KR101153079B1 - System and Method for Providing Supplementary Service to Mobile Terminal Equipped with Smart Card - Google Patents

Abstract

The present invention relates to a system and method for wirelessly downloading various additional service functions including a credit card to a smart card mounted in a mobile communication terminal.

In order to realize this, the present invention includes an application management server, a download server, a mobile communication terminal, a key number management server, an application program information database, a card management system, and a card information database.

According to the present invention, it is possible to minimize the dependency between the mobile communication service and the financial service through wireless post-issuance, thereby providing a secure service and preventing the leakage of user information of the user, and until the credit card company adds a credit card function to the smart card. It is possible to use a mobile communication terminal, and even after receiving a smart card, it is possible to add or delete desired applications to the smart card as required by the user, thereby providing personalized and differentiated services for each user. Service providers who want to plan and provide additional services based on the card will be motivated to continuously develop their services.

Credit Card, Post Issuance, Smart Card, Mobile Terminal, UICC, AMS, CIN

Description

System and Method for Providing Supplementary Service Function to Mobile Communication Device with Smart Card {System and Method for Providing Supplementary Service to Mobile Terminal Equipped with Smart Card}

1 illustrates a mobile communication terminal in which a smart card is embedded;

2 is a block diagram schematically illustrating a system for providing an additional service function according to an embodiment of the present invention;

3 is a view showing the structure of a unique identification number of the smart card according to an embodiment of the present invention,

4 is a flowchart illustrating a download process of an application program according to an embodiment of the present invention;

5 is a flowchart illustrating a credit card issuing process according to an embodiment of the present invention.

Description of the Related Art

110: mobile communication terminal 112: download user management unit

114: card management unit 120: smart card

200: post-issuance system 210: application information database

220: application management server 222: application registration module                 

224 command generation module 226 data acquisition module

228: download request module 230: download server

232: download server management unit 234: download information management unit

236: application information management unit 238: WAP service module

240: key number management server 250: card management system

260: card information database 300: unique identification number (CIN)

The present invention relates to a system and method for providing an additional service function to a mobile communication terminal equipped with a smart card. More specifically, the present invention relates to a system and method for wirelessly downloading various additional service functions including a credit card to a smart card mounted in a mobile communication terminal.

Credit cards in use today are physical cards made of plastic with magnetic strips or IC chips attached. After receiving a card from a credit card company offline or online, a user may carry a credit transaction while carrying the card.

Also, recently, due to the spread of mobile communication terminals, most people always carry mobile communication terminals. Mobile communication terminals have developed from the first generation analog service to the second generation and 2.5 generation generation, and have been developed into a third generation service in which smart cards and mobile communication terminals are combined. Smart cards are also referred to as Universal Integrated Circuit Cards (UICCs), which include a microprocessor (MPU), memory, card operating system (COS), security algorithms, and electronically erasable programmable read only memory (EEPROM). The built-in microcomputer with its own arithmetic processing and mass storage refers to a card on a COB (Chip on Board) type.

As smart cards and mobile communication terminals with self-processing and mass storage functions can be combined to provide services, recently, smart cards are referred to as 'moneta cards' in the form of SIM chips. The service is provided on board and used as a credit card.

1 illustrates a mobile communication terminal in which a smart card is embedded.

The owner of the mobile communication terminal 110 using the mobile communication terminal 110 equipped with the smart card 120 in the same manner as in FIG. 1 allows the user to earn and use points, credit card payment function, traffic card function, identity authentication, and the like. Various offline services, including a mobile communication terminal 110 can be used easily, and solved the inconvenience that may occur by carrying a plurality of cards for everyday offline services.

In order to use a conventional mobile communication service and a credit card service, a user must first go through an agent visit for a mobile communication service, a customer examination for a credit card issuance, and a separate card receiving process. If such a procedure is applied to the mobile communication terminal 110 equipped with the smart card 120 as it is, there are various problems.

