KR102196347B1 - System for electronic payment and method for operating the same - Google Patents

Abstract

Disclosed are an electronic payment system and a method of operation thereof. The electronic payment system includes: a token server that generates a private token uniquely issued for each user in response to a token issuance request received from a user terminal, and transmits the private token to the user terminal; A payment server that generates a challenge value and transmits it to the user terminal in response to a payment authentication request received from the user terminal; And receiving biometric information from a user, generating biometric authentication information by converting the biometric information using the challenge value and the private token, transmitting the biometric authentication information to the payment server, and transmitting the biometric information from the payment server. As a result of verification of the authentication information, a user terminal receiving a payment approval message is included. Therefore, payment can be safely performed using biometric information.

Description

Electronic payment system and its operation method {SYSTEM FOR ELECTRONIC PAYMENT AND METHOD FOR OPERATING THE SAME}

The present invention relates to an electronic payment system and an operation method thereof, and more particularly, to an electronic payment system using biometric information and an operation method thereof.

With the recent development of IT technology, interest in fintech is increasing in the financial sector through active use of IT technology. Fintech is an industry that processes various financial services through IT technology, such as payment, deposit, withdrawal, transfer, and asset management through smart devices, a compound word of financial and technology.

Global groups such as PayPal, Alipay, and Kakao Pay are introducing payment services and fintech technology in the form of electronic wallets, and financial sectors, large companies, and small and medium-sized businesses are also launching mobile payment services one after another.

Most of the existing credit and debit cards read information and perform payment using magnetic information on the back of the card or IC chip, but these payment methods have a disadvantage that is very vulnerable to illegal use.

As a solution to this problem, electronic payment methods using biometric information such as iris recognition and fingerprint recognition are being studied. However, if the biometric information is authenticated inside the smartphone and only the authentication result is transmitted, a problem that is vulnerable to hacking of the smartphone have.

As another method, there is a method of transmitting and verifying biometric information required for authentication each time an authentication attempt is made, but there is a risk of leakage in the communication process because the biometric information must be transmitted through an external communication network.

Therefore, in order to solve these problems, there is a need for a method for performing full payment by authenticating biometric information in a new way.

An object of the present invention for solving the above problems is to provide an electronic payment system and an operation method thereof.

상기 수학식에서 α는 상기 생체 인증 정보이고, β는 상기 생체 검증 정보이고, p는 상기 도전값 행렬이고, A는 상기 직교 행렬이고, x는 상기 생체 정보 행렬이고, y는 초기 생체 정보를 지시하는 초기 생체 정보 행렬일 수 있다.
상기 토큰 발급 요청은, 비밀 정보를 포함할 수 있다.
상기 비밀 정보는, 상기 사용자로부터 입력받은 폰 번호(phone number), 사용자 ID(identification), 및 패스워드(password)를 포함할 수 있다.
상기 토큰 서버는, 상기 패스워드와 상기 사용자 ID 중 길이가 짧은 것에 패딩 기호를 추가하여 상기 패스워드와 상기 사용자 ID의 길이를 동일하게 변경하고, 길이가 동일한 상기 패스워드와 상기 사용자 ID를 2진값(binary number)으로 변환하여 상기 패스워드에 대한 2진 값 및 상기 사용자 ID에 대한 2진 값을 생성할 수 있다.
상기 토큰 서버는, 상기 패스워드에 대한 2진 값 및 상기 사용자 ID에 대한 2진 값을 서로 XOR 연산하여 시드(seed) 값을 생성하고, 생성된 상기 시드 값을 일방향 암호화함으로써 상기 프라이빗 토큰을 생성할 수 있다.
상기 결제 서버는, 상기 사용자 단말로부터 미리 상기 초기 생체 정보를 수신하고, 상기 초기 생체 정보를 상기 도전값과 상기 프라이빗 토큰을 이용해 변환함으로써 상기 생체 검증 정보를 생성할 수 있다.
상기 결제 서버는, 상기 결제 인증 요청을 수신한 시각을 지시하는 타임 스탬프(timestamp) 및 상기 사용자 단말의 고유 식별 기호를 이용하여 상기 도전값을 생성할 수 있다.
상기 결제 서버는, 상기 생체 인증 정보와 상기 생체 검증 정보 사이의 상기 수학식에 따른 놈 연산(norm operation)을 수행하고, 상기 놈 연산에 따른 결과값을 미리 설정된 임계값과 비교하여 상기 생체 인증 정보를 검증할 수 있다.
상기 목적을 달성하기 위한 본 발명의 다른 일 측면은, 결제 서버 및 토큰 서버와 연동하여 생체 정보를 이용한 결제를 수행하는 사용자 단말을 제공한다.
상기 사용자 단말은, 상기 토큰 서버와 통신하여 프라이빗 토큰을 발급받고, 상기 프라이빗 토큰을 보안 영역에 저장하는 프라이빗 토큰 관리부; 상기 결제 서버와 연동하여 도전값을 획득하는 도전값 획득부; 사용자로부터 생체 정보를 입력받고, 상기 생체 정보를 상기 도전값과 상기 프라이빗 토큰을 이용하여 변환함으로써 생체 인증 정보를 생성하는 생체 인증 정보 생성부; 및 상기 생체 인증 정보를 상기 결제 서버로 전송하고, 상기 결제 서버로부터 결제 승인을 지시하는 메시지를 수신하는 결제 수행부를 포함한다.
상기 생체 인증 정보 생성부는, 상기 사용자의 지문이나 홍채 중 적어도 하나로부터 특징점들을 인식하고, 인식된 상기 특징점들을 디지털 코드들로 변환한 후, 변환된 상기 디지털 코드들을 상기 생체 정보를 지시하는 1 × n(n은 2 이상의 자연수)의 생체 정보 행렬로 표현하고, 상기 프라이빗 토큰에 따른 값을 n × n의 직교 행렬(orthogonal matrix)로 표현하고, 상기 도전값에 따른 값을 1 × n의 도전값 행렬로 표현할 수 있다.
상기 생체 인증 정보는, 아래 수학식에 기초하여 생체 검증 정보와 비교됨으로써 검증되고,

