KR100729183B1 - How to check your card permissions - Google Patents

Abstract

The present invention relates to a method of confirming a card use right. In particular, the present invention relates to a method of confirming a use right of a card associated with a mobile communication terminal.

The present invention provides a card to which use rights are assigned, a mobile communication terminal, a card reader capable of reading the card, an authentication server configured to enable direct or indirect data communication with the card reader via a communication network, and A card information server having a database of information on a card is connected to the mobile communication terminal through a wireless communication network so as to enable data communication, and directly or indirectly, to communicate data with the authentication server and the card information server. It is performed in an environment including a mobile communication server.

According to a first embodiment of the method for checking a card use authority according to the present invention, (1) a card information acquisition step of receiving the card information read by the card reader; and (2) generating a predetermined authentication string as a random value. An authentication string generation step; (3) a mobile communication terminal number inquiry request step of requesting the card information server to query the mobile communication terminal number associated with the card by using the obtained card information; and (4) A first authentication number transmission request step of requesting the card information server to command the mobile communication server so that the mobile communication server can transmit the authentication string to the mobile communication terminal of the number inquired in the inquiry request step (5 A second authentication number transmission request step of sending the same authentication string as the authentication string to the card reader. It is made.

Card, mobile terminal, permissions, authentication, membership

Description

How to check card usage rights {Method for Checking Authority for Using A Card}

1A is a system schematic diagram illustrating a configuration of a system in which a method for confirming card use authority according to the present invention is performed;

1B is a system schematic diagram showing yet another example of the configuration of a system performed in the method for confirming the card use authority according to the present invention.

1C is a system schematic diagram showing still another example of the configuration of a system performed by the method for confirming the card use authority according to the present invention;

1D is a system schematic diagram for explaining data transmission and reception between a card reader and a mobile communication terminal provided with a data transfer relay device.

2A is a flow chart illustrating a procedure flow of a method of confirming card use authority according to the present invention.

2B is a flow chart illustrating the procedure flow of another embodiment of a method of confirming card usage rights in accordance with the present invention.

FIG. 3A is a flowchart illustrating a procedure flow of a method of confirming card use authority by checking an authentication number displayed on a card terminal and a mobile communication terminal by the method of confirming card use authority shown in FIG. 2A;

FIG. 3B is a flowchart illustrating a procedure flow of a method of confirming card use authority by comparing an authentication number displayed on a mobile communication terminal with an authentication number stored in an authentication server by the method of confirming the card use authority shown in FIG. 2B;

4 is a flow chart illustrating a procedure flow of yet another embodiment of a method of confirming card usage rights in accordance with the present invention.

5 is a flow chart illustrating a procedure flow of yet another embodiment of a method for verifying card usage rights in accordance with the present invention.

The present invention relates to a method of confirming a card use right. In particular, the present invention relates to a method of confirming a use right of a card associated with a mobile communication terminal.

With the expansion of mobile communication terminals, the supply of cards associated with mobile communication terminals is also expanding. An example of a card associated with a mobile communication terminal is a so-called membership card. Membership cards are issued to mobile operators to use their services to earn points when purchasing goods or to use points instead of cash.Membership cards and mobile terminals are linked to each other through membership cards. When issuing a membership card, the phone number of the mobile communication terminal and the like are generally stored in association with other customer information so that the points can be easily retrieved or used. The present invention relates to a method for confirming the use authority of a card by using such a membership card or other card associated with a mobile communication terminal.

Conventionally, for identification purposes, representative ID cards issued by public institutions, driver's licenses, etc., as well as student ID cards issued to minors, etc., which are not subject to the above-mentioned identification cards, have been provided as identification means. However, these IDs have been largely recognized as a means of identification, but there has always been a risk of counterfeiting or duplication in case of loss, and there are many cases where there is no way of verifying identity if they do not possess identification means. In addition, when using a variety of cards, such as cash card, credit card, membership card, it may be necessary to verify your identity in order to verify the right of use, but if there is no means to verify identity issued by public institutions, such as identity verification is not possible In some cases, the card itself could not be used.

Especially for the cardholder, the inconvenience of having to carry the identification means separately from the card always has the disadvantage of having the identity verification means that can be issued only through relatively difficult and cumbersome procedures in the state of risk of theft or loss. If you do not possess a means of identification, your use of the card will be restricted because you are not authorized to use the card. Furthermore, even if you provide a means of identification, you will be exposed to malicious theft or duplication. In the case of elementary school students and the like who do not have identification, there is a problem of using a medical insurance card having a very low reliability as a means of identification. Furthermore, there is a problem that a user may feel rejected by presenting his / her ID and verifying his / her identity.