In the first case, after a customer visits a dealer to receive a mobile communication service and receives a smart card 120, the user visits a credit card company to add a credit card function to the smart card 120. ) Must be submitted to the credit card company. After that, the credit card company carries out the customer examination, mounts the credit card information on the smart card 120, and sends it by registered mail. Then, the user receives the smart card 120 is mounted on the mobile communication terminal 110 to use. In this case, when the user submits the smart card 120 to the credit card company, the mobile communication service is not provided during the customer examination period. In addition, if the smart card 120 is submitted, security problems such as leakage of customer information may occur.

In the second case, when a customer visits a dealership to receive a mobile communication service and applies for a smart card issuance application and a credit card issuance application through the agency, the smart card 120 is immediately sent to the credit card company. Thereafter, the credit card company performs a customer examination, and after completion of the examination, delivers the smart card 120 to the user through registered mail. The user who receives the smart card 120 is mounted on the mobile communication terminal 110 and used. In this case, the credit card company's customer screening period may be reduced, and the process of requiring the user to visit the credit card company may be omitted, thereby reducing the overall period from the card application date to the card issuance. The inconvenience of not using the mobile communication service occurs during the issuance period. In addition, a credit card company has an additional incidental cost for applying for credit card issuance through a dealership, and it is difficult for a mobile operator to expect service activation by increasing the inconvenience of the user due to the dual subscription process.

In addition, due to the service characteristics, issuance, life management, and unique number management of the smart card 120 are managed by the mobile communication company. Due to these characteristics, credit card companies have a risk of exposing customer financial information to mobile carriers.

In order to solve the above problems, an object of the present invention is to provide a post-issuance system and a procedure for downloading various additional services as well as a credit card function through a wireless card.

In order to achieve the above object, the present invention is a post-issuance system for downloading a variety of additional service functions including issuing a credit card to a smart card in a wireless manner through a mobile communication service, and manages the state of the application, the addition to download An application management server for creating a service application; A download server for receiving a wireless post-issuance request from an application management server and downloading an application and personal information for an additional service; A key number management server that manages an encryption algorithm and key information to be used for authentication of a smart card and provision of an additional service; And a mobile communication terminal that receives an application program or personal information through a wireless network and transmits the received application or personal information to a smart card.                     

According to a second object of the present invention, a method of wirelessly downloading an application for providing an additional service required after issuing a smart card to a smart card wirelessly through a mobile communication network is provided. Encrypting after; (b) registering the encrypted application with the post-issuance system; (c) accessing a post-issuance system using a mobile communication terminal; (d) recognizing the unique identification number of the smart card in the post-issuance system and confirming the user; (e) transmitting the encrypted application to the smart card in the post-issuance system; And (f) decrypting and installing the encrypted application program.

In addition, according to the third object of the present invention, in order to minimize the dependency between the mobile communication service and the financial service to prevent the provision of secure service and leakage of customer information, and to provide the mobile communication service during the issuance period of the credit card, the mobile communication terminal A method of wirelessly issuing a credit card with a smart card mounted on the device, the method comprising: (a) applying for a credit card after registering a mobile communication service; (b) identifying a user of the smart card; (c) transmitting the result after the issuance examination by the credit card company; (d) requesting the download of the credit card to the application management server; (e) checking the smart card information in the application management server and installing the application; (f) verifying user information and smart card information from the card information database; (g) encrypting credit card issuance data and constructing an APDU; (h) downloading the credit card issuance material to the smart card; (i) changing the state of the smart card to a credit card enabled state; And (j) reporting the result of issuance of the credit card.

In addition, according to the fourth object of the present invention, in order to minimize the dependency between the mobile communication service and the financial service to prevent the provision of secure services and the leakage of customer information, and to provide the mobile communication service during the issuance period of the credit card, the mobile communication terminal 12. A method of wirelessly issuing a credit card with a smart card mounted on the device, the method comprising: (a) issuing a smart card by storing empty data in a data area; (b) transmitting credit card information from the credit card company to the smart card through the mobile communication network; (c) installing credit card information from the smart card; (d) changing the state of the smart card to a credit card available state; And (e) reporting a result of issuing a credit card.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. First, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

With the advent of JAVA-based smart cards, even after a smart card is issued, an application for a service desired by the user can be added to the smart card or deleted from the smart card according to the needs of the user. This series of tasks is called post issuing, which allows you to add or delete applications securely by authenticating and encrypting users and application management servers.

