KR20130082543A - Method and apparatus for protecting electronic payment of mobile device - Google Patents

Abstract

Disclosed are an electronic payment protection method and apparatus using a mobile communication terminal. An apparatus for protecting an electronic payment using a mobile communication terminal may include authentication information for authenticating the mobile communication terminal and a storage module configured to store details of the electronic payment made in the mobile communication terminal based on the authentication information. The communication module may include a communication module configured to receive an authentication information request for authentication of the mobile communication terminal through short-range wireless communication, and transmit the stored authentication information to the mobile communication terminal according to the authentication information request.

Description

METHOD AND APPARATUS FOR PROTECTING ELECTRONIC PAYMENT OF MOBILE DEVICE}

Embodiments of the present invention relate to an electronic payment protection method and apparatus using a mobile communication terminal that protects and manages information when performing electronic payment in a mobile communication terminal.

Recently, as the number of users of financial services and payment services using mobile communication terminals such as smartphones has soared, the issue of electronic payment security has become an important issue. do

For example, in the conventional credit card system, the loss of a single credit card causes damage to the limit of the card. However, the electronic payment system using the mobile communication system has various economies such as credit cards, coupons, tickets, finance, and internet banking. Since it is the key to the activity, there is concern about the enormous economic damage caused by hacking and loss. Therefore, in the field of information protection, various technologies have been researched and developed to solve the electronic payment security problem.

As a technique for solving the electronic payment security problem is a technique that applies a complex password and authentication technology, the conventional technology has two disadvantages. First, the more complex passwords and authentication methods are, the more difficult they are to hack, but at the same time, they are not suitable for real-time electronic payment methods due to the limited response speed. Second, there are solutions in almost all cryptography and authentication methods, making it difficult to guarantee complete integrity.

In addition, modern people use credit cards and electronic cards that provide differentiated services, and use various financial and payment methods such as Internet banking and direct debit, so that it is difficult for a user to understand the current level of spending. Therefore, the user has no choice but to check the date, history, and amount by accessing the homepage providing the financial / payment service.

The present invention provides a method and apparatus for protecting electronic payment using a mobile communication terminal, which can improve security when paying using a mobile communication terminal and check payment details in real time.

An apparatus for protecting an electronic payment using a mobile communication terminal may include authentication information for authenticating the mobile communication terminal and a storage module configured to store details of the electronic payment made in the mobile communication terminal based on the authentication information. The communication module may include a communication module configured to receive an authentication information request for authentication of the mobile communication terminal through short-range wireless communication, and transmit the stored authentication information to the mobile communication terminal according to the authentication information request.

The mobile communication terminal for electronic payment includes a communication unit for requesting the electronic payment protection device for authentication information for the electronic payment with the payment device through short-range wireless communication, and based on the authentication information received from the electronic payment protection device. It may include a control unit for performing an electronic payment and a memory for storing information about the electronic payment performed.

Payment can be made only when the external authentication device is within a certain signal range, thereby providing a safer electronic payment service, and structured economic activities are possible by storing payment details in real time so that financial / payment details can be checked. And increase user convenience.

1 is a block diagram illustrating an electronic payment protection system using a mobile communication terminal according to an embodiment of the present invention.
2 is a timing diagram of electronic payment protection using a mobile communication terminal according to an embodiment of the present invention.
3 is a flowchart illustrating a method of protecting electronic payment using a mobile communication terminal according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Recently, with the spread of mobile communication terminals such as smart devices, it is expected that the market for mobile NFC (Near Field Communication) services in which communication and finance are converged will grow rapidly.

NFC is a function of a mobile communication terminal that stores and uses credit cards, transportation cards, memberships, coupons, tickets, and the like. It also has the ability to read and write electronic tags, and it is attracting attention for its wide use in industries such as logistics, education, and distribution.

However, the development of security technology that can realize this as a reliable service is still insignificant. As mobile NFC payment services are activated, interest in security is increasing as the possibility of not only financial companies but also related companies being extended to manage financial information other than customer information.

