KR20020058325A - Method for issuing an electronic receipt - Google Patents

Abstract

The present invention relates to a method for issuing an electronic receipt, the configuration of the present invention is an electronic receipt preparation server, an electronic receipt receiving client, a payment relay server and a financial server connected to the certificate issuing server, management of a public institution operating a certificate issuing server Registering his digital signature verification key and issuing his certificate; The electronic receipt receiving client accesses the electronic receipt creation server, and issuing a certificate of the store including the electronic signature verification key of the store operating the electronic receipt creation server; The electronic receipt receiving client accesses the electronic receipt creation server, and downloads and installs the electronic signature verification module for electronic commerce and the electronic receipt verification / management module of the electronic receipt creation server; An electronic receipt receiving client accessing an electronic receipt preparing server, searching for a product for performing an electronic commerce, and then setting and paying for the purchased product; Transmitting, by the electronic receipt receiving client or the electronic receipt preparing server, the payment information to the payment relay server; The payment relay server transmitting the payment information to the financial server; Transmitting, by the financial server, the card approval number to the electronic receipt preparing server through the payment relay server; Generating, by the electronic receipt preparation server, an electronic receipt including predetermined data, performing an electronic signature with an electronic signature generation key, and transmitting the electronic signature to the electronic receipt receiving client; Checking the electronic signature received by the electronic receipt receiving client with the verification key of the electronic receipt preparing server, and then registering and managing the electronic receipt in the electronic receipt verification / management module; The electronic receipt receiving client outputs and confirms the electronic receipt in a predetermined form using the electronic receipt verification / management module, and then transmits it to the electronic receipt acquisition server; The electronic receipt receipt server requests the electronic receipt notarization server to confirm the authenticity and dual use of the electronic receipt, and receives the result data, and according to the result data, the electronic receipt receipt server pays the price.

According to the present invention, in the use of the e-receipt introduced as the e-commerce and e-payment is becoming more and more common, each person purchases a different shopping mall, and since the e-receipt form, e-signature, and digital signature verification key are different for each shopping mall It is possible to easily determine the validity of the generated e-receipt, there is an advantage that can be solved at the source of the problem occurs when the e-receipt is manipulated or used forged.

Description

How to issue an electronic receipt {Method for issuing an electronic receipt}

The present invention relates to an electronic receipt, more specifically, to determine the validity of the electronic receipt used for electronic commerce and electronic payments by standardizing the output form of the electronic receipt is determined that only the first receipt of the electronic receipt as a valid receipt and the government or Electronic Receipt Authorized by an Authorized Institution It relates to a method for issuing an electronic receipt that verifies the fact of the electronic receipt.

An electronic receipt is an electronic document with a digital signature and has a legal effect. It is assumed here that there is an electronic signature for electronic receipts and receipts, and the terms and meanings used are explained in detail in the "E-Commerce Act" and "Electronic Signature Act" (effective July 1, 1999).

The digital signature system guarantees integrity (guaranteed that the transmitted information does not change), authentication (authentication, sender's identity), non-repudiation (non-reputation, non-repudiation of its own actions). The requirements for digital signatures are that a person who does not have a generation key cannot generate a digital signature, a person who does not have a generation key cannot change an electronic document, a signer certificate whose owner of the generation key is an electronic signature actor, and a digital signature of document A There are such conditions as that B cannot be replaced by the digital signature of document B and the owner of the generated key cannot deny the action after the digital signature.

Currently, the receipts received by the accounting department in the company are not A4 papers output from the computer, and it is not easy to copy (forge). Currently, the products are purchased through the Internet shopping malls at Samsung shopping malls and Hansol CSN. It is often received separately by mail, and additional costs and manpower are required at the shopping mall to issue a receipt. This is not suitable for the information age that seeks paperless offices.

It is also different from the off-line purchase of a product, where the product is purchased first and the receipt is received later.

As e-commerce and e-payment become more common in the future, many e-receipts will be introduced. Moreover, the e-receipt is expected to replace some of the existing receipts in the near future.

