KR20160001859A - Method of providing authentication service for electronic commerce payment and server thereof - Google Patents

Abstract

This invention relates to a method of providing payment service for an electronic commerce and a server apparatus thereof, the method comprising a step of confirming a grade of a purchaser and a grade of a member; determining an authentication method for an electronic commerce based a combination of the confirmed grade of a purchaser and grade of a member; and performing an authentication their identities for the purchaser according to the determined authentication method.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a method and apparatus for providing a payment service for electronic commerce,

The present invention relates to a method of providing an authentication service for electronic commerce.

As e-commerce has been activated through the Internet, the use of credit or electronic payment systems using credit cards and check cards has increased rapidly.

As a representative example of electronic commerce, a payment method performed in an online shopping mall will be described. A customer accesses an online shopping mall using a communication terminal such as a personal computer, a notebook, or a mobile phone capable of accessing the Internet.

A customer who wants to purchase a commodity such as a desired commodity or service in the online shopping mall requests his / her purchase of the commodity, for example, by inputting his / her credit card information on the commodity settlement screen provided through the online shopping mall.

The online shopping mall receiving the purchase request of the customer receives the transaction approval result from the server of the van company providing the payment transaction service or the server of the financial institution issuing the credit card of the customer, concludes a transaction with the customer, The financial institution transfers the payment of the goods and the like to the account of the online shopping mall.

Meanwhile, for the above-mentioned electronic commerce, the user authentication is required for the purchaser, and the user authentication is performed by the purchaser inputting the ID and the password in the web browser of the terminal, transmitting the ID and the password to the transaction server, have.

In addition, the purchaser inputs the resident registration number, the credit card number, the account number, the telephone number, and the like into the web browser of the user terminal in addition to the password, and receives the user authentication from the transaction server.

On the other hand, due to the spread of the Internet, the harm caused by leakage of personal information is greatly increasing. In other words, there are increasing cases of acquiring the resident registration number, password, credit card number, telephone number, account number, etc. of another person online and stealing it for various electronic transactions.

In addition, a credit card number may be obtained through a sales slip according to a credit card settlement in an off-line, or a credit card number or a resident registration number may be obtained through a credit card of another person or a resident registration card, thereby exploiting various small-

Various security programs have been developed in order to prevent payment by e-commerce using the resident registration number, password, credit card number, account number, telephone number, etc. of another person.

For example, the secure electronic transaction method is a method in which a card reader program is installed in a user terminal to perform an authentication process for a credit card in advance when a credit card is settled in electronic commerce. Also, in case of performing internet banking or electronic commerce, a user of a company can input a user ID and a resident registration number, issue a public certificate from a transaction server in advance, and enter a certificate password at the time of payment to perform settlement.

However, the procedure is troublesome because the security program must be installed in advance in the user terminal, and payment can be performed only when the authorized certificate is carried. Therefore, it is inconvenient to have the authorized certificate. In addition, since the third party who has obtained the personal information of the other person can perform the electronic commerce using the personal information easily obtained, the security may be lowered.

An object of the present invention is to provide an electronic commerce authentication service providing method capable of effectively performing authentication for electronic commerce settlement and a server apparatus using the same.

A method for providing an electronic commerce authentication service according to an embodiment of the present invention includes: checking a rating of a purchaser and a rating of an affiliate; Determining an authentication method for electronic commerce based on the combination of the identified purchaser class and the merchant class; And performing authentication of the buyer according to the determined authentication method.

According to another aspect of the present invention, there is provided a server apparatus comprising: a class checking unit for checking a class of a buyer and a class of an affiliate; Determines an authentication level for electronic commerce according to the combination of the confirmed purchaser class and the merchant class and determines an authentication method for the electronic commerce so that the information required for authentication is added as the determined authentication class is lowered An authentication method determination unit; And an authentication performing unit performing authentication of the purchaser with respect to the purchaser according to the determined authentication method.

Meanwhile, the authentication service providing method may be implemented by a computer-readable recording medium having stored thereon a program for execution on a computer.

According to an embodiment of the present invention, an authentication method is determined based on a combination of a purchaser class and a franchise class at the time of authentication for electronic commerce, thereby differentiating authentication levels required for electronic commerce according to the trustworthiness of the buyer and the merchant, The process can be efficiently performed.