NFC is an international standard technology such as ISO / IEC 18092, ECMA, and ETSI, and NXP, Nokia and Sony have established the NFC Forum to lead standardization. Today, more than 60 global companies, including Master Card, Visa card, Microsoft, Motorola, Samsung, TI, Panasonic, are participating in the forum. .

NFC is a secure wireless technology that enables easy connection through personal devices as well as personal communications, a new way of doing business with a simple touch. NFC is currently being applied to mobile phones or personal digital assistants (PDAs), or other advanced consumer electronics and computing devices, and features secure smart card emulation, peer-to-peer data transfer, and information access in reader mode. I have it. NFC allows two peripherals to exchange data at 424kbps data rates over the 13.56MHz radio frequency.NFC is also designed to be compatible with Bluetooth, WiFi / 802.11, and UWB. NFC enables active communication with each other.

Therefore, the mobile communication terminal is able to authenticate and pay with the payment device through the NFC function, and can easily execute micropayments, internet banking, and payment in an internet shopping mall. In addition, e-tickets can be easily used in vending machines, convenience stores, airports, subway stations, and movie theaters.

On the other hand, as the OS, CPU, memory, etc. of the mobile communication terminal have recently been strengthened, various applications can be used. Thus, rather than having a plurality of various cards, the mobile terminal can be used for payments for transportation, movie tickets, and restaurants. Payment is being performed. Accordingly, when a mobile communication terminal is lost or hacked, a large loss can be seen, so a method of protecting the electronic payment using the mobile communication terminal is required.

1 is a block diagram illustrating an electronic payment protection system using a mobile communication terminal according to an embodiment of the present invention.

Referring to the drawings, the electronic payment protection system using a mobile communication terminal according to the present invention includes a mobile communication terminal 110, an authorized authentication / payment device 120 and the electronic payment protection device 130.

The mobile communication terminal 110 is a terminal having a wired / wireless data communication function, a data storage function, an input / output function, and the like, such as a smart phone, and includes a communication unit 111, a memory 112, and a display unit 113. The controller 114 may include a speaker 115, a speaker 115, and an input unit 116.

The communication unit 111 may include one or more communication means. One of the communication means may be configured as a short-range wireless communication means such as NFC, Bluetooth, Wi-Fi Direct, etc. for electronic payment, the short-range wireless communication means is a signal if the authorized authentication / payment device 120 exists within a certain signal range Detect and prepare for payment.

When the payment process between the mobile communication terminal 110 and the authorized authentication / payment device 120 is completed, the memory 112 may store payment information such as payment details, amount, date, etc. for each payment method category. The memory 112 may include an authentication key for authentication with the authorized authentication / payment device 120 and / or the electronic payment protection device 130.

The display 113 displays various information through the mobile communication terminal 110, and may display a payment progress performed through the mobile communication terminal 110 and payment details stored in the memory 112.

The controller 114 drives and controls the communication unit 111, the memory 112, the display unit 113, and the like, and external devices such as an authorized authentication / payment device 120 and an electronic payment protection device 130. It is in charge of communication with the network. The controller 114 performs an authentication process with the authorized authentication / payment device 120 and the electronic payment protection device 130 based on the authentication information received from the authorized authentication / payment device 120 and the electronic payment protection device 130. In addition, the communication unit 111 may be controlled to store the payment details according to the electronic payment in the memory 112 and to transmit them to the electronic payment protection device 130 as necessary.

As the speaker 115 outputs a sound, the speaker 115 may output a notification sound according to the electronic payment, if necessary, so that the user may easily recognize important matters in the electronic payment.

The input unit 116 serves to receive information for electronic payment from a user.

Authorized authentication / payment device 120 is a device for communicating with the mobile communication terminal 110 to transmit payment information to financial institutions, card companies, banks, etc., authentication information, payment through the near field communication with the mobile communication terminal 110 Information can be transmitted and received.

The electronic payment protection device 130 is a device that allows payment to proceed only when the mobile communication terminal exists within a certain signal range for safer electronic payment. The communication module 132, the control module 134, and the storage module 136 ) And display module 138.