Of course, the Internal Revenue Service should treat tax receipts on electronic receipts like traditional receipts. However, for now, the accounting department will insist on paper original receipts. In order to verify the validity of an electronic receipt, an electronic document file, an electronic signature file, an electronic signature algorithm, an electronic signature verification key, etc. are required.It is not easy to process a receipt of a new form in the accounting department. Identifying it is cumbersome.

In other words, since different shopping malls purchase products for different people, and electronic receipt forms, digital signatures, and digital signature verification keys are different for each shopping mall, it is difficult for the accountant and staff to determine the validity of all electronic receipts.

Originally, the electronic receipt can only be validated by the receipt of the electronic receipt file and the electronic signature file for this file. If you receive the paper receipt from the accounting department, you cannot check the validity of this receipt. Because it is relatively easy to cut-and-paste, copy, or forge documents on a computer, it is difficult to know the authenticity of the paper output. It is unreasonable to process electronic receipts offline.

In addition, even if the e-receipt is marked with a distinctive mark, the type of e-receipt is printed, and the printer used by the general person mainly uses A4 paper in black and white. Therefore, it is not difficult to duplicate the first printed receipt for submission to the accounting department with a high performance copier.

In addition to such methods, the 'Receipt Printing Program' (the bookkeeping program) may be reinstalled on a computer other than the existing computer to output the accounting and submission receipts, and two or more valid receipts may be generated. In other words, if you install the account book program in your home PC and the account book program in your company to print receipts, the two receipts will be completely identical, it is almost technically impossible to identify them.

Therefore, the present invention was devised to solve such a problem, and an object of the present invention is to first output the electronic receipt by standardizing the output form of the electronic receipt to determine the validity of the electronic receipt used for electronic commerce and electronic payment. It is to provide a method of issuing an electronic receipt by deciding whether it is a valid receipt and confirming the fact of the electronic receipt by an electronic receipt notarization agency authorized by the government or an authorized agency.

1 is a flowchart illustrating a form of performing a general digital signature;

2 is an example of a configuration diagram for issuing an electronic receipt in an electronic transaction, according to the present invention;

3 is a block diagram of a system for performing a method for issuing an electronic receipt according to the present invention;

4 is an exemplary view when an electronic receipt is first issued according to the present invention;

5 is an exemplary view when the electronic receipt is issued after the first time, according to the present invention;

6 is a flowchart illustrating a method for issuing an electronic receipt according to the present invention.

<Description of Symbols of Major Parts of Drawings>

100: Internet 200: electronic receipt notarization server

300: certificate issuing server 400: e-training receiving client

500: receipt receipt server 600: receipt receipt server

700: financial server 800: payment relay server

The electronic receipt issuing method of the present invention for achieving the above objects is the electronic receipt preparation server, the electronic receipt receiving client, the payment relay server and the financial server after accessing the certificate issuing server, operating the certificate issuing server (A) registering a digital signature verification key under the control of a public institution and issuing its own certificate; After the step (a), the electronic receipt receiving client accessing the electronic receipt creation server and receiving a certificate of a store including an electronic signature verification key of a store operating the electronic receipt creation server (b); After the step (b), the electronic receipt receiving client accesses the electronic receipt creation server, and download and install the electronic signature verification module for electronic commerce and the electronic receipt verification / management module of the electronic receipt creation server ( c); (D) after the step (c), the electronic receipt receiving client accesses the electronic receipt preparing server, searches for a product for performing an electronic commerce, and sets and pays for the purchased product; (E) after the step (d), the electronic receipt receiving client or the electronic receipt preparing server delivering the payment information to the payment relay server; (F) after the step (e), the payment relay server transmitting the payment information to the financial server; (G) after the step (f), the financial server transmitting a card approval number to the electronic receipt preparing server through the payment relay server; (H) after the step (g), the electronic receipt preparation server generates an electronic receipt including predetermined data, and transmits the electronic signature to the electronic receipt receiving client by using an electronic signature generation key; After the step (h), checking the electronic signature received by the electronic receipt receiving client with the verification key of the electronic receipt preparation server, and registering and managing the electronic receipt in the electronic receipt verification / management module; After the step (i), the electronic receipt receiving client outputs and confirms the electronic receipt in a predetermined form by using the electronic receipt verification / management module, and then transmits the electronic receipt to the electronic receipt receipt server; After the step (j), the electronic receipt receipt server requesting the electronic receipt notarization server to confirm the authenticity and dual use of the electronic receipt, and receiving result data (k); And (l) after the step (k), according to the result data, the electronic receipt receipt server pays the price.