This post-issuance procedure of smart cards enables users to reconfigure (add, delete, change) services according to their needs even after they have been issued a smart card, thereby providing personalized and differentiated services for each user. This post-issuance has become an important feature of smart card-based services.

2 is a block diagram schematically illustrating a post-issuance system for providing an additional service function according to an embodiment of the present invention.

A post-issuance system (AMS: Application Management System) that provides additional service functions is largely an application management server (Application Management Server) 220, a download server (230), a key number management server (Key Management Server) 240 and the mobile communication terminal 110. Further system components include an application profile database 210, a card management system 250, and a card profile database 260.

The application program information database 210 is a database that stores various application programs, and stores various service applets written in the JAVA language.

The application management server 220 basically creates an additional service application program for managing and downloading the state on the life cycle of the application for each card according to the user's state.

The application management server 220 may include an application registration module 222, a command generation module 224, a data collection module 226, and a download request module ( Download Request Module) 228.

The application program registration module 222 includes an application program providing management function for managing registration, approval, and deletion of a service provider to register an application program, and product information of the service provider, that is, a function of managing an application program. When a service provider registers an application, information about the application is generated. The application information contains all the information necessary for the management and post-issuance of the application, which plays an important role in managing the application's life cycle. do.

The command generation module 224 is a module for generating a command for managing, such as storing, inquiring, changing, and deleting contents stored in the smart card.

The data collection module 226 refers to the card information for wireless post-issuance of the application program, collects information such as the card type, available memory information in the card, and an application program already installed in the card, and then provides the service user with the service provider. Perform authentication on. Through this, it checks whether the application can be downloaded and configures the application to download and collect personal information suitable for the user's characteristics. When the configuration is completed, the key number management server 240 requests an encryption operation for securely delivering the application to the smart card.

The download request module 228 requests post-issuance to the download server 230 when the data collection module 226 completes the encryption operation through the key number management server 240.

The download server 230 receives a wireless post-issuance request from the download request module 228 of the application management server 220 to download an application and personal information for an additional service to the smart card of the mobile communication terminal 110. Download Server Agent (232), Download Descriptor Manager (234), Application Information Manager (236) and WAP Service Module (238) to the system. It consists of.

The download server manager 232 communicates with the download user manager 112 of the mobile communication terminal 110 to directly perform the download.

The download information manager 234 generates and manages information about the additional service application program to be downloaded, that is, the size and type of the additional service application program to be downloaded, and information to be referred to when the download user manager 112 downloads.

The application program information manager 236 is a part supporting the download information manager 234, which collects information to be added to the download information manager 234 from the application management server 220.

The WAP service module 238 provides a service management page through the WAP (Wireless Application Protocol) to the mobile communication terminal 110.                     

The mobile communication terminal 110 receives an application program or personal information through a wireless network and delivers it to a smart card. The mobile communication terminal 110 includes a download user manager 112 and a card manager 114.

The download user manager 112 analyzes the download information, allocates the required memory size and the necessary time to download the application program or the personal information in the mobile communication terminal 110, and then communicates with the download server manager 232 to apply the additional service application. Download the program. When the download is complete, a card command set including an encryption algorithm and key information is extracted and transferred to the card manager 114.

The card manager 114 transmits the card command set received from the download user manager 112 to the smart card and displays the result on the screen of the mobile communication terminal, or displays the result through the browser or the download user manager 112 of the mobile communication terminal. Forward to 230.

The key number management server 240 is a system for managing encryption algorithms and key information to be used for authentication of smart cards and provision of additional services.

The card management system 250 is a system for managing a life cycle including ordering of cards, and is a main linkage system for the post-issuance system. The card management system 250 serves to generate card information.

The card information database 260 is a database that stores information of each smart card. The card information database 260 stores a unique identification number (CIN: Chip Image Number) of the smart card, usage history, and user's personal information.

The download apparatus described above is divided into and managed as additional information such as the type and size of the download target and the download target, and the download server 230 transmits the additional information to the mobile communication terminal 110 at the time of downloading. The download user manager 112 allocates a resource capable of supporting efficient download at the time of downloading an application program from the download server 230.

