JP2002015257A - System and method for information service and recording medium with recorded program thereof - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information service system which ensures high security for communication between a user's terminal of information service and an information server providing information. SOLUTION: The user's terminal 2 connects directly to the information server 11 over the control channel of ISDN and sends the information regarding authentication and settlement. The information server 1 while following received procedures for authentication and settlement generates certificate data certifying the procedures. The certificate data are sent to the user's terminal 2 via the control channel of ISDN. Then the user's terminal 2 connects the information server 1 via an information channel of ISDN through an Internet connection server 4 and the Internet 5 and sends the certificate data. The information server 1 compares the received certificate data with a copy of the certificate data sent to the user's terminal 2 and sends the service information to the user's terminal 2 through the Internet 5 when the both match each other.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information service system and method for ensuring high security in communication between a user terminal of an information service and an information server for providing information.
And a recording medium on which the program is recorded.

[0002]

2. Description of the Related Art CP (Contents Pro)
vider), when information is released, the HT
Publish information written in languages such as ML (Hyper Text Markup Language). The user on the information receiving side connects the computer terminal to an Internet connection server operated by an ISP (Internet Service Provider), and sends the information to the information server via the Internet connection server via HTTP (Hype).
r Text Transfer Protocol). Further, the user connects the computer terminal to the I
In order to connect to the Internet connection server operated by SP, PSTN (Public Network Communication)
Switch Telephone Network) and ISDN (Integrated S
ervices Digital Network) and other public networks,
Dial-up IP (Internet Protocol) connection or the like is used.

[0003]

However, in a method in which a user connects a computer terminal to an Internet connection server operated by an ISP and communicates all information with the information server on the other side via the Internet, the information is transmitted over the Internet. Had the risk of being stolen. More specifically, since the Internet is a system in which many servers relay information to a target server or terminal by relaying, a user connects to an information server, which sends the information to the Internet via an Internet connection server. There is a risk that ID information and passwords for authentication and settlement information relating to costs incurred with the information server may be stolen on the server in the middle. In the conventional information service, there are problems such as the spoofed information being connected to the information server by impersonating the user, and the payment information of the user being tampered with and the money being stolen. In order to improve these problems, information sent and received on the Internet is often encrypted, but as long as the Internet is used, on some server,
There is a problem that the risk of the information being transmitted being decrypted and being stolen is not eliminated. In addition, with respect to encryption, there has been a problem that the load on facilities for the system, such as installation of an authentication server, increases. In addition, there is a method of setting an effective time limit on information used for authentication by the information server. However, if an effective time limit is added to the user ID information, the user must re-acquire the ID information many times. There was a problem that it took time and effort. Further, in information services in recent years, information provided on an information server is not limited to one, and a plurality of contents may be provided by different providers. This is typified by a shopping mall on the Internet, in which a plurality of shops operated by different businesses sell different items. In such a shopping mall,
Since the settlement method differs for each store, the payment corresponding to each must be performed each time the product is purchased. In this case, there is a request to exchange payment information while connecting to the Internet, but there has been no corresponding system.

[0004] The present invention has been made in view of the above problems, and has as its object to provide an information service system that ensures high security in communication between an information service user terminal and an information server that provides information. And Specifically, the user terminal and the information server are connected by connection-type communication using circuit switching, and information related to authentication and settlement is transmitted and received while ensuring high security by circuit switching, and at the same time, the Internet It is an object of the present invention to provide an information service system and a method for transmitting and receiving information provided via a computer, and a recording medium on which the program is recorded.

[0005]

SUMMARY OF THE INVENTION In order to solve the above problems, the present invention relates to an information service method in an information server for providing information to a user terminal of an information service. Receives information about authentication and payment from the user terminal connected by connection-type communication and executes the procedure, and at the same time, creates certificate data for authentication and payment corresponding to the executed procedure and Certificate issuance processing, circuit switching network, Internet connection service provider's Internet connection server, and certificate for receiving certificate data related to authentication and settlement transmitted from user terminals connected via the Internet The certificate data for authentication and payment received from the user terminal is compared with the certificate data created by the information server. If it is determined that the certificate data related to authentication and settlement received from the user terminal is valid certificate data as a result of the certificate comparison process and the comparison, the Internet, the Internet connection server, and the circuit switching network And information providing processing for transmitting service information to the user terminal. With the above configuration, it is possible to transmit information related to authentication and payment, which is highly important and should not be stolen, from the user terminal to the information server without passing through the Internet, and without simultaneously exchanging connection lines.
The certificate data relating to authentication and settlement makes it possible to simplify the procedure of the user terminal and acquire information from an information server on the Internet.