Hereinafter, the objects, features, and advantages of the present invention described above will be described in detail with reference to preferred embodiments of the present invention shown in the accompanying drawings.

1 is a flowchart illustrating a form of performing a general digital signature.

Two keys are used for digital signatures, one of which is a digital signature generation key (private key) and information that needs to be secured, and the other is a digital signature verification key (public key) that is open to the public. Information. The generation key refers to the electronic information used to generate the digital signature, and the verification key refers to the electronic information used to verify the generated digital signature. The overall flow of the electronic signature is shown in FIG.

The digital signature verification unit of FIG. 1 receives an electronic document (digital receipt) and an electronic signature, and then the "abbreviated document" obtained by hashing the electronic document and the "abbreviated document" obtained by decrypting the electronic signature. If the comparison is matched, the digital signature is considered valid, otherwise it is considered invalid. The authenticity of the digital signature is determined by a certification authority (CA) or by an individual who receives the electronic signature (electronic receipt) and the digital signature. can do.

However, in order to verify the digital signature, the digital signature algorithm (digital signature decoding algorithm), hash function, and digital signature verification key must be present. The hash function must be built in a library form, and there must be an electronic document file, a file containing the digital signature file, and a digital signature verification key (certificate file).

3 is a block diagram of a system for performing a method for issuing an electronic receipt according to the present invention.

As shown, the electronic receipt notarization server 200 communicates with the electronic receipt creation server 500 of each store to authenticate whether the electronic receipt is normally available, the electronic receipt receipt server 600 transmitted Register the receipt, check whether the registered electronic receipt is issued by the electronic receipt preparation server 500, and notifies the electronic receipt receipt server 600 whether the electronic receipt registration.

The certificate issuing server 300 may be configured to store the electronic receipt receipt server 400, the electronic receipt receiving client 400, and the payment relay server 800 to verify the identity of the electronic document creator and other matters related to electronic commerce. Certificates are issued, revoked or managed by the operator. In addition, upon request of the electronic receipt receiving client 400, it issues and confirms the certificate of the store operating the electronic receipt creation server 500.

The electronic receipt receiving client 400 purchases the company article in the Internet shopping mall, receives and verifies the electronic receipt sent from the electronic receipt preparing server 500, and submits the electronic receipt received to the electronic receipt receipt server 600. do.

The electronic receipt preparation server 500 is a server operated by an Internet shopping mall such as Samsung Shopping Mall, Hansol CSN, Interpark, etc. as a subscriber in the Electronic Signature Act for issuing an electronic receipt, and receives an electronic receipt to an electronic receipt receiving client 400 that has purchased an item. The corresponding digital signature is issued.

The electronic receipt receipt server 600 receives an electronic receipt processing request from the electronic receipt receiving client 400, registers the electronic receipt with the electronic receipt notarization server 200, and registers the electronic receipt from the electronic receipt notarization server 200. Notified

The financial server 700 refers to a server operated by a bank or a card company, issues a payment method to the electronic receipt receiving client 400, and transmits a payment method to the electronic receipt receiving client 400 transmitted from the payment intermediation server 800. After receiving the data for identification / credit confirmation, the result data is transmitted to the payment broker server 800.

The payment relay server 800 mediates payment of goods between the electronic receipt preparation server 500 and the financial server 700, and the authentication request for the electronic receipt receipt client 400 transmitted from the electronic receipt preparation server 500. After the identification / credit confirmation data is requested to the financial server 700 for the signal, the result data transmitted from the financial server 700 is received, and the authorization number is transmitted to the electronic receipt preparation server 500.

Hereinafter, an electronic receipt issuing method of the present invention for achieving the above objects will be described in detail with reference to FIGS. 1 to 6.

The electronic receipt writing server 500, the electronic receipt receiving client 400, the payment relay server 800 and the financial server 700 after accessing the certificate issuing server 300, the public operating the certificate issuing server 300 Registers his digital signature verification key under the authority of the institution and receives his certificate (step S10).