The communication module 132 receives a request for authentication information for authenticating the mobile communication terminal 110 for electronic payment from the mobile communication terminal 110 to the authorized authentication / payment device 120 through short-range wireless communication. In response to the authentication information request, previously stored authentication information (eg, an authentication key, a certificate, etc.) is transmitted to the mobile communication terminal 110. In addition, when the details of the electronic payment made in the mobile communication terminal 110 is received and transmits it to the storage module 136.

The control module 134 drives and controls the communication module 132, the storage module 136, the display module 138, and the like for electronic payment between the mobile communication terminal 110 and the authorized authentication / payment device 120. When the authentication information request is received from the mobile communication terminal 110 through the communication module 132, the mobile communication terminal may perform electronic payment using the corresponding mobile communication terminal 110 based on the received authentication information request. Authenticate 110.

The storage module 136 stores the details of the electronic payment made in the mobile communication terminal 110 authenticated through the control module 134. In addition, the storage module 136 may store authentication information for authentication of the mobile communication terminal 110.

The display module 138 displays payment details stored in the storage module 136 under the control of the control module 134.

The electronic payment protection device 130 according to the present invention may be implemented as an item carried by a user of the mobile communication terminal 110, such as a key ring, a watch, a necklace, a wallet, and the like. In this case, when the payment is attempted, the mobile communication terminal 110 communicates with the electronic payment protection device 130 to proceed with the payment if the authentication information is matched, otherwise it may generate an alarm sound.

As an example, when the electronic payment protection device 130 is implemented as a smart watch, the electronic payment protection device 130 worn on the user's wrist attempts to make a payment through synchronization with the mobile communication terminal 110 for short range wireless communication. An authentication process of the mobile communication terminal 110 may be performed using the mobile communication terminal 110, and when the authentication is completed, the mobile communication terminal 110 may make a payment with the authorized authentication / payment device 120. Therefore, since payment is not made if the electronic payment protection device 130 and the mobile communication terminal 110 are not in close proximity, even if the user loses the mobile communication terminal 110, the security threat of electronic payment through the mobile communication terminal. It can be safe from

In addition, the mobile communication terminal 110 transmits the amount and the details data settled at the time of payment to the electronic payment protection device 130 so that the user can set the payment date through the mobile communication terminal 110 or the electronic payment protection device 130 at any time. You can check the amount and details. This is possible because all payment methods are integrated in one terminal, and the mobile communication terminal 110 stores payment details based on the authorization information obtained in the payment process without a separate login to a financial institution, a bank, or a card company that provides a service. In addition, by storing the date, history, amount information, etc. according to the classification of the payment institution, the user can always browse.

On the other hand, the mobile communication terminal 110 may have a function of automatically selecting a payment method that is most suitable for the electronic payment and has a high benefit according to the payment information that is in progress.

The electronic payment protection device 130 may include authentication information such as a certificate issued through an authorized certification authority such as a bank. When authentication information is requested from the mobile communication terminal 110 to the electronic payment protection device 130, the electronic payment protection device 130 authenticates and responds to the mobile communication terminal 110. Only when there is a response from the electronic payment protection device 130, the mobile communication terminal 110 requests a payment to the authorized authentication / payment device 120, otherwise, through the display 113 or the speaker 115 Notify the user of the payment failure. Communication between the electronic payment protection device 130 and the mobile communication terminal 110 is a near field communication such as NFC, so that the signal reaching distance is very limited, so that eavesdropping is impossible at the visible distance.

Although the electronic payment protection device 130 is similar in configuration to the mobile communication terminal 110, the mobile communication terminal 110 has a variety of components in addition to the electronic payment and communication, but can support a variety of services, electronic payment protection device ( 130 differs in that it is designed for certification, storage, verification, etc. to reduce the size of the product.

For example, the electronic payment protection device 130 may be a modified form of wireless USB (Universal Serial Bus). The wireless USB used in the related art is mainly for storage, but the electronic payment protection device 130 according to the present invention provides an authentication assistance means and a function for protecting the electronic payment of the mobile communication terminal 110. It can be implemented by modifying the control module. That is, the difference between the conventional wireless USB and the electronic payment protection device 130 according to the present invention is that the authentication function of the mobile communication terminal 110 is added to the control module 134 and the payment details stored in the storage module 136. This can be confirmed through the display module 138 or by downloading to a PC via a USB interface.