[0006] The present invention is characterized in that, in the above information service method, the certificate comparison process includes a process of determining that the comparison result is invalid after a lapse of a predetermined time from the certificate data creation time of the information server. With the above configuration, it is possible to make certificate data that has been stolen unusable after a predetermined time.

[0007] The present invention is characterized in that in the above information service method, the certificate receiving process includes a process of decrypting the encryption of the certificate data encrypted by the user terminal. With the above configuration, security can be ensured by encrypting the certificate data relating to authentication and settlement sent over the Internet.

According to the present invention, in the above information service method, the certificate issuance process performs communication using a control channel of an ISDN line, and the information providing process includes an ISDN connection to a circuit switching network.
Communication is performed using an information channel of a DN line. With the above configuration, it is possible to perform the above-described service while minimizing the line occupancy.
Here, the communication using the control channel (Dch) of the ISDN line means, for example, information between users (UUI) set in a control signal of the control channel (Dch) conventionally used in the ISDN line. , Information channel (Bc
h) The function of transmitting and receiving between the calling and called terminals regardless of the connection.

According to the present invention, in the above information service method, the certificate issuing process performs communication using one information channel of the ISDN line, and the information providing process does not use the ISDN line in the circuit switching network. The communication is performed using the other information channel. With the above configuration, it is possible to transmit and receive a large amount of information at a high speed for transmitting and receiving authentication and settlement information or certificate data.

According to the present invention, in the above information service method, the certificate issuance processing is performed by using one of two prepared PSTN lines for communication, and the information providing processing is performed by two lines in the circuit switching network. The communication is performed using the other subscriber line which is not using the prepared PSTN line. With the above configuration, the above-described service can be implemented even in an area where the ISDN network is not applicable.

[0011] The present invention is an information server for providing information to a user terminal of an information service, wherein information relating to authentication and settlement is provided from a user terminal connected by connection-type communication using a circuit switching network. A certificate issuing means for receiving and executing a procedure, and at the same time, generating certificate data relating to authentication and settlement corresponding to the executed procedure and transmitting the certificate data to a user terminal; a circuit switching network; and an Internet connection service provider. An Internet connection server, a certificate receiving means for receiving authentication and settlement certificate data transmitted from a user terminal connected via the Internet, and an authentication and settlement certificate data received from the user terminal. A certificate comparing means for comparing with the certificate data created by the information server; If it is determined that the certificate data relating to authentication and settlement is valid certificate data, the Internet, an Internet connection server, and an information providing means for transmitting service information to a user terminal via a circuit switching network are provided. It is characterized by having been provided.

The present invention relates to a user terminal of an information service for acquiring information from the information server via the Internet, and relates to authentication and settlement to an information server connected by connection-type communication using a circuit switching network. A certificate information transmitting / receiving means for transmitting information and obtaining certificate data relating to authentication and settlement created by the information server; a circuit switching network; an internet connection server of an internet connection service provider; And a certificate transmitting means for transmitting the obtained certificate data relating to authentication and settlement to the information server.

[0013] The present invention is an information service system for providing information from an information server via the Internet, wherein the information service system includes the information server and the user terminal.

[0014] The present invention is a recording medium recording a program used for an information service in an information server for providing information to a user terminal of the information service, wherein the program is used for connection-type communication using a circuit switching network. A certificate that receives information related to authentication and payment from the user terminal connected to the server and executes the procedure, and at the same time, creates certificate data related to authentication and payment corresponding to the executed procedure and sends it to the user terminal. Issue processing, a circuit switching network, an Internet connection server of an Internet connection service provider, and a certificate reception processing for receiving authentication and settlement certificate data transmitted from a user terminal connected via the Internet. The certificate data related to authentication and payment received from the user terminal is stored in the certificate data created by the information server. A certificate comparison process of comparing the result of the comparison, when it is determined the certificate data relating to authentication and payment received from the user terminal as a valid certificate data, and Internet, and Internet access server,
An information providing process of transmitting service information to a user terminal via a circuit switching network is performed by a computer.

[0015]

Embodiments of the present invention will be described below with reference to the drawings. (First Embodiment) First, a first embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a block diagram showing a configuration of the first exemplary embodiment of the present invention. In this figure, reference numeral 1 denotes an information server on the information providing side used in the information service system for explaining the present embodiment. Reference numeral 2 denotes a user terminal used in the information service system according to the present embodiment. Reference numeral 3 denotes an I using a circuit switch connecting the information server 1 and the user terminal 2.
SDN. Reference numeral 4 denotes an Internet connection server for converting a communication mode for connecting an ISDN using circuit switching to the Internet using packet switching, and is provided by an Internet connection service provider.
Reference numeral 5 denotes the Internet connecting the Internet connection server 4 and the information server 1.