상기 수학식에서 α는 상기 생체 인증 정보이고, β는 상기 생체 검증 정보이고, p는 상기 도전값 행렬이고, A는 상기 직교 행렬이고, x는 상기 생체 정보 행렬이고, y는 초기 생체 정보를 지시하는 초기 생체 정보 행렬일 수 있다.
상기 사용자 단말은, 상기 토큰 서버에 토큰 발급 요청을 전송되, 상기 토큰 발급 요청은, 비밀 정보를 포함할 수 있다.
상기 비밀 정보는, 상기 사용자로부터 입력받은 폰 번호(phone number), 사용자 ID(identification), 및 패스워드(password)를 포함할 수 있다.
상기 프라이빗 토큰은, 상기 패스워드와 상기 사용자 ID를 서로 연산하여 생성된 시드(seed) 값을 일방향 암호화하여 생성될 수 있다.
상기 시드 값은, 상기 패스워드에 대한 2진 값 및 상기 사용자 ID에 대한 2진 값을 서로 XOR 연산함으로써 생성될 수 있다.
상기 패스워드에 대한 2진 값 및 상기 사용자 ID에 대한 2진 값은, 상기 패스워드와 상기 사용자 ID 중 길이가 짧은 것에 패딩 기호를 추가하여 상기 패스워드와 상기 사용자 ID의 길이를 동일하게 변경하고, 길이가 동일한 상기 패스워드와 상기 사용자 ID를 2진값(binary number)으로 변환함으로써 생성될 수 있다.
상기 생체 인증 정보는, 상기 생체 검증 정보와 상기 수학식에 기초하여 놈 연산(norm operation)되고, 상기 놈 연산을 수행한 결과값을 미리 설정된 임계값과 비교한 결과에 따라 검증될 수 있다.
상기 생체 검증 정보는, 상기 초기 생체 정보를 상기 도전값과 상기 프라이빗 토큰을 이용해 변환함으로써 생성될 수 있다.
상기 도전값은, 상기 결제 서버에서 상기 사용자 단말이 전송한 결제 인증 요청을 수신한 시각을 지시하는 타임 스탬프(timestamp) 및 상기 사용자 단말의 고유 식별 기호를 이용하여 생성될 수 있다.
상기 도전값은, 상기 타임 스탬프(timestamp) 및 상기 사용자 단말의 고유 식별 기호를 이용하여 생성되는 무작위 값(random number)일 수 있다.
상기 생체 인증 정보 생성부는, 상기 직교 행렬에 상기 생체 정보 행렬을 곱하고, 상기 도전값 행렬을 더함으로써 상기 생체 인증 정보를 생성할 수 있다.
상기 목적들 달성하기 위한 본 발명의 다른 측면은, 사용자 단말 및 토큰 서버와 연동하여 생체 정보를 이용한 결제를 수행하는 결제 서버를 제공한다.
상기 결제 서버는, 상기 사용자 단말과 연동하여 폰 번호를 인증하고, 인증된 상기 폰 번호를 포함하는 프라이빗 토큰 요청 메시지를 상기 토큰 서버에 전송하고, 상기 토큰 서버로부터 상기 폰 번호와 대응하는 프라이빗 토큰을 수신하는 프라이빗 토큰 획득부; 상기 사용자 단말로부터 수신한 결제 인증 요청 메시지에 대한 응답으로 도전값을 생성하는 도전값 생성부; 상기 사용자 단말로부터 미리 수신하여 등록한 초기 생체 정보를 상기 도전값과 상기 프라이빗 토큰을 이용하여 변환함으로써 생체 검증 정보를 생성하는 생체 검증 정보 생성부; 및 상기 사용자 단말로부터 생체 인증 정보를 수신하고, 상기 생체 인증 정보와 상기 생체 검증 정보 사이의 놈(norm) 연산을 수행한 결과에 기초하여 상기 생체 인증 정보를 검증하는 생체 인증 정보 검증부를 포함할 수 있다.
상기 생체 검증 정보 생성부는, 상기 초기 생체 정보를 1 × n(n은 2 이상의 자연수)의 초기 생체 정보 행렬로 표현하고, 상기 프라이빗 토큰에 따른 값을 n × n의 직교 행렬(orthogonal matrix)로 표현하고, 상기 도전값에 따른 값을 1 × n의 도전값 행렬로 표현할 수 있다.
상기 생체 인증 정보 검증부는, 아래 수학식에 기초하여 상기 놈 연산을 수행함으로써 상기 생체 인증 정보를 검증하고,

상기 수학식에서 α는 상기 생체 인증 정보이고, β는 상기 생체 검증 정보이고, p는 상기 도전값 행렬이고, A는 상기 직교 행렬이고, x는 상기 생체 정보 행렬이고, y는 상기 초기 생체 정보 행렬일 수 있다.
상기 프라이빗 토큰은, 상기 사용자 단말로부터 제공된 패스워드와 사용자 ID를 서로 연산하여 생성된 시드(seed) 값을 일방향 암호화함으로써 생성될 수 있다.
상기 시드 값은, 상기 패스워드에 대한 2진 값 및 상기 사용자 ID에 대한 2진 값을 서로 XOR 연산함으로써 생성될 수 있다.
상기 패스워드에 대한 2진 값 및 상기 사용자 ID에 대한 2진 값은, 상기 패스워드와 상기 사용자 ID 중 길이가 짧은 것에 패딩 기호를 추가하여 상기 패스워드와 상기 사용자 ID의 길이를 동일하게 변경하고, 길이가 동일한 상기 패스워드와 상기 사용자 ID를 2진값(binary number)으로 변환함으로써 생성될 수 있다.
상기 생체 인증 정보 검증부는, 상기 놈 연산을 수행한 결과값을 미리 설정된 임계값과 비교한 결과에 따라 상기 생체 인증 정보를 검증할 수 있다.
상기 생체 검증 정보는, 상기 초기 생체 정보를 상기 도전값과 상기 프라이빗 토큰을 이용해 변환함으로써 생성될 수 있다.
상기 도전값은, 상기 결제 인증 요청 메시지를 수신한 시각을 지시하는 타임 스탬프(timestamp) 및 상기 사용자 단말의 고유 식별 기호를 이용하여 생성될 수 있다.
상기 도전값은, 상기 타임 스탬프(timestamp) 및 상기 사용자 단말의 고유 식별 기호를 이용하여 생성되는 무작위 값(random number)일 수 있다.
상기 생체 검증 정보 생성부는, 상기 직교 행렬에 상기 초기 생체 정보 행렬을 곱하고, 상기 도전값 행렬을 더함으로써 상기 생체 인증 정보를 생성할 수 있다.
상기 목적을 달성하기 위한 본 발명의 다른 측면은, 사용자 단말의 동작 방법을 제공한다.
상기 사용자 단말의 동작 방법은, 토큰 서버와 연동하여 프라이빗 토큰을 발급받고, 상기 프라이빗 토큰을 보안 영역에 저장하는 단계; 결제 서버에 결제 인증 요청을 전송하고, 상기 결제 인증 요청에 대한 응답으로 도전값을 수신하는 단계; 사용자로부터 생체 정보를 입력받고, 상기 생체 정보를 상기 도전값과 상기 프라이빗 토큰을 이용하여 변환함으로써 생체 인증 정보를 생성하는 단계; 및 상기 생체 인증 정보를 상기 결제 서버로 전송하고, 상기 결제 서버로부터 결제 승인을 지시하는 메시지를 수신하는 단계를 포함할 수 있다.
상기 생체 인증 정보를 생성하는 단계는, 상기 사용자의 지문이나 홍채 중 적어도 하나로부터 특징점들을 인식하고, 인식된 상기 특징점들을 디지털 코드들로 변환한 후, 변환된 상기 디지털 코드들을 상기 생체 정보를 지시하는 1 × n(n은 2 이상의 자연수)의 생체 정보 행렬로 표현하고, 상기 프라이빗 토큰에 따른 값을 n × n의 직교 행렬(orthogonal matrix)로 표현하고, 상기 도전값에 따른 값을 1 × n의 도전값 행렬로 표현하는 단계를 포함할 수 있다.
상기 생체 인증 정보는, 아래 수학식에 기초하여 생체 검증 정보와 비교됨으로써 검증되고,