3 is a diagram showing the structure of a unique identification number of a smart card according to an embodiment of the present invention.

A unique identification number (CIN: Chip Image Number) is a unique ID that can physically distinguish a smart card, and is a serial number assigned by the card issuer to the smart chip at the time of issuing the smart card. Currently, smart cards are distinguished by using ICCIDs (Integrated Circuit Card IDs) instead of unique identification numbers. However, ICCIDs have their own specifications for each card issuer, so they are not compatible with each other. Accordingly, in order to interwork with multiple card management systems 250, ICCIDs that may overlap may not be used.

Therefore, the concept has been defined in the Global Open Platform (GOP), which is a smart card standardization organization, so that it can be linked with multiple card management systems 250, but it has been suggested how it is actually configured. none.

Therefore, by presenting and using the standard of the smart card unique identification number as shown in Figure 2, it can be used through a number of management system 250. Accordingly, the application management server 220 may provide a wireless post-issuance function by interworking with any card management system 250 through a smart card unique identification number. From the point of view of the application management server 220, it is possible to provide a service in connection with a plurality of card management systems 250.

8 Byte of the smart card is allocated and used to input a smart card unique identification number, and the front 2 Byte of the 8 Byte is an issuer identifier assigned by the application management server 220 fixed when issuing the smart card. The remaining 6 bytes are the serial number codes of the cards given by the issuer. This unique identification number uses a hexadecimal number. This 8 byte can be changed only in the card management system 250 that manages the life cycle of the card, but it is not preferable to change it for proper operation.

In the first 2 bytes, a card manager code and an issuer code are input. The card manager code is a code assigned to a subject that manages a smart card and provides a related service, and is usually assigned to a mobile service provider. If you operate with a management server, code can be assigned to it.

The issuer code is a code assigned to the card management system 250 of a credit card company and a mobile communication service company that issues a smart card, and a plurality of issuer codes may be assigned to the same card management system 250. For example, even if a single mobile communication service company called SKT issues a smart card, a plurality of issuer codes may be assigned according to the supplier of the smart card.

4 is a flowchart illustrating a download process of an application program according to an exemplary embodiment of the present invention.

The credit card company registers an application program for additional services as a card issuer and service provider in the post-issuance system (AMS) 200 and generates information such as the type and size of the application program. The application program contains information about the algorithm and key generation method to be used to encrypt personal information. The input data for key generation is a smart card unique identification number (CIN) and password. The password should be known only to the user and the credit card company, thereby solving the security problem between the user and the credit card company (S402).

When the application is registered in the application registration module 222 of the post-issuance system 200, the application information is generated and notified to the mobile communication terminal 110, and the mobile communication terminal 110 is connected to download the application. The request signal is transmitted (S404).

The mobile communication terminal 110 receiving the access request signal accesses the post-issuance system 200 through the mobile communication network to download the application program (S406).

When the mobile communication terminal 110 is connected to the post-issuance system 200, the post-issuance system 200 requests a unique identification number (CIN) of the smart card 120 to the mobile communication terminal 110 for user confirmation. (S408).

When the unique identification number (CIN) of the smart card 120 is transmitted to the post-issuance system 200 and the user confirmation and authentication is completed (S410), the post-issuance system 200 is applied through the WAP service module 238 The program is transmitted to the smart card 120 (S412).

When the application program is downloaded to the smart card 120, the encrypted application program is decrypted. After decryption, the application is installed in the smart card 120. If the installation is successfully completed, the post-issuance system 200 transmits a result indicating that the download has been successfully performed. If the download or installation fails, the download re-request signal is transmitted to the post-issuance system 200 (S414). ).

When the post-issuance system 200 receives a download re-request signal from the smart card 120, the processes of S412 to S414 are repeated until the download is successful. When the download completion signal is transmitted from the smart card 120, the post-issuance system 200 notifies the card issuer that the download has been completed successfully (S416).

5 is a flowchart illustrating a credit card issuing process according to an embodiment of the present invention.

The user visits a mobile carrier agency and subscribes to a mobile communication service. In this case, the mobile communication service subscription information including a mobile identification number (MIN), a mobile terminal serial number (ESN), and a smart card unique identification number (Chip Image Number: CIN) of the mobile communication terminal 110. Is stored in the mobile communication service provider (S502).

