WO2005034006A1

WO2005034006A1 - A communication device which is connected to terminal to be used for transaction, and transaction method using the same

Info

Publication number: WO2005034006A1
Application number: PCT/KR2004/002518
Authority: WO
Inventors: Bong-Mo Lee; Nam-Gon Kim
Original assignee: Mofac Soft Co., Ltd.
Priority date: 2003-10-04
Filing date: 2004-10-01
Publication date: 2005-04-14

Abstract

A conventional card payment system has a problem in that a user should possess a card for transactions and payment is performed using the card’s serial number. Provided is an external communication apparatus for performing payments, installed in a mobile communication terminal, including: a terminal connector, connected to an input/output terminal of the terminal, for receiving/transmitting data; a wireless transceiver wirelessly receiving or transmitting data from/to an external system; and a data storage unit storing an ID and a registration telephone number for transaction certification; and a controller extracting a telephone number of a terminal in which the external communication apparatus is installed, comparing the extracted telephone number with the stored registration telephone number for certification, and issuing a transaction approval if the extracted telephone number is the same as the stored registration telephone number for certification.

Description

A COMMUNICATION DEVICE WHICH IS CONNECTED TO TERMINAL TO BE USED FOR TRANSACTION, AND TRANSACTION METHOD USING THE SAME

TECHNICAL FIELD

The present invention relates to an adapter (communication apparatus) that can be installed in a mobile communication terminal such as a mobile phone, which includes a wireless transceiver, to be used for transaction settlement through communication with a card reader (transaction processor), and a transaction system and method using the adapter.

BACKGROUND ART Cards are now used more than cash for payments. The cards used for payments are classified into credit (chargeable) cards, pre-paid cards, debit cards, etc. according to payment methods. Items capable of being paid by such cards are also various. FIG. 1 shows a general credit card transaction settlement system. When a buyer purchases goods at a store that is a card franchisee and pays the price for the goods, the buyer presents a his/her own credit card 11 to a merchant. The credit card 11 is a magnetic card on which a unique number and the buyer's name are written. A credit card reader 12 recognizes information of the credit card 11 by passing the credit card 11 through a magnetic card reader. The credit card reader 12 transmits the information of the credit card 11 to a Value Added Network's (VAN's) system 13 to request an approval. The credit card reader 12 and the VAN's system 13 are connected to each other via a private line. The VAN's system 13 issues an application for an approval to a corresponding card company system 14 according to the received approval request. The card company system 14 receives the application for the approval from the VAN's system 13 and checks whether or not the credit card 11 is a defective card, the credit standing of the credit card's owner, and limitation of available amount of money for the credit card 11 , etc., and then transmits an approval result to the VAN's system 13. The VAN's system 13 receives the approval result from the card company system 14 and notifies an approval or a non-approval to the credit card reader 12 that has issued the application for the approval. Then, the merchant confirms the approval result, and presents a sale ticket to the buyer if the approval result is an approval (normal). The buyer signs the sale ticket, thereby completing a settlement using the credit card 11. Accordingly, in the conventional card transaction payment system, a user must possess a card and a payment is performed through the card's serial number.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram of a general credit card transaction settlement system. FIG. 2 is a block diagram of the internal configuration of an adapter according to an embodiment of the present invention; FIG. 3 illustrates how a terminal and the adapter shown in FIG. 1 are connected. FIGS. 4a and 4b are perspective views of the external structure of the adapter shown in FIG. 1. FIG. 5 is a block diagram of a server for registering and testing an adapter. FIGS. 6a and 6b are flowcharts illustrating a procedure in which a terminal receives/transmits data from/to a server through a telephone network. FIG. 7 is a flowchart illustrating a procedure for issuing an adapter according to an embodiment of the present invention. FIG. 8 is a flowchart illustrating a procedure for registering the adapter according to an embodiment of the present invention. FIG. 9 is a flowchart illustrating a procedure for updating a program included in the adapter. FIG. 10 is a flowchart illustrating a method of applying an integrity test to the adapter according to an embodiment of the present invention. FIG. 11 is a flowchart illustrating a procedure for checking whether or not a terminal in which the adapter is installed, is normally called. FIG. 12 is a block diagram of a transaction system using the adapter according to an embodiment of the present invention. FIG. 13 is a flowchart illustrating a transaction method using the adapter according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE INVENTION Technical Goal of the Invention The present invention provides an external-type adapter (communication apparatus), which is installed in a communication terminal, capable of performing transaction payments, and a system and method for performing transaction approvals and payments through issuance, authentication, and management of the adapter.