The information server 1 includes a terminal adapter 11, an authentication / settlement processing unit 12, a certificate issuance processing unit 13, a router 14, a certificate reception processing unit 15, a certificate comparison processing unit 16, And an information provision processing unit 17. The terminal adapter 11 establishes connection-type communication by circuit switching with the user terminal 2 via the ISDN 3. The authentication / settlement processing unit 12 receives information related to authentication or settlement transmitted from the user terminal 2 via the terminal adapter 11, and executes an authentication or settlement procedure. The certificate issuance processing unit 13 creates certificate data for certifying the authentication or settlement procedure executed by the authentication / settlement processing unit 12, and transmits the certificate data to the return user terminal 2. The router 14 is a communication unit that communicates with the user terminal 2 via the ISDN 3, the Internet connection server 4, and the Internet 5. The certificate reception processing unit 15 communicates with the user terminal 2 via the router 14.
, And outputs the certificate data to the certificate comparison processing unit 16. The certificate comparison processing unit 16 compares the certificate data received from the certificate reception processing unit 15 with a copy of the certificate data created by the certificate issuance processing unit 13 and transmitted to the user terminal 2. The comparison result is output to the information provision processing unit 17. The information provision processing unit 17 determines in the certificate comparison processing unit 16 that the certificate data relating to authentication and settlement received from the user terminal 2 is the same as the certificate data created by the certificate issuance processing unit 13. If the Internet 5, the Internet connection server 4,
The service information is transmitted to the user terminal 2 via the SDN 3.

The user terminal 2 comprises a terminal adapter 21, a certificate information transmission / reception processor 22, and a certificate transmission processor 23. The terminal adapter 21 communicates with the information server 1 via the ISDN 3
The communication by the N control channels (Dch) is established. At the same time, connection-type communication is established with the Internet connection server 4 using the ISDN information channel (Bch). The certificate information transmission / reception processing unit 22 transmits information related to authentication and settlement to the information server 1 via the ISDN control channel (Dch) via the terminal adapter 21, and is created and returned by the information server 1. Receive certificate data. The certificate transmission processing unit 23 transmits the certificate data acquired from the information server 1 to the information server 1 through the terminal adapter 21 via the ISDN information channel (Bch).

Here, the user terminal 2 is not limited to a terminal connected by wire communication, but may be a PSTN or ISDN.
Mobile phones and PHS connected to the base station via a wireless base station
(Personal Handyphone System), or a mobile communication terminal.

The terminal adapter 11 of the information server 1, the authentication / settlement processing unit 12, and the certificate issuance processing unit 1
3, a router 14, a certificate reception processing unit 15, a certificate comparison processing unit 16, an information provision processing unit 17, a terminal adapter 21 of the user terminal 2, a certificate information transmission and reception processing unit 22, The message transmission processing unit 23 may be realized by dedicated hardware in the information server 1 or the user terminal 2, respectively, and is configured by a memory and a CPU (Central Processing Unit). May be realized by loading a program for realizing the function of each unit in the memory into the memory and executing the program.

It is assumed that an input device, a display device, and the like (neither is shown) are connected to the information server 1 or the user terminal 2 as peripheral devices. Here, the input device refers to an input device such as a keyboard and a mouse. The display device refers to a CRT (Cathode Ray Tube) display device, a liquid crystal display device, or the like.

Next, the operation of the first embodiment will be described with reference to FIG. FIG. 2 is a sequence diagram illustrating the operation of the present embodiment shown in FIG. In FIG. 2, first,
The user terminal 2 uses the terminal adapter 21 to
A direct connection with the information server 1 is made via the control channel (Dch) of the DN (step S1). When the connection with the information server 1 is established, the user terminal 2 transmits information related to authentication or settlement to the information server 1 (step S).
2). In the information server 1 to which the information about the authentication or the settlement is transmitted, the authentication / settlement processing unit 12 receives the information about the authentication or the settlement and executes the procedure of the authentication or the settlement (Step S3). When the authentication or settlement procedure is executed, the certificate issuance processing unit 13 creates certificate data for certifying the authentication or settlement procedure executed by the authentication and settlement processing unit 12, and returns the certificate to the return user. The data is transmitted to the terminal 2 (step S4). Certificate issuance processing unit 13
Is returned and transmitted to the user terminal 2 via the ISDN control channel (Dch) (step S5). In the user terminal 2 that has received the certificate data, the certificate information transmission / reception processing unit 22 stores the certificate data (Step S6).