상기 수학식에서 α는 상기 생체 인증 정보이고, β는 상기 생체 검증 정보이고, p는 상기 도전값 행렬이고, A는 상기 직교 행렬이고, x는 상기 생체 정보 행렬이고, y는 초기 생체 정보를 지시하는 초기 생체 정보 행렬일 수 있다.
상기 목적을 달성하기 위한 본 발명의 다른 측면은, 결제 서버의 동작 방법을 제공한다.
상기 결제 서버의 동작 방법은, 사용자 단말과 연동하여 폰 번호를 인증하고, 인증된 상기 폰 번호를 포함하는 프라이빗 토큰 요청 메시지를 토큰 서버에 전송하는 단계; 상기 토큰 서버로부터 상기 폰 번호와 대응하는 프라이빗 토큰을 수신하는 단계; 상기 사용자 단말로부터 수신한 결제 인증 요청 메시지에 대한 응답으로 도전값을 생성하는 단계; 상기 사용자 단말로부터 미리 수신하여 등록한 초기 생체 정보를 상기 도전값과 상기 프라이빗 토큰을 이용하여 변환함으로써 생체 검증 정보를 생성하는 단계; 및 상기 사용자 단말로부터 생체 인증 정보를 수신하고, 상기 생체 인증 정보와 상기 생체 검증 정보 사이의 놈(norm) 연산을 수행한 결과에 기초하여 상기 생체 인증 정보를 검증하는 단계를 포함할 수 있다.
상기 생체 인증 정보를 검증하는 단계는, 상기 초기 생체 정보를 1 × n(n은 2 이상의 자연수)의 초기 생체 정보 행렬로 표현하고, 상기 프라이빗 토큰에 따른 값을 n × n의 직교 행렬(orthogonal matrix)로 표현하고, 상기 도전값에 따른 값을 1 × n의 도전값 행렬로 표현하는 단계; 및 아래 수학식에 기초하여 상기 놈 연산을 수행함으로써 상기 생체 인증 정보를 검증하는 단계를 포함하고,