The present invention has been made to solve the problems of the conventional card usage authority confirmation method and / or identification method as described above, to enable the card usage authority and / or identity verification using the card associated with the mobile communication terminal However, it is an object of the present invention to provide a card usage right and / or identification method that can enhance the credibility that must be secured for card use right and / or identification.

In order to achieve the object of the present invention, a card usage right confirmation method includes a card to which a usage right is designated, a mobile communication terminal, a card reader capable of reading the card, and a card network directly or indirectly through a communication network. An authentication server configured to enable data communication, a card information server on which the information database relating to the card is mounted, and the mobile communication terminal are connected to enable data communication through a wireless communication network. It is performed in an environment including a mobile communication server connected to enable direct or indirect data communication with the server.

The card user authority confirmation method according to the first embodiment of the present invention comprises the steps of: (1) acquiring the card information receiving the card information read by the card reader; and (2) generating a predetermined authentication string as a random value. An authentication string generation step; (3) a mobile communication terminal number inquiry request step of requesting the card information server to query the mobile communication terminal number associated with the card by using the obtained card information; and (4) A first authentication number transmission request step of requesting the card information server to command the mobile communication server so that the mobile communication server can transmit the authentication string to the mobile communication terminal of the number inquired in the inquiry request step (5 A second authentication number transmission request to send the same authentication string as the authentication string to the card reader. It is composed.

As used in the description or the claims of the present specification, the term "letter" is used as a term including both letters and numbers.

The association of the mobile terminal with the card is to designate a mobile terminal number to be associated with the card issuance, and then compares the information of the mobile communication service provider's database with the card issuing applicant's information. This is done by checking whether the card issuance is the same as the applicant. When purchasing a mobile terminal or applying for issuance of a card, the identity of the owner is confirmed through a means of identification issued by a public institution. Thus, the mobile terminal user information and the card issuing applicant information are compared in advance to confirm whether they are the same person. It will be appreciated that if the above procedure is performed in advance, the reliability of the method for confirming the card use authority according to the present invention can be improved.

The card user authority checking method according to the first embodiment of the present invention is preferably performed by the above-described authentication server. The authentication server constituting the environment in which the card user authority checking method according to the present invention is performed is preferably directly received card reading information from the card reader or a value added communication server called a VAN server. Therefore, it will be understood that the VAN server can read the full payment request transmitted from the conventional card reader and deliver it to the financial institution server capable of processing the payment request, as well as serving as the authentication server. .

(4) The card information server requests the mobile communication server to instruct the mobile communication server to transmit the authentication string to the mobile communication terminal of the number inquired in the inquiry requesting step of the first embodiment. The first authentication number transmission request step may include configuring the authentication server to transmit an authentication string to the card information server and requesting the card information server to perform a predetermined operation. The card information server transmits the inquired mobile communication terminal number and the received authentication string to the mobile communication server using the card read information to transmit the authentication string to the mobile communication terminal having the inquired mobile communication terminal number. It is preferably configured to request the mobile communication server The.

According to such a configuration, by confirming the authentication information transmitted to the card reader, for example, the authentication number and the like, the authentication information transmitted to the mobile terminal is displayed at the place where the card reader is provided, the requester of the authority to confirm the use of the mobile terminal is required. You can check whether the holder has the right to use the card. Therefore, even if a third party acquires a card, unless the associated mobile communication terminal is also acquired at the same time, the use authority of the card cannot be confirmed and the use of the card is restricted. If you have a mobile communication terminal, it is possible to authenticate the right to use the card without having to present a separate identification means.

According to a second aspect of the present invention, there is provided a method for checking a user's right to use a card, the method including: (1) acquiring the card information received by the card reader, and (2) using the acquired card information. A mobile terminal number inquiry requesting step of requesting the card information server to extract a mobile communication terminal number associated with a card; and (3) obtaining a mobile communication terminal number receiving the mobile communication terminal number queried from the card information server. (4) an authentication string generation step of generating a predetermined authentication string as a random value, and (5) transmitting the generated authentication string to a mobile communication terminal number obtained in the mobile communication terminal number obtaining step. A first authentication number transmission request step of requesting the mobile communication server; and (6) the same authentication string as the authentication string; To be transferred to the de reader is configured to include the second authentication code transmission request step.

The card user authority confirmation method according to the second embodiment of the present invention is preferably performed by the above-described authentication server.