1 is a block diagram showing an embodiment of a configuration of an electronic commerce payment system.
2 is a block diagram illustrating an exemplary configuration of a server apparatus according to an embodiment of the present invention.
3 is a flowchart illustrating a method of providing an electronic commerce authentication service according to an embodiment of the present invention.
4 is a view for explaining an embodiment of a method of determining a buyer's rating.
5 is a diagram for explaining an embodiment of a method for determining the grade of an affiliate shop.
6 is a diagram for explaining an embodiment of a method for determining an authentication level for electronic commerce according to a buyer class and an affiliate shop class.
FIGS. 7 and 8 are views showing embodiments of a method for performing authentication of a user with different authentication levels for electronic commerce according to a purchaser class and a merchant class.
9 to 13 are views showing a configuration of a user interface (UI) screen provided to a purchaser's terminal for an authentication service according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

First, the terms used in the specification of the present invention will be briefly defined, and then an embodiment of the present invention will be described.

The term " terminal "described in this specification may include a mobile phone, a smart phone, a laptop computer, a digital broadcast terminal, a PDA (Personal Digital Assistants), a PMP (Portable Multimedia Player) The present invention is not limited thereto, and may be various devices capable of user input and information display.

The term "payment server" refers to a server of a VAN company that relays credit card electronic payment. However, various types of servers related to credit card electronic payment may also be applicable. The actual payment relay function and other additional functions may be separated into separate server types.

1 is a block diagram of an embodiment of a configuration of an electronic commerce settlement system. The settlement system shown in FIG. 1 may include a terminal 10, a payment server 100, and a card issuer server 200.

1, a purchaser connects to a merchant server (not shown) operated by a seller (for example, an Internet shopping mall, a paid content provider) through the terminal 10 to purchase one or more types / And requests payment of purchase price for the purchased product.

The terminal 10 may be a personal computer (PC) 11, a cellular phone 12, or a tablet 13 that can be connected to a communication network, but the present invention is not limited thereto.

In response to the payment request from the terminal 10, the payment server 100 provides a payment window in which the purchaser can input payment related information such as a card number and displayed on the terminal 10.

The payment server 100 requests payment approval to the credit card company server 200 using the settlement related information input by the purchaser, and the credit card company server 200 represents the credit card company that issued the credit card.

In FIG. 1, the payment server 100 is illustrated as a single server for convenience of description. However, the present invention is not limited thereto, and the payment server 100 may include a component server Or means) may be implemented in two or more server groups, and the present invention is characterized in that it includes all the methods that can be inferred.

For example, the payment server 100 may include a payment gateway (PG) for processing an online card payment in connection with a VAN server (not shown), or may include a payment server Or may be a server having a role of an agency server (PG).

Generally, when a credit card company purchases credit at a designated merchant, the card reader of the merchant accesses the card issuer server through the VAN company network, receives the credit card payment approval, and completes the transaction.

The purchaser has a credit card issued by a credit card company, and the merchant has a credit card authorization inquiry unit (not shown) for accessing a specific VAN company and transmitting payment information. The credit card approval inquiry unit and the VAN company's relay system are connected to a predetermined network (e.g., telephone Internet), and the transaction system of the VAN company's relay system and the credit card company is generally connected by a dedicated packet network.

In the case of using the online payment method through the Internet shopping mall, the payment agency server PG performs the role of the VAN company.

The VAN company relays the purchase information requested to be approved (or canceled) through the credit card inquiry device (terminal) to the merchant and the card company. The payment agency server (PG) It accepts payment from the credit card companies, banks, electronic payment companies, and payment settlement companies.

When a credit card holder makes a purchase request by presenting his credit card to a merchant in order to pay for the commodity, the merchant uses a credit card authorization inquiry device to request approval from the credit card company. At this time, the credit card approval inquiry unit sends the information of the credit card user stored in the credit card of the user, the product order information generated by the credit card approval inquiry unit, the payment amount, and the information of the merchant to the VAN company. The VAN company receives the above information through the VAN company's relay system.

The VAN relay system that receives the payment approval request data reads out the credit card company information included in the user information in the payment approval request data and transmits data related to the transaction approval request to the transaction approval system of the credit card company in order to apply for approval .

The credit approval system of the credit card company that receives the data related to the transaction approval request compares the user information, the product order information, the payment amount, and the merchant information included in the data related to the transaction approval request with its member data or merchant data, Confirm whether the transaction between the card user and the merchant is valid.