The present invention for achieving the above object provides an electronic payment system and a method of operation thereof.
The electronic payment system includes: a token server that generates a private token uniquely issued for each user in response to a token issuance request received from a user terminal, and transmits the private token to the user terminal; A payment server that generates a challenge value and transmits it to the user terminal in response to a payment authentication request received from the user terminal; And receiving biometric information from a user, generating biometric authentication information by converting the biometric information using the challenge value and the private token, transmitting the biometric authentication information to the payment server, and transmitting the biometric information from the payment server. As a result of verification of the authentication information, a user terminal receiving a payment approval message is included.
The user terminal recognizes feature points from at least one of the user's fingerprint or iris, converts the recognized feature points into digital codes, and then converts the digital codes into 1 × n (n) indicating the biometric information. Is expressed as a biometric information matrix of 2 or more natural numbers), the value according to the private token is expressed as an orthogonal matrix of n × n, and the value according to the conductivity value is expressed as a 1 × n conductivity value matrix It includes a biometric authentication information generating unit.
The biometric authentication information is verified by comparing it with the biometric verification information based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information. It may be an initial biometric information matrix.
The token issuance request may include secret information.
The secret information may include a phone number input from the user, a user ID, and a password.
The token server changes the length of the password and the user ID equally by adding a padding symbol to the shorter one of the password and the user ID, and converts the password and the user ID of the same length into a binary number. ) To generate a binary value for the password and a binary value for the user ID.
The token server generates a seed value by performing an XOR operation on the binary value for the password and the binary value for the user ID, and generates the private token by one-way encryption of the generated seed value. I can.
The payment server may generate the biometric verification information by receiving the initial biometric information from the user terminal in advance and converting the initial biometric information using the challenge value and the private token.
The payment server may generate the challenge value by using a timestamp indicating a time when the payment authentication request is received and a unique identification symbol of the user terminal.
The payment server performs a norm operation according to the equation between the biometric authentication information and the biometric verification information, and compares a result value according to the norm operation with a preset threshold value, and the biometric authentication information Can be verified.
Another aspect of the present invention for achieving the above object is to provide a user terminal that performs payment using biometric information in connection with a payment server and a token server.
The user terminal may include a private token management unit that communicates with the token server to receive a private token and stores the private token in a security area; A challenge value acquisition unit for acquiring a challenge value in connection with the payment server; A biometric authentication information generating unit receiving biometric information from a user and converting the biometric information using the challenge value and the private token to generate biometric authentication information; And a payment performing unit that transmits the biometric authentication information to the payment server and receives a message instructing payment approval from the payment server.
The biometric authentication information generation unit recognizes feature points from at least one of the user's fingerprint or iris, converts the recognized feature points into digital codes, and converts the converted digital codes into 1 × n (n is a natural number greater than or equal to 2), a biometric information matrix, and a value according to the private token is expressed as an orthogonal matrix of n × n, and a value according to the conductivity value is a 1 × n conductivity value matrix It can be expressed as
The biometric authentication information is verified by comparing it with the biometric verification information based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information. It may be an initial biometric information matrix.
The user terminal may transmit a token issuance request to the token server, and the token issuance request may include secret information.
The secret information may include a phone number input from the user, a user ID, and a password.
The private token may be generated by one-way encryption of a seed value generated by calculating the password and the user ID with each other.
The seed value may be generated by performing an XOR operation on a binary value for the password and a binary value for the user ID.
As for the binary value for the password and the binary value for the user ID, the length of the password and the user ID is changed equally by adding a padding symbol to the shorter one of the password and the user ID, and the length is It can be generated by converting the same password and the user ID into a binary number.
The biometric authentication information may be subjected to a norm operation based on the biometric verification information and the equation, and may be verified according to a result of comparing a result of performing the norm operation with a preset threshold.
The biometric verification information may be generated by converting the initial biometric information using the challenge value and the private token.
The challenge value may be generated using a timestamp indicating a time when the payment authentication request transmitted by the user terminal is received by the payment server and a unique identification symbol of the user terminal.
The conductivity value may be a random number generated using the timestamp and a unique identification symbol of the user terminal.
The biometric authentication information generator may generate the biometric authentication information by multiplying the orthogonal matrix by the biometric information matrix and adding the conductivity value matrix.
Another aspect of the present invention for achieving the above objects is to provide a payment server that performs payment using biometric information in connection with a user terminal and a token server.
The payment server, in conjunction with the user terminal, authenticates the phone number, transmits a private token request message including the authenticated phone number to the token server, and sends a private token corresponding to the phone number from the token server. A private token acquisition unit receiving; A conductivity value generator for generating a conductivity value in response to a payment authentication request message received from the user terminal; A biometric verification information generator configured to generate biometric verification information by converting the initial biometric information previously received and registered from the user terminal using the challenge value and the private token; And a biometric authentication information verification unit that receives biometric authentication information from the user terminal and verifies the biometric authentication information based on a result of performing a norm operation between the biometric authentication information and the biometric authentication information. have.
The biometric verification information generation unit expresses the initial biometric information as an initial biometric information matrix of 1 × n (n is a natural number greater than or equal to 2), and expresses a value according to the private token as an orthogonal matrix of n × n And, the value according to the conductivity value may be expressed as a 1 × n conductivity value matrix.
The biometric authentication information verification unit verifies the biometric authentication information by performing the norm operation based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information matrix. I can.
The private token may be generated by one-way encryption of a seed value generated by calculating a password and a user ID provided from the user terminal with each other.
The seed value may be generated by performing an XOR operation on a binary value for the password and a binary value for the user ID.
As for the binary value for the password and the binary value for the user ID, the length of the password and the user ID is changed equally by adding a padding symbol to the shorter one of the password and the user ID, and the length is It can be generated by converting the same password and the user ID into a binary number.
The biometric authentication information verification unit may verify the biometric authentication information according to a result of comparing a result of performing the norm operation with a preset threshold value.
The biometric verification information may be generated by converting the initial biometric information using the challenge value and the private token.
The challenge value may be generated using a timestamp indicating a time when the payment authentication request message is received and a unique identification symbol of the user terminal.
The conductivity value may be a random number generated using the timestamp and a unique identification symbol of the user terminal.
The biometric verification information generator may generate the biometric authentication information by multiplying the orthogonal matrix by the initial biometric information matrix and adding the conductivity value matrix.
Another aspect of the present invention for achieving the above object provides a method of operating a user terminal.
The method of operating the user terminal includes: receiving a private token by interworking with a token server, and storing the private token in a security area; Transmitting a payment authentication request to a payment server, and receiving a challenge value in response to the payment authentication request; Receiving biometric information from a user and converting the biometric information using the challenge value and the private token to generate biometric authentication information; And transmitting the biometric authentication information to the payment server, and receiving a message instructing payment approval from the payment server.
The generating of the biometric authentication information includes recognizing feature points from at least one of the user's fingerprint or iris, converting the recognized feature points into digital codes, and indicating the converted digital codes to the biometric information. A biometric information matrix of 1 × n (n is a natural number greater than or equal to 2) is expressed, the value according to the private token is expressed as an orthogonal matrix of n × n, and the value according to the conductivity is 1 × n. It may include the step of expressing the conductivity value matrix.
The biometric authentication information is verified by comparing it with the biometric verification information based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information. It may be an initial biometric information matrix.
Another aspect of the present invention for achieving the above object provides a method of operating a payment server.
The method of operating the payment server includes: authenticating a phone number in connection with a user terminal, and transmitting a private token request message including the authenticated phone number to a token server; Receiving a private token corresponding to the phone number from the token server; Generating a challenge value in response to a payment authentication request message received from the user terminal; Generating biometric verification information by converting the initial biometric information previously received and registered from the user terminal using the challenge value and the private token; And receiving biometric authentication information from the user terminal, and verifying the biometric authentication information based on a result of performing a norm operation between the biometric authentication information and the biometric authentication information.
In the verifying the biometric authentication information, the initial biometric information is expressed as an initial biometric information matrix of 1 × n (n is a natural number of 2 or more), and a value according to the private token is an orthogonal matrix of n × n ) And expressing a value according to the conductivity value in a 1 × n conductivity value matrix; And verifying the biometric authentication information by performing the norm operation based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information matrix. I can.

delete

delete

delete

delete

delete

delete

delete

delete

In the case of using the electronic payment system and its operation method according to the present invention as described above, the biometric information can be verified by simply transmitting the biometric authentication information generated through the biometric information to the outside without the need to transmit the biometric information to the outside every authentication attempt I can.

In addition, since the biometric information is verified by an external payment server rather than inside the individual user terminal, it is possible to prevent the problem of leakage of biometric information inside the user terminal.

1 is a schematic diagram illustrating an electronic payment system according to an exemplary embodiment.
FIG. 2 is a block diagram illustrating a functional configuration of a user terminal according to FIG. 1.
3 is a block diagram illustrating a functional configuration of a payment server according to FIG. 1.
4 is an exemplary flowchart for explaining the operation of the user terminal according to FIG. 1.
5 is an exemplary diagram for describing a hardware configuration of a user terminal according to FIG. 1.

In the present invention, various modifications may be made and various embodiments may be provided, and specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to a specific embodiment, it is to be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention. In describing each drawing, similar reference numerals have been used for similar elements.

Terms such as first, second, A, and B may be used to describe various components, but the components should not be limited by the terms. These terms are used only for the purpose of distinguishing one component from another component. For example, without departing from the scope of the present invention, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element. The term and/or includes a combination of a plurality of related listed items or any of a plurality of related listed items.