In another embodiment, the electronic payment protection device 130 may be embedded in an item that a modern person usually possesses. If the communication module 132, the control module 134, the storage module 136, and the like are embedded in the electronic watch protection wrist watch or wallet, the electronic payment protection device 130 is the principle described in the wireless USB It can be used as an authentication aid for electronic payment protection by operating as it is. The wrist watch needs to be kept full on the wrist, and the wallet can exchange authentication information and payment information with the mobile communication terminal 110 by a short-range communication means even in a pocket. Here, the wrist watch and wallet are one embodiment, and the present invention is not limited thereto, and the present invention may be applied wherever the user's belongings can be achieved. In addition, the short-range communication means between the electronic payment protection device 130 and the mobile communication terminal 110 may be implemented by NFC, Bluetooth, Wi-Fi Direct.

2 is a timing diagram of electronic payment protection using a mobile communication terminal according to an embodiment of the present invention.

When the mobile communication terminal 210 and the payment device 220 are approached within a predetermined distance for the electronic payment, the mobile communication terminal 210 and the payment device 220 go through each other through an authentication request and an authentication approval process through proximity sensing. Will be recognized. Subsequently, when the electronic payment protection device 230 and the mobile communication terminal 210 carried by an individual are successfully completed through short-range wireless communication, the payment process between the mobile communication terminal 210 and the payment device 220 ( Payment request and payment approval). In this case, a process of selecting a payment method having a great benefit to the user among the payment methods available in the mobile communication terminal 210 may be included. The payment is automatically selected according to a method and algorithm automatically performed according to a user's pre-selected option. A method of finally selecting a user from among the means candidate group and proceeding with payment may be used. Finally, when the payment is approved in the payment device 220, the mobile communication terminal 210 stores the payment information in the memory or delivers the payment information to the electronic payment protection device 230.

Therefore, the user may check payment information for each payment institution through the display unit of the mobile communication terminal 210 or the display module of the electronic payment protection device 230. Payment information may include useful information related to payment, such as payment date, history, amount.

3 is a flowchart illustrating a method of protecting electronic payment using a mobile communication terminal according to an embodiment of the present invention.

Referring to the drawings, first, the mobile communication terminal performs short-range wireless communication by proximity sensing of an authorized authentication / payment device (S310). When the mobile communication terminal and the authorized authentication / payment device recognizes each other through this (S320), the mobile communication terminal is an electronic payment protection device carried by the user by requesting authentication information through short-range wireless communication to the mobile communication terminal and the electronic payment. Authentication is performed between the protection devices (S330).

Thereafter, when the authentication result is transmitted from the electronic payment protection device to the mobile communication terminal and the authentication between the mobile communication terminal and the electronic payment protection device is successfully completed, payment between the mobile communication terminal and the authorized authentication / payment device is performed (S340). In addition, the mobile communication terminal stores the advanced payment details in a memory or transmits them to the electronic payment protection device so that the user can more easily check the current spending degree (S350).

The electronic payment protection method according to the present invention can be implemented in the form of program instructions that can be executed by various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined by the equivalents of the claims, as well as the claims.

110: mobile communication terminal
111: communication unit
112: memory
113: display unit
114:
115: speaker
116: input unit
120: authorized certification / payment device
130: electronic payment protection device
132: communication module
134: control module
136: storage module
138: display module

Claims (1)

An apparatus for protecting electronic payment using a mobile communication terminal,
A storage module for storing details of electronic payments made in the mobile communication terminal based on the authentication information for authenticating the mobile communication terminal and the authentication information; And
A communication module for receiving an authentication information request for authentication of the mobile communication terminal from the mobile communication terminal through short-range wireless communication and transmitting the stored authentication information to the mobile communication terminal according to the authentication information request;
Electronic payment protection device comprising a.

Images