Disclosure of the Invention According to an aspect of the present invention, there is provided a communication apparatus for performing transactions, comprising: a terminal connector, connected to an input/output terminal of a terminal, for receiving or transmitting data from/to the terminal; a wireless transceiver, wirelessly receiving/transmitting data from/to a external transaction processor; a data storage unit storing a registration telephone number for transaction certification; and a controller receiving a telephone number of the terminal through the terminal connector, and comparing the received telephone number with the registration telephone number for transaction certification to determine whether to issue a transaction approval when performing transaction certification during the receiving/transmitting of data from/to the external transaction processor, wherein the communication apparatus is detachably installed in the terminal and performs transaction certification through communication with the external transaction processor. According to another aspect of the present invention, there is provided a method of transacting with a transaction processor using a communication apparatus installed in a terminal, the method comprising: if a settlement for a transaction is requested by the communication apparatus, extracting a telephone number of the terminal in which the communication apparatus is installed; comparing the extracted telephone number with a certification telephone number registered in the communication apparatus; issuing a transaction approval and performing a transaction if the extracted telephone number is the same as the certification telephone number; and if the transaction approval is issued, performing a settlement process for a transaction amount. According to another aspect of the present invention, there is provided a method for performing an integrity test of a communication apparatus which is installed in a terminal to be used for transactions, the method comprising: (a) the communication apparatus transmitting a communication apparatus's ID and a registration telephone number for certification to a server through the terminal; (b) the server determining whether at least two of the registration telephone number for certification received from the communication apparatus, a caller telephone number of the terminal extracted by the server, and a telephone number registered corresponding to the communication apparatus's ID in the server, are the same; and (c) if the at least two of the registration telephone number for certification received from the communication apparatus, the caller telephone number of the terminal extracted from the server, and the telephone number registered in the server are the same, issuing a transaction approval to the communication apparatus, or, otherwise, performing error processing. According to another aspect of the present invention, there is provided a method of registering a communication apparatus, which can be installed in the terminal to be used for transactions, the method comprising: extracting a telephone number of a terminal in which the communication apparatus is installed and transmitting an ID of the communication apparatus and the extracted telephoηe number of the terminal to a server through the terminal; the server extracting a caller telephone number of the terminal and determining whether the extracted caller telephone number is the same as the received telephone number of the terminal; if the extracted caller telephone number is the same as the received telephone number of the terminal, the server registering the caller telephone number as a certification telephone number corresponding to the communication apparatus's ID; the server transmitting the ID of the communication apparatus and the certification telephone number to the terminal; and the communication apparatus registering the certification telephone number received through the terminal. According to another aspect of the present invention, there is provided a server system for registering and checking a communication apparatus by communicating with a terminal in which the communication apparatus is installed, the server system comprising: an issuance unit assigning an ID to the communication apparatus; a communication unit receiving/transmitting data from/to the terminal; a registration unit registering a telephone number of the terminal in which the communication apparatus with an assigned ID is installed; and a checking unit checking whether the communication apparatus is used for transactions by determining whether at least two of a telephone number of the terminal in which the communication apparatus is installed, a certification telephone number registered in the communication apparatus, and a registered telephone number corresponding to the ID of the communication apparatus are the same.

