KR200176146Y1 - Apparatus for confirming credit card user - Google Patents

Abstract

The present invention relates to a device for authenticating a credit card user, and an object of the present invention is to authenticate a user without using an external device by using a function of a user authentication device provided in the credit card itself before the user uses the credit card. The present invention provides a device for authenticating a credit card user that can prevent a credit card from being used by others.

The configuration of the present invention for achieving the above object is an authentication setting unit for inputting a PIN (Personal Identification Number) for confirming the identity of the credit card user, or enter a phone authorization confirmation number required for the authorization of the credit card; An authentication storage unit storing a PIN corresponding to the PIN input by the authentication setting unit or a predetermined number transmitted from the card company managing the credit card for the telephone approval of the credit card in a database form; An authentication display unit for echoing the PIN entered by the authentication setting unit and the telephone approval confirmation number to the user or displaying random numbers stored in a database in the authentication storage unit; And storing the PIN input by the authentication setting unit in the authentication storage unit, echoing the telephone approval confirmation number to the authentication display unit, or the PIN input by the authentication setting unit is the IC chip storage unit of the credit card. It includes an authentication control unit for determining whether the same as the PIN stored in.

According to the present invention, in the case of a card holder, when the card is stolen or lost, the card holder can never use it except the user, thereby saving time for reimbursement and accident investigation due to fraudulent use. There is no need to introduce a separate device for verification, it is possible to prevent disadvantages due to unconfirmed members, and there is an advantage that quick payment is possible by shortening the inquiry time for PIN verification.

In addition, credit card companies can prevent tens of billions of billions of bonds a year due to fraud, save extra costs for managing them, and it is easy to introduce a PIN system without building an infrastructure. have.

Description

Apparatus for confirming credit card user}

The present invention relates to credit card user authentication, and more particularly, in using a credit card with an IC chip, authentication of a credit card user using a user authentication device provided in the credit card, and the use of a credit card. The present invention relates to a credit card user authentication device for confirming an authorization number necessary for receiving telephone approval using a random number set in the user authentication device.

Today, the use of credit cards is increasing in the financial market. These credit cards are classified into MS Card and IC Card.

First, MS Card (Magnetic Stripe Card) is the most commonly used card, and the information on the card is contained in the magnetic strip attached to the back of the card. The magnetic strip is composed of track 1 / track 2 / track 3 In each track, information about cardholders is input according to the standards set by ISO. Credit card uses track 2, and the card number, expiration date, service code, PVV (PIN Verification Value) and CVV (Card Verification Value). ) Is included.

IC Card (Integrated Circuit Card) is also known as 'Smart Card'. IC card is embedded in plastic card of same size and thickness as existing credit card, and records data by attaching MS (Magnetic Stripe). Can store more information (more than 8K to 32K bytes).

This card is a next-generation card that guarantees a high level of security because it is not easy to read recorded information through various security devices. A microprocessor can be built in the IC chip to store data, control access to data, encrypt and decrypt data. It is recognized as the best personal information recording medium because it can improve security by granting such functions.

Meanwhile, FIG. 2 is a conceptual diagram illustrating a procedure of verifying a personal identification number (PIN) using a credit card in the related art, and illustrates two cases of on-line and off-line processing. same.

First of all, in case of on-line processing, both MS credit card and IC credit card can be used, and after the user reads the credit card through the terminal, follow the instructions on the terminal LCD to check the PIN-PAD attached to the terminal. The member or merchant owner enters the PIN.

After the input, the entered PIN is encrypted through PIN-PAD and transmitted to the issuer of the corresponding credit card through an encryption process again through the HSM equipment of VAN.

At this time, the credit card company again verifies the PIN and identity entered in the ledger through encryption and decryption equipment, and responds to the terminal through the VAN company whether or not to use the credit card.

On the other hand, in the case of off-line processing, only the IC card can be used and processed through the PIN-PAD attached to the credit card and the terminal, not through the issuer of the credit card.

At this time, the PIN entered through the PIN-PAD is verified inside the IC card and the result is returned.

When performing the authentication operation of the credit card user in such a configuration, there was a disadvantage that must be provided with encryption and decryption equipment, such as PIN-PAD and HSM, and equipment for authentication of other credit card users.

Therefore, the present invention was devised to solve such a problem, and the object of the present invention is to use the function of the user authentication device provided in the credit card itself before the user uses the credit card. The present invention provides a device for authenticating a credit card user who can prevent the use of a credit card by others by being authenticated.