When a component is referred to as being "connected" or "connected" to another component, it is understood that it may be directly connected or connected to the other component, but other components may exist in the middle. Should be. On the other hand, when a component is referred to as being "directly connected" or "directly connected" to another component, it should be understood that there is no other component in the middle.

The terms used in the present application are used only to describe specific embodiments, and are not intended to limit the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In the present application, terms such as "comprise" or "have" are intended to designate the presence of features, numbers, steps, actions, components, parts, or combinations thereof described in the specification, but one or more other features. It is to be understood that the presence or addition of elements or numbers, steps, actions, components, parts, or combinations thereof, does not preclude in advance.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs. Terms as defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted as an ideal or excessively formal meaning unless explicitly defined in this application. Does not.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic diagram illustrating an electronic payment system in which an electronic payment method is performed according to an exemplary embodiment.

Referring to FIG. 1, an electronic payment system according to an embodiment may include a user terminal 100, a payment server 200, and a token server 300.

The electronic payment method performed in the electronic payment system may include, first, a token issuing operation performed by interworking with the user terminal 100 and the token server 300.

In the token issuing operation, the token server 300 generates a private token that is uniquely issued for each user in response to the token issuance request received from the user terminal 100, and sends the generated private token to the user terminal 100. Can be transmitted. For example, the user terminal 100 may transmit a token issuance request including secret information to the token server 300, and the token server 300 generates a unique private token for each individual by using the secret information. can do. Here, the secret information may include a phone number, a user ID, and/or a password received from a user of the user terminal 100. The token server 300 may generate a private token using a password and a user ID. In more detail, the token server 300 changes the length of the password and the user ID equally by adding a padding symbol to the shorter one of the password and the user ID, and converts the password and the user ID of the same length into a binary number. To generate a binary value for password and a binary value for user ID. Here, the padding symbol may be simply 0 or an FF value expressed as a hexadecimal number.

The token server 300 generates a seed value by XORing the binary value for the generated password and the binary value for the user ID with each other, and generates a private token by one-way encryption of the generated seed value. I can. The one-way encryption uses a hash algorithm including at least one of MD1, MD4, MD5, SHS, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, and HAS-160. Can be done by

The token server 300 may transmit the generated private token to the user terminal 100 and generate a token management table by matching the private token and the phone number with each other. As such, the token server 300 generates a seed value by combining a user ID and password that are set differently for each user, and generates a private token from the generated seed value. Even if the token is leaked to the outside, there is an advantage that secret information cannot be known.

In addition, since the token management table is generated by matching the phone number with the private token, even if the user terminal 100 is changed, the user can receive a reissue of the private token if they have only their same phone number at any time. That is, the user of the user terminal 100 transmits a request for reissuing a private token including secret information to the token server 300, and the token server 300 verifies the phone number of the user terminal 100, and The private token may be reissued by searching for a private token corresponding to the phone number in the token management table and transmitting the searched private token to the user terminal 100.

When the token issuance procedure is completed, the electronic payment method performed in the electronic payment system may include an electronic payment operation using biometric authentication by interworking with the user terminal 100 and the payment server 200.

In the electronic payment operation, the user terminal 100 transmits a message requesting payment authentication to the payment server 200, and the payment server 200 receives a challenge value in response to a message requesting payment authentication. ) Can be transmitted to the user terminal 100. The user terminal 100 may generate biometric authentication information by receiving biometric information from a user and converting the received biometric information using a challenge value and a private token. The user terminal 100 may transmit biometric authentication information to the payment server 200.

The payment server 200 may verify the biometric authentication information by receiving biometric authentication information from the user terminal 100 and comparing the received biometric authentication information with the biometric authentication information. In order to generate biometric verification information, the payment server 200 authenticates the phone number of the user terminal 100 and then transmits the authenticated phone number to the token server 300, and the authenticated phone number from the token server 300 You can receive a private token corresponding to the number. Next, the payment server 200 generates biometric verification information by converting the registered initial biometric information using the received private token and the challenge value transmitted to the user terminal 100, and converts the generated biometric verification information to the biometric data. Biometric authentication information can be verified by comparing it with authentication information.

Here, the initial biometric information may be previously collected through an operation of registering biometric information in conjunction with the user terminal 100. For example, when the user terminal 100 receives initial biometric information from the user and transmits the received initial biometric information to the payment server 200, the payment server 200 sends the transmitted initial biometric information to the user terminal 100. By matching and storing the phone number of ), initial biometric information can be registered. That is, the initial biometric information may be biometric information registered in the payment server 200 when a user first makes a payment using biometric information.

FIG. 2 is a block diagram illustrating a functional configuration of a user terminal according to FIG. 1.

Referring to FIG. 2, the user terminal 100 may include a private token management unit 101, a challenge value acquisition unit 102, a biometric authentication information generation unit 103, and/or a payment execution unit 104. have.

The private token management unit 101 may communicate with the token server 300 to receive a private token from the token server 300 and store the issued private token in a secure area inside the storage of the user terminal 100. Here, the security area is an area in which access from the outside is blocked, and may be an encrypted area. For example, the private token management unit 101 may transmit a token issuance request including secret information to the token server 300, and may receive a private token corresponding to the token issuance request from the token server 300. .

The challenge value acquisition unit 102 may obtain a challenge value from the payment server 200 in connection with the payment server 200. For example, the challenge value acquisition unit 102 may transmit a message requesting payment authentication to the payment server 200 and obtain a challenge value from the payment server 200. Here, the challenge value is a random value generated using a time stamp indicating the time at which the message requesting payment authentication from the payment server 200 is received, and more specifically, a time stamp and a user terminal ( 100) may be a random value generated using a unique symbol (for example, MAC address).

The biometric authentication information generation unit 103 obtains biometric information using a biometric recognition module built into the user terminal 100 and converts the obtained biometric information using a challenge value and a private token to generate biometric authentication information. can do. The biometric recognition module may include an iris recognition module using an infrared camera, a fingerprint recognition module using a display including a touch panel, and the like.

Specifically, the biometric authentication information generation unit 103 recognizes feature points of a fingerprint or iris, converts the recognized feature points into digital codes, and then converts the digital codes into 1 × n (n is It can be expressed as a biometric information matrix of 2 or more natural numbers). In addition, the biometric authentication information generation unit 103 may express a value according to the private token as an orthogonal matrix of n × n. Here, expressing the value according to the private token in an orthogonal matrix can be performed in a known way to create an orthogonal basis, such as the Gram-Schmidt orthogonalization process, so a detailed description is omitted. do. In addition, the biometric authentication information generation unit 103 may express a value according to the conductivity value as a 1 × n conductivity value matrix. As a method of expressing a specific value as a matrix, a specific value may be divided by a predetermined number of digits to form elements of a matrix, or other known methods may be applied.