Effect of the Invention According to the present invention, since an adapter is installed in a user's mobile terminal and registrations and approvals are performed based on a phone number of the mobile terminal, the user does not need to possess a card. Also, since transaction payments can only be performed by a registered terminal corresponding to the adapter, if an authentication telephone number registered in the adapter is not equal to a phone number of the terminal in which the adapter is currently installed, no transaction approval is made. Accordingly, even if the adapter is installed in a different terminal or if one of the adapter and the terminal is lost or stolen, malicious usage by others can be prevented. Also, since a server intermittently calls a terminal in which an adapter is installed, extracts a telephone number of the terminal, checks whether the extracted telephone number is the same as a telephone number registered in the server, and checks whether or not communication is available through the registered telephone number (that is, whether or not the terminal is suspended or released), it is possible to prevent illegal usage of the terminal such as maliciously manipulating of the contents of the internal memory of the terminal and to block payments while the terminal is not in a normal call-available state. Meanwhile, in order to check whether the terminal is in a normal call-available state, it is possible for the adapter to make a call via the terminal, instead of calling the terminal by a server. This checking procedure can be performed when the terminal is turned on or when a transaction approval is requested by a transaction processor. Therefore, according to the present invention, it is more possible to prevent malicious usage of an adapter.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described in detail with reference to the appended drawings. FIG. 2 shows the internal configuration of an adapter 35 according to an embodiment of the present invention. FIG. 3 illustrates how a mobile communication terminal 31 and the adapter 35 are connected. Referring to FIG. 3, the adapter 35 has a structure that can be inserted into an input/output terminal portion 33 of the mobile communication terminal 31. The adapter 35 is a communication device capable of performing data communication using a mobile communication function of the terminal 31 or through a transceiver therein. FIGS. 4a and 4b show the external structure of the adapter 35. Preferably, the adapter 35 is completely inserted into the input/output terminal 33 of the terminal 31 and not exposed to the outside. Referring to FIG. 2, the adapter 35 includes a terminal connector 21 electrically connected with the terminal 31 , a controller 22 for controlling the operations of the adapter 35, and an RF transceiver 23 for receiving/transmitting RF signals from/to a card reader. The adapter 35 includes a data storage unit 24 for storing an adapter ID. The data storage unit 24 also stores a telephone number of a terminal designated to the adapter 35 as a registered telephone number. These data are used for transaction authentication. A program memory 21 stores programs to be executed in the adapter 35, and performs functions and operations required for registrations and tests through a server or for transactions through a transaction processor. Also, the adapter 35 includes an encoding key storage unit 28 for storing an encoding key for encoding or decoding data, an encoding unit 26 for encoding data according to the encoding key, and a decoding unit 27 for decoding encoded data. The methods of creating and storing the adapter ID, the registered telephone number, and the encoding key will be described later with reference to FIGS. 7 and 8, and the encoding/decoding functions will be described later with reference to FIGS. 6a and 6b. Also, the check and settlement functions, which are performed by the controller 22 of the adapter 35, will be described later with reference to FIGS. 10, 11 , and 13. An RF receipt/transmission method can be used in a transit fare payment system for public transportation, a payment system of vending machines, etc. considering the convenience as a wireless communication method and the speed in processing. Settlement systems based on the RF receipt/transmission method are classified into pre-paid systems and chargeable systems according to payment methods. In a pre-paid system, a user performs transaction payments after paying a desired amount of money at a charge station and charging the amount of money in a settlement medium. In the chargeable system, the transaction amount is paid through a user's bank account after the user carries out a transaction. The terminal 31 in which the adapter 35 according to the present embodiment is to be installed is not limited to a cellular phone, and may be any device with a unique serial number or ID, allowing mobile communication. The terminal 31 may be implemented as a clock, an electronic organizer, PDA, etc. The adapter 35 shown in FIG. 3 receives a power supply using one of two methods: one in which a power supply is provided to the adapter 35 through a loop antenna when the adapter 35 is in a RF field and the other in which a power supply is provided to the adapter 35 from the terminal 31. When the adapter 35 is near a transaction processor, the adapter 35 preferably obtains a power supply from a RF field generated by the transaction processor. On the other hand, when the adapter 35 installed in the terminal 311 communicates with a server, the adapter 35 preferably receives a power supply from the terminal 31. The terminal 31 in which the adapter 35 is installed can include a function allowing a user to inquire transaction details which are originated from transaction by the adapter 35. That is, the terminal 31 can provide transaction details by date, period of time (week, month, semester, quarter, or year), or transaction store, through a screen. Also, the terminal 31 can store the transaction details in its memory and provide the transaction details to a user when the user issues an inquiry request. Also, a limit on a payment amount within which transactions are possible to be performed via the adapter 35 may be set. For example, it is possible to register an one-time payment limit, a one-day (one-week or one-month) payment limit, etc. in the adapter, to limit transactions based on the amount of the payment limits. A transaction will be rejected with a warning message if a transaction payment exceeding the limit is requested. Information associated with the payment limits can be registered in the adapter 35 when the adapter 35 is issued (FIG. 7) or when the adapter 35 is registered (FIG. 8). Also, it is possible to register the information associated with the payment limits in the adapter 35 through a keyboard of the terminal 31 by executing a program installed in the adapter 35 or the terminal 31 in the state that the adapter 35 is inserted into the terminal 31. FIG. 5 shows the configuration of a server 55 for registering and testing an adapter 52 according to an embodiment of the present invention through communication with a terminal 51 in which the adapter 52 is installed. Referring to FIG. 5, an issuance unit 553 assigns an adapter ID to the adapter 52 before the adapter 52 is provided to a user, and generates an encoding key used for encoding/decoding when data communication between the adapter 52 and the server 55 is performed. After the adapter ID and encoding key are stored in the server 55 and the adapter 52, the adapter 52 is issued to the user. Then, the adapter 52 is registered according to a registration procedure by a registration unit 555 so that the adapter 52 can be used for transactions. The communication unit 551 receives/transmits data from/to the terminal 51 and a security processor 552 performs decoding/encoding for security upon data communication. The registration unit 555 registers in the adapter 52 and the server 55 a phone number of the terminal 51 into which the adapter 52 will be inserted in order to allow transactions only when the adapter 52 is inserted into the specific terminal 51 with the registered phone number. An update unit 554 updates a program stored in a program memory of the adapter 52 when a service that can be provided by the adapter 554 is newly generated or changes, allowing the user to use the new service or the changed service. A test unit 556 determines whether the adapter 52 operates in a normal state, in order to ensure the safety of transactions. In detail, the test unit 557 performs