WO2016140476A1

WO2016140476A1 - Device for decoding encoded data and method therefor

Info

Publication number: WO2016140476A1
Application number: PCT/KR2016/001992
Authority: WO
Inventors: 김봉세
Original assignee: 김봉세; 주식회사 페이서브
Priority date: 2015-03-03
Filing date: 2016-02-29
Publication date: 2016-09-09

Abstract

A decoding device according to the present invention comprises: a receiving unit for receiving at least one piece of encoded data having different decoding methods; a transmission unit for transmitting decoding data on the encoded data; a plurality of decoding units for decoding the encoded data; and a control unit for confirming the encoded data such that decoding is carried out in the decoding units capable of decoding the encoded data, wherein each of the plurality of decoding units is determined in advance so as to correspond to each payment agency server for receiving the decoding data, the control unit enables the decoding data transmitted to the payment agency servers to be decoded in the decoding units corresponding to the payment agency servers on the basis of information related to the payment agency and received from a terminal transmitting the encoded data, and the control unit includes a plurality of decoding units having the same decoding method.

Description

Apparatus and method for decrypting encrypted data

The present invention relates to an apparatus and method for decrypting encrypted data, and more particularly, to an apparatus and method capable of conveniently and efficiently decrypting encrypted data.

Generally, a payment is performed using a card payment terminal for card payment, and the payment terminal includes a decryption means such as a secure application module (SAM) to decrypt the encrypted data read from the card. In addition, since different methods of decrypting encrypted data may be different for each card, SAM has one to three SAM slots for accommodating a card having a program capable of decrypting therein, so that the card information having different decryption methods is different. Decrypt Since the payment terminal includes a decryption means therein, it is difficult to miniaturize and it is difficult to add a new payment method because it can drive a program for decryption limited to the provided SAM slot.

The present invention relates to an apparatus and a method for efficiently decrypting encrypted data.

The present invention also relates to an apparatus and a method for conveniently extending the means for decrypting encrypted data. The present invention also relates to an apparatus and method for performing electronic payment by decrypting encrypted data.

The decryption apparatus according to the present invention includes a receiver for receiving at least one encrypted data having a different decryption method, a transmitter for transmitting decrypted data for the encrypted data, a plurality of decryptors for decrypting the encrypted data, and the encrypted data. And a controller configured to perform a decryption in a decryption unit capable of verifying and decrypting the encrypted data, wherein each of the plurality of decryption units is previously determined to correspond to each payment agency server that receives decryption data. The decoded data transmitted to the payment agency server based on the information about the payment agency received from the terminal for transmitting the encrypted data to be decrypted in the decryption unit corresponding to the payment agency server, the control unit The plurality of decoders When a plurality of decryption units having the same encryption method are included and the receiver receives a plurality of encrypted data that is decrypted in the same manner, any one of traffic and payment agent fees of each decryption unit capable of decrypting the received encrypted data And a decryption unit for decrypting the received encrypted data based on the determination.

The controller may add a new decryption unit capable of decrypting the non-decryptable encrypted data when there is encrypted data that cannot be decrypted in the initially set decryption unit.

Instead of embedding the decryption unit in the terminal, a plurality of decryption units that perform decryption in the server can be configured or extended, so that decryption can be efficiently and conveniently performed. In addition, since the server can drive the decryption unit in consideration of the traffic, the decryption can be quickly expanded.

1 is a view showing the configuration of an electronic payment system according to an embodiment of the present invention.

2 is a view showing the configuration of a terminal of the electronic payment system according to an embodiment of the present invention.

3 is a view showing the configuration of a server of the electronic payment system according to an embodiment of the present invention.

4 is a diagram illustrating a configuration of a decryption unit of a server according to an embodiment of the present invention.

5 is a flow chart for explaining the operation of the electronic payment system according to an embodiment of the present invention.

6 is a flowchart illustrating a decryption operation of a server according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with the drawings. In the following description of the present invention, when it is determined that detailed descriptions of related known functions or configurations may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

Referring to FIG. 1, the electronic payment system of the present invention includes first to

third terminals

100, 110, and 120, a server 130, and a payment institution server 140. The first to

third terminals

100, 110, and 120 transmit the encrypted data stored in the payment means to the server 130. For example, the first to

third terminals

100, 110, and 120 read the card information from the card storing the encrypted card information and transmit the same to the server 130. do. In addition, the first to

third terminals

100, 110, and 120 may receive encrypted data for performing payment from an external terminal (not shown), and may transmit the received data to the server 130. In addition, the encrypted data transmitted from the first to the third terminal (100, 110, 120) to the server 130 may have a different encryption or decryption scheme, for example, the first terminal 100 is a credit card, the second terminal 120 The traffic card, the third terminal 130 may lead to the card information encrypted in the cash card. The first to

third terminals

100, 110, and 120 may be configured as merchant terminals, smart phones, smart pads, or the like.