Next, the user terminal 2 uses the terminal adapter 21 to connect to the information server 1 via the Internet connection server 4 and the Internet 5 through the ISDN information channel (Bch) (step S7).
When the connection between the ISDN information channel (Bch), the Internet connection server 4 and the information server 1 via the Internet 5 is established, the certificate transmission processing unit 23
Transmits the certificate data to the information server 1 (step S8). The certificate data via the ISDN information channel (Bch), the Internet connection server 4 and the Internet 5 passes through the router 14 of the information server 1 and is received by the certificate reception processing unit 15 (step S9). The certificate data received by the certificate reception processing unit 15 is compared in the certificate comparison processing unit 16 with a copy of the certificate data created by the certificate issuance processing unit 13 and transmitted to the user terminal 2 ( Step S10). As a result of the comparison, certificate data related to authentication and settlement received from the user terminal 2 and
If it is determined that the certificate data created by the certificate issuance processing unit 13 of the information server 1 is the same, the information provision processing unit 17 transmits the user data via the Internet 5, the Internet connection server 4, and the ISDN 3. The service information is transmitted (downloaded) to the terminal 2 (step S1).
1). If it is determined here that the certificate data relating to authentication and settlement received from the user terminal 2 is not the same as the certificate data created by the certificate issuance processing unit 13 of the information server 1, as a result of the comparison, The information provision processing unit 17 does not transmit (download) the service information to the user terminal 2.

In step 8, the certificate transmission processing unit 23 of the user terminal 2 sends the certificate data to the information server 1 via the ISDN information channel (Bch), the Internet connection server 4, and the Internet 5. Is transmitted, or in step S11, the information provision processing unit 17 determines that the Internet 5, the Internet connection server 4,
When service information is transmitted to the user terminal 2 via the DN 3, information transmitted on the Internet 5 includes:
By performing the encryption, further security can be ensured, and in particular, the reliability of the certificate data can be increased.

Further, when the terminal downloads information from the data channel, the certificate data is used to notify the information server that the terminal is valid. Therefore, it is necessary that the same thing be changed plurally at the time of authentication and settlement so that a plurality of same things do not exist at the same time. Therefore, as a creation method, for example, it is conceivable to perform logical operation processing on data such as user ID information and date and time at the time of authentication settlement, and use a character code generated each time as certificate data. However, assuming that the certificate data has been stolen, the information server creates and sends the certificate data once and places a time limit on it,
It is necessary to ensure the validity of the certificate data. In the information server 1, the certificate comparison processing unit 16 replaces the certificate data received by the certificate reception processing unit 15 with the certificate data created by the certificate issuance processing unit 13 and transmitted to the user terminal 2. Even if it is determined that the result is the same as the copy, the comparison result is invalid after a predetermined time has elapsed from the time when the certificate issuance processing unit 13 created the certificate data. In this case, even if the certificate data is stolen on the Internet 5, the transmission of the certificate data from the legitimate user terminal 2 is performed in a short time, and there is no problem. It is not possible to use the contents of the information server by using the information on a regular basis, and it is possible to minimize the damage caused by the theft of the certificate data.

(Second Embodiment) Next, a second embodiment of the present invention will be described with reference to FIGS. In the second embodiment, the terminal adapter 21 of the user terminal 2 is used.
Is connected to the terminal adapter 11 of the information server 1 and one of the information channels (Bc
h), and at the same time, establish connection-type communication with the Internet connection server 4 using the other information channel (Bch) not using ISDN, thereby providing the same information service as in the first embodiment. This is an embodiment in the case of performing. The block diagram showing the configuration of the second embodiment of the present invention shown in FIG. 3 is composed of the same components as those shown in the block diagram of FIG. 2, and the terminal adapter 21 of the user terminal 2 and the information The communication between the terminal adapters 11 of the server 1 is changed from the control channel (Dch) of the ISDN to the information channel (Bch), and the operation of that portion is different from that of the first embodiment. Therefore, description of the same components will be omitted.