Here, the issuance of the own certificate is performed to confirm the matters related to the identity and transaction of the creator of the electronic document, and in principle, all operations are performed through the Internet 100.

After receiving the certificate of its own, the electronic receipt receiving client 400 is connected to the electronic receipt creation server 500 to store the certificate of the store including the electronic signature verification key of the store operating the electronic receipt creation server 500 Is issued (step S20).

Here, the store's certificate may be issued even when the electronic receipt receiving client 400 accesses the certificate issuing server 300.

After receiving the certificate of the store, the electronic receipt receiving client 400 is connected to the electronic receipt creation server 500, the electronic signature verification module and electronic receipt verification server of the electronic receipt creation server 500 for electronic commerce Download and install the module (step S30).

Herein, the electronic signature verification module refers to a library that implements an electronic signature algorithm and a hash function for verifying the authenticity of the electronic signature generated when an electronic commerce is performed.

After the electronic receipt verification / management module is installed, the electronic receipt receiving client 400 accesses the electronic receipt preparing server 500, searches for a product for performing electronic commerce, and sets and pays for the purchased product. (Step S40).

Here, the payment of the purchased goods may be performed by using any one of bank transfer, cumulative points obtained from the electronic receipt preparation server, and digital cash (e-cash or e-money), in addition to payment using a card. have.

In addition, the issuance of the payment means is generally only from the financial institution operating the financial server 700, the consumer using the electronic receipt receiving client 400 also from the payment relay operating the payment relay server 800 Payment means (e.g. electronic wallets, e-money) can be issued. Since the payment relay agency is difficult to solve the payment for the products in direct connection with each financial institution, electronic receipts An institution that brokers payment of goods between a shopping mall operating a production server 500 and a financial institution operating a financial server 700. Representative payment brokers include EasyPay and TELEC of KIC. Etc.

After the payment, the electronic receipt receiving client 400 or the electronic receipt preparation server 500 delivers the payment information to the payment relay server 800 (step S50), the payment relay server 800 receives the financial server The payment information is transmitted to the step 700 (step S60).

In this case, the payment information transmission in step S50 may be directly transmitted to the financial server 700 by the electronic receipt receiving client 400 or the electronic receipt preparing server 500.

On the other hand, the shopping mall operating the electronic receipt preparation server 500 is directly or with a payment broker server (800) operating a financial institution operating the financial server 700 to receive a product price from the consumer using the electronic receipt receiving client 400 It can be indirectly linked through a payment relay agency that operates), and when passing through the payment relay institution, the payment relay institution only needs to verify the validity of the payment information by the financial institution.

After transmitting the payment information, if the financial server 700 transmits the card approval number to the electronic receipt preparation server 500 through the payment relay server 800 (step S70), the electronic receipt preparation server 500 is predetermined Generate an electronic receipt containing the data of the digital signature, and the electronic signature is sent to the electronic receipt receiving client 400 by the electronic signature generation key (step S80).

Here, the card authorization number transmission in the step S70 may be directly transmitted by the financial server 700 to the electronic receipt preparation server 500, and the predetermined data may include serial numbers, trade names, and the like of the electronic receipt. It may include telephone number, address, representative's name, product type, quantity, amount, login ID, credit card name, authorization number, commerce date and time data.

After the transmission, the electronic receipt received by the electronic receipt receiving client 400 checks the electronic signature with the verification key of the electronic receipt creation server 500, and registers and manages the electronic receipt verification / management module (step S90), The electronic receipt receiving client 400 outputs and confirms the electronic receipt in a predetermined form using the electronic receipt verification / management module, and then transmits it to the electronic receipt receipt server 600 (step S100).

Here, the electronic receipt output in the predetermined form includes a specific phrase or symbol mark indicating that the electronic receipt is issued for the first time, as shown in FIG. Phrase or symbol mark is not printed.

After (step S100), the electronic receipt receipt server 600 requests the electronic receipt notarization server 200 to confirm the authenticity and dual use of the electronic receipt (step S110), and then receives the result data (step S120). In accordance with the result data, the electronic receipt receipt server 600 pays the price (step S130).