Next, the biometric authentication information generation unit 103 can generate the biometric authentication information by multiplying the orthogonal matrix by the biometric information matrix and adding the conductivity value matrix.

For example, the biometric authentication information generation unit 103 may generate biometric authentication information using Equation 1 below.

Referring to Equation 1, α may be biometric authentication information, A may be an n × n orthogonal matrix, b may be a conductivity value matrix, and x may be a biometric information matrix.

The payment execution unit 104 performs electronic payment by transmitting the biometric authentication information generated by the biometric authentication information generation unit 103 to the payment server 200 and receiving a message instructing payment approval from the payment server 200 can do.

3 is a block diagram illustrating a functional configuration of a payment server according to FIG. 1.

Referring to FIG. 3, the payment server 200 includes a private token acquisition unit 201, a challenge value generation unit 202, a biometric verification information generation unit 203, and/or a biometric authentication information verification unit 204. Can include.

The private token acquisition unit 201 may receive a message requesting payment authentication from the user terminal 100 and authenticate the phone number of the user terminal 100 in response to the received message. For example, the private token acquisition unit 201 transmits an authentication message to the user terminal 100, receives a response message to the authentication message from the user terminal 100, and verifies the received response message to obtain a phone number. You can authenticate. Next, the private token acquisition unit 201 transmits a private token request message including the authenticated phone number to the token server 300, and receives a private token corresponding to the authenticated phone number from the token server 300 can do.

The conductivity value generator 202 may generate a conductivity value in response to a message requesting payment authentication received from the user terminal 100. For example, the conductivity value generator 202 may generate a conductivity value using a timestamp indicating the time at which a message requesting payment authentication is received and a unique identification symbol of the user terminal 100. have. In more detail, the conductivity value generation unit 202 expresses the time according to the timestamp as one time number, and one-way encrypts the unique identification symbol of the user terminal 100 by a number of times corresponding to the expressed time number. By doing so, a conductivity value can be generated. For example, the conductivity value generator 202 may add hours, minutes, and seconds according to the time stamp to represent one time number. The one-way encryption uses a hash algorithm including at least one of MD1, MD4, MD5, SHS, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, and HAS-160. Can be done by The conductivity value generation unit 202 may transmit the generated conductivity value to the user terminal 100 and transfer the generated conductivity value to the biometric verification information generation unit 203.

The biometric verification information generation unit 203 converts the initial biometric information previously received and registered from the user terminal by using the challenge value generated by the challenge value generation unit 202 and the private token obtained by the private token acquisition unit 201 By doing so, biometric verification information can be generated.

For example, the biometric verification information generation unit 203 expresses the initial biometric information as an initial biometric information matrix of 1 × n, and expresses the value according to the private token as an orthogonal matrix of n × n, A value according to the conductivity value can be expressed as a 1 × n conductivity value matrix. Next, the biometric verification information generation unit 203 may generate the biometric verification information by multiplying the orthogonal matrix by the initial biometric information matrix and adding the conductivity value matrix.

For example, the biometric verification information generation unit 103 may generate biometric authentication information using Equation 2 below.

Referring to Equation 2, β is biometric verification information, A is an orthogonal matrix of n × n, b is a conductivity value matrix, and y is an initial biometric information matrix.

The biometric authentication information verification unit 204 receives the biometric authentication information from the user terminal 100 and compares the biometric authentication information generated by the biometric authentication information generation unit 203 with the biometric authentication information to verify the biometric authentication information. I can. For example, the biometric authentication information verification unit 204 may verify the biometric authentication information by performing a norm operation between the biometric authentication information and the biometric authentication information, and comparing the performed norm operation with a threshold value. .

Specifically, the biometric authentication information verification unit 204 may perform a norm operation (or a Euclidean distance operation) between the biometric authentication information and the biometric authentication information using Equation 3 below.

Referring to Equation 3, the square of the norm operation between the biometric authentication information α and the biometric authentication information β is the square of the norm operation between the biometric information x and the initial biometric information y same. That is, when the square of the norm operation between the biometric authentication information and the biometric verification information is greater than or equal to the threshold value, it may be determined that the biometric information x and the initial biometric information y are significantly different by more than an error range.

Accordingly, the biometric authentication information verification unit 204 may transmit a message for approving payment to the user terminal 100 when the square value of the performed norm operation is less than or equal to a preset threshold. On the other hand, the biometric authentication information verification unit 204 may transmit a message denying payment approval to the user terminal 100 when the square value of the norm operation is greater than a preset threshold.

4 is a representative flowchart for explaining the operation of the user terminal according to FIG. 1.

Referring to FIG. 4, the user terminal 100 interlocks with a token server to obtain a private token (S100), transmits a payment authentication request to a payment server, and in response to the payment authentication request, a challenge value is determined. Receiving from the payment server (S110), generating biometric authentication information using a challenge value and a private token (S120), and transmitting the generated biometric authentication information to the payment server (S130). .

The step of obtaining the private token (S100) may further include storing the private token in a secure area inside the storage of the user terminal 100.

The challenge value may be a random value generated by using a time stamp indicating a time when the payment server 200 receives the payment authentication request.

The conductivity value may be a random value generated using the time stamp and a unique symbol of the user terminal.

In the step of generating the biometric authentication information (S120), the biometric information is obtained by obtaining biometric information from a user of the user terminal 100 and converting the biometric information using the challenge value and the private token to generate the biometric authentication information. can do.

The user terminal 100 may include at least one of an iris recognition module using an infrared camera and a fingerprint recognition module using a display including a touch panel.

In the step of generating the biometric authentication information (S120), the user's fingerprint or iris feature points are recognized, the recognized feature points are converted into digital codes, and the converted digital codes are 1×n. (n is a natural number greater than or equal to 2) representing a biometric information matrix.

Generating the biometric authentication information (S120) may include expressing a value according to the private token in an orthogonal matrix of n × n.

The step of generating the biometric authentication information (S120) may include expressing a value according to a conductivity value as a 1×n conductivity value matrix.

Generating the biometric authentication information (S120) may include generating the biometric authentication information by multiplying the orthogonal matrix by the biometric information matrix and adding the conductivity value matrix.

5 is an exemplary diagram for describing a hardware configuration of a user terminal according to FIG. 1.