Next, the operation of the second embodiment will be described with reference to FIG. 4, focusing on the operations of the terminal adapter 21 of the user terminal 2 and the terminal adapter 11 of the information server 1. FIG. 4 is a sequence diagram illustrating the operation of the present embodiment shown in FIG. In FIG. 4, first, the user terminal 2 uses the terminal adapter 21 to directly connect to the information server 1 via one information channel (Bch) of the ISDN (step S1-1). When the connection with the information server 1 is established, the user terminal 2
Then, the information about the authentication or the settlement is transmitted (step S2). In the information server 1 to which the information about the authentication or the settlement is transmitted, the authentication / settlement processing unit 12 receives the information about the authentication or the settlement and executes the procedure of the authentication or the settlement (Step S3). When the authentication or settlement procedure is executed, the certificate issuance processing unit 13 creates certificate data for certifying the authentication or settlement procedure executed by the authentication and settlement processing unit 12 (Step S).
4). The certificate data created by the certificate issuance processing unit 13 is returned and transmitted to the user terminal 2 via the ISDN information channel (Bch) (step S5). In the user terminal 2 that has received the certificate data, the certificate information transmission / reception processing unit 22 stores the certificate data (step S
6).

Next, the user terminal 2 uses the terminal adapter 21 to communicate with the information server 1 via the Internet connection server 4 and the Internet 5 through the other information channel (Bch) not using ISDN. The connection is made (step S7-1). When the connection between the ISDN information channel (Bch), the Internet connection server 4 and the information server 1 via the Internet 5 is established, the certificate transmission processing unit 23 transmits the certificate data to the information server 1. (Step S8). ISDN information channel (Bch) and Internet connection server 4
Then, the certificate data via the Internet 5 passes through the router 14 of the information server 1 and is received by the certificate reception processing unit 15 (step S9). The certificate data received by the certificate reception processing unit 15 is compared in the certificate comparison processing unit 16 with a copy of the certificate data created by the certificate issuance processing unit 13 and transmitted to the user terminal 2 ( Step S10). As a result of the comparison, when it is determined that the certificate data relating to authentication and settlement received from the user terminal 2 is the same as the certificate data created by the certificate issuance processing unit 13 of the information server 1, the information provision processing unit 17 transmits (downloads) service information to the user terminal 2 via the Internet 5, the Internet connection server 4, and the ISDN 3 (Step S11). If here
As a result of the comparison, when it is determined that the certificate data relating to the authentication and settlement received from the user terminal 2 and the certificate data created by the certificate issuance processing unit 13 of the information server 1 are not the same, the information provision processing unit 17 Does not transmit (download) the service information to the user terminal 2.

Note that the encryption of the information to be transmitted on the Internet 5, the method of creating the certificate data, and the time limit for the certificate data are the same as those in the first embodiment, and therefore the description is omitted. .

(Third Embodiment) Next, a third embodiment of the present invention will be described with reference to FIGS. In the third embodiment, two Ps are prepared without using the ISDN.
This is an embodiment in the case where the same information service as in the first or second embodiment is performed using an STN line. FIG. 5 is a block diagram showing a configuration of the third exemplary embodiment of the present invention. In this figure, reference numerals 4 and 5 are the first,
Since the components perform the same operations as those of the second embodiment, the description is omitted here. Reference numeral 6 denotes an information server on the information providing side used in the information service system described in the present embodiment. Reference numeral 7 denotes a user terminal used in the information service system according to the present embodiment. Reference numeral 8 denotes a PSTN using circuit switching for connecting the information server 1 and the user terminal 2.

The information server 6 includes an authentication / settlement processing unit 12, a certificate issuance processing unit 13, a router 14, a certificate reception processing unit 15, a certificate comparison processing unit 16, an information provision processing unit. 17 and a modem 18. Among the constituent elements of the information server 6, those given the same reference numerals as those of the information server 1 described in the first embodiment are the same as those of the information server 1 of the first embodiment. Since the components perform the same operation, the description is omitted here. The modem 18 is connected via the PSTN 8
Establish connection-type communication with the user terminal 2 by circuit switching.

The user terminal 7 includes a certificate information transmission / reception processor 22, a certificate transmission processor 23, and a modem 24.
And a modem 25. Among the constituent elements of the user terminal 7, those assigned the same reference numerals as the constituent elements of the user terminal 2 described in the first embodiment are the user terminal 2 of the first embodiment. Since the components operate in the same manner as described above, the description is omitted here. The modem 24 establishes connection-type communication with the information server 1 via one of two prepared lines of PSTN 8 (line 1). The modem 25 has two PSs
TN8 line not used, the other (line 2)
To establish connection-type communication with the Internet connection server 4 via the Internet.

Here, similarly to the first embodiment, the user terminal 6 is not limited to a terminal connected by wire communication,
A mobile phone or PHS (Personal Handyphone System) connected to the PSTN or ISDN via a wireless base station
em) may be a mobile terminal or a mobile communication terminal.