Here, the authenticity and dual use of the electronic receipt is an electronic receipt notarization institution that outputs the electronic receipt including the specific phrase or symbol mark, or notarization of the electronic receipt by operating the electronic receipt notarization server 200 By using

In addition, the request for confirming the authenticity and dual use of the electronic receipt is if a consumer using the electronic receipt receiving client 400 submits a receipt to the accounting department of a specific company operating the electronic receipt acquisition server 600, the The accounting department directly enters the <shopping mall, serial number, total amount, submitter, consignee> information by accessing the electronic receipt notarization server 200 using the web, or registers the electronic receipt notarization server 200 by using e-mail.

The electronic receipt notarization institution is a group authorized by the government or an authorized institution. If necessary, the electronic receipt certificate information may be requested to the shopping mall by requesting the electronic receipt information issued by each shopping mall.

Meanwhile, the electronic receipt registered in the electronic receipt notarization institution is stored in the database of the electronic receipt notarization institution in the form shown in Table 1 below, after which the serial number receipt of the same shopping mall is registered again. Confirm the dual use and notify the accounting department of the specific company of fraudulent use.

In addition, the general user may access the electronic receipt notarization server 200 through the web and search the database information having the configuration shown in Table 1 based on the shopping mall criteria or the submitter criteria.

turn shopping mall Serial Number Receipt File Total amount Submitter Takeover Registration One Samsung 225001 s0021.rcp 550,000 Chulsoo Kim Dankook University X 2 Samsung 225010 s0050.rcp 75,000 Lee Do-soon Samsung X 3 Hansol 225001 h0021.rcp 450,000 Younghee Lee Seoul National University X 4 LG 225001 l0021.rcp 500,500 Park Heungbu Exchange Bank X

On the other hand, when returning or exchanging a purchased product, it is indicated whether and how many times the e-receipt is reissued in the form of a database having a configuration as shown in Table 2.In this case, the previously issued receipt is invalid and new The receipts shall be displayed separately according to the form "serial number-issuance".

turn shopping mall Serial Number Receipt File Total amount Submitter Takeover Registration Reissue Count One Samsung 225001-1 s0021-1.rcp 540,000 Chulsoo Kim Dankook University X One 2 Samsung 225010 s0050.rcp 75,000 Lee Do-soon Samsung X 0 3 Hansol 225001-2 h0021-2.rcp 550,000 Younghee Lee Seoul National University X 2 4 LG 225001 l0021.rcp 500,500 Park Heungbu Exchange Bank X 0

On the other hand, it implements and manages as a separate database having a configuration as shown in Table 3 to manage the existing receipt information invalidated by receipt reissue.

turn shopping mall Serial Number Receipt file Total amount Submitter Takeover Final Receipt Serial Number One Samsung 225001 s0021.rcp 550,000 Chulsoo Kim Dankook University 225001-1 2 Hansol 225010 h0021.rcp 375,000 Younghee Lee Seoul National University 225001-2 3 Hansol 225001-1 h0021-1.rcp 450,000 Younghee Lee Seoul National University 225001-2

Meanwhile, the electronic receipt notarization server 200 and the electronic receipt preparation server 500 may further include exchanging information on the electronic receipt. The exchange of information on the electronic receipt is for the individual to purchase a product. It is made in order to easily determine whether the received receipt is a forgery, or when the purchase of the purchased goods is made wrong, to obtain the purchase information and delivery information of the goods in detail.

Although a preferred embodiment of the present invention has been described in detail above, those skilled in the art to which the present invention pertains may make various changes without departing from the spirit and scope of the invention as defined in the appended claims. It will be appreciated that modifications or variations may be made. Therefore, changes in the future embodiments of the present invention will not depart from the technology of the present invention.

As described above, according to the present invention, in the use of the e-receipt introduced as the e-commerce and the e-payment becomes more and more common, each person purchases a different shopping mall, and the e-receipt form, e-signature, e-mail for each shopping mall is different. Since the signature verification key is different, it is possible to easily determine the validity of the e-receipt generated, and there is an advantage that the problem that occurs when manipulating or forging the e-receipt can be solved at the source.