The transaction approval system of the credit card company transmits the transaction approval result for the transaction approval request to the VAN relay system relaying the payment approval request, and the VAN relay system stores the approval number data and transmits it to the corresponding transaction viewer of the merchant do. Based on the transmitted approval data, the credit card transaction inquiry unit prints the payment result on the credit card receipt and notifies the credit card user.

Such a credit card payment method is a method in which a credit card user provides information such as a card number, an expiration date, and a card issuer, which are required for credit card payment approval, to a terminal installed at a merchant, And the settlement is based on the approved result.

In the case of electronic commerce using online settlement as described above, it is required to input information necessary for the authentication of the user, and in order to settle a certain amount (for example, 300,000 won) or more, the user may be required to authenticate using the official certificate.

However, the official certificate used in Korea's accredited certification system is not the SSL standard used as the international standard but it can be used only in the country. It is a server certificate storage space designated by Internet Explorer, web browser such as Firefox or Chrome, But it uses a separate certificate storage space. The encryption method is also a domestic standard method that can be used only in Korea, such as using the domestic encryption algorithm (SEED, ARIA, etc.) instead of the AES method used in SSL.

Therefore, there is a problem that use of public certificates other than Internet Explorer is limited in, for example, Firefox or Chrome.

According to an embodiment of the present invention, an authentication method is determined based on a combination of a purchaser class and a franchise class at the time of authentication for electronic commerce, thereby differentiating authentication levels required for electronic commerce according to the trustworthiness of the buyer and the merchant, The process can be efficiently performed.

FIG. 2 is a block diagram of a server device according to an embodiment of the present invention. The server device 100 includes a communication unit 110, a class checking unit 120, a controller 130 An authentication method determination unit 140, and an authentication performing unit 150.

2, the communication unit 110 may be connected to a terminal of a buyer, a terminal of an affiliate, or another external server through a communication network to transmit and receive various information related to authentication, settlement and approval.

The class checking unit 120 can determine the class of the purchaser performing the electronic commerce and the class of the merchant. The purchaser class and the merchant class are determined in the server 100 according to a preset standard, and then the internal memory (not shown) Or may be determined in another server (not shown) outside the server apparatus 100 and received by the server apparatus 100.

According to an embodiment of the present invention, the purchaser class may be determined based on at least one of a normal transaction count, transaction related dispute count, shipping address information, terminal IP address information, and telephone number information of the purchaser for a recent period.

The merchant grade may be determined based on at least one of the type of the merchant, the sales amount, the number of transaction related disputes during a recent period, the type of merchandise, the delivery period, the average unit price, the reservation transaction and the cancellation return rate.

The authentication method determination unit 140 determines an authentication level for electronic commerce according to the combination of the confirmed purchaser class and the merchant class, and when the determined authentication level is lowered, The authentication method for commerce can be determined.

That is, the authentication method determination unit 140 provided in the server device 100 determines the authentication level for the electronic commerce between the buyer and the merchant, considering both the buyer's class indicating the reliability of the purchaser and the merchant's class indicating the reliability of the merchant .

Meanwhile, the authentication performing unit 150 may perform the authentication of the buyer according to the authentication method determined by the authentication method determination unit 140. [

The control unit 130 can control the overall operation of the server device 100 as described above.

The configuration and function of the server apparatus 100 as shown in Fig. 2 may be included in any one of the payment server 20, for example, the payment agent server PG and the card issuer server 30, PG) and the card issuer server 30, as shown in FIG.

Hereinafter, an embodiment of a method for providing an electronic commerce authentication service according to the present invention will be described in detail with reference to FIG. 3 to FIG.

FIG. 3 is a flowchart illustrating an electronic commerce authentication service providing method according to an embodiment of the present invention. Referring to FIG. 3, a method of providing an authentication service shown in FIG. 3 is performed by a server apparatus 100 according to an embodiment of the present invention Will be described in connection with a block diagram showing a configuration.

Referring to FIG. 3, the class checking unit 120 of the server apparatus 100 confirms the buyer class and the merchant class received from the outside through the communication unit 110 or determined internally (S300).

For example, the purchaser class may be determined at the credit card company server 30 using credit card usage history information for the user.