According to a second embodiment of the method for confirming a card use authority according to the present invention, the authentication information, for example, an authentication number and a mobile communication terminal number, is transmitted from a card information server inquiring a mobile communication terminal number to the mobile communication terminal in the first embodiment. Is different from being configured to transmit the authentication information to the inquired mobile communication terminal, and receive the mobile communication terminal number from the card information server and transmit the authentication information to the mobile communication server together with the first authentication number. There is.

According to a third aspect of the present invention, a method for confirming a user's right to use a card includes: (1) an authentication confirmation for receiving card information read by the card reader and unique information for specifying a mobile communication terminal input to the card reader; An information obtaining step, (2) a mobile communication terminal number inquiry step of inquiring unique information for identifying a mobile communication terminal associated with the card using the obtained card information, and (3) the mobile communication terminal inquiry A unique information comparing step of determining whether the unique information queried in step and the unique information for identifying the mobile communication terminal received from the card reader are matched; and (4) performing the unique information comparing step. And a result value sending step for conveying a result to the card reader.

The card user authority confirmation method according to the third embodiment of the present invention is preferably performed by the above-described card information server.

According to a third embodiment of the method for checking a card use authority according to the present invention, a card reader provides unique information for specifying a mobile communication terminal such as an electronic serial number (ESN), which is a number of a mobile communication terminal or a unique number of a mobile communication terminal. It is configured to input and transmit it with the card information, and to identify the unique information that can specify the mobile communication terminal such as the mobile terminal number transmitted from the card reader and the mobile communication terminal inquired by using the card information in the card information server By configuring the unique information to be compared, it is possible to reduce a communication network usage fee, for example, a text message transmission fee, generated in the process of transmitting authentication information to the mobile communication terminal.

The unique information for specifying the mobile communication terminal may be recorded in an RFID tag or the like provided to the mobile communication terminal, and the RFID reader may be provided on the card reader side so that this information may be automatically transferred to the above-described card reader side. Can be.

According to a fourth aspect of the present invention, there is provided a method for confirming a user's right to use a card, wherein (1) authentication confirmation for receiving card information read by the card reader and unique information for specifying a mobile communication terminal input to the card reader; An information acquisition step, (2) a unique character string inquiry request step of requesting the card information server to inquire unique information for identifying a unique information for identifying a mobile communication terminal associated with the card using the card information; (3) requesting the card information server to determine whether the mobile terminal specific information queried in response to the mobile terminal specific information inquiry request step matches the mobile terminal specific information obtained from the card reader; Performing a terminal specific information comparison request step and (4) a terminal specific information comparison request step Receiving a result from said card information server is configured to include a step of transmitting the result value to be transmitted to the card reader side.

The card user authority confirmation method according to the fourth embodiment of the present invention is preferably performed by the above-described authentication server. Although the card user authority confirmation method according to the fourth embodiment of the present invention is not significantly different from the third embodiment, it is preferable that the execution subject of each step is configured to be a card information server in the third embodiment. In the fourth embodiment, there is a difference that it is preferable to be configured to be an authentication server.

A card user usage authority confirmation method according to a fifth embodiment of the present invention is a card that uses first data transmitted to a mobile communication terminal and feedback data for the first data transmission received from the mobile communication terminal. A method for checking usage rights, comprising: (1) a first step of acquiring encrypted data obtained by encrypting a predetermined authentication string generated with a random value by using unique information for identifying a mobile communication terminal; 2) a first encrypted data transfer step of delivering the first encrypted data to a mobile communication terminal; and (3) a decrypted data acquisition step of receiving a result of decrypting the first encrypted data by the mobile communication terminal; (4) The result value decrypted by the mobile communication terminal is composed of data for comparison with the authentication string.

To this end, the card reader side is preferably provided with a data transmission and reception relay device capable of transmitting and receiving data with the mobile communication terminal.

Preferably, the mobile communication terminal is configured to generate the first encrypted data so that the mobile communication terminal can decrypt the first encrypted data using a unique string that can specify the mobile communication terminal stored in the mobile communication terminal. Preferably, a decryption program corresponding to the encryption program to be used is mounted.

In the card user authority checking method according to the fifth embodiment of the present invention, in the case of the card use authority checking method by transmitting a short text message through a mobile carrier server, a communication fee is charged and takes a long time in the process of sending a text message. Problems may arise and to solve them. Furthermore, when the card information server encrypts and transmits the mobile communication number in order to prevent the information which can specify the mobile communication terminal number such as mobile communication number, which is personal information, from being leaked, the card user according to the fifth embodiment of the present invention. The authorization check method may be a preferred embodiment.