In addition, the user fills out an application for issuing a credit card by applying for a credit card issuance at a carrier, and the credit card issuing application is transmitted to the credit card company. When the user applies for a credit card issuance at a mobile carrier, the mobile communication service subscription information is input to the credit card company's card management system 250 (S504).

When the credit card issuance application is transmitted to the credit card company, the credit card company checks whether the user has a smart card through the card management system 250 (S506). The card management system 250 provides a user card verification result of the smart card to the credit card company through the mobile communication service subscription information stored at the time of subscribing the mobile communication service (S508).

If the possession of the smart card is passed, the credit card company checks the card issuance. As a result of the card issuing examination, after the issuance of the credit card is determined, the credit card issuing information is generated, and the credit card issuing result is transmitted by a short message method through a message service center (MSC) of the mobile communication network. Induce card issuance (S510).

The user requests the credit card download to the application management server 220 through the mobile communication terminal 110, the data collection module 224 of the application management server 220, the card type of the smart card, available memory in the card Information and application program information already loaded in the card are collected (S512).

As a result of collecting application information, when an application program for issuing a credit card is not installed, the application management server 220 makes a request for installing an application program to the download server 230 through the download request module 228. (S514).

The download server manager 232 of the download server 230 installs an application program for issuing a credit card to a smart card mounted through communication with the download user manager 112 of the mobile communication terminal 110 (S516). When the installation of the application is completed, the mobile communication terminal 110 notifies the data collection module 226 of the application management server 220 that the application has been installed (S518).

If, as a result of collecting the application information in step S512, if an application program for issuing a credit card is mounted on the smart card, steps S514 to S518 may be omitted.

If the mobile communication terminal 110 is equipped with an application program for issuing a credit card, the application management server 220 accesses the card management system 250, and the card information database 260 connected to the card management system 250. Check the user information and smart card information stored in the (S520).

The card management system 250 requests a credit card company to generate an APDU including credit card information. APDU, which stands for Application Protocol Data Unit, refers to the structure of messages used by applications of smart cards, how credit card information will be incorporated and how data is transferred between the card and the card reader. It refers to a structure containing information about whether or not (S522).

The credit card company configures the APDU through the key number management server 240, and encrypts the credit card information data to generate credit card issuance data. When the credit card issuance data is generated, it is transmitted to the application management server 220 (S524).

The application management server 220 requests a download for post-issuance of the credit card issuing material transmitted to the download server 230 through the download request module 228 (S526).

When the download server receives a download request from the download request module 228, the download server 230 transmits credit card issuance data. At this time, the download information management unit 234 and the application information management unit 236 of the download server 230 collects information for downloading the credit card issuance material, and the mobile communication terminal through the WAP service module 238 In connection with the download user management unit 112 of (110) and downloads the credit card issuance data (S528).

The mobile communication terminal 110 downloads the credit card issuance data, decrypts it and stores it in the smart card, so that the smart card can function as a credit card. Here, in the process of decrypting the credit card issuance data, it is also possible to add the step of inputting the password specified by the user at the time of the credit card application for security purposes. Upon completion of credit card post-issuance to the smart card, report the result of success or failure to the credit card company. Here, the credit card company processes the result reported from the mobile communication terminal 110 to process a result such as reissuance or use approval (S530).

In addition to the above-described method, the post-issuance service of the present invention may be implemented by using a Visa Smart Debit Credit (VSDC) which is a credit card service application processor. Here, VSDC refers to a smart card transaction processor developed by Visa International in order to replace the existing magnetic credit card.                     

VSDCs are designed in a secure environment under the premise of using pre-scheduled applications and data in the smart card issuance phase, and by pre-scheduling applications and data. Do not use a message authentication code (MAC) to verify data integrity. Therefore, there is no way to verify the integrity of the application and the credit card information data issued through the mobile communication network.