FIG. 4 illustrates an example of a method for determining the purchaser class, which is an example of how many times a normal transaction has occurred in electronic commerce for the past one year of the purchaser, whether a dispute has occurred, A score for the purchaser is determined according to whether or not the IP address and the mobile phone number of the terminal used in the mobile terminal are the same, and the buyer class is classified into any one of S, A, B, C, As shown in FIG.

On the other hand, the merchant rating can be determined at the payment proxy server PG using the registration information and transaction information for the merchant.

FIG. 5 shows an embodiment of a method for determining the franchisee rating, which is an example of the type, size and sales of the franchisee, whether there has been a dispute in electronic commerce in the past three months, , A, B, C, and D according to the distribution of the calculated points, and the merchant class is classified into S, A, B, C, and D according to the distribution period, the delivery period, the average unit price, Can be determined.

Thereafter, the authentication method determination unit 140 determines an authentication method for electronic commerce based on the combination of the confirmed purchaser class and the merchant class (step S310).

For example, the authentication method determination unit 140 determines the authentication level for electronic commerce between the purchaser and the merchant according to the combination of the purchaser class and the merchant class, and when the confirmed authentication level is lowered, The authentication method for the electronic commerce can be determined so that the information required for the electronic commerce is added.

According to an embodiment of the present invention, the authentication level may be determined by the card issuer server 30 according to the authentication score calculated by multiplying the score according to the confirmed purchaser class and the score according to the merchant class.

6 shows an embodiment of a method for determining an authentication level according to an authentication score calculated by multiplying the purchaser class and the franchisee grade. In accordance with the distribution of the calculated authentication scores, if the authentication grade is S, A, B , C, and D, respectively.

For example, when the purchaser class is identified as Class A (46 points) according to the criteria shown in FIG. 4 and the merchant class is identified as the S class (35 points) according to the criteria shown in FIG. 5 , The authentication score calculated by multiplying the above two scores is 1,610 points, so that the certification level for the electronic commerce between the buyer and the merchant can be the A grade corresponding to the interval between 1,546 and 1,908.

Meanwhile, the authentication method according to the determined authentication level can be determined differently depending on whether the purchaser has joined the authentication service (or the payment service) according to the embodiment of the present invention.

For example, the purchaser can register his / her card information (for example, a card number and an expiration date, etc.) in advance in a payment agency (PG) that provides payment and authentication services based on electronic commerce have.

In this case, the payment agent server PG may store the member information, the member ID / PW, the mobile phone number, the main delivery address, and the main contact information along with the card information of the purchaser who has subscribed to the member, The electronic commerce password can be designated and stored in the card issuer server 30 while being registered as a member in the credit card company at the request of the PG.

On the other hand, the e-commerce password is registered by the purchaser in the credit card company, and can be replaced with the ISP / MPI password.

According to an embodiment of the present invention, an input for at least one of a member ID and a password, card information, a card password, and a password for an electronic commerce may be input in accordance with an authentication grade determined based on a combination of the buyer class and the merchant class, Is required for this authentication, and as the authentication level is lowered, the required information can be gradually added.

Referring to FIG. 6, if the buyer who is to perform the electronic commerce is a member and the authentication level for the electronic commerce between the buyer and the merchant is S rank, the user ID and the password PW Authentication can be completed by confirmation.

On the other hand, even if the authentication level for the electronic commerce between the buyer and the merchant is S rank, if the buyer is a non-member, it can request the buyer to input the card number, validity period and CVC code as authentication information.

On the other hand, even if the purchaser is a member, when the confirmed authentication level is below a predetermined level, the user may be requested to input additional authentication information after the first authentication using the member ID and the password input by the purchaser.

For example, in the case where the authentication level for electronic commerce between a member buyer and an affiliate shop is Class A, in addition to the primary authentication through confirmation of the member ID (ID) and the password (PW) inputted by the purchaser, The first two digits of the number can be required for authentication.

On the other hand, as shown in FIG. 6, the information required for authentication increases as the authentication level for the electronic commerce between the purchaser and the merchant is lowered.

For example, when the authentication level of electronic commerce between a member buyer and a merchant is C rating, in addition to the first authentication through confirmation of the member ID (ID) and the password (PW) input by the purchaser, The first two digits of the number, along with the input of the e-commerce password, may require OTP (One Time Password) authentication via the mobile phone.