In the card user usage authority confirmation method according to the third to fifth embodiments of the present invention, the unique character string that can specify the mobile communication terminal corresponds one-to-one with the mobile communication terminal number or the mobile communication terminal number. It is preferable to be configured to be any one of the ESN (Electronic Serial Number).

In the card user use authority checking method according to the third to fifth embodiments of the present invention, the unique character string for identifying the mobile communication terminal is an RFID ID tag (RFID) provided to the mobile communication terminal. Tag).

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the present invention.

1A is a system schematic diagram showing the configuration of a system in which a method for confirming card use authority according to the present invention is performed.

As shown in Fig. 1A, the configuration of the system in which the method for confirming the right to use a card according to the present invention is performed comprises a card reader 30 capable of reading data stored in a card, and a communication network with the card reader. A relay server 20 connected to obtain data including card information read from the card reader 30, an authentication server 10 connected to the relay server to enable data transmission and reception, and a card from the authentication server A card information server 40 for receiving information and searching for the presence of a mobile communication terminal associated with a card, and a mobile communication company server that is requested to transmit an authentication number to the mobile communication terminal number retrieved from the card information server 40. 60 and the mobile communication terminal 100 receiving the authentication number transmitted from the mobile communication terminal 60 through the wireless communication network 70. It is configured to include.

It will be appreciated that the card reader 30 may be implemented in various forms depending on the type of card, such as a magnetic card reader, a contact IC card reader, a contactless IC card reader, a barcode reader, and the like. In addition, the card reader 30 includes a magnetic card reader (MSR), a barcode reader, an IC card reader, or the like according to a specific implementation environment, or is configured to perform short-range communication with the card reader. It is also possible to configure a personal computer (PC). When the card reader 30 is a card reader 30 capable of processing a payment for goods or services using a card such as a credit card checker, the relay server 20 may process the financial institution server. As a server for relaying data transmission and reception between the 50 and the card reader 30, a well-known example is a value-added communication server (VAN server).

The authentication server 10 receives the data for checking the user's authority such as card information from the relay server 20, and analyzes the card information to the card information server 40 of the card issuer that issued the card. Query the validity of the card and if it is determined that the result is valid, generate a random authentication number and send the authentication number to the mobile communication terminal 100 associated with the card through a short text message (SMS) or the like. It is configured to transmit the authentication number to the information server 40 or the mobile communication terminal operator server 60.

The card information server 40 stores the mobile communication terminal number to be associated with the card issuing applicant when issuing the card, and checks whether the card is lost or stolen so as to search for validity of each card. Blacklist data, card service availability, and the like are stored. The membership server 40 searches the database of the membership card subscriber using the card information received from the authentication server 10 to search whether the membership card is a valid card, and retrieves the mobile communication terminal telephone number associated with the card. The server 60 transmits the authentication number to the retrieved mobile communication terminal number in a short message. In addition, the retrieved mobile communication terminal telephone number may be transmitted to the authentication server 10.

The card that is the subject of the usage right check of the method for confirming the use right of the card according to the present invention is not only a card issued by a mobile service provider, but also a card issued by a credit card service provider, for example, other operators. In the case of a card issued by an operator other than the operator, it is particularly preferable to register the telephone number of the subscriber's mobile terminal at the time of issuing the card, and to go through the procedure of checking whether the mobile terminal is the card subscriber. It is desirable to enhance the reliability of the method of confirming the authority to use the card.

The mobile communication company server 60 issues a short text message (SMS) through the wireless communication network 70 to the card holder's mobile communication terminal 100 at the request of the card information server 40 and issued by the authentication server. Send the authentication number.

The wireless communication network 70 refers to a communication network capable of transmitting voice and data using wireless, such as Code Division Multiple Access (CDMA), Global System for Mobile Telecommunication (GSM), and the like.

FIG. 1B is a system schematic diagram showing another example of the configuration of the system performed in the method for confirming the card use authority according to the present invention.

The system schematic shown in FIG. 1B does not pass through the relay server 20 in contrast to the system configured for the authentication server 10 and the card reader 30 to send and receive data via the relay server 20 in the schematic diagram shown in FIG. 1A. The card reader 30 and the authentication server 10 are connected to each other so that data can be transmitted and received, and the card reader 10 and the authentication server 30 can be connected through a telephone network, an internet network, a wireless communication network, and the like. Will be understood.

Fig. 1C shows a system schematic showing another example of the configuration of a system performed by the method for confirming the card use authority according to the present invention.

