Patent ID: 8180686

Claim:
A multi-step authentication-based electronic payment method using a mobile terminal, an affiliated store server for selling products over a communication network, a Payment Gateway (PG) company server and a mobile communication company server, wherein the method comprises: (a) a purchase request verification step of sequentially transmitting order request information of a product requested to be purchased by a user computer to the affiliated store server and the PG company server, and verifying the product and a relevant affiliated store, based on the order request information received at the PG company server; (b) a user primary authentication performance and secondary authentication preparation step of sequentially transmitting information about a request for primary authentication of the user, received from the user computer, to the affiliated store server, the PG company server and the mobile communication company server, allowing the mobile communication company server to primarily authenticate the user, based on the primary authentication request information, and send a response indicating whether the primary authentication has been performed to the PG company server, allowing the PG company server, which verifies the primary authentication of the user through the mobile communication company server, to generate a One Time Password (OTP) for secondary authentication of the user and request the mobile communication company server to send a Short Message Service (SMS) message to transmit the generated OTP to the mobile terminal of the user, and allowing the mobile communication company server to transmit the OTP generated by the PG company server to the mobile terminal of the user through the SMS message; (c) a user secondary authentication step of inputting the OTP received through the SMS message to the user computer, and transmitting the OTP to the PG company server, thus allowing the PG company server to secondarily authenticate the user using the OTP; (d) a payment confirmation step of, after the primary and second authentication of the user have been completed, allowing the affiliated store server to request the PG company server to confirm information about a payment for the purchase-requested product and information about authentication of the user, and allowing the PG company server to confirm the information about the payment and authentication; and (e) a step of, after the payment confirmation step, allowing the affiliated store server to request the PG company server to process the payment for the purchase-requested product, allowing the PG company server to request the mobile communication company server to process the payment, and allowing the mobile communication company server to process the requested payment, and to transmit determination of whether the payment has successfully processed to the mobile terminal of the user through an SMS message.