On the other hand, when the electronic commerce between the non-member buyer and the merchant is of grade D, the card number, expiration date, CVC code, two digits before the card password, e-commerce password, (Automatic Response System) authentication may be additionally required.

The authentication performing unit 150 performs the authentication of the purchaser for the electronic commerce according to the authentication method determined by the authentication method determination unit 140 in step S320.

7 and 8 illustrate embodiments of a method for performing authentication of a user with different authentication levels for electronic commerce according to a purchaser class and a merchant class, FIG. 8 shows an embodiment of a method of providing an authentication service according to the present invention when the purchaser is a non-member.

7 and 8, the description of the same components as those described with reference to Figs. 1 to 6 will be omitted herein.

Referring to FIG. 7, the purchaser requests settlement to the merchant terminal 17 of the merchant who sells the merchandise through the purchaser terminal 15 (step S701). The merchant terminal 17 responds to the settlement request by sending an e- (Step S702).

If the member is a member, the purchaser inputs a member ID and a password PW using the user interface (UI) provided through the called payment module at the purchaser terminal 15 (step S703) The member ID (ID) and the password PW are transmitted to the payment agent server PG 25 (step S704).

On the other hand, the payment agent server (PG) 25 searches the member DB (DataBase) for the member ID (ID) and the password PW transmitted from the purchaser terminal 15 and confirms the member information, (Step S705).

The primary authentication for electronic commerce can be performed by checking the member ID and the password PW transmitted from the purchaser terminal 15 in step S705.

The member DB of the payment agent server PG 25 may store card information (for example, a card number and an expiration date, etc.) previously registered by the corresponding purchaser in connection with a member ID, and in step S705 It is possible to confirm whether or not the member of the purchaser is a member by using the member ID (ID) and the password PW, and at the same time, the card information used for payment can be confirmed.

Further, the payment agent server (PG) 25 is configured to determine, based on at least one of the type of the affiliated shop, the sales amount, the number of transaction related disputes during the recent period, the type of goods, the delivery period, the average unit price, The score and the resulting merchant rating can be determined.

The merchant grade and score are calculated in advance for each merchant and stored in the affiliate store DB in the payment agent server PG 25 in association with the merchant store identification information, And may be determined according to a criterion as described with reference to FIG. 5 at the time when the identification information for the merchant performing the electronic commerce is transmitted.

The payment agent server (PG) 25 transmits the card number, validity period, and merchant point number confirmed in step S705 to the card company server 30 (step S706).

The card issuer server 30 checks the membership score indicating the rating of the purchaser and adds the confirmed member score to the merchant points sent from the payment agent server PG 25 in step S707, To the buyer terminal 15 (step S708).

The card issuer server 30 can determine the membership score and the corresponding purchaser class based on at least one of the normal transaction count, the transaction related dispute count, the delivery address information, the terminal IP address information, and the telephone number information for a recent period of the buyer have.

On the other hand, the card company server 30 can acquire the electronic commerce authentication score for determining the authentication method by multiplying the membership score determined as described above and the merchant point sent from the payment agent server (PG) 25, (For example, in the embodiment described with reference to FIG. 6, when the authentication level is equal to or lower than the A level), the user ID (ID) and the password PW ), It is possible to request the buyer to input additional authentication information.

Accordingly, the purchaser inputs the additional authentication information requested in step S708 through the purchaser terminal 15 (step S709), and the inputted additional authentication information is transmitted to the card issuer server 30 (step S710) The server 30 verifies the transmitted additional authentication information (step S711).

Through the verification in step S711, the electronic commerce transaction between the purchaser and the merchant is performed, and information on the performed authentication result is transmitted to the merchant terminal 17 and the purchaser terminal 15, It is possible to confirm whether the authentication is successful or not (S712).

After the above-described authentication is successfully performed, the approval transfer from the payment proxy server (PG) 25 to the credit card company server 30, approval processing from the credit card company server 30, The approval process to the server PG 25 and the settlement process such as the transfer of the approval result information from the payment agent server PG 25 to the merchant terminal 17 and the purchaser terminal 15 can be sequentially performed.

8, the purchaser requests settlement with the terminal 17 of the merchant that sells the merchandise through the purchaser terminal 15 (step S801), and the merchant terminal 17 responds to the settlement request by sending an e- (Step S802).