The system schematic shown in FIG. 1C is a movement of the card presenter when receiving card information from the card reader 30 unlike the system schematic shown in FIG. 1A or 1B configured to send an authentication number to the mobile communication terminal 100. It is a system schematic diagram when a communication terminal number is inputted together. The card information input to the card reader 30 and the mobile communication terminal number are transmitted to the card information server 40 via the relay server 20 and the authentication server 10, and the card information server 40 is associated with the card. The mobile communication terminal number is queried to determine whether it matches the mobile communication terminal number input through the card reader, and the card presenter and the licensee registered at the time of issuing the card are authenticated according to the determination result. 1A and 1B, the authentication number does not need to be transmitted to the mobile communication terminal, thereby reducing the waiting time for receiving the authentication number. Can reduce the cost.

FIG. 1D shows a system schematic for explaining data transmission and reception between a card reader and a mobile communication terminal provided with a data transfer relay device. As shown in FIG. 1D, the card reader 30 and the data transfer relay device 300 are configured to transmit data through wired and wireless communication, and the mobile communication terminal 100 and the data transfer relay device 300 also perform wired and wireless communication. Configure to transfer data via To this end, the mobile communication terminal 100 is preferably provided with a separate data communication module 110 in addition to the communication module for mobile communication, the data communication module is already provided in the mobile communication terminal, USB communication module, Alternatively, the present invention may be configured as an infrared communication module or the like, and according to an embodiment, may be configured as an RFID tag for storing RFID. In response to the separate data communication module 110 of the mobile communication terminal, the data transfer relay device 300 is provided with a data communication module 310 with the mobile communication terminal.

The data transfer relay device 300 is capable of receiving the unique information for specifying the mobile communication terminal from the mobile communication terminal or the data to be transmitted from the mobile communication terminal to the card reader side and transmitting the data to be transmitted from the card reader side to the mobile communication terminal. As a device, it can be configured as a so-called dongle (Dongle), etc., which are conventionally connected to a card reader and a serial port for mobile payment. The data transfer relay device 300 is provided with an infrared communication module to enable data transmission and reception with a mobile communication terminal, or to include an RFID reader module to read information stored in an RFID tag provided to the mobile communication terminal. It is preferable to construct. According to this configuration, in particular, when transferring data from the authentication server or the card information server to the mobile communication terminal, the data is transmitted to the mobile communication terminal through the data transmission relay device without using a separate communication means such as a text message. It is advantageous to be able to transmit.

As such, when the card reader 30 is configured to transmit and receive data with the mobile communication terminal 100 through the data transmission relay device 300, the card reading information may be obtained from the information that the membership card has read in the card reader 30. And unique information for specifying the mobile communication terminal input by the mobile communication terminal 100 holder.

Swipe the membership card in the card reader 30 to obtain card reading information, and move the mobile communication terminal from the mobile communication terminal 100 to the data transfer relay device 300 through the communication module 110 of the mobile communication terminal. It can be configured to convey unique information that can be specified. When configured in this way, the unique information of the mobile communication terminal associated with the card can be detected using the card read information, and the unique information of the detected mobile communication terminal and the mobile communication terminal uniquely transmitted from the data transfer relay device 300 can be detected. The information may be compared to determine whether a person having a card use authority presents a card.

According to another embodiment of the present invention, when the authentication string generated as a random value is transmitted from the authentication server to the card information server together with the card information obtained from the card reader, the card information server detects and encrypts the unique information of the mobile terminal using the card information. When the received authentication string is encrypted as a key value by using a method such as Seed or 3-DES, and then transmitted to the card reader via the authentication server, the card reader 30 sends the data to the data transfer relay device 300. The data transmission relay device 300 transmits the data to the card presenter's mobile communication terminal using short-range wireless communication such as RF or IrDA, and the user of the mobile communication terminal operates the mobile communication terminal. Decrypt the previously received encrypted data using the unique information that can be specified as the decryption key. And transmit the authentication string included in the decrypted data to the data transfer relay device 300 again, the data transfer relay device 300 delivers it to the card reader, and the card reader delivers it to the authentication server. The card encryption authority may be confirmed by comparing the first encrypted authentication string with the decrypted authentication string in the mobile communication terminal.

In another embodiment in which the data transfer relay device 300 is provided, in the above embodiment, the encryption and decryption process of the authentication string is performed in the same manner, but the authentication server is different from the final authentication string comparison. Sends the encrypted authentication string data received from the card information server to the card reader side together with the authentication string before encryption, and then performs the same procedure as in the above embodiment with the authentication string before encryption received from the authentication server in the card reader. The mobile communication terminal may be configured to compare the decrypted authentication string to check the card use authority.

Hereinafter, with reference to Figures 2a to 4 how the method of confirming the card use authority according to the present invention in the system described with reference to Figures 1a to 1d will be described in more detail.

