Apparatus for authentication and payment based on web, method for authentication and payment based on web, system for authentication and payment based on web and non-transitory computer readable storage medium having computer program recorded thereon

1. A system of authentication and payment for a transaction generated through a web-based transaction device, comprising:

a first processor;

a first memory storing first instructions thereon, the first instructions when executed by the first processor cause the first processor to:

encode and store a credit card number,

divide a credit card authentication value into an information block 1 and an information block 2 by encoding the credit card authentication value, wherein the information block 1 is used for decoding the information block 2 , and the credit card authentication value includes at least one of a valid period of a credit card, first two digits of a card secret number, and a birth date,

transmit the information block 1 to a second processor, and

delete the information block 1 ; and

the second processor; and

a second memory storing second instructions thereon, the second instructions when executed by the second processor cause the second processor to:

encode the information block 1 on the basis of payment PIN (Personal Identification Number) information received from user equipment and stores the encoded information block 1 , and

decode the encoded information block 1 on the basis of the payment PIN information and transmit the information block 1 to the first processor, responsive to a request from the first processor,

wherein responsive to the request provided to the second processor, the first processor receives the information block 1 from the second processor and decodes the credit card authentication value encoded on the basis of the information block 1 and the information block 2 , by decoding the information block 2 on the basis of the received information block 1 ,

wherein when the transaction is generated through the web-based transaction device, the second processor receives a temporal virtual card number and information about payment details from the web-based transaction device, requests the user equipment to send the payment PIN information for decoding the information block 1 , creates a first transaction authentication value using the information about payment details and member information, and transmits the first transaction authentication value to the first processor, wherein the member information includes an email address, and

the first processor determines there is forgery by comparing a second transaction authentication value made by the first processor with the first transaction authentication value, and requests the second processor to send the information block 1 , responsive to determining there is no forgery.

2. The system of claim 1 , wherein the first processor creates a permission message to transmit to a credit card company on the basis of the credit card authentication value and the credit card number, and transmits the permission message to the credit card company.

3. The system of claim 2 , wherein encoding of the credit card number is performed on the basis of an HSM (Hardware Security Module) and a Hash,

encoding of the credit card authentication value is performed on the basis of the HSM, and

the information block 1 is encoded through an AES (Advanced Encryption Standard) on the basis of the payment PIN information in the second processor.

4. The system of claim 3 , wherein the first processor receives the credit card number and the credit card authentication value from the user equipment through a subscription procedure.

5. A method for authentication and payment for a transaction generated through a web-based transaction device, comprising:

encoding and storing, by a credit card permission request device, a credit card number;

dividing, by the credit card permission request device, a credit card authentication value into an information block 1 and an information blocks 2 by encoding the credit card authentication value, wherein the information block 1 is used for decoding the information block 2 , and the credit card authentication value includes at least one of a valid period of a credit card, first two digits of a card secret number, and a birth date;

transmitting, by the credit card permission request device, the information block 1 to a user authentication device and deleting the information block 1 ;

encoding, by the user authentication device, the information block 1 on the basis of payment PIN (Personal Identification Number) information received from user equipment and storing the encoded information block 1 ;

receiving, by the user authentication device, a temporal virtual card number and information about payment details from a web-based transaction device, when the transaction is generated through the web-based transaction device;

requesting, by the user authentication device, the user equipment to send the payment PIN information;

creating, by the user authentication device, a first authentication value using the information about payment details and member information, and transmitting the first transaction authentication value to the credit card permission request device, wherein the member information includes an email address;

determining, by the credit card permission request device, there is forgery by comparing a second transaction authentication value made by the credit card permission request device with the first transaction authentication value;

requesting, by the credit card permission request device, the user authentication device to send the information block 1 , when there is no forgery;

decoding, by the user authentication device, the encoded information block 1 on the basis of the payment PIN information and transmits the information block 1 to the credit card permission request device, when there is the request from the credit card permission request device; and

decoding, by the credit card permission request device, the credit card authentication value encoded on the basis of the information block 1 and the information block 2 by decoding the information block 2 on the basis of the information block 1 .

6. The method of claim 5 , further comprising:

creating, by the credit card permission request device, a permission message to transmit to a credit card company on the basis of the decoded credit card authentication value, and transmitting the permission message to the credit card company.