tests to determine whether or not a telephone number registered in the adapter 52 corresponding to an adapter ID, a telephone number of the terminal 51 in which the adapter 52 is installed, a corresponding telephone number registered in the server 55, a telephone number of a terminal calling the server 55, etc. are the same or to determine whether or not the terminal 51 associated with the adapter 52 is in a normal call-available state. Such tests can be performed regularly at a predetermine time intervals or as necessary, and also some or all of the tests can be selectively performed through a communication network between the terminal 51 and the server 55 whenever a transaction by the adapter 52 is requested. Hereinafter, the issuance unit 553 will be described with reference to FIG. 7, the communication unit 551 and security processor 552 will be described with reference to FIGS. 6a and 6b, the registration unit 555 will be described with reference to FIG. 8, the update unit 554 will be described with reference to FIG. 9, and the test unit 556 will be described with reference to FIGS. 10 and 11. FIGS. 6a and 6b are a flowchart illustrating the operations performed when the terminal 51 shown in FIG. 5 receives or transmits data from/to the server 55 of FIG. 5 through a telephone network. When the terminal 51 receives/transmits data from/to the server 55 through the telephone network, it is preferable to perform an decoding/encoding process in order to prevent information hacking. FIG. 6a is a flowchart illustrating a process for encoding/decoding data of the adapter to transmit to the server through the terminal in order to ensure communication security. When the data is transmitted to the server from the terminal with the adapter through the telephone network, the data transmitted from the terminal is encoded and then the encoded data is decoded in the server. The data to be transmitted from the adapter to the server is encoded using a public key and a signature for the encoded data is created using a secret key (operation 60). The terminal transmits the data to the server through the telephone network (operation 61 ). The server receives the data transmitted from the terminal (operation 63), extracts a caller telephone number (callerJD) of the terminal that transmitted the data, confirms a signature for the received data using a certificate stored in the server, and restores the data using the secret key (operation 64). The server performs a predetermined process depending on the restored data. FIG. 6b is a flowchart illustrating a process in which the server encodes data, transmits the encoded data to the terminal and the adapter which is installed in the terminal receives and decodes the encoded data to restore original data. The server encodes data to be transmitted to the adapter using a public key, creates a signature for the encoded data using a secret key (operation 65), and then transmits the data to the terminal with the adapter through the telephone network (operation 66). The adapter receives the data from the server through the telephone network and the terminal (operation 68), confirms the signature for the received data using the public key, and then restores the data using the secret key (operation 69). The adapter performs a predetermined process according to the restored data. FIG. 7 is a flowchart illustrating a procedure in which the server issues the adapter according to an embodiment of the present invention. Referring to FIG. 7, before the adapter is provided to a user after the adapter is manufactured, an adapter ID is assigned to the adapter and a public key of the server to be used for encoding/decoding is stored in the adapter. If a newly manufactured adapter is connected to the server through a wired or wireless communication network (operation 71 ), the server creates and stores an adapter ID (operation 72) and simultaneously writes the adapter ID and a public key of the server to the memory of the adapter (operation 73). Then, the adapter is provided to the user (operation 75). Then, after the user performs a registration process as will be described in FIG. 8, the adapter is inserted in a specific terminal in order to use the adapter for transactions FIG. 8 is a flowchart illustrating a procedure for registering the adapter so that the adapter can be used in a specific terminal. Through a registration process for making a telephone number of the terminal in which the adapter is to be installed identical to a telephone number registered in the adapter, it is possible to allow transactions only when the adapter is installed in the specific terminal with the registered telephone number and reject transactions when the adapter is installed in a different terminal. Referring to FIG. 8, after the adapter is installed in the terminal to be used for transactions (operation 811 ), a manipulation (for example, pressing a key button for registration mounted on the adapter or the terminal) for starting the registration procedure is performed. Then, the adapter extracts a telephone number of the terminal (operation 812). Subsequentially, a public key and secret key are created (operation 813), a CSR (Certification Service Request) for requesting an issuance of a certification is generated on the basis of the secrete key and public key (operation 814), and an adapter ID, the telephone number and the CSR are transmitted to the server (83). A series of operations from "A" to "B" as described in FIG. 6a is performed between "A" and "B" of FIG.8 when data is transmitted from the terminal to the server (Hereinafter, symbols "A" and "B" depicted in other figures are used as the same meanings.) In this case, a requesting procedure to the server is "registration" and data to be transmitted are "adaptor ID and telephone number" (83). Then, the server extracts the telephone number (caller telephone number) of the terminal that transmitted the data (operation 851 ), and determines whether the extracted caller telephone number is the same as the telephone number received from the terminal (operation 852). If both the telephone numbers are the same (operation 853) and registers the caller telephone number as certification information corresponding to the adapter ID received from the terminal (operation 854), the server creates and stores a certification on the basis of the public key and the adapter ID, and otherwise, the registration procedure ends in error. The server transmits the adapter ID and a certification telephone number to the adapter through the telephone network and the terminal 511 in order to register the adapter (87). After the registration procedure is complete, the sever provides information indicating the result of registration as a text or sound message to the terminal. For example, if the registration procedure is successfully complete, an adapter ID and a registration telephone number for certification which are to be registered in the adapter are displayed together with a message relating to registration, and if an error is generated during the registration process, an error message is displayed. The server can confirm personal information such as the user's gender and age on the basis of the registration telephone number of the terminal with the adapter. The server can store predetermined information in the adapter so that a fare suited to the user's status can be applied in a differential fare system (for example, differential application of fares based on whether the user is a general person, a student or a child for a subway fare system) in which different fares are applied according to the user's gender, age, etc. Then, a transaction process can apply a proper fare in a fare system according to the information stored in the adapter 52. The server may receive the personal information for the user of the terminal 51 from the user and store it, or the server may obtain the personal information from a terminal service server (for example, a telephone office or mobile communication company). A series of operations from "C" to "D" as described in FIG. 6b is performed between "C" and "D" of FIG.8 when data is transmitted from the server to the terminal (Hereinafter, symbols "C" and "D" depicted in other figures are used as the same meanings.) In this case, a procedure to be performed in the terminal is "registration" and data to be transmitted are "adaptor ID and certification telephone number" (87). When data is transmitted from the server to the terminal, as indicated by the dotted line in FIG. 8, the terminal performs registration and the sever transmits an