The server 130 decrypts the encrypted data received from the first to

third terminals

100, 110, and 120 and transmits the decrypted data to the payment institution server 140. As an example, the encrypted card information is decrypted and transmitted to the payment institution server 140. The server 130 may process various decryption methods. For example, the server 130 may process various encrypted data even if the decryption methods of the encrypted data received from the first to

third terminals

100, 110, and 120 are different.

The payment institution server 140 determines whether the payment is approved using the decrypted data received from the server 130, and transmits a message about whether the payment is approved to the server 130. On the other hand, the server 130 transmits the decryption data and payment data such as payment amount, installment, signature information, etc. to the payment agency server (not shown), the payment agency server (not shown) is received from the server 130 The decrypted data may be transmitted to the payment institution server 140. In addition, the payment agency server (not shown) may receive a message on whether the payment approval from the payment institution server 140 and transmits to the server 130.

2 is a view showing the configuration of the first terminal 100 of the electronic payment system according to an embodiment of the present invention.

In FIG. 2, the first terminal 100 is described, and the second and

third terminals

110 and 120 may also include a configuration that is the same as or similar to that of the first terminal 100. 2, the first terminal 1 of the present invention includes an input unit 200, an output unit 210, a reader unit 220, a display unit 240, a transmitter 250, a receiver 260, and a controller. 230.

The input unit 200 receives data from a user, and the display unit 240 displays data, and the input unit 200 and the display unit 240 may be configured as a touch panel or a touch screen.

The output unit 210 outputs data and may be configured as a printer.

The receiver 260 receives data, and the transmitter 250 transmits data. For example, the transmitter 250 transmits encrypted data to the server 130, and the receiver 260 approves payment from the server 130. You can receive a message about whether or not. In addition, the receiver 260 may receive encrypted data for performing payment from an external terminal (not shown), and the transmitter 250 may transmit the received encrypted data to the server 130.

The receiver 260 and the transmitter 250 are not only wired communication but also Bluetooth, Wi-Fi, WiBRO, Third Generation WCDMA, Long Term Evolution (LTE), and 4G ( Four Generation) It can communicate by various wireless communication methods such as communication method.

The reader 220 reads encrypted data for performing a payment from a payment means. For example, the reader 220 reads card information from a card that stores encrypted card information.

The controller 230 controls the first terminal 100 as a whole such that when the reader 220 reads the encrypted data, the encrypted data is transmitted to the server 130.

3 is a diagram showing the configuration of the server 130 of the electronic payment system according to an embodiment of the present invention.

Referring to FIG. 3, the server 130 of the present invention includes a receiver 300, a transmitter 310, a decoder 330, and a controller 320.

The receiver 300 receives data, and the transmitter 310 transmits data. For example, the receiver 300 receives encrypted data from the first to

third terminals

100, 110, and 120, and the transmitter 310 encrypts the data. The decoded data is transmitted to the payment institution server 140. The receiver 300 and the transmitter 310 are not only wired communication but also Wi-Fi, WiBRO, 3G (Third Generation), WCDMA, Long Term Evolution (LTE) and 4G (Four Generation) communication. The communication can be performed in various wireless communication methods such as.

The decryption unit 330 decrypts the encrypted data. For example, the decryption unit 330 may be configured as a SAM. The decoder 330 may provide various decoding methods and may add a new decoding method. In addition, the decoder 330 may be configured in hardware or programmed in software.

The controller 320 controls the server 130 of the present invention as a whole to decrypt the received encrypted data and transmit the decrypted data to the payment institution server 140.

In addition, when the encrypted data is received, the controller 320 examines the encrypted data and controls the decryption unit to decrypt the encrypted data, and each of the decryption units is each payment agency server to which the decrypted data is transmitted. It may be predetermined to correspond to. Therefore, the control unit 320 looks at the information on the payment agency received from the terminal that transmitted the encrypted data and controls the decryption unit to decode the encrypted data predetermined to correspond to the corresponding payment agency server.

In addition, the control unit 320 includes a plurality of decryption units having the same decryption method, and when receiving a plurality of encrypted data that decrypts in the same manner, traffic and payment agent fees of each decryption unit capable of decrypting the received encrypted data. The decryption unit which decrypts the received encrypted data based on any one of them is determined.

That is, the traffic of each decoder may be monitored so that the traffic of any decoder is not increased, and the decryption may be performed in the decryption unit corresponding to the payment agency server that adds less payment agency fee in consideration of the payment agency fee. To control.

4 is a diagram illustrating a configuration of the decryption unit 330 of the server 130 according to an embodiment of the present invention.