In FIG. 5, the hardware configuration is described using the user terminal 100 as an example, but it is not limited thereto, and it should be interpreted that the same type of hardware configuration can be applied to the payment server 200 and/or the token server 300. do.

Referring to FIG. 5, the user terminal 100 stores at least one processor 110 and instructions for instructing the at least one processor 110 to perform at least one operation. It may include a memory.

Here, at least one operation may include the operation of the user terminal 100 described with reference to FIGS. 1 to 4.

Here, the at least one processor 110 means a central processing unit (CPU), a graphics processing unit (GPU), or a dedicated processor in which the methods according to the embodiments of the present invention are performed. I can. Each of the memory 120 and the storage device 160 may be configured with at least one of a volatile storage medium and a nonvolatile storage medium. For example, the memory 120 may be formed of at least one of read only memory (ROM) and random access memory (RAM).

In addition, the user terminal 100 may include a transceiver 130 for performing communication through a wireless network. In addition, the user terminal 100 may further include an input interface device 140, an output interface device 150, a storage device 160 and/or a biometric recognition module 180. Each of the components included in the user terminal 100 may be connected by a bus 170 to perform communication with each other.

For example, the user terminal 100, a desktop computer (desktop computer), a laptop computer (laptop computer), notebook (notebook), a smart phone (smart phone), a tablet PC (tablet PC), a mobile phone (mobile phone) capable of communication. ), smart watch, smart glass, e-book reader, portable multimedia player (PMP), portable game console, navigation device, digital camera, digital multimedia broadcasting (DMB) It may be a player, a digital audio recorder, a digital audio player, a digital video recorder, a digital video player, a personal digital assistant (PDA), and the like.

The methods according to the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the computer-readable medium may be specially designed and configured for the present invention, or may be known and usable to those skilled in computer software.

Examples of computer-readable media may include hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions may include high-level language codes that can be executed by a computer using an interpreter as well as machine language codes such as those produced by a compiler. The above-described hardware device may be configured to operate as at least one software module to perform the operation of the present invention, and vice versa.

In addition, the above-described method or apparatus may be implemented by combining all or part of its configuration or function, or may be implemented separately.

Although the above has been described with reference to preferred embodiments of the present invention, those skilled in the art will variously modify and change the present invention within the scope not departing from the spirit and scope of the present invention described in the following claims. You will understand that you can do it.

100: user terminal 110: processor
120: memory 130: transmitting and receiving device
140: input interface device 150: output interface device
160: storage device 170: bus
180: biometric module 200: payment server
300: token server

Claims (28)