adapter ID and a certification telephone number (87). The adapter determines whether a telephone number of the terminal in which the adapter is installed is the same as a certification telephone number received from the server (operation 881 ). If both the telephone numbers are the same, the adapter stores the certification telephone number transmitted from the server as certification information in the memory (operation 882) in order to use the certification information for transaction certification when the adapter is used in transaction while installed in the terminal (see FIG. 13). Meanwhile, when the adapter is installed in the terminal, a process for checking whether the adapter is installed in a terminal established in the registration procedure can be performed regularly or frequently. In particular, when the terminal is turned on, it is checked whether or not the adapter is installed and then whether or not the telephone number of the terminal is correct (operations 82-85 of FIG. 8). Preferably, if the telephone number of the terminal is exact, information for operating the adapter normally is stored in the server and/or adapter. Otherwise, information for limiting the use of the corresponding adapter is stored in the server and/or adapter. FIG. 8 is a flowchart illustrating a registration process when an adapter in an initial state is first used for a terminal. In order to use an adapter, which is already registered, in another terminal (for example, when a user's terminal is replaced by a new terminal), a re-registration process can be performed to use the existing adapter in the new terminal. If a re-registration process for a terminal is started, the server extracts a telephone number of the terminal, and checks whether a registered telephone number stored corresponding to an adapter ID of an adapter is the same as the extracted telephone number of the terminal. If the telephone numbers are different from each other, the extracted telephone number is registered as a new registration telephone number for certification. In such a re-registration process, it is possible to check whether or not a user wanting the re-registration is the existing user. To check whether or not the user wanting the re-registration is the existing user, the server makes the user input a telephone number of the existing terminal through the terminal and then checks whether or not the input telephone number is the same as a registered telephone number stored in the server. If the user's ID and password are registered during the registration of the corresponding adapter, a procedure for confirming the user's ID and password can be performed. FIG. 9 is a flowchart illustrating a procedure for updating a program installed in the adapter. When a service performed by the adapter is newly set up or changed, a program stored in a program memory of the adapter is updated so that the user can use the new service or the changed service. First, a update request for programs installed in the adapter is received (operation 91 ). The update request can be issued when the user presses a key button for update mounted on the adapter or terminal. If versions of the programs are updated in the server, the server can directly call the terminal and update the programs. Then, the adapter extracts version information of the programs (the version information includes various hard-ware specifications or software versions) installed in the adapter (operation 92). Here, the update request can be performed by pressing a download key for update included in the adapter. Also, the program version information can include specifications for hardware as well as software installed in the adapter. The terminal transmits an adapter ID of the adapter, a certification telephone number registered in the adapter, and the program version information to the server through the telephone network (operation 93). The server analyzes the program version information received from the adapter, selects programs to be updated, packages the selected programs, and transmits the packaged programs to the adapter through the telephone network and the terminal so that the adapter can perform a program update process (operation 95). The adapter stores the programs received from the server in the program memory and updates the programs (operation 96). After the adapter is softwarily reset, the adapter can operate according to the updated programs (operation 97). Thus, the user can get services corresponding to the updated programs. Also, various transaction processors and adapters can be used according to applications. For example, transaction processors located in gates of subway stations are different from those used for vending machines in processes for performing transactions with adapters. Therefore, corresponding adapters must have corresponding appropriate programs. It is preferable to install in advance a program making the adapter to operate appropriately for all types of transaction processors. However, since new types of transaction processors are being developed all the time due to the increase of applications, a case where a different program from existing programs are required exists. In this case, if a user puts an existing adapter on a new transaction processor, the adapter recognizes that a transaction through its internal program is impossible and performs a update process as shown in FIG. 9 to allow a direct transaction with a new transaction processor. When the adapter approaches the transaction processor, the transaction processor determines whether or not the transaction processor can transact with the adapter using the adapter's internal program and transmits the determined result to the adapter. If the updating of the programs are complete, information for the contents and use method of the new service or the changed service provided from the updated program can be transmitted as a text message to the terminal. If the hardware/software specification of the user's adapter cannot support the new or changed service, a message related to a service support is preferably transmitted to the user's terminal so that the user can recognize the updated state. FIG. 9 is a flowchart for explaining a procedure for updating a program installed in the adapter. If a program for controlling an adapter is installed in a terminal with the adapter, the program can also be updated through the procedure described above. In this case, version information of the program installed in the terminal is transmitted to the server together with the corresponding adapter ID, the server transmits a program most suitable to the corresponding hardware and software of the adapter and/or terminal to the terminal. Then, the terminal receives the program and stores it in the memory of the terminal and/or adapter. FIG. 10 is a flowchart illustrating a method of applying an integrity test to the adapter according to an embodiment of the present invention. The adapter is registered by the registration process illustrated in FIG. 8 so that the adapter is directly associated with the telephone number of the terminal. The integrity test of FIG. 10 is provided to check whether the adapter is installed in a corresponding terminal which is set in the registration process, whether certification information stored in the memory of the adapter is changed, and whether information on relation between the adapter and the terminal is the same as information registered in the server. Therefore, it is possible to prevent the malicious use of the adapter and detect where counterfeiting or alterations occurs. Such an integrity test can be performed regularly or as necessary. The adapter extracts a telephone number Q) of the terminal in which the adapter is installed (operation 101 ), and transmits an adapter ID, the telephone number Q⁾ extracted from the terminal, and a registration telephone number © for certification stored in the adapter, to the server through the telephone network (operation 102). The server extracts a caller telephone number © of the terminal that' transmitted the data (operation 104), and determines whether the terminal telephone number Q> and the registration telephone number © which are received from the adapter, the caller telephone number © extracted from the server, and a telephone number © registered corresponding to the adapter ID in the server, are all the same (operation 105). If all of the telephone numbers are the same, the server determines that the terminal is in a normal state and updates a check date of the integrity test (operation 107). If not all of the