1 is a circuit diagram showing the configuration of an IC chip used for a credit card;

2 is a conceptual diagram illustrating a procedure of verifying a personal identification number (PIN) using a credit card in the related art;

3 is an exemplary view showing an example in which the user authentication device of the present invention is provided integrally on a credit card,

Figure 4 is an exemplary view showing an example in which the user authentication device of the present invention is attached to the credit card in the form of a folder, integrally formed,

5 is an exemplary view showing an example configured to attach the user authentication device of the present invention to a credit card detachably,

6 is a block diagram showing the configuration of a user authentication apparatus of the present invention;

7 is a flow chart showing a method for authenticating a credit card user using the present invention user authentication device;

8 is a table in which random numbers for receiving phone authentication of a credit card are configured in a database.

<Explanation of symbols of main parts of drawing>

100: credit card 110: IC chip

111: ROM (Read Only Memory)

200: user authentication device

210: authentication control unit 220: authentication setting unit

230: authentication display unit 240: authentication storage unit

The apparatus for authenticating a credit card user of the present invention for achieving the above objects is to enter a PIN (Personal Identification Number) for verifying the identity of the credit card user, or the phone authorization confirmation number required for the telephone card authorization An authentication setting unit to input; An authentication storage unit storing a PIN corresponding to the PIN input by the authentication setting unit or a predetermined number transmitted from the card company managing the credit card for the telephone approval of the credit card in a database form; An authentication display unit for echoing the PIN entered by the authentication setting unit and the telephone approval confirmation number to the user or displaying random numbers stored in a database in the authentication storage unit; And storing the PIN input by the authentication setting unit in the authentication storage unit, echoing the telephone approval confirmation number to the authentication display unit, or the PIN input by the authentication setting unit is the IC chip storage unit of the credit card. It includes an authentication control unit for determining whether the same as the PIN stored in.

Preferably, the device for authenticating the credit card user is integrated with the credit card at a predetermined portion of the credit card.

Optionally, the device for authenticating the credit card user is connected to a predetermined portion of the credit card in a folder form.

Optionally, a device for authenticating the credit card user is detachably attached to a predetermined portion of the credit card.

Preferably, the predetermined time is a predetermined time available for payment of a product purchase or a cash service with the credit card, and is set in advance when the credit card is manufactured by the card company.

Optionally, the authentication setting unit further includes a function of inputting a number for verifying the credit card user to reset the personal information of the credit card user.

Hereinafter, the objects, features, and advantages of the present invention described above will be described in more detail with reference to preferred embodiments of the present invention shown in the accompanying drawings.

First, the terms mentioned in the present specification will be described in detail as follows.

A PIN (Personal Identification Number) is a member's card password used by a member as a means of verifying his or her identity when using the card.

The PIN Verification Value (PVV) refers to a value in which a member's PIN is encrypted with a completely different number using a DES algorithm and entered into a predetermined column of a card.

CVV (Card Verification Value) is a three-digit password stored on the card to verify the card's authenticity.

A credit card is a token issued by a card issuer to a member. The credit card is a certificate that can receive a credit from the card issuer and present it without repayment.

Debit Card is a card that purchases goods service within the deposit balance of the card holder's deposit account and immediately pays the price to the customer's deposit account at the time of transaction.

Encryption refers to encryption based on a certain formula in order to prevent illegal information from being exposed to third parties in the process of sending and receiving online, such as card transactions by CD / ATM, card passwords.

Fig. 1 is a circuit diagram showing the configuration of an IC chip used for a credit card. The ROM 500 stores data relating to a credit card card number, a credit card expiration date, a CVV (Card Verification Value), and the like.

6 is a block diagram showing the configuration of the user authentication apparatus of the present invention.

The authentication setting unit 220 inputs a PIN (Personal Identification Number) to confirm the identity of the credit card user, or input a phone approval confirmation number necessary for the phone authorization of the credit card.

The authentication display unit 230 echoes the PIN inputted from the authentication setting unit 220 and the phone approval confirmation number, or displays random numbers stored in a database in the authentication storage unit 240.

The authentication storage unit 240 stores a database in which random numbers corresponding to a PIN input from the authentication setting unit 220 or a predetermined number for phone approval of a credit card transmitted from a card company managing a credit card are stored in a table form. It is.

The authentication control unit 210 stores the PIN input from the authentication setting unit 220 in the authentication storage unit 240, echoes the phone approval confirmation number to the authentication display unit 230, and inputs the authentication setting unit 220. It is determined whether a PIN is the same as the PIN in the IC chip storage of the credit card.