Referring to FIG. 4, the decoder 330 of the server 130 of the present invention includes a sub decoder, and includes, for example, the first to

fourth decoders

400, 410, 420, and 430. The first to

fourth decoders

400, 410, 420, and 430 may decode in the same manner or may decode in different ways. That is, the decoder 330 may include at least one sub decoder that performs decoding in the same manner, or may include at least one sub decoder that performs decoding in different ways.

For example, if the first card is a credit card, the second card is a traffic card, and the third card is a cash card, the decryption method of the encrypted data is different, the first and

second decryption units

400 and 410 read from the first card. The decrypted encrypted data may be decrypted, and the third decryption unit 420 may decrypt the encrypted data read from the second card, and the fourth decryption unit 430 may decrypt the encrypted data read from the third card.

In addition, when a payment agent sub (not shown) is used for payment, the

sub-decoding unit

400, 410, 420, 430 decoding the data transmitted to the payment agent sub (not shown) and the payment agent sub (not shown) may be determined in advance. Can be. For example, the first decoder 400 may correspond to the first payment agent server (not shown), and the second decoder 410 may be predetermined to correspond to the second payment agent server (not shown). In this case, the controller 320 transmits the data decoded by the first decoder 400 to the first payment agent server (not shown), and the data decoded by the second decoder 410 is the second payment agent server ( (Not shown). The first and second payment agent servers (not shown) transmit the decrypted data to the payment institution server 140.

When the

sub decoders

400, 410, 420, 430 and the payment agent sub (not shown) are previously determined to correspond, the

terminals

100, 110, 120 and the

sub decoders

400, 410, 420, 430 may also be predetermined. For example, the encrypted data transmitted from the first terminal 100 is decrypted by the first decryption unit 400, and the encrypted data transmitted from the second terminal 110 is decrypted by the second decryption unit 410. May be performed.

To this end, when the first and

second terminals

100 and 110 transmit encrypted data, the first and

second terminals

100 and 110 transmit information about the first and second payment agency (not shown), thereby encrypting the control unit 320 transmitted from the first terminal 100. The data may be decrypted by the first decryption unit 400, and the encrypted data transmitted from the second terminal 110 may be decrypted by the second decryption unit 410. In this case, the encrypted data transmitted from the first and

second terminals

100 and 110 to the server 140 may have the same encryption or decryption method.

On the other hand, when the encrypted data is received from the first to third terminals (100, 110, 120), the control unit 320 is a

sub decryption unit

400, 410, 420, 430 that can verify and decrypt the encrypted data in consideration of the traffic or payment agency fees in each sub decryption unit ) Can be decoded.

In addition, the control unit 320 looks at the traffic of each decryption unit that can decrypt the received encrypted data and ensures that the traffic of each decryption unit is properly maintained. Can be controlled so as not to increase.

For example, when a plurality of encrypted data to be decrypted in the same manner is received and there is only one

sub-decryptor

400, 410, 420, and 430 capable of decrypting the received encrypted data, the controller 320 causes decryption of the encrypted data sequentially. . When there are a plurality of

sub decryption units

400, 410, 420, and 430 capable of decrypting the received encrypted data, the controller 320 may perform decryption simultaneously in each sub decryption unit or decryption in any one sub decryption unit. In this case, the control unit 320 may control the decoding operation in consideration of traffic or a payment agent fee in each sub decoding unit.

For example, when the first and

second decryption units

400 and 410 perform decryption in the same manner, when a plurality of encrypted data to be decrypted by the first and

second decryption units

400 and 410 are received, the control unit 320 may perform a first decryption. And decoding in the

second decoding unit

400, 410 simultaneously, or in a sub-decoding unit having low traffic or low payment agency fee in consideration of traffic or payment agency fees of the first and

second decoding units

400, 410. A specific decoder can be specified to be performed.

Meanwhile, according to the present invention, a new fifth decryption unit 440 may be added to decrypt encrypted data that cannot be decrypted by the

sub decryption units

400, 410, 420, and 430 initially set by the decryption unit 330. If the fifth decoder 440 is added, the controller 320 controls the first to

fifth decoders

400, 410, 420, 430, and 440.

In this case, the fifth decoder 440 is added to include a peripheral component interconnect (PCI), a serial advanced technology attachment (SATA), and a universal USB (USB). serial bus) The server 130 may be added in an extension method using resources, or may be added if necessary by having a separate expansion port (not shown) in the decoder 330. When using the expansion port (not shown), when the fifth decryption unit 440 is added, the fifth decryption unit 440 by changing a specific PIN of the expansion port (not shown) to high (HI) or low (low) ) May be added or may be added, or the fifth decoder 440 may be added by forcibly turning on / off a DIP switch.