The purchaser inputs card information (for example, card number and valid period) using the user interface (UI) provided through the called payment module in the purchaser terminal 15 (step S803) , The card information such as the inputted card number and validity period is transmitted to the payment agent server (PG) 25 (step S804).

In this case, the payment agent server (PG) 25 can provide the user interface (UI) for the membership subscription guidance and the decision on whether to join the subscriber terminal 150 to the subscriber terminal 150, thereby inducing membership of the purchaser.

On the other hand, the payment agent server (PG) 25 confirms the credit score of the corresponding merchant (S805), and transmits the confirmed merchant credit score to the card issuer server (S804) together with the card number and the validity period transmitted from the purchaser terminal (Step S806).

The card issuer server 30 confirms the membership score indicating the rating of the purchaser and adds the confirmed member score to the merchant points sent from the payment agent server PG 25 in step S807, To the buyer terminal 15 (step S808).

Accordingly, the purchaser inputs the additional authentication information requested in step S708 through the purchaser terminal 15 (step S809), and the inputted additional authentication information is transmitted to the card issuer server 30 (step S810) The server 30 verifies the transmitted additional authentication information (step S811).

Through the verification in step S711, the electronic commerce transaction between the purchaser and the merchant is performed, and information on the performed authentication result is transmitted to the merchant terminal 17 and the purchaser terminal 15, It is possible to confirm whether the authentication has succeeded or failed (step S812).

Hereinafter, a configuration of a user interface (UI) screen provided to a purchaser's terminal for an authentication service according to an embodiment of the present invention will be described with reference to FIGS. 9 to 13. FIG.

FIG. 9 shows an embodiment of the configuration of an initial settlement screen provided for electronic commerce settlement.

9, when the buyer requests the online settlement of a specific commodity through the terminal 15, the payment commissioning server (PG) 25 displays a settlement screen 900 for inputting information for credit card settlement, And provides the same to the purchaser terminal 15.

For example, the payment screen 900 includes a merchandise information area 910 indicating a merchant name, a merchandise name, and a merchandise amount, a member / non-member selection area 910 for selecting whether the member is a member who previously registered card information, Gt; 920 < / RTI >

On the other hand, if the buyer is a member, input areas 930 and 931 for inputting a member ID and a password PW may be displayed at the lower part of the payment screen 900. [

When the buyer inputs the member ID and the password PW on the settlement screen 900 shown in FIG. 9 and presses the "Next" button 940, The card information (for example, the card number, the expiration date, and the CVV2 code) stored in the member DB in the payment agent server (PG) 25 and registered by the purchaser in advance in the information display area 950 may be displayed together with the payment amount .

On the other hand, in the rating display area 960 on the settlement screen 900, a merchant class and a buyer class (for example, a member class) determined as described with reference to FIGS. 1 to 8 are displayed, The authentication level determined based on the rating may be displayed together.

For example, if the merchant grade is S grade (37 points) and the member grade is S grade (51 points), according to 1,887 points calculated by multiplying the two scores, the certification level for electronic commerce between the buyer and the merchant S grade.

In this case, according to the authentication method for each authentication level as shown in FIG. 6, no additional authentication information is required in addition to the member ID (ID) and the password PW confirmed through the primary authentication.

Accordingly, if no further additional authentication information is requested through the additional authentication information area 970 on the payment screen 900 and the purchaser selects the "payment" button 942 on the payment screen 900, The payment for the corresponding electronic commerce is approved and the approval result can be displayed in the approval result confirmation area 980 as shown in FIG.

Referring to FIG. 12, when the purchaser is not a member, a card selection area 990 for inputting card information may be displayed at the bottom of the payment screen 900.

The buyer selects a card on the settlement screen 900 shown in Fig. 12 and presses the "Next" button 940, the card information is displayed on the card information display area 950 on the settlement screen 900, A user interface for entering the number, expiration date, and CVV2 code may be provided.

On the other hand, in the embodiment shown in Fig. 12, the merchant class is rated S (37 points), and the buyer class is rated B (42 points). According to 1,554 calculated by multiplying two points, The certification level for commercial transactions can be determined as A grade.

In this case, according to the authentication method according to the authentication grade as shown in FIG. 6, since the authentication class is the A-grade non-member transaction, in addition to the card number, valid period and CVV2 code input through the card information display area 950, The first two digits may be required as additional authentication information.