As in the first embodiment, the authentication / settlement processing unit 12 of the information server 6 and the certificate issuance processing unit 1
3, a router 14, a certificate reception processing unit 15, a certificate comparison processing unit 16, an information provision processing unit 17, and a modem 18.
The certificate information transmission / reception processing unit 22, the certificate transmission processing unit 23, the modem 24, and the modem 25 of the user terminal 7
Each of the information server 6 and the user terminal 7 may be realized by dedicated hardware, or may be configured by a memory and a CPU (Central Processing Unit) to realize the functions of the above-described units. May be realized by loading a program for executing the program into a memory and executing the program.

As in the first embodiment, an input device, a display device, and the like (neither is shown) are connected to the information server 6 or the user terminal 7 as in the first embodiment. .

Next, the operation of the third embodiment will be described with reference to FIG. 6, focusing on the operations of the modems 24 and 25 of the user terminal 7 and the modem 18 of the information server 6. FIG.
FIG. 6 is a sequence diagram illustrating an operation of the exemplary embodiment illustrated in FIG. 5.

In FIG. 6, first, the user terminal 7 directly connects to the information server 6 by using one of the two lines of the PSTN 8 (line 1) using the modem 24 (step S1-2). . When the connection with the information server 6 is established, the user terminal 7 transmits information related to authentication or settlement to the information server 6 (step S2). Authentication,
Alternatively, in the information server 6 to which the information about the settlement is transmitted, the authentication / settlement processing unit 12 receives the information about the authentication or the settlement and executes the procedure of the authentication or the settlement (Step S3). When the authentication or the settlement procedure is executed, the certificate issuance processing unit 13 sets the authentication / settlement processing unit 1
Then, certificate data for certifying the authentication or settlement procedure executed by the client 2 is created (step S4). The certificate data created by the certificate issuance processing unit 13 is returned,
It is transmitted to the user terminal 7 through the TN line 1 (step S5). In the user terminal 7 that has received the certificate data, the certificate information transmission / reception processing unit 22 stores the certificate data (Step S6).

Next, the user terminal 7 uses the modem 25 to connect the two prepared PSTN lines via the Internet connection server 4 and the Internet 5 via the other (line 2) while the other two lines are not used. A connection is made with the information server 6 (step S7-2). PSTN8 Line 2
And the Internet connection server 4 and the Internet 5
When the connection with the information server 6 is established via the server, the certificate transmission processing unit 23 transmits the certificate data to the information server 6 (step S8). The certificate data via the PSTN 8 line 2, the Internet connection server 4, and the Internet 5 passes through the router 14 of the information server 6,
The certificate is received by the certificate reception processing unit 15 (step S9).
The certificate data received by the certificate receiving processor 15 is compared with a copy of the certificate data created by the certificate issuing processor 13 and transmitted to the user terminal 7 in the certificate comparison processor 16 ( Step S10). As a result of the comparison, when it is determined that the certificate data relating to the authentication and the settlement received from the user terminal 7 is the same as the certificate data created by the certificate issuance processing unit 13 of the information server 6, the information provision processing unit 17 executes transmission (download) of service information to the user terminal 7 via the Internet 5, the Internet connection server 4, and the PSTN 8 (Step S11). If it is determined here that the certificate data relating to authentication and settlement received from the user terminal 7 and the certificate data created by the certificate issuance processing unit 13 of the information server 6 are not the same as a result of the comparison, Information provision processing unit 17
Does not transmit (download) the service information to the user terminal 7.

Note that the encryption of the information to be transmitted on the Internet 5, the method of creating the certificate data, and the time limit for the certificate data are the same as those in the first embodiment, and therefore the description is omitted. .

In the first and second embodiments,
The functions of the information server 1 shown in FIGS. 1 and 3 described above, and in the third embodiment, the functions of the information server 6 shown in FIG. 5 are all described as functions of one server. However, the function of each device may be divided into a plurality of servers and realized by a combination of the plurality of servers. Further, the information server 1, the user terminal 2, and the information server 1 shown in FIGS.
Of the information server 6, the user terminal 7, or a plurality of servers obtained by dividing these functions, stores a program for realizing the functions in a computer-readable recording medium, The functions of the above-described devices may be realized by causing a computer system to read and execute the program recorded in the computer.

Here, the "computer system" includes an OS and hardware such as peripheral devices.
If a WW (World Wide Web) system is used, a homepage providing environment (or display environment) is also included. The "computer-readable recording medium" is a floppy (registered trademark) disk, a magneto-optical disk, a ROM, a CD-ROM.
And a storage device such as a hard disk built in a computer system. Further, a “computer-readable recording medium” refers to a medium that dynamically stores a program for a short time, such as when a program is transmitted through a computer network such as the Internet or a communication line such as a telephone line. (Transmission medium or transmission wave), in which case a program holding a program for a certain period of time, such as a volatile memory in a computer system serving as a server or a client, is also included.