Hereinafter, an operation of an apparatus for authenticating a credit card user according to the present invention for achieving the above objects of the present invention will be described in detail with reference to FIGS. 1 and 3 to 8.

First, it is determined whether the power of the user authentication device 100 is turned on (step: S210).

3, the authentication controller 210 determines whether the ON / OFF key of the authentication setting unit 220 has been input.

As a result of the determination, when the power of the user authentication apparatus 100 is turned on, the user inputs the PIN of the credit card 100 according to the message displayed on the authentication display unit 230 (step: S210).

Here, the input uses a numeric keypad provided in the authentication setting unit 220, as shown in Figs.

After temporarily storing the input PIN in the authentication storage unit 240, the authentication control unit 210 accesses the PIN stored in the ROM 500 of the IC chip 110 of the credit card 100 to set authentication. After input using the unit 220, it is determined whether the same value as the PIN temporarily stored in the authentication storage unit 240 (step: S230) (step: S240).

As a result of the determination, if the PIN is determined to be the same value, the merchant of the credit card 100 swaps the credit card 100 to the terminal (step: S700), and the terminal IC of the credit card 100 After detecting data on the credit card number, credit card expiration date, and CVV previously stored in the ROM 500 of the chip 111, the card company of the credit card 100 is requested for use approval (step: S800). .

After the request, if it is determined by the card company that there is no defect in the credit card usage of the credit card 100, the use of the credit card 100 is approved, and accordingly, the user Purchasing an item with a credit card 100 for a time, or performs a procedure (for example, handwritten signature) to verify the identity of the slip received the cash service (step: S1000).

Here, the predetermined time is a payment time that can be paid by the credit card 100 when the use of the credit card 100 is approved, and is set in advance when the credit card is manufactured by the card company.

On the other hand, the number of times that the payment can be made using the credit card 100 for the predetermined time is limited to one time, after performing the payment operation at least once using the credit card 100, the re-entry of the credit card 100 In order to use it, it has to be repeated from (S220).

In addition, if the determination result of the above (step: S240), the PIN is determined to be not the same value, the authentication display unit 230 shown in Figure 6 'PIN is not the same, you can not use your credit card. An error message of type 'is displayed (step S250).

Meanwhile, in addition to confirming the PIN, an operation for performing an additional function of telephone approval of the credit card (step: S500) and personal information of the credit card user (step: S600) may be further performed.

To this end, first, telephone dialing is performed to the card company (step: S300), and the user receives a guide message output from an ARS (Automatic Response Service) provided by the card company (step: S400).

In other words, ARS receives the message 'Press 1 to get the phone authorization and press 2 to change the user information'.

After the reception, the credit card 100 cannot be authorized due to a failure of the terminal, or due to a disconnection of a communication line used to receive the credit card 100, the credit card 100 cannot be authorized. In this case, for the use of the credit card 100, the user selects an operation for receiving a telephone approval by inputting the number 1 of the telephone dial (step S510).

After the selection, as shown in FIGS. 3 and 6, a predetermined message requested by the card company to input (step S520), a guidance message displayed on the authentication display unit 230 (eg, 'Please enter the number') In accordance with the input using the authentication setting unit 220 of the credit card 100.

Here, the predetermined number requested by the card company is a number for selecting any one of random numbers pre-stored in a table form in a database form as shown in FIG. 8 in the authentication storage unit 240 shown in FIG. 6. .

In other words, when the predetermined number requested by the card company is '19', the authentication control unit 210 transmits a value of '6405' corresponding to '19' in the table shown in FIG. 8 to the authentication display unit 230. Echo to notify the user of the credit card (100).

After confirming this, the user notifies the card company by inputting the number '6405' using the keypad of the dialed telephone (step S530). The card company receiving the card company is stored in the storage unit of its host. In the database table stored in the same structure as in FIG. 8, it is determined whether the informed number '6405' is an appropriate number, that is, an authorization number for checking whether the credit card requested by the card company is used (step: S800).

If it is determined that the authorization number, the user purchases goods with the credit card 100 for a predetermined time, or performs a procedure (for example, handwritten signature) to verify the identity of the credit card slip received the cash service ( Step: S1000).

In addition, as a result of the determination in step (800), when the use of the credit card 100 is not permitted from the card company, that is, when the credit card usage is poor or the usage limit is exceeded, the card company ARS (Automatic) Using a response service) outputs an error message of the kind 'the credit card cannot be used because the telephone authorization cannot be received' (step S900).