telephone numbers are the same, the server determining the integrity test ends in error (operation 108). The server transmits a result of the integrity test to the adapter through the telephone network and the terminal (operation 109) and the adapter performs integrity checking or error processing. In operation 105, instead of the most rigorous test in which all of the four telephone numbers are compared, a simple comparison method can be used. For example, the adapter can compare the telephone number © extracted from the terminal by the adapter with the registration telephone number © stored in the adapter, and if both the telephone numbers are the same, the server determines whether the remaining telephone numbers are the same as the compared telephone number. Also, it is possible that the comparison with the caller telephone number © is omitted and it may be determined only whether the registration telephone number © stored in the adapter is the same as the telephone number © registered corresponding to the adapter ID in the server. Accordingly, after at least two of the four telephone numbers are compared, it may be determined that a corresponding transaction should be rejected if the two telephone numbers are not the same. In this case, measures such as transaction suspension can be taken to the corresponding adapter. FIG. 11 is a flowchart illustrating a procedure for checking whether a terminal which is registered in the server to be used for an adapter installed therein is in a normal call-available state. The server can limit transactions by the adapter if the use of the terminal is suspended or terminated due to the loss of the terminal, fare nonpayment, etc. The checking procedure can be performed regularly, as necessary, or whenever a transaction request is issued by the adapter in order to ensure the safety of transactions, The server requests a call to the terminal using a telephone number registered for the adapter (operation 112). Then, initial session information which is generated according to a call request between a base station and the terminal is analyzed (operation 113), thereby checking whether the terminal is in a normal call-available state, that is, whether the terminal is in a call coverage area, whether the terminal is in a call allowable state, whether the terminal is in a call suspension state, etc. If the terminal is not in the call coverage area (operation 114), the checking procedure is again performed next time, and if the terminal is in the normal communication state (operation 115), a check time is registered to represent that transactions are available (operation 116). Meanwhile, if the terminal is in the call suspension state (operation 117), transactions by the adapter installed in the terminal are rejected. The server sets transaction rejection information so that no transaction using the certification telephone number registered for the adapter ID is carried out for the terminal with the corresponding adapter ID, and can provide the transaction rejection information to the respective card readers. Meanwhile, if it is determined that a call suspension state of the terminal is released in the following check procedure and the normal call state is restored, the server allows normal transactions through the terminal. Meanwhile, in FIG. 11 , to check whether the terminal is in the call allowable state, a method in which the server calls the terminal is used. In another embodiment, there is provided a method in which the adapter installed in the terminal controls the terminal to call a specific telephone number (for example, a telephone number set by the server to check whether the terminal is in a normal communication state). For example, the procedure of FIG. 11 can be performed at the time set by the internal program of the adapter. If it is determined that the terminal is in the call suspension state, transaction rejection information is stored in the adapter. If the adapter tries to transact with a transaction processor later, the transaction processor determines that the adapter is in a transaction rejection state and rejects the transaction. Also, the process for checking the call allowable state can be performed whenever the adapter installed in the terminal tries to set a RF communication with a transaction processor. Before the adapter transacts with a transaction processor, the process for checking the call allowable state can be performed through the terminal. If it is determined that the terminal is in the call allowable state, the determined result is transmitted from the adapter to the transaction processor, so that the transaction processor performs a transaction with the adapter. FIG. 12 is a block diagram of a transaction system using the adapter according to an embodiment of the present invention. A terminal 121 can be used for transactions after the registration procedure by a server and an adapter 122 is connected to an input/output terminal of the terminal 121. The adapter 122, which is connected to the terminal 121 , is registered by the server and then transmits transaction information including telephone number information to the transaction processor 123 through mobile data communication, thereby performing a transaction. The transaction processor 123 includes an RF transceiver 1231 for receiving or transmitting RF signals from/to the adapter 122, and a card reader 1233 for performing transaction approvals and settlement through communications with a VAN's server 124 and a card company 125. Here, the transaction processor 123 may be any type of transaction processor used for payments in card stores, for transit fare payments in gates of subway stations, in buses, or in toll gates, for payments for vending machines, or for charge payments in theaters or parks. The RF transceiver 1231 included in the transition reader 123 receives information such as a telephone number, etc. transmitted from the adapter 122. The card reader 1233 performs a settlement procedure for a transaction amount according to the procedure of FIG. 13 on the basis of the information received from the adapter 122. Meanwhile, a process for determining whether or not to approve a transaction between the adapter 122 and the transaction processor 123 can be performed in the adapter 122. When a transaction approval is issued according to the determined result, the adapter 122 can transact normally with the transaction processor 123. The transceiver 1231 included in the transaction processor 123 can be embedded in the main body of a card reader 1233 for reading a magnetic stripe card or can be located separately from the main body. As a data communication method between the adapter 122 and the transaction processor 123, an RF signal method has been described above. However, the RF signal method is provided as an exemplary method for interactive wireless communication. Accordingly, a wireless communication method using an optical signal (for example, infrared light), a magnetic signal, etc. can be used. FIG. 13 is a flowchart illustrating a transaction method using the adapter according to an embodiment of the present invention. In a transaction method using the simple comparison process, it is determined whether a certification telephone number registered in an adapter is the same as a telephone number of a terminal actually connected to the adapter and a transaction approval is set according to the determined result. At this time, the transaction approval process between the terminal/adapter of the user and the transaction processor is performed in an off-line state. If a payment for a transaction is requested by the terminal with the adapter (operation 131), the adapter extracts a telephone number of the terminal (operation 132). Then, the adapter compares the extracted telephone number with a certification telephone number registered in the adapter (operation 133). If both the telephone numbers are the same (operation 134), the adapter transmits information indicating a normal state to the transaction processor and the transaction processor issues a transaction approval and performs the transaction requested by the adapter (operation 135). If the telephone numbers are different from each other, the adapter transmits information indicating an abnormal state to the transaction processor and the transaction processor performs error processing (operation 136). If the transaction approval is issued, a settlement process for the transaction is performed. In transactions by the adapter, a telephone number of a terminal registered for each adapter, an adapter ID assigned