When available resources of the server 130 are limited or when it is difficult to add the fifth decoder 440 using an expansion port (not shown), the fifth decoder through communication methods such as Ethernet, 3G, LTE, WiBro, etc. 440 may be added. At this time, the decryption unit 330 and the additional fifth decryption unit 440 may each include a physical security key that cannot be duplicated, and the decryption unit 330 and the fifth decryption unit 440 using the physical security key. Can recognize each other. The physical security key may be a smart card technology used for IC credit cards, traffic cards, SIM cards, and the like.

The first to

fifth decoders

400, 410, 420, 430, and 440 may include protocol information, and may output decoded data and protocol information after performing a decoding operation. The control unit 330 performs the payment procedure according to the access information and the protocol standard of the payment institution server 140 with reference to the protocol information.

5 is a flowchart illustrating the operation of the electronic payment system according to an embodiment of the present invention.

In FIG. 5, the first terminal 100 is described, but the second and

third terminals

110 and 120 may be similarly or similarly applied.

Referring to FIG. 5, when the encrypted data is read by the first terminal 100 (500), the first terminal 100 transmits a reset signal to the server 130 (510). The server 130 resets the decoder 330 in response to the reset signal in step 520 and transmits a reset response signal to the first terminal 100 in step 530.

Thereafter, the first terminal 100 transmits the encrypted data to the server 130 (540), and the server 130 decrypts the encrypted data (550). In addition, the first terminal 100 transmits payment data such as payment amount, installment, signature information, etc. to the server 130 (560), the server 130 transmits the decrypted data and payment data to the payment institution server 140 The request for payment approval is sent to 570. If payment approval is determined, the payment institution server 140 transmits a response to the payment approval request to the server 130 (580), and the server 130 sends a response to the payment approval request to the first terminal 100. Transmit 590.

6 is a flowchart illustrating a decryption operation of the server 130 according to an embodiment of the present invention.

Referring to FIG. 6, when the receiver 300 receives a plurality of encrypted data (600), the controller 320 determines whether the decryption method of the encrypted data is the same. If the decoding methods are the same (YES in 610), the control unit 320 determines whether there are a plurality of

sub-decoding units

400, 410, 420, and 430 decoding in the same manner to the decoding unit 330. In step 640, the decoding is performed (640), and in the case of one (No of 620), the decoding is sequentially performed (650).

When the decoding is performed in each sub decoding unit, the controller 320 may control the decoding in each sub decoding unit in consideration of the traffic or the payment agent fee of each sub decoding unit. For example, when there is a plurality of sub-decryptors that decrypt in the same manner, when the traffic of any one of the sub-decryptors is high, the encrypted data decoded by the high-decryption sub-decryption unit is reduced and processed by another sub-decryptor with low traffic. To increase the encrypted data.

In addition, when a payment agency (not shown) is used for payment, the controller 320 checks information on the payment agency (not shown) transmitted from the

terminals

100, 110, and 120 and the payment agency (not shown). The decoding may be performed by the predetermined

sub decoding decoders

400, 410, 420, and 430 to correspond.

In addition, the control unit 320 according to the present invention can look at the payment agency fees of each payment agency and may be decrypted in the decryption unit corresponding to the payment agency server with less payment agency fees.

If the decryption method of the received encrypted data is different (NO in 610), the controller 320 causes decryption to be performed in a sub decryption unit capable of decrypting the encrypted data (630). The decrypted data is transmitted to the payment institution server 140 (660).

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications may be made without departing from the scope of the present invention.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the scope of the following claims, but also by those equivalent to the scope of the claims.

The present invention can be used in an apparatus and method that can efficiently and conveniently extend the means for decrypting encrypted data.

Claims

An apparatus for decrypting encrypted data,

A receiving unit which receives at least one encrypted data having different decryption methods;

A transmitting unit which transmits decryption data for the encrypted data;

A plurality of decryption units for decrypting the encrypted data;

And a controller configured to verify the encrypted data and perform a decryption in a decryption unit capable of decrypting the encrypted data.

Each of the plurality of decryption units is predetermined to correspond to each payment agency server that receives the decrypted data,

The control unit causes the decryption data transmitted to the payment agency server to be decrypted by the decryption unit corresponding to the payment agency server based on the information about the payment agency received from the terminal transmitting the encrypted data,

The control unit may include a plurality of decryption units having the same decryption method, and the decryption unit may decrypt the received encrypted data when the receiver receives a plurality of encrypted data that decrypts the same method. The apparatus for determining a decryption unit for decrypting the received encrypted data based on any one of traffic and payment agent fees.
The method of claim 1,

And the control unit adds a new decryption unit capable of decrypting the non-decryptable encrypted data when there is encrypted data that cannot be decrypted in the initially set decryption unit.