A token server that generates a private token uniquely issued for each user in response to a token issuance request received from a user terminal and transmits the private token to the user terminal;
A payment server that generates a challenge value and transmits it to the user terminal in response to a payment authentication request received from the user terminal; And
Receive biometric information from a user, generate biometric authentication information by converting the biometric information using the challenge value and the private token, transmit the biometric authentication information to the payment server, and perform the biometric authentication from the payment server As a result of the verification of the information, including a user terminal receiving a payment approval message,
The user terminal,
1 × n (n is a natural number of 2 or more) that recognizes feature points from at least one of the user's fingerprint or iris, converts the recognized feature points into digital codes, and then indicates the converted digital codes to the biometric information Generating biometric authentication information expressing the biometric information matrix of, and expressing the value according to the private token as an orthogonal matrix of n × n, and expressing the value according to the conductivity value as a 1 × n conductivity value matrix Includes wealth,
The biometric authentication information,
It is verified by comparing it with biometric verification information based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information. Electronic payment system, the initial biometric information matrix. ◈ Claim 2 was abandoned upon payment of the set registration fee. In claim 1,
The token issuance request includes secret information,
The secret information, the electronic payment system including a phone number (phone number), a user ID (identification), and a password (password) received from the user. ◈ Claim 3 was abandoned upon payment of the set registration fee. In claim 2,
The token server,
The length of the password and the user ID is changed equally by adding a padding symbol to the shorter one of the password and the user ID, and the password and the user ID of the same length are converted into binary numbers, and the An electronic payment system for generating a binary value for a password and a binary value for the user ID. ◈ Claim 4 was abandoned upon payment of the set registration fee. In claim 3,
The token server,
An electronic payment system for generating the private token by performing an XOR operation on the binary value for the password and the binary value for the user ID to generate a seed value, and one-way encryption of the generated seed value. ◈ Claim 5 was abandoned upon payment of the set registration fee. In claim 1,
The payment server,
An electronic payment system for generating the biometric verification information by receiving the initial biometric information from the user terminal in advance and converting the initial biometric information using the challenge value and the private token. ◈ Claim 6 was abandoned upon payment of the set registration fee. In claim 5,
The payment server,
An electronic payment system for generating the challenge value using a timestamp indicating a time when the payment authentication request is received and a unique identification symbol of the user terminal. ◈ Claim 7 was abandoned upon payment of the set registration fee. In claim 5,
The payment server,
Performing a norm operation according to the equation between the biometric authentication information and the biometric verification information, and verifying the biometric authentication information by comparing a result value according to the norm operation with a preset threshold value, Payment system. As a user terminal that performs payment using biometric information in connection with a payment server and a token server,
A private token management unit that communicates with the token server to receive a private token, and stores the private token in a security area;
A challenge value acquisition unit for acquiring a challenge value in connection with the payment server;
A biometric authentication information generating unit receiving biometric information from a user and converting the biometric information using the challenge value and the private token to generate biometric authentication information; And
And a payment performing unit for transmitting the biometric authentication information to the payment server, and receiving a message instructing payment approval from the payment server,
The biometric authentication information generation unit,
1 × n (n is a natural number of 2 or more) that recognizes feature points from at least one of the user's fingerprint or iris, converts the recognized feature points into digital codes, and then indicates the converted digital codes to the biometric information Is expressed as a biometric information matrix of, and a value according to the private token is expressed as an orthogonal matrix of n × n, and a value according to the conductivity value is expressed as a conductivity value matrix of 1 × n,
The biometric authentication information,
It is verified by comparing it with biometric verification information based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information. User terminal, which is the initial biometric information matrix. ◈ Claim 9 was abandoned upon payment of the set registration fee. In claim 8,
The user terminal transmits a token issuance request to the token server,
The token issuance request includes secret information,
The secret information, the user terminal including a phone number (phone number), user ID (identification), and password (password) received from the user. ◈ Claim 10 was abandoned upon payment of the set registration fee. In claim 9,
The above private token,
A user terminal generated by one-way encryption of a seed value generated by calculating the password and the user ID with each other. ◈ Claim 11 was abandoned upon payment of the set registration fee. In claim 10,
The seed value is,
A user terminal generated by performing XOR operations on the binary value for the password and the binary value for the user ID. ◈ Claim 12 was abandoned upon payment of the set registration fee. In claim 11,
The binary value for the password and the binary value for the user ID,
Generated by changing the length of the password and the user ID equally by adding a padding symbol to the shorter one of the password and the user ID, and converting the password and the user ID of the same length into a binary number Being, the user terminal. ◈ Claim 13 was abandoned upon payment of the set registration fee. In claim 8,
The biometric authentication information,
A norm operation is performed based on the biometric verification information and the equation,
A user terminal that is verified according to a result of comparing a result of performing the norm operation with a preset threshold. ◈ Claim 14 has been abandoned upon payment of the set registration fee. In claim 13,
The biometric verification information,
A user terminal generated by converting the initial biometric information using the challenge value and the private token. ◈ Claim 15 was abandoned upon payment of the set registration fee. In claim 8,
The conductivity value is,
The user terminal is generated by using a timestamp indicating a time when the payment authentication request transmitted by the user terminal is received by the payment server and a unique identification symbol of the user terminal. ◈ Claim 16 was abandoned upon payment of the set registration fee. In claim 15,
The conductivity value is,
The user terminal, which is a random number generated using the timestamp and the unique identification symbol of the user terminal. ◈ Claim 17 was abandoned upon payment of the set registration fee. In claim 8,
The biometric authentication information generation unit,
The user terminal generating the biometric authentication information by multiplying the orthogonal matrix by the biometric information matrix and adding the conductivity value matrix. As a payment server that performs payment using biometric information in connection with a user terminal and a token server,
Obtaining a private token for authenticating a phone number by interworking with the user terminal, transmitting a private token request message including the authenticated phone number to the token server, and receiving a private token corresponding to the phone number from the token server part;
A conductivity value generator for generating a conductivity value in response to a payment authentication request message received from the user terminal;
A biometric verification information generator configured to generate biometric verification information by converting the initial biometric information previously received and registered from the user terminal using the challenge value and the private token; And
A biometric authentication information verification unit that receives biometric authentication information from the user terminal and verifies the biometric authentication information based on a result of performing a norm operation between the biometric authentication information and the biometric authentication information,
The biometric verification information generation unit,
The initial biometric information is expressed as an initial biometric information matrix of 1 × n (n is a natural number of 2 or more), the value according to the private token is expressed as an orthogonal matrix of n × n, and The values are expressed in a matrix of 1 × n conductivity values,
The biometric authentication information verification unit,
Verify the biometric authentication information by performing the norm operation based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information matrix. , Payment server. ◈ Claim 19 was abandoned upon payment of the set registration fee. In claim 18,
The above private token,
A payment server generated by one-way encryption of a seed value generated by calculating a password and a user ID provided from the user terminal with each other. ◈ Claim 20 was waived upon payment of the set registration fee. In claim 19,
The seed value is,
A payment server generated by XORing the binary value for the password and the binary value for the user ID with each other. ◈ Claim 21 was abandoned upon payment of the set registration fee. In claim 20,
The binary value for the password and the binary value for the user ID,
Generated by changing the length of the password and the user ID equally by adding a padding symbol to the shorter one of the password and the user ID, and converting the password and the user ID of the same length into a binary number Being, the payment server. ◈ Claim 22 was abandoned upon payment of the set registration fee. In claim 18,
The biometric authentication information verification unit,
A payment server for verifying the biometric authentication information according to a result of comparing a result of performing the norm operation with a preset threshold. ◈ Claim 23 was abandoned upon payment of the set registration fee. In claim 18,
The biometric verification information,
A payment server generated by converting the initial biometric information using the challenge value and the private token. ◈ Claim 24 was abandoned upon payment of the set registration fee. In claim 18,
The conductivity value is,
A payment server generated by using a timestamp indicating a time when the payment authentication request message is received and a unique identification symbol of the user terminal. ◈ Claim 25 was abandoned upon payment of the set registration fee. In claim 24,
The conductivity value is,
A payment server that is a random number generated using the timestamp and the unique identification symbol of the user terminal. ◈ Claim 26 was waived upon payment of the set registration fee. In claim 18,
The biometric verification information generation unit,
The payment server for generating the biometric authentication information by multiplying the orthogonal matrix by the initial biometric information matrix and adding the conductivity value matrix. As the operation method of the user terminal,
Receiving a private token by interworking with a token server and storing the private token in a security area;
Transmitting a payment authentication request to a payment server, and receiving a challenge value in response to the payment authentication request;
Receiving biometric information from a user and converting the biometric information using the challenge value and the private token to generate biometric authentication information; And
Transmitting the biometric authentication information to the payment server, and receiving a message instructing payment approval from the payment server,
Generating the biometric authentication information,
1 × n (n is a natural number of 2 or more) that recognizes feature points from at least one of the user's fingerprint or iris, converts the recognized feature points into digital codes, and then indicates the converted digital codes to the biometric information And expressing the value according to the private token as an orthogonal matrix of n × n, and expressing the value according to the conductivity value as a 1 × n conductivity value matrix, ,
The biometric authentication information is verified by comparing it with the biometric verification information based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information. Initial biometric information matrix, operating method of a user terminal. As a method of operation of the payment server,
Authenticating a phone number in connection with a user terminal, and transmitting a private token request message including the authenticated phone number to a token server;
Receiving a private token corresponding to the phone number from the token server;
Generating a challenge value in response to a payment authentication request message received from the user terminal;
Generating biometric verification information by converting the initial biometric information previously received and registered from the user terminal using the challenge value and the private token; And
Receiving biometric authentication information from the user terminal and verifying the biometric authentication information based on a result of performing a norm operation between the biometric authentication information and the biometric authentication information,
The step of verifying the biometric authentication information,
The initial biometric information is expressed as an initial biometric information matrix of 1 × n (n is a natural number greater than or equal to 2), and the value according to the private token is expressed as an orthogonal matrix of n × n, according to the challenge value. Expressing the values in a 1 × n conductivity value matrix; And
Including the step of verifying the biometric authentication information by performing the norm operation based on the following equation,

In the above equation, α is the biometric authentication information, β is the biometric verification information, p is the conductivity value matrix, A is the orthogonal matrix, x is the biometric information matrix, and y is the initial biometric information matrix. , How the payment server works.

Images