Claims (9)

An electronic receipt preparation server for issuing an electronic receipt to a client who purchased an item through the Internet; An electronic receipt receiving client receiving the electronic receipt issued by the electronic receipt preparing server when the article is purchased; An electronic receipt acquisition server receiving a request for processing an electronic receipt from the electronic receipt receiving client; An electronic receipt notarization server for authenticating whether the electronic receipt transmitted from the electronic receipt acquiring server is normally usable; A certificate issuing server for issuing a certificate to the electronic receipt receiving client or the electronic receipt creator in order to confirm the identity of the electronic document creator and other electronic commerce matters; A financial server for issuing a payment means to the electronic receipt receiving client; In the electronic receipt issuing method in a system comprising a payment relay server for intermediary payment of goods payment between the electronic receipt preparation server and the financial server, After the electronic receipt preparing server, the electronic receipt receiving client, the payment relay server, and the financial server access the certificate issuing server, the electronic signature verification key is registered under the management of a public institution operating the certificate issuing server. (A) receiving a certificate of its own; After the step (a), the electronic receipt receiving client accessing the electronic receipt creation server and receiving a certificate of a store including an electronic signature verification key of a store operating the electronic receipt creation server (b); After the step (b), the electronic receipt receiving client accesses the electronic receipt creation server, and download and install the electronic signature verification module for electronic commerce and the electronic receipt verification / management module of the electronic receipt creation server ( c); (D) after the step (c), the electronic receipt receiving client accesses the electronic receipt preparing server, searches for a product for performing an electronic commerce, and sets and pays for the purchased product; (E) after the step (d), the electronic receipt receiving client or the electronic receipt preparing server delivering the payment information to the payment relay server; (F) after the step (e), the payment relay server transmitting the payment information to the financial server; (G) after the step (f), the financial server transmitting a card approval number to the electronic receipt preparing server through the payment relay server; (H) after the step (g), the electronic receipt preparation server generates an electronic receipt including predetermined data, and transmits the electronic signature to the electronic receipt receiving client by using an electronic signature generation key; After the step (h), checking the electronic signature received by the electronic receipt receiving client with the verification key of the electronic receipt preparation server, and registering and managing the electronic receipt in the electronic receipt verification / management module; After the step (i), the electronic receipt receiving client outputs and confirms the electronic receipt in a predetermined form by using the electronic receipt verification / management module, and then transmits the electronic receipt to the electronic receipt receipt server; After the step (j), the electronic receipt receipt server requesting the electronic receipt notarization server to confirm the authenticity and dual use of the electronic receipt, and receiving result data (k); And After the step (k), in accordance with the result data, the electronic receipt receipt server, characterized in that it comprises the step (l) of paying the bill. The method of claim 1, The electronic receipt issuing method of claim 1, wherein the electronic receipt receiving client can be further issued a certificate of the shop even if the client is connected to the certificate issuing server. The digital signature verification module of claim 1, wherein An electronic receipt issuance method comprising: a hash function for verifying the authenticity of an electronic signature generated when performing an electronic commerce and a library implementing the electronic signature algorithm. The method of claim 1, wherein the predetermined data in step (h) is Issuance of an electronic receipt comprising the serial number, trade name, telephone number, address, representative name, type of goods, quantity, amount, login ID, credit card name, authorization number, commerce date and time data of the electronic receipt Way. The electronic receipt of claim 1, wherein the electronic receipt is output in a predetermined form in step (j). Electronic receipt issuance method, characterized in that it comprises a specific phrase or symbol indicating that the electronic receipt was issued for the first time. The method of claim 1, wherein the purchase goods payment in step (d) The electronic receipt issuing method, characterized in that further performed by using any one of the account transfer, the accumulated points obtained from the electronic receipt preparation server and digital cash (e-cash or e-money). The method of claim 1, wherein the payment information transfer in step (e) The electronic receipt issuing method, characterized in that the electronic receipt receiving client or the electronic receipt preparation server can be delivered directly to the financial server. The method of claim 1, wherein the card authorization number transmission in step (g) is performed. Electronic receipt issuance method, characterized in that the financial server can be sent directly to the electronic receipt preparation server. The method of claim 1, The electronic receipt issuance server and the electronic receipt issuing server further comprises the step of exchanging information on the electronic receipt with each other, characterized in that the electronic receipt issuing method.