to each adapter, or a user's payment account number can be used as an identifier ID for settlement in a transaction processor, a bank, a server, etc. The comparison operations (operations 133 and 134) shown in FIG. 13 can be performed by the transaction processor in stead of the adapter. For this, the adapter transmits the certification telephone number stored in the memory and the telephone number extracted from the present terminal to the transaction processor, and the transaction processor sets a transaction approval according to whether both the telephone numbers are the same. FIG. 13 illustrates a method for issuing a transaction approval in the off-line state on the basis of the telephone number registered in the adapter. However, it is also possible that after the terminal and the server, or the transaction processor and the server are connected to each other on-line whenever a transaction request is issued by the adapter, the checking procedure described above with reference to FIGS. 10 and/or 11 is performed. In particular, if an amount of a transaction through the adapter exceeds a predetermined amount, it is preferable that the terminal in which the adapter is installed or the transaction processor communicating with the adapter is automatically connected to the server and the server performs the checking process. Also, the transaction processor can authenticate an adapter on the basis of a black list (information for adapter IDs in which transaction rejections or limitations are set) downloaded from the server or bank. As a payment method, a chargeable, debit, or pre-paid method can be used. The adapter can be set to use one of the payment methods or selectively use one of a plurality of payment methods for each transaction. In the pre-paid method, information for a pre-paid amount is stored in the adapter, and a payment amount generated in a transaction is immediately drawn from the pre-paid amount. If the payment amount for the transaction exceeds the pre-paid amount, error processing is carried out without performing the transaction payment. As such, the pre-paid method is based on off-line processing between the terminal/adapter and the transaction processor. In principle, the debit and chargeable methods can include a certification operation of checking whether a settlement for transaction is allowable in the on-line state that the terminal or transaction processor is connected to the server. Meanwhile, a method in which a transaction is performed in an off-line state through the simple approval process using the telephone number comparison process of FIG. 13 and then the transaction processor is allowed to regularly access the server and perform settlement can be used. The method is appropriate when small sum payments such as transit fares or charges for vending machines, or when a rapid transaction payment is required. Also, the method is effective in case that transactions should not be interrupted even though an error in on-line communication occurs. In the chargeable method, the transaction payment can be requested to a user using a telephone bill corresponding to the telephone number of the terminal, or the credit card bill of the telephone number of the terminal is associated with the serial number of the debit or credit card. In case that a transaction is performed in the off-line state as illustrated in FIG. 13, the server transmits information for a transaction-suspended terminal or adapter to the transaction processors of the card member stores, regularly or frequently, on the basis of information obtained during the checking process of FIG.10 or 11 , thereby reducing the possibility of malicious use due to the off-line transactions. That is, the transaction processor receives information (black list) for adapters or terminals in which transaction rejections or limitations are set, from the server, and stores the information. Then, a process for a transaction approval on the basis of the stored black list information may be additionally performed when a transaction as illustrated in FIG. 13 is performed. It is also possible to have the payment process using the adapter in on-line state according to transaction amounts or transaction methods. For example, if a transaction amount exceeds one hundred thousand Won, the off-line certification process of FIG. 13 is performed and then the on-line certification process is performed if the off-line approval is issued. Also, it is possible that a transaction performed by the terminal/adapter is performed only the off-line method, only the on-line method, or a combination of the on-line method and the off-line method or one of the methods is selectively performed in each transaction, according to the characteristics of goods/services carried by a card member store. In the case where the adapter according to the present invention is used for paying a subway fare, if a user puts a terminal with the adapter near a data reader located at a gate of a subway station, the data reader confirms a transaction approval (see FIG. 13) and transmits information such as information of the subway station and time information to the adapter, to allow the user to pass through the gate. The adapter stores the information transmitted from the data reader. When the user reaches a destination station and puts the adapter near a data reader located at a gate of the destination station, the data reader confirms a transaction approval (see FIG. 13) and then allows the user to pass through the gate. When the user tries to pass through the gate by putting the adapter near the data reader, the on-line certification process for comparing a telephone number registered in the server with the telephone number of the terminal in which the adapter is installed, as well as the off-line certification process of FIG. 13, can be performed in the entrance station and destination station, thereby ensuring safer transactions. The data reader receives the entrance station information and time information, etc. from the adapter, calculates a transit fare, and records a transaction date and the transit fare therein together with the terminal telephone number and adapter ID information. The transaction information can be transmitted from the data reader to the adapter and stored in the adapter. The server is connected on-line to a data reader located in each subway station at a predetermined time, collects transaction details stored in a recording unit of the data reader, and performs settlement according to the transaction details. Meanwhile, the transaction method performed by the terminal/adapter according to the present invention can be used for electronic commercial transactions through the Internet. In this case, a computer or terminal performing the electronic commercial transactions must include a transceiver capable of wirelessly communicating with the adapter and software allowing transactions by the adapter has to be installed in advance in a client's computer and a shopping mall server. A client accesses a shopping mall server through a computer connected to the Internet, searches for goods, selects items to purchase, fills out am order form. A payment method using an adapter is selected for settlement, and then information of the adapter received by a transceiver of the computer is transmitted to the shopping mall server. The shopping mall server can set a transaction approval using the methods described above with reference to FIGS. 10, 11 , and 13, on the basis of the information transmitted from the adapter. Therefore, it is possible to prevent personal information from being exposed and ensure safer transactions, compared with a conventional method in which a transaction approval is set by a card serial number/valid terms. The present invention can also be embodied as computer readable code on a computer readable recording medium. The computer readable recording medium is any data storage device that can store data which can be thereafter read by a computer system. Examples of the computer readable recording medium include read-only memory (ROM), random-access memory (RAM), CD-ROMs, magnetic tapes, floppy disks, optical data storage devices, and carrier waves (for example, transmission through Internet). The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion. While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it will be understood by those of ordinary skill in the art that various changes in form and details may be made therein without departing from the spirit and scope of the present invention as defined by the following claims.