On the other hand, in step (S400), after receiving the guidance message 'Press 1 to receive the telephone approval, and press 2 to change the user information' output from the ARS (Automatic Response Service), the user If the user selects No. 2 to change the personal information (step: S610), the identification number requested by the card company (step: S620) as shown in Fig. 3 and 6, to the authentication display unit 230 According to the guidance message (for example, 'Please enter the number') is displayed using the authentication setting unit 220 of the credit card 100.

Here, the confirmation number requested by the card company is a number for selecting any one of random numbers pre-stored in the form of a table in a database as shown in FIG. 8 in the authentication storage unit 240 shown in FIG.

In other words, when the predetermined number requested by the card company is '29', the authentication controller 210 transmits a value of '6960' corresponding to '29' in the table shown in FIG. 8 to the authentication display unit 230. Echo to notify the user of the credit card (100).

After confirming this, the user notifies the card company by inputting the number '6960' using the keypad of the dialed telephone (step S630). The card company which has received the card company is already stored in a storage unit of its host. In the database table stored in the same structure as in FIG. 8, it is determined whether the informed number '6960' is an appropriate number, that is, a confirmation number capable of changing the personal information.

As a result of the determination, in the case of the same confirmation number capable of changing the personal information, the card company connects the person in charge of the user by telephone.

Thereafter, the connected staff member informs the user of a change of personal information (eg, a telephone number, a card address destination address, etc.) that the user wants to change (step S640).

Receiving this, the staff member resets and stores it in the customer management database (step: S650) to end the personal information change operation.

As shown in FIG. 3, the user authentication apparatus 200 may be integrally formed with the credit card 100, including a line for transmitting data and a control signal in a predetermined portion of the credit card 100. As shown in FIG. 4, only the user authentication apparatus 200 may be separately configured to be connected in a folder form including a line for transmitting data and a control signal to a predetermined portion of the credit card 100. As shown in FIG. 5, only the user authentication apparatus 200 is separately configured to be detachably attached to the credit card 100 including a port for transmitting data and control signals through a connection unit for transmitting data and control signals. Can be configured.

Although the preferred embodiments of the present invention have been described in detail above, those of ordinary skill in the art to which the present invention pertains may devise the present invention without departing from the spirit and scope of the present invention as defined in the appended claims. It will be appreciated that modifications or variations may be made. Therefore, changes in the future embodiments of the present invention will not be able to escape the technology of the present invention.

As described above, according to the present invention, when the card holder is stolen or lost, the card holder can never use it except the user, and thus, there is an advantage of saving time for reimbursement and accident investigation due to misuse. In the case of card merchants, there is no need to introduce a separate device for verifying the PIN, it is possible to prevent disadvantages due to non-identification of members, and there is an advantage that quick payment is possible by shortening the inquiry time for verifying the PIN.

In addition, credit card companies can prevent tens of billions of billions of bonds a year due to fraud, save extra costs for managing them, and it is easy to introduce a PIN system without building an infrastructure. have.

Claims (6)

An authentication setting unit for inputting a PIN (Personal Identification Number) for confirming the identity of the credit card user, or for inputting a telephone approval confirmation number necessary for the telephone card authorization; An authentication storage unit storing a PIN corresponding to the PIN input by the authentication setting unit or a predetermined number transmitted from the card company managing the credit card for the telephone approval of the credit card in a database form; An authentication display unit for echoing the PIN entered by the authentication setting unit and the telephone approval confirmation number to the user or displaying random numbers stored in a database in the authentication storage unit; And The PIN entered by the authentication setting unit is stored in the authentication storage unit, the telephone approval confirmation number is echoed to the authentication display unit, or the PIN input by the authentication setting unit is stored in the IC chip storage unit of the credit card. An apparatus for authenticating a credit card user, comprising: an authentication control unit for determining whether the stored PIN is the same as the stored PIN. The apparatus of claim 1, wherein the device for authenticating the credit card user is And a predetermined portion of the credit card is integrated with the credit card. The apparatus of claim 1, wherein the device for authenticating the credit card user is Apparatus for authenticating a credit card user, characterized in that connected to a predetermined portion of the credit card in a folder type. The apparatus of claim 1, wherein the device for authenticating the credit card user is Apparatus for authenticating a credit card user, characterized in that detachably attached to a predetermined portion of the credit card. The method of claim 1, wherein the predetermined time is Apparatus for authenticating a credit card user, characterized in that the predetermined time when the credit card production in the card company as a payment possible time to pay the goods purchase or cash service with the credit card. The method of claim 1, wherein the authentication setting unit And a function of inputting a number for verifying the credit card user to reset personal information of the credit card user.