Figure 2a is a flow chart showing the flow of the procedure of the method for confirming the card use rights according to the present invention. The procedure flow diagram shown in FIG. 2A is particularly preferably implemented in the system shown in FIG. 1A.

When the card holder presents the membership card (S110), the card reader operator reads the card information using the card reader, and manipulates the card reader to transmit the read card information to the relay server connected through the communication network with the card reader. Step S120 is performed. In addition to the membership card issued by the mobile operator in connection with the mobile telephone number, the card is registered with the mobile telephone number upon issuing the card and confirmed whether the mobile telephone number subscriber is the same as the card applicant. Cards are also possible.

The relay server transmits the received card to the authentication server (S300). When the relay server transmits the card information from the relay server to the authentication server in general, the card reader generally checks the credit card for those who provide goods or services. As can be seen in the example of the present invention, since the card reader connected to the relay server is widely used, it is preferable that a separate system infrastructure is not required to perform a method of checking the card use authority according to the present invention.

When the step (S300) is performed, the authentication server obtains the card information from the relay server, analyzes the card information to determine the operator that issued the card, membership to the card information server operated by the operator that issued the card A request is made to determine whether the card is valid, and the card information server receives the card information from the authentication server, searches a database, and searches whether the corresponding card is a valid card (S400). In the step S400, the validity of the card is determined based on the existence of the corresponding card, whether the card corresponds to a card that has been lost, stolen, suspended, or the like compared to the blacklist.

If the result card of step S400 is not valid, the card is sent to the card reader via the authentication server and the relay server through the authentication server and the relay server (S420), and the result card of step S400 is valid. If it is determined that it is notified to the authentication server, the authentication server generates an authentication number and transmits to the relay server, and transmits the authentication number to the mobile communication terminal inquired to be associated with the card to the card information server Proceeding to step S410 requesting to give.

The relay server performs a step (S500) to transmit and display the authentication number received in the step (S410) to the card terminal, the card information server queries the mobile communication terminal number associated with the card to the corresponding mobile communication terminal The mobile communication service provider server providing the mobile communication service is configured to perform a step (S600) of requesting to send an authentication number by SMS. The mobile communication service provider server transmits the authentication number to the mobile communication terminal associated with the card by combining the mobile communication terminal number transmitted from the card information server and the authentication number to be sent in the short text message (S700).

The method of checking the card use authority performed in the step after the step S700 will be described with reference to FIG. 3A to be described later.

As described above, or as will be described later, in the preferred embodiment of the present invention, a case in which the relay server, the authentication server, the card information server, and the mobile communication service provider server are different from each other is described as an example. It will be appreciated that the subjects performing each step may be altered or integrated depending on. For example, a relay server may serve as an authentication server, and a server of a mobile service provider side may simultaneously play a role of a card information server, and an overall role may be performed on a single server. It may vary. The scope of the present invention is not limited to such an embodiment.

Figure 2b shows a flow chart showing the flow of the procedure of another embodiment of the method for confirming the card use rights according to the present invention.

The procedure flow diagram shown in FIG. 2B differs from the procedure flow shown in FIG. 2A for an applicable embodiment in the system as shown in FIG. 1B in which the relay server does not relay data transmission and reception of the card reader and the authentication server. It is shown. In addition, the procedure flow chart shown in Figure 2b determines whether or not the membership card is valid, if it is determined that the authentication server generates an authentication number, stored in the database and transmits the authentication number in a short message to the card information server It is configured to include a step (S430) to request to give, unlike the embodiment shown in Figure 2a is configured not to include a step (S500) for transmitting the authentication number to the card reader side.

The method of checking the card use authority performed in the step after step S700 will be described with reference to FIG. 3B to be described later.

FIG. 3A is a flowchart illustrating a procedure flow of a method of confirming card use authority by confirming an authentication number displayed on a card terminal and a mobile communication terminal by a method of confirming card use authority illustrated in FIG. 2A. .

As shown in FIG. 3A, after the step S700 of FIG. 2A is completed, the card presenter presents the authentication number transmitted to the mobile communication terminal owned by the card presenter to the card reader operator (S30). Receiving an authentication number generated by the server and determining whether or not the authentication number displayed in the card reader and the authentication number transmitted to the mobile terminal (S40) through the card presenter is also associated with the card mobile communication terminal It is configured to check card usage rights by checking whether it is in possession. Preferably, if the result value is "Yes" according to the result of the determination step (S40), the step of notifying that the authentication step is completed by notifying the authentication server of the authentication to the authentication server via the relay server (S50). And if the result value is "no", the card reader further comprises a step S60 of notifying the authentication server that the authentication step is completed by notifying the authentication server via the relay server.