The above-mentioned program may be for realizing a part of the above-mentioned functions, and may be for realizing the above-mentioned functions in combination with a program already stored in the computer system, that is, a so-called program. It may be a difference file (difference program).

[0042]

As described above, according to the present invention, the information service method in the information server is executed by receiving information related to authentication and settlement from a user terminal connected using a circuit switching network, At the same time, a certificate issuance process that creates certificate data related to authentication and settlement corresponding to the executed procedure and sends it to the user terminal, the circuit switching network, the Internet connection server of the Internet connection service provider, and the Internet Certificate reception processing to receive authentication and payment certificate data sent from a user terminal connected via a user terminal, and a certificate created by an information server for authentication and payment certificate data received from a user terminal Certificate comparison process to compare with data, the result of comparison,
If the certificate data related to authentication and payment received from the user terminal is determined to be valid certificate data, the service information is transmitted to the user terminal via the Internet, the Internet connection server, and the circuit switching network. And information providing processing to be performed. This allows users to transmit information about authentication and payment, which is highly important and should not be stolen, from the user terminal to the information server without going through the Internet. The data makes it possible to simplify the procedure of the user terminal and obtain information from an information server on the Internet. In the above information service method, the certificate comparison process includes a process of determining that the comparison result is invalid after a lapse of a predetermined time from the certificate data creation time of the information server. This makes it possible to make the stolen certificate data unusable after a predetermined time. In the above information service method, the certificate receiving process includes a process of decrypting the certificate data encrypted by the user terminal. As a result, security can be ensured by encrypting the certificate data relating to authentication and settlement sent over the Internet. Therefore, many servers do not send information that would otherwise be difficult to steal to a system such as the Internet, which relays information to the target server or terminal by relaying, so there is no fear that information will be stolen on the system. The effect of disappearing is obtained. In addition, certificate data sent to the system in place of information that should not be stolen can be stolen due to the security provided by encryption and the length of time that it is treated as valid. However, it is impossible to use the contents of the information server by using the certificate data on a regular basis.
The effect of minimizing damage to certificate data plagiarism can be obtained. Therefore, an effect is obtained that an information service system that ensures high security comprehensively can be provided.

Further, in the above information service method, the certificate issuing process performs communication using the control channel of the ISDN line, and the information providing process performs communication using the information channel of the ISDN line to the circuit switching network. And As a result, it is possible to perform the above-described service while minimizing the occupancy of the line. In the above information service method, the certificate issuance process performs communication using one information channel of the ISDN line, and the information providing process includes the other information channel that does not use the ISDN line for the circuit switching network. It is assumed that communication is performed by using. As a result, high-speed and large-volume transmission and reception of information on authentication and settlement or certificate data can be performed. Further, in the above information service method, the certificate issuance process performs communication using one of the two PSTN lines prepared for the subscriber, and the information providing process includes the two PSTN lines prepared for the circuit switching network. Communication is performed using the other subscriber line that is not used. As a result, the above-described service can be implemented even in an area where the ISDN network cannot be applied. Therefore, I
In addition to the advantage that an economical information service system can be constructed using SDN,
Regardless of the user's environment, when purchasing various products at an Internet shopping mall or the like, access to multiple shops with different settlement methods and select products, and Internet connection and purchase This makes it possible to simultaneously perform a direct connection with the server for making the payment and execute both processes in a plurality of shops without making a call again. In addition, since the dedicated channel for communicating information related to authentication and payment is a secure communication channel, not only can paid content be purchased on the network, but the purchased products can be delivered separately to the Internet. It is also effective as an authentication and settlement means in such forms of business.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of a first exemplary embodiment of the present invention.

FIG. 2 is a sequence diagram illustrating an operation of the embodiment.

FIG. 3 is a block diagram illustrating a configuration of a second exemplary embodiment of the present invention.

FIG. 4 is a sequence diagram illustrating an operation of the embodiment.

FIG. 5 is a block diagram illustrating a configuration of a third exemplary embodiment of the present invention.

