchased goods information of the corresponding card user provided in the card user's purchase right authentication process on the purchased goods. Store in B 425 (685).

As described above, the purchase right information and purchase goods information of the card user stored in the goods management information D / B 425 may be used to inquire the goods delivered to the specific card user by the purchased goods management unit 415, or purchase the specific goods. Goods management agencies are used to manage and control the distribution of certain purchased goods, such as to look up card users.

7 is a simple flowchart for a process of authenticating a card user's IC card (or IC chip) purchase right for a purchased item in an offline manner according to a preferred embodiment of the present invention.

According to a preferred embodiment of the present invention Figure 6 is a preferred case that the purchase authentication information D / B (430) and the purchase right authentication unit 420 shown in Figure 4 is provided in the card terminal device 300 of the goods delivery company It is about.

Referring to FIG. 7, when a card user determines a purchase item from a goods delivery company, the card user preferentially stores the purchase right storage information 125 for the purchase item for payment processing for the purchase item. A card (or IC chip) (e.g., a purchase right in which an IC card (or IC chip) is made) is inserted into the card terminal device 300 of the goods delivery company, and the validity of the purchase of goods for the IC card (or IC chip) is checked. Determine (700).

If the validity of the purchase of the goods for the IC card (or the IC chip) is not authenticated (705), the card terminal device 300 of the goods delivery company is the user of the card user for the purchased goods through the IC card (or the IC chip). The process of authenticating the purchase right is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the validity of the goods purchase for the IC card (or IC chip) is authenticated (710), the card terminal device 300 of the goods delivery company extracts the purchased goods information for the goods to be delivered to the card user (715).

According to a preferred embodiment of the present invention, it is preferable that the purchased goods information on the goods to be delivered to the card user is extracted to the card terminal device through a point of sales (POS) terminal device or the like, or a user (for example, a goods delivery company). The card terminal device operator) can be directly input through the card terminal device screen and the user interface (330).

When the purchase goods information on the goods to be delivered to the card user through the above process is extracted or input, the card terminal device 300 of the goods delivery company corresponding to the purchased goods information from the IC card (or IC chip) The process of extracting the purchase right information is attempted (720).

If the purchase right information corresponding to the purchased goods information is not extracted in the process (725), the card terminal device 300 determines that there is no purchase right for the purchased goods to the card user, and the purchased goods After outputting a purchase error message for 730, the process of authenticating the purchase right of the card user for the purchased goods is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the purchase right information corresponding to the purchase goods information is extracted (735), the card terminal device 300 from the purchase authentication information D / B 430 provided in the storage unit 350 and the purchase right information and purchase goods The purchase authentication information corresponding to the information is retrieved and compared, and as a result, the card user's purchase right for the purchased item is authenticated (740).

If the card user's purchase right for the purchased item is not authenticated in the process (745), the card terminal device 300 outputs an error message corresponding to the purchase right error, and then the card user's purchase right for the purchased item. The process of authenticating the purchase right is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the card user's purchase right for the purchased goods is authenticated (750), the card terminal device 300 determines whether the payment is completed after processing the payment for the purchased goods based on the purchase right authentication result ( 755).

If the payment processing for the purchased goods is completed (760), the card terminal device 300 authenticates the purchaser's purchase right for the purchased goods to the goods management server 405 (e.g., the purchased goods management unit of the goods management server). The purchase right information and the purchased goods information extracted and / or generated in the process are transmitted (for example, encrypted and transmitted through an authorized certificate provided in the purchase right storage information), and the purchased goods management unit 415 of the goods management server 405. ) Stores the purchase right information and the purchased goods information in the goods management information D / B 425 (765).

As described above, the purchase right information and purchase goods information of the card user stored in the goods management information D / B 425 may be used to inquire the goods delivered to the specific card user by the purchased goods management unit 415, or purchase the specific goods. Goods management agencies are used to manage and control the distribution of certain purchased goods, such as to look up card users.

According to the present invention, a predetermined goods management agency that manages a particular item mounts or stores the purchase right information on the purchased item in a smart card of a goods purchaser (or a goods purchasing agency) who purchases the goods, By authenticating the purchase right information mounted or stored in the smart card through a goods sales agency during the purchase process, the goods management institution checks the distribution path and the final purchaser of the goods, and automatically manages the goods. For example, when the goods managed by the goods management institution contain dangerous substances that are handled only by a legally qualified person (or agency), the goods management authority authenticates the purchase right information loaded or stored in the smart card, It can automatically manage the distribution channels and end users of dangerous substances in real time.

The present invention mounts or stores the purchase right information for the purchased goods in a smart card of a goods purchaser (or a goods purchasing agency) that purchases the goods by a predetermined goods management agency managing a specific goods, and purchases the goods. By authenticating the purchase right information mounted or stored in the smart card through the goods sales agency, the goods management agency checks the distribution path of the goods and the amount of goods purchased (or sold) in the distribution path in real time Data can be collected and accumulated automatically. For example, when the goods managed by the goods management agency are goods that need to prepare a tax invoice, the goods management authority authenticates the purchase right information loaded or stored in the smart card, thereby allowing distribution and distribution paths of the goods. By checking the amount of goods purchased (or sold) in real time, the tax data for the goods can be automatically obtained and managed.

Claims (1)

Post-issuing the predetermined purchase right storage information for the predetermined article in the server with the IC card or the IC chip; Receiving purchase right storage information post-issued to the IC card or the IC chip transmitted from the terminal device through the communication network at the server, when purchasing the item using the IC card or IC chip; And authenticating, by the server, the purchase right of the IC card or the IC chip user for the purchased goods using the received purchase right storage information. The purchase right storage information, And one or more purchase right information including one or more of user's personal information, purchased goods information, and purchase authorization code, user identification information, secret key information, and user's purchase right usage history information on the purchased goods. How to authenticate the user's purchasing rights to the purchased goods.

Images