To solve this problem, when the smart card is issued, the empty data having the same size as the actual credit card issuing data is stored in the data area of the VSDC, and the life cycle of the application is changed to the issuance completion state. VSDC uses MAC to update data while issuing. Therefore, when the smart card is issued in the issuance state and the post-issuance is used, the MAC is used, and after the integrity verification, the credit card information is updated to carry the post-issuance.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, according to the present invention, it is possible to minimize the dependency between the mobile communication service and the financial service through wireless post-issuance, thereby providing a secure service and preventing the leakage of user information of the user. It is possible to use the mobile communication terminal until adding.

In addition, even after the smart card is issued, it is possible to add or delete the desired application to the smart card according to the user's needs, thereby providing personalized and differentiated services for each user. It is possible to continuously develop new services by motivating the service provider or service developer who wishes to continuously develop and apply the service.

Claims (47)

A post-issuance system that downloads additional service functions including issuing a credit card to a smart card wirelessly through a mobile communication service. An application management server that manages a state of an application and generates an additional service application to be downloaded; A download server for receiving a wireless post-issuance request from the application management server and downloading an application program and personal information for an additional service; A key number management server that manages an encryption algorithm and key information to be used for authentication of the smart card and provision of an additional service; A mobile communication terminal for analyzing the download information for downloading the application or the personal information, allocating necessary memory size and time, and receiving the application program or the personal information and transmitting the received application information to the mounted smart card; And A card manager code assigned to a subject providing a service by managing the smart card, a credit card company issuing a smart card, and an issuer code assigned to the card management system of a mobile communication company and a serial number assigned by the issuer. A card information database storing information of the smart card including a smart card unique identification number (CIN) containing a code Post-issuance system for providing an additional service to the smart card comprising a. According to claim 1, The post-issuance system, An application information database storing an application written in the JAVA language; And Card management system for managing the life cycle of the smart card Post-issuance system for providing an additional service to the smart card, characterized in that it further comprises. The method of claim 1, wherein the application management server, An application program manager for managing a service provider to register the application and an application program module for managing the application program; A command generation module for generating a command for managing information stored in the smart card; A data collection module configured to collect the card information for wireless post-issuance, configure the application to be downloaded, and perform an encryption operation through the key number management server; And When the encryption operation in the data collection module is finished, a download request module for requesting post-issuance to the download server. Post-issuance system for providing an additional service to a smart card comprising a. The method of claim 3, wherein the card information, And a type of the smart card, available memory information in the smart card, and an application program provided on the smart card. The method of claim 1, wherein the download server, A download server manager which communicates with the mobile communication terminal to download; A download information manager configured to generate and manage information related to an additional service application to be downloaded; An application information management unit which collects smart card information from the application management server and supports the download information management unit; And WAP service module for providing a service management page through the WAP to the mobile communication terminal Post-issuance system for providing an additional service to a smart card comprising a. The method of claim 5, wherein the additional service application program related information, A post-issuance system for providing an additional service with a smart card, which includes the overall size and type of the additional service application to be downloaded and is information referred to at the time of downloading. The method of claim 5, wherein the mobile communication terminal, A download user manager which communicates with the download server manager of the download server to download the application program; And Card management unit for displaying the download result on the screen or transmits to the download server Post-issuance system for providing an additional service to the smart card comprising a. delete The method of claim 2, wherein the information of the smart card, Post-issuance system for providing an additional service to the smart card, characterized in that the use history, the user's personal information. delete The method of claim 1, wherein the smart card unique identification number, After the 8 bytes of the memory of the smart card is allocated, the card management company code and the issuer code is assigned to each of 1 byte, and the card code to provide the additional service to the smart card, characterized in that allocating 6 bytes Issue system. The method of claim 1, wherein the smart card unique identification number, Post-issuance system for providing an additional service to the smart card, characterized in that using a hexadecimal number. The method of claim 1, wherein the smart card, Provides additional services with a smart