Accordingly, when the buyer selects the "payment" button 942 after correctly inputting the first two digits of the card password through the additional authentication information area 970 on the payment screen 900, the payment process for the corresponding electronic commerce Can proceed.

The above-described method for providing an electronic commerce authentication service according to the present invention may be stored in a computer-readable recording medium, which is a program for execution by a computer. Examples of the computer- -ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet).

The computer readable recording medium may be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. And, functional programs, codes and code segments for implementing the above method can be easily inferred by programmers of the technical field to which the present invention belongs.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the present invention.

Claims (20)

A method for providing an authentication service for electronic commerce,
Confirming the grade of the buyer and the grade of the franchisee;
Determining an authentication method for electronic commerce based on the combination of the identified purchaser class and the merchant class; And
And performing authentication of the purchaser in accordance with the determined authentication method. The method of claim 1,
Wherein the information is determined based on at least one of a normal transaction count, a transaction related dispute count, shipping address information, terminal IP address information, and telephone number information of the purchaser over a recent period. The method of claim 1,
A transaction type, a product type, a delivery period, an average unit price, a reservation transaction, and a cancellation return rate for the most recent period. The method according to claim 1,
Confirming an authentication level for the electronic commerce according to a combination of the purchaser class and the merchant class; And
And determining an authentication method for the electronic commerce so that the information required for the authentication of the user is added as the confirmed authentication level is lowered. 5. The method of claim 4, wherein the performing step
Performing primary authentication using a member ID and a password input by the purchaser; And
And requesting input of additional authentication information when the confirmed authentication level is lower than a predetermined level. 5. The method of claim 4,
Wherein the electronic commerce authentication service is determined based on an authentication score calculated by multiplying a score according to the purchaser class and a score according to the merchant class. The method according to claim 1,
And determining an authentication method for the electronic commerce according to whether the purchaser is a member or not. The method according to claim 1, wherein the authentication method for the electronic commerce comprises:
Wherein the inputting of at least one of a member ID and a password, a card information, a card password and an electronic commerce password is required. 9. The method according to claim 8, wherein the authentication method for electronic commerce comprises:
A method for providing an electronic commerce authentication service in which an OTP (One Time Password) or ARS (Automatic Response System) authentication using a mobile phone is additionally required. 1. A server apparatus for providing an authentication service for electronic commerce,
A class checking unit for checking the class of the buyer and the class of the merchant;
Determines an authentication level for electronic commerce according to the combination of the confirmed purchaser class and the merchant class and determines an authentication method for the electronic commerce so that the information required for authentication is added as the determined authentication class is lowered An authentication method determination unit; And
And an authentication performing unit for performing authentication of the purchaser with respect to the purchaser according to the determined authentication method. 11. The method of claim 10,
Wherein the server device is determined based on at least one of a normal transaction count of the buyer, a transaction related dispute count, shipping destination information, terminal IP address information, and telephone number information during a recent period. 11. The method of claim 10,
Wherein the determination is based on at least one of a type of the merchant, a sales amount, a transaction related dispute count during a recent period, a product type, a delivery period, an average unit price, a reservation transaction and a cancellation return rate. 11. The apparatus of claim 10, wherein the authentication performing unit
Performs a primary authentication using a member ID and a password input by the purchaser, and requests input of additional authentication information when the determined authentication level is lower than a predetermined level. 11. The method of claim 10, wherein the authentication method determination unit
And determines the authentication level according to an authentication score calculated by multiplying a score according to the purchaser class and a score according to the merchant class. 11. The method of claim 10, wherein the authentication method determination unit
And determines a different authentication method for the electronic commerce according to whether the purchaser is a member. 11. The method of claim 10, wherein the authentication method for the electronic commerce comprises:
A server apparatus that requires input of at least one of a member ID and a password, card information, a card password, and an electronic commerce password. 17. The method of claim 16, wherein the authentication method for electronic commerce comprises:
A server device that additionally requires OTP or ARS authentication using a cellular phone. 11. The method of claim 10,
And receives information on the buyer's card information and the merchant's rank from a payment gateway (PG) for processing an online card payment. 11. The method of claim 10,
And the card information of the buyer is stored in the payment agent server (PG) in connection with the member ID. 10. A recording medium on which a program for causing a computer to execute the method of any one of claims 1 to 9 is recorded.

Images