3B is a flowchart illustrating a procedure flow of a method of confirming card usage authority by comparing the authentication number displayed on the mobile communication terminal with the authentication number stored in the authentication server by the method of confirming the card usage authority illustrated in FIG. 2B. Is shown.

As shown in FIG. 3B, after the step S700 of FIG. 2B is completed, the card presenter presents an authentication number transmitted to the mobile communication terminal owned by the card presenter to the card reader operator (S31), and the card reader. In step S33, the authentication number received from the authentication server is transmitted to the authentication server. The authentication server compares the authentication number stored in the authentication number generation step S430 of FIG. 2B with the authentication number received by the card presenter. If the two authentication numbers match by performing the step S41 of determining whether or not they match, the card presenter is configured to verify that the card presenter has the authority to use the card by checking that the card presenter and the mobile communication terminal holder are the same person. At this time, if the determination result of step S41 is "Yes" to inform the result of performing the step (S41), the step of notifying the authentication success to the card reader in the authentication server (S51) and the determination result of the step If no, preferably, the authentication server notifies the card reader of the authentication failure (S61).

4 is a flow chart showing the procedure flow of yet another embodiment of the method of confirming the card use authority according to the present invention.

The embodiment of the method for checking the card use authority illustrated in FIG. 4 is different from the method illustrated in FIGS. 2A to 3B in that there is no transmission of an authentication number to the mobile communication terminal.

The procedure flow of the method for confirming card use authority according to the embodiment shown in FIG. 4 will be described. After the card holder performs the step of presenting the membership card (S11), the card reader reads the information of the membership card, and performs the step (S13) of obtaining the mobile communication terminal number from the card presenter, and the card In step S15, the reader transmits the obtained card reading information and the mobile communication terminal telephone number to the authentication server. The steps S13 and S15 are preferably performed in a card reader. The authentication server performs a step (S25) of transmitting the obtained information to a card information server managing card data using the card information. The card information server searches the database to determine whether the card is valid (S30), and if the result value of the step S30 is "Yes", the mobile communication terminal number associated with the card is searched. In step S31, if the result of performing the step S30 is "no", it is configured to perform the step S60 of passing the information that the authentication failed because the card is not valid through the authentication server to the card reader. do. On the other hand, comparing the mobile communication terminal number inquired as being associated with the card in step S31 and the mobile communication terminal number (S33) of the card presenter received through the card reader to determine whether or not match (S33) The card presenter may determine whether the card presenter is a user of the mobile communication terminal associated with the card. If the result value of step S33 is "no", the card information server notifies the card reader of the authentication failure through the authentication server, and if the result value of step S33 is "yes", authentication with the authentication server. Performing step (S35) of transmitting the result is configured to perform step (S40) of notifying that the authentication was successful to the card reader in the authentication server.

5 is a flow chart showing the procedure flow of another embodiment of the method of confirming the card use authority according to the present invention. FIG. 5 illustrates a method of confirming card use authority in the case where the card information server processes and transmits the unique information in order to prevent the leakage of the unique information that can specify the mobile communication terminal such as the mobile communication terminal number. .

The procedure flow of the method for confirming card use authority according to the embodiment shown in FIG. 5 will be described. As shown in FIG. 5, when the card holder presents a membership card (S110), the card reader swipes the membership card to read card information recorded on the membership card and transmits the card information to the relay server (S120). The server transmits the card information to the authentication server (S200), the authentication server transmits the card information to the card information server on which the database for the membership card is mounted using the card information (S300), and the card information server delivers the card information. Using the received card information, determining whether the membership card is a valid and usable card (S400), and if the result value is "Yes", the mobile communication terminal unique information is sent to the authentication server to proceed to the next step (S710). Hashes the pass, and if the result is "no", the card is validated to the card reader so that the card-serving requester knows. The result to notify the failure hayeoteum and to perform the step (S420) of transmitting.

On the other hand, if the result value of the previous step is "Yes", the authentication server generates an authentication number (S720), the authentication generated in the step (S720) by using the hashed mobile terminal unique information received from the card information server Encrypting the number to generate the first encrypted data (S730), and transmitting the first encrypted data to the mobile communication terminal (S740) using a relay server, a card reader, a data transfer relay device, and the like. .