Claims

CLAIMS 1. A communication apparatus for performing transactions, comprising: a terminal connector, connected to an input/output terminal of a terminal, for receiving or transmitting data from/to the terminal; a wireless transceiver, wirelessly receiving/transmitting data from/to a external transaction processor; a data storage unit storing a registration telephone number for transaction certification; and a controller receiving a telephone number of the terminal through the terminal connector, and comparing the received telephone number with the registration telephone number for transaction certification to determine whether to issue a transaction approval when performing transaction certification during the receiving/transmitting of data from/to the external transaction processor, wherein the communication apparatus is detachably installed in the terminal and performs transaction certification through communication with the external transaction processor.

2. The apparatus of claim 1 , wherein the controller determines whether the terminal is in a normal state before issuing the transaction approval.

3. A method of transacting with a transaction processor using a communication apparatus installed in a terminal, the method comprising: if a settlement for a transaction is requested by the communication apparatus, extracting a telephone number of the terminal in which the communication apparatus is installed; comparing the extracted telephone number with a certification telephone number registered in the communication apparatus; issuing a transaction approval and performing a transaction if the extracted telephone number is the same as the certification telephone number; and if the transaction approval is issued, performing a settlement process for a transaction amount.

4. The method of claim 3, before the issuing of the transaction approval, further comprising at least one of: determining whether at least two of the telephone number of the terminal in which the communication apparatus is installed, the certification telephone number registered in the communication apparatus, and a telephone number registered in the server corresponding to the communication apparatus, are the same, thereby checking whether a transaction by the communication apparatus is permissible; and checking whether the terminal with the communication apparatus is in a normal call state.

5. The method of claim 3, wherein the settlement process is performed using at least one of a pre-paid method, a debit method, and a chargeable method.

6. The method of claim 3, wherein, in the settlement process, a payment for the transaction is demanded when a telephone bill corresponding to the telephone number of the terminal is to be demanded or when a card bill corresponding to a user's card number is to be demanded.

7. The method of claim 3, further comprising determining whether or not to issue a transaction approval to a communication apparatus which has requested a transaction on the basis of black list information for communication apparatuses in which information on rejection or allowance for transaction by each communication apparatus is set, stored in the transaction processor.

8. A method for performing an integrity test of a communication apparatus which is installed in a terminal to be used for transactions, the method comprising: (a) the communication apparatus transmitting a communication apparatus's ID and a registration telephone number for certification to a server through the terminal; (b) the server determining whether at least two of the registration telephone number for certification received from the communication apparatus, a caller telephone number of the terminal extracted by the server, and a telephone number registered corresponding to the communication apparatus's ID in the server, are the same; and (c) if the at least two of the registration telephone number for certification received from the communication apparatus, the caller telephone number of the terminal extracted from the server, and the telephone number registered in the server are the same, issuing a transaction approval to the communication apparatus, or, otherwise, performing error processing.

9. The method of claim 8, wherein in operation (a), the communication apparatus extracts a telephone number of a terminal in which the communication apparatus is installed, to transmit the extracted phone number to the server, and in operation (b), the server compares the extracted telephone number with the at least one of the registration telephone number for certification received from the communication apparatus, the caller telephone number of the terminal extracted from the server, and the telephone number registered in the server.

10. A method of registering a communication apparatus, which can be installed in the terminal to be used for transactions, the method comprising: extracting a telephone number of a terminal in which the communication apparatus is installed and transmitting an ID of the communication apparatus and the extracted telephone number of the terminal to a server through the terminal; the server extracting a caller telephone number of the terminal and determining whether the extracted caller telephone number is the same as the received telephone number of the terminal; if the extracted caller telephone number is the same as the received telephone number of the terminal, the server registering the caller telephone number as a certification telephone number corresponding to the communication apparatus's ID; the server transmitting the ID of the communication apparatus and the certification telephone number to the terminal; and the communication apparatus registering the certification telephone number received through the terminal.

11. A server system for registering and checking a communication apparatus by communicating with a terminal in which the communication apparatus is installed, the server system comprising: an issuance unit assigning an ID to the communication apparatus; a communication unit receiving/transmitting data from/to the terminal; a registration unit registering a telephone number of the terminal in which the communication apparatus with an assigned ID is installed; and a checking unit checking whether the communication apparatus is used for transactions by determining whether at least two of a telephone number of the terminal in which the communication apparatus is installed, a certification telephone number registered in the communication apparatus, and a registered telephone number corresponding to the ID of the communication apparatus are the same.

12. A computer-readable recording medium having embodied therein a computer program for executing any one of claims 3 through 10.