card, which includes a microprocessor unit (MPU), memory, a card operating system (COS), a security algorithm, and an electronically erasable programmable read only memory (EEPROM). Post-issuance system. The method of claim 13, wherein the smart card, After providing the additional service with a smart card, a microcomputer with its own arithmetic processing and mass storage is made in the form of a chip on board (COB), and is mounted inside the mobile communication terminal in the form of a SIM chip. Issue system. A method of wirelessly downloading an application for providing an additional service required after issuing a smart card to the smart card wirelessly through a mobile communication network, (a) creating and encrypting the application program; (b) registering the encrypted application program in a post-issuance system, wherein the application program information including an algorithm and a key generation method used for encrypting personal information and the type and size of the application program are included. Registering with the post-issuance system; (c) a mobile communication terminal accessing the post-issuance system; (d) verifying a user by recognizing the unique identification number of the smart card in the post-issuance system; (e) The mobile communication terminal analyzes the download information for downloading the application or the personal information, allocates the required memory size and time, and is equipped with the encrypted application program received from the post-issuance system. Transmitting to a card; And (f) allowing the mobile communication terminal to decrypt and install the encrypted application program on the smart card; How to wirelessly download the application comprising a. The method of claim 15, wherein step (a) is For security, a method of wirelessly downloading an application comprising generating a key by inputting a password and a smart card unique identification number (CIN) which are known only to the credit card company and the user. delete The method of claim 15, wherein the application program and the application program information are registered in an application program registration module of the post-issuance system. The method of claim 15, wherein step (c) comprises: And transmitting the application information from the post-issuance system to the mobile communication terminal, thereby informing the post-issuance system that the application is registered. The method of claim 19, wherein the post-issuance system, And transmitting a connection request signal to download the registered application to the mobile communication terminal. The method of claim 15, wherein step (d) is A method for wirelessly downloading an application program characterized in that the user is confirmed through the user identification and the smart card information stored in the unique identification number and the card information database of the smart card. The method of claim 21, wherein the unique identification number is A method of wirelessly downloading an application program as a unique ID for physically distinguishing the smart card, the card issuer assigning and inputting the smart card at the time of issuing the smart card. The method of claim 15, wherein step (e) And transmitting the application program to the smart card through a connection between a WAP service module of a download server and a download user manager of the mobile communication terminal. The method of claim 15, wherein step (f) comprises: If the decoding and installation of the application fails, a method for wirelessly downloading an application program comprising transmitting a download re-request signal to the post-issuance system and repeating the steps (e) to (f). The method of claim 15, wherein step (f) comprises: When the installation of the application is finished, the mobile communication terminal wirelessly downloads the application, characterized in that for transmitting to the post-issuance system a result indicating that the download was successful. The method of claim 25, wherein the post-issuance system, And transmitting the download success result received from the mobile communication terminal to the card issuer. In order to minimize the dependency between the mobile communication service and the financial service to prevent the provision of a secure service and the leakage of customer information, and to provide the mobile communication service during the issuance period of the credit card, the smart card mounted on the mobile terminal is used. As a method of issuing wirelessly, (a) applying for the credit card after registering a mobile communication service; (b) identifying a user of the smart card; (c) transmitting the result after the issuance examination by the credit card company; (d) requesting the download of the credit card to an application management server; (e) checking smart card information at the application management server and installing an application program; (f) verifying user information and smart card information from the card information database; (g) encrypting credit card issuance data and constructing an Application Protocol Data Unit (APDU); (h) downloading the credit card issuance data to the smart card; (i) change the status of the smart card to a credit card enabled state; Download and decrypt the encrypted credit card issuance data from the smart card to function as a credit card. When decrypting the credit card issuance data, the user is designated at the time of the credit card application for security. Adding the process of entering the password that was (j) reporting the result of issuing the credit card Credit card post-issuance method for wirelessly issuing a credit card comprising a. The method of claim 27, wherein step (a) comprises: A credit card post-issuance method for wirelessly issuing a credit card, characterized by applying for a mobile communication service subscription and a credit card issuance through a mobile carrier. 