FIG. 6 is a sequence diagram illustrating the operation of the embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Information server 2 User terminal 3 ISDN 4 Internet connection server 5 Internet 6 Information server 7 User terminal 8 PSTN 11 Terminal adapter 12 Authentication / settlement processing part 13 Certificate issue processing part 14 Router 15 Certificate reception processing part 16 Certificate Comparison processing unit 17 Information provision processing unit 18 Modem 21 Terminal adapter 22 Certificate information transmission / reception processing unit 23 Certificate transmission processing unit 24 Modem 25 Modem

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Inventor Hiroshi Koike 3-19-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo F-term in Nippon Telegraph and Telephone Corporation 5B049 AA05 AA06 GG02 GG10 5B055 CC00 EE21 EE27 HB01 5K101 KK16 LL01 LL02 LL03 PP03 QQ12

Claims (10)

[Claims] 1. An information service method in an information server for providing information to a user terminal of an information service, comprising: authentication and settlement from said user terminal connected by connection-type communication using a circuit switching network. A certificate issuing process for generating certificate data relating to authentication and settlement and transmitting the certificate data to the user terminal corresponding to the executed procedure, a circuit switching network, and the Internet. A certificate receiving process for receiving certificate data related to authentication and settlement transmitted from the user terminal connected via the Internet with the Internet connection server of the connection service provider; A certificate comparison process for comparing the certificate data relating to the payment with the certificate data created by the information server; As a result, when it is determined that the certificate data related to authentication and settlement received from the user terminal is valid certificate data, the Internet, the Internet connection server, and the user terminal An information service method, comprising: an information providing process for transmitting service information. 2. The information according to claim 1, wherein the certificate comparison process includes a process of determining that the comparison result is invalid after a lapse of a predetermined time from the certificate data creation time of the information server. Service method. 3. The information according to claim 1, wherein the certificate receiving process includes a process of decrypting the encryption of the certificate data encrypted by the user terminal. Service method. 4. The certificate issuing process performs communication using a control channel of an ISDN line, and the information providing process performs communication using an information channel of an ISDN line to a circuit switching network. The information service method according to any one of claims 1 to 3, wherein 5. The certificate issuance process communicates using one information channel of an ISDN line, and the information providing process uses the other information channel not using an ISDN line for a circuit switching network. The information service method according to any one of claims 1 to 3, wherein communication is performed using the information service. 6. The certificate issuing process performs communication using one subscriber line of two PSTN lines prepared, and the information providing process includes a PS prepared by two PSTN lines.
The information service method according to any one of claims 1 to 3, wherein communication is performed using the other subscriber line that does not use the TN line. 7. An information server for providing information to a user terminal of an information service, wherein the server receives information related to authentication and settlement from the user terminal connected by connection-type communication using a circuit switching network. A certificate issuing means for generating certificate data for authentication and settlement corresponding to the executed procedure and transmitting the certificate data to the user terminal; a circuit switching network; and an Internet connection service provider. An Internet connection server, certificate receiving means for receiving certificate data related to authentication and settlement transmitted from the user terminal connected via the Internet, and a certificate related to authentication and settlement received from the user terminal A certificate comparing unit that compares data with certificate data created by the information server; If it is determined that the certificate data relating to authentication and settlement received from the user terminal is valid certificate data, the service information is transmitted to the user terminal via the Internet, the Internet connection server, and a circuit switching network. An information server, comprising: an information providing means for transmitting; and 8. A user terminal of an information service for acquiring information from the information server according to claim 7 via the Internet, wherein said user terminal is connected to said information server by connection-type communication using a circuit switching network. Send authentication and payment information,
A certificate information transmitting / receiving means for acquiring certificate data relating to authentication and settlement created by the information server; a circuit switching network; an internet connection server of an internet connection service provider; and the information server connected via the internet And a certificate transmitting means for transmitting the obtained certificate data relating to authentication and settlement. 9. An information service system for providing information from an information server via the Internet, comprising: the information server according to claim 7; and the user terminal according to claim 8. Information service system. 10. A recording medium for recording a program used for an information service in an information server that provides information to a user terminal of the information service, wherein the program is executed by connection-type communication using a circuit switching network. Receives information related to authentication and settlement from the connected user terminal and executes the procedure, and at the same time, creates certificate data related to authentication and settlement corresponding to the executed procedure and transmits the certificate data to the user terminal. Certificate issuance processing, a circuit switching network, an Internet connection server of an Internet connection service provider, and a certificate reception for receiving authentication and settlement certificate data transmitted from the user terminal connected via the Internet. Processing, and certificate data relating to authentication and settlement received from the user terminal, A certificate comparison process for comparing the created certificate data with the created certificate data; as a result of the comparison, when it is determined that the certificate data relating to the authentication and settlement received from the user terminal is valid certificate data, A computer-readable recording medium for causing a computer to execute a connection server and an information providing process of transmitting service information to the user terminal via a circuit switching network.