In the mobile communication terminal, key data capable of decrypting the first encrypted data is generated by hashing mobile terminal specific information stored in the mobile communication terminal itself, and using the decryption program stored in the mobile communication terminal in advance. The first encrypted data is decrypted (S810) and transferred to the authentication server where the authentication number is stored using the data transfer relay apparatus, the card reader, and the relay server (S820). According to an embodiment, the authentication number may be stored in a relay server or a card reader or a data transfer relay device, in which case it will be understood that the comparison of the authentication number with the decrypted first encrypted data may be performed in the device. .

Although the preferred embodiments of the present invention have been described above with reference to the accompanying drawings, it will be understood by those skilled in the art that the present invention may be implemented in other specific forms without changing the technical spirit or essential features. . Therefore, the embodiments described above are exemplary and are not intended to limit the claims. The scope of the present invention is determined by the claims, and it should be construed that all changes or modifications derived from the meaning and scope of the claims and their equivalents are included in the scope of the present invention.

According to the present invention, a card use right and / or identity verification can be performed using a card associated with a mobile communication terminal, and a card use right that can enhance the reliability that must be secured for card use right and / or identity verification And / or identification methods.

Claims (8)

A membership card to which usage rights are designated, a mobile communication terminal, a card reader capable of reading the card, an authentication server configured to enable direct or indirect data communication with the card reader via a communication network, and the card. A card information server having a database of information associated therewith, the mobile communication terminal and a data communication via a wireless communication network, and a data communication directly or indirectly connected to the authentication server and the card information server. In the card permission check method performed in an environment including a mobile communication server, A card information obtaining step of receiving the card information read by the card reader; An authentication string generation step of generating a predetermined authentication string as a random value, A mobile communication terminal number inquiry requesting step of requesting the card information server to query the mobile communication terminal number associated with the card using the obtained card information; A first authentication number transmission request step of requesting the card information server to instruct the mobile communication server to transmit the authentication string to the mobile communication terminal of the number inquired in the inquiry request step; A second authentication number transfer step of forwarding the same authentication string as the authentication string to the card reader; How to check your card permissions. A membership card to which usage rights are designated, a mobile communication terminal, a card reader capable of reading the card, an authentication server configured to enable direct or indirect data communication with the card reader via a communication network, and the card. A card information server having a database of information associated therewith, the mobile communication terminal and a data communication via a wireless communication network, and a data communication directly or indirectly connected to the authentication server and the card information server. In the card permission check method performed in an environment including a mobile communication server, A card information obtaining step of receiving the card information read by the card reader; A mobile communication terminal number inquiry requesting step of requesting the card information server to extract the mobile communication terminal number associated with the card using the obtained card information; A mobile communication terminal number obtaining step of receiving the mobile communication terminal number inquired by the card information server; An authentication string generation step of generating a predetermined authentication string as a random value, A first authentication number transmission request step of requesting the mobile communication server to transmit the generated authentication string to the mobile communication terminal number obtained in the mobile communication terminal number obtaining step; A second authentication number transmission request step of sending the same authentication string as the authentication string to the card reader; How to check your card permissions. delete delete A membership card to which usage rights are designated, a mobile communication terminal, a card reader capable of reading the card, an authentication server configured to enable direct or indirect data communication with the card reader via a communication network, and the card. A card information server having a database of information associated therewith, the mobile communication terminal and a data communication via a wireless communication network, and a data communication directly or indirectly connected to the authentication server and the card information server. Performed in an environment that includes a mobile communications server, A card use authority confirmation method using first data transmitted to a mobile communication terminal and feedback data for the first data transmission received from the mobile communication terminal, A first encrypted data acquiring step of acquiring first encrypted data obtained by encrypting a predetermined authentication string generated with a random value by using unique information for identifying a mobile communication terminal; Transmitting the first encrypted data to the mobile communication terminal; A decryption data obtaining step of receiving a result of decrypting the first encrypted data by the mobile communication terminal; A second authentication number transfer step of transferring the same authentication string as the authentication string to the card reader, The result value decrypted by the mobile communication terminal is data for comparison with the authentication string. How to check card permissions. The method according to claim 5, wherein the unique character string capable of specifying the mobile communication terminal is any one of a mobile communication terminal number or an electronic serial number (ESN) corresponding one-to-one with the mobile communication terminal number. The method according to claim 5, wherein the unique character string capable of specifying the mobile communication terminal is an identification factor stored in an RFID tag provided to the mobile communication terminal. The method of claim 5, wherein the decrypting data obtaining step uses the unique information that allows the mobile communication terminal to store the first encrypted data in the mobile communication terminal or to specify a mobile communication terminal input by the user of the mobile communication terminal. Receiving the decrypted result value by the step, card usage rights confirmation method.

Images