29. The method of claim 28, If the credit card issuance application is made, the credit card post-issuance method for issuing a wireless credit card, characterized in that the mobile communication service subscription information is input to the card management system of the credit card company. The method of claim 29, wherein the mobile communication service subscription information, A wireless credit card, comprising: a mobile identification number (MIN), a mobile device serial number (ESN), and a smart card unique identification number (CIN) of the mobile communication terminal. Issuing credit card after issuing method. The method of claim 27, wherein step (b) If the credit card issuance application is received from the credit card company, credit card post-issuance method for issuing a credit card wirelessly, characterized in that whether the user has a smart card through a card management system. The method of claim 27, wherein step (c) comprises: If the post-issuance is determined as a result of the issuance screening of the credit card, credit card post-issuance method for issuing a credit card wirelessly, characterized in that for generating credit card issuance data. The method of claim 27, wherein step (c) comprises: If the post-issuance of the credit card is determined, a credit card post-issuance for issuing a credit card wirelessly issuing the credit card issuing result, which is transmitted in a short message format through a message service center (MSC) of the mobile communication network. Way. The method of claim 27, wherein step (e) A credit card for wirelessly issuing a credit card, wherein the data collection module of the application management server collects the type of the smart card, available memory information in the smart card, and application information mounted in the smart card. Post-issuance method. 35. The method of claim 34, As a result of collecting the smart card information, if an application for issuing a credit card is not installed, (e1) requesting a download server to install an application for issuing the credit card; (e2) installing an application for issuing the credit card to the smart card in a download server manager of the download server; And (e3) the mobile communication terminal notifying the completion of installation to the data collection module of the application management server; Credit card post-issuance method for wirelessly issuing a credit card, characterized in that it further comprises. 36. The method of claim 35, wherein step (e2) comprises: When the application program for issuing the credit card is transmitted to the smart card mounted in the mobile communication terminal through encryption, the credit card post-issuance method for wirelessly issuing a credit card, wherein the smart card is decrypted and installed. . The method of claim 27, wherein step (f) comprises: And a credit card post-issuance method for wirelessly issuing a credit card, wherein the application management server accesses a card information database connected to the card management system to verify the user information and the smart card information. The method of claim 27, wherein step (g) The credit card company to generate the contents of the credit card information, and the APDU (Application Protocol Data Unit) which is a structure containing information on how to transfer data between the card and the card reader, characterized in that for generating Credit card post-issuance method of issuing a credit card wirelessly. The method of claim 27, wherein step (g) And the credit card company constituting the APDU through a key number management server, and encrypting the credit card information data to generate the credit card issuance data. The method of claim 27, wherein step (h) When the credit card issuing data transmitted from the credit card company to the application management server, the credit card issuing material is downloaded to the download user management unit of the mobile communication terminal through the WAP service module of the download server. Credit card post-issuance method of issuing a credit card wirelessly. delete delete The method of claim 27, wherein step (j) comprises: The credit card company issuing a credit card wirelessly issuing a credit card, characterized in that for re-issuance or use authorization according to the credit card post-issuance result reported from the mobile communication terminal. In order to minimize the dependency between the mobile communication service and the financial service to prevent the provision of a secure service and the leakage of customer information, and to provide the mobile communication service during the issuance period of the credit card, the smart card mounted on the mobile terminal is used. As a method of issuing wirelessly, (a) issuing the smart card by storing empty data in a data area; (b) transmitting credit card information from a credit card company to the mobile communication terminal equipped with the smart card through a mobile communication network; (c) installing the credit card information in the smart card; (d) change the state of the smart card to a credit card available state, and perform the function as a credit card by downloading, decrypting and storing the encrypted credit card issuing data from the smart card, and issuing the credit card When decrypting the data, adding a process for inputting a password designated by the user at the time of the credit card application for security; And (e) reporting the result of issuing the credit card Credit card post-issuance method for wirelessly issuing a credit card comprising a. 45. The method of claim 44, wherein step (a) comprises: After issuing the smart card, after storing the empty data in the data area of the Visa Smart Debit Credit (VSDC), and issuing a life cycle of the application in the issuing state after the credit card for wirelessly issuing a credit card. Issuance method. The method of claim 45, wherein the VSDC, It is designed on the assumption that the smart card issuing step uses a method of loading a predetermined application and data on the smart card, and a message authentication code (MAC) for verifying the integrity of the data is included in a data storage command. A credit card post-issuance method for wirelessly issuing a credit card, characterized in that it is not used. 45. The method of claim 44, wherein step (c) comprises: When the credit card information is installed in the smart card, the life cycle of the application program is completed, and the credit card information is mounted after performing integrity verification using a message authentication code (MAC). Credit card post-issuance method of issuing a credit card wirelessly.

Images