JP2005332416A - Electronic commerce supporting server, electronic commerce supporting method and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic commerce supporting method enabling smooth and safe electronic commerce on a communication network, and an electronic commerce supporting server for implementing the method. <P>SOLUTION: This invention is configured to comprise: a communication terminal 2 provided on a side of a customer desiring purchase of a commodity that is connected to a virtual store 40 on a communication network 32 and requests purchase of the commodity using a credit card; an electronic commerce server 46 provided at the virtual store 40 for determining whether to establish the electronic commerce based on credit confirmation on the credit card; and the electronic commerce supporting server 44 that requests the communication terminal 2 via the communication network 32 to send unique number data in an IC card 10 having a function of a credit card, converts the received unique number data to a credit card number to generate credit limit data on the credit card, and sends data on whether or not credit is possible to the electronic commerce server 46. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic commerce support method capable of smoothly and safely performing electronic commerce on a communication network such as the Internet, and an electronic commerce support server that implements the method. E-commerce support method that can make payment by credit card without knowing, and prevent damage caused by “spoofing” where the credit card number was obtained illegally and reduce chargeback risk, and e-commerce to realize it Regarding support server.

  Further, the present invention provides an electronic commerce support method capable of reducing the cost required for measures for preventing leakage of card information at a virtual store or NSP (network service provider) having a member server in which member card information is stored. The present invention relates to an electronic commerce support server to be realized.

  Buying and selling products and services (hereinafter abbreviated as “products”) in virtual stores (cyber shops) or virtual store streets (cyber malls) as one form of use of virtual spaces (cyber spaces) built on communication networks such as the Internet E-commerce is becoming more active.

  The current transaction form of electronic commerce is mainly credit sales (credit sales) in which payment is made after a predetermined period has passed since the purchase of a product. When purchasing a product in a virtual store or a virtual store district, a person who wishes to purchase the product inputs credit card information from a browser displayed on a display device provided in a communication terminal such as a personal computer (hereinafter referred to as a PC). Complete the purchase procedure.

  Credit card information in e-commerce is usually entered by a person who wishes to purchase a product by entering only the credit card number or both the credit card number and card expiration date from a browser and sending it to a virtual store. .

  The virtual store transmits the received credit card number or the number and the card expiration date data to the credit card company via a dedicated line or the like. The credit card company confirms the validity and credit limit of the credit card based on these data, and transmits the result to the virtual store. The virtual store determines whether or not to transfer the product based on the received confirmation result. Thereby, the credit risk on the virtual store side in electronic commerce can be avoided.

  By the way, electronic commerce is conducted in a virtual space, and unlike a real store, there is a non-face-to-face relationship between a person who wants to purchase a product and the store. You cannot verify the signatures that are listed. For this reason, it is extremely difficult for the virtual store side to determine whether or not a credit card user in e-commerce is a genuine user, and the credit card user's credit card number is obtained in an unauthorized manner. There is no effective means to prevent illegal product purchases due to impersonation (hereinafter referred to as “spoofing”).

  In this way, while there is no effective means to prevent damage on the virtual store side against fraudulent activities such as fraudulent acquisition of credit card numbers by “spoofing”, the store side has the right to decide on product sales. Therefore, a chargeback (refund) risk is imposed on the store side in order to make up for the loss generated by a genuine credit card holder or credit card company by paying for the goods purchased illegally.

  The charge-back risk on the virtual store side in electronic commerce is higher than that in actual commerce, and the store side has an extremely high charge-back risk particularly in online shopping that handles highly circulated products such as goods.

  In addition, the virtual store builds and manages a member information database in which the member's credit card number is stored in association with the member ID and password, but the member's credit card number is illegally leaked by a malicious hacker. Strict security system must be laid out so that it does not occur, and the cost of maintaining it is so high that it cannot be ignored.

  On the other hand, genuine credit card holders are also at risk of being involved in incidents or useless disputes that are unrelated to the person if their credit card number is illegally obtained and misused.

  The existence of such risks is a major factor that hinders the development of electronic commerce. Therefore, for example, a technology (for example, SSL (secure socket layer)) that encrypts and transmits a credit card number has been put into practical use so that the credit card number is not illegally obtained by others on the Internet. However, since transmission data usually passes through many unspecified nodes on the Internet before reaching the destination, simply encrypting the data can provide sufficient countermeasures against the risk of data theft and tampering. It is hard to say that it is.

  On the other hand, NSP that adopts the following electronic commerce support system has appeared. In this system, a credit card number is associated with the member ID and password of a registered member of the NSP and stored in the member database.

  When a member purchases a product at a virtual store affiliated with the NSP, the purchase procedure is completed simply by entering the member ID and password. Based on the entered member ID and password, the NSP searches the member database on behalf of the virtual store to identify the credit card number, requests credit confirmation from the credit card company that handles the credit card, Charge the credit card company based on the credit card number. This system eliminates the risk of leaking card numbers due to cracker access because the virtual store does not need to keep track of the member's credit card number.

  However, in this system, in order to associate the member ID and password with the credit card number, the data of the credit card number is transmitted via the Internet at the time of initial registration of the card number, or when the credit card is changed or the card number is changed. It is necessary to transmit to the NSP. Therefore, at this time, the credit card number may be stolen on the Internet. The credit card number can be notified by telephone or facsimile instead of this data transmission. However, if the procedure is complicated and time-consuming, there is a problem in that it is easy to cause a problem in safety because the data is updated manually. Not.

  In addition, although this system can prevent the leakage of credit card numbers from virtual stores, a strict security system is in place to prevent the credit card numbers of members from being illegally leaked by crackers in the member information database on the NSP side. The cost of maintaining it is so high that it cannot be ignored.

  On the other hand, from the perspective of credit card holders, even if the above system can avoid the risk of card numbers flowing over the network in individual electronic commerce transactions, if registered with multiple NSPs, it must be registered for each conventional virtual store. As in the case where it was, the credit card numbers of its own would be distributed to multiple member databases on the network, and there is a concern that the chances of theft increase. In addition, in the case of usage where the member ID also serves as an e-mail address, if the password is leaked, the recipient who received the e-mail from the member can be "spoofed". Along with this problem, the recipient may be inconvenienced because of unnecessary suspicion.

  In addition to the above system, the following Internet payment system has also been proposed. In this system, when a product purchase applicant connects to the Internet via a predetermined NSP and purchases a product from a virtual store, the authentication support server makes an inquiry to the NSP based on the product purchase applicant's IP address. A commercial transaction is made after specifying a person who wants to purchase a product (a related invention is US Pat. No. 5,899,980). Since this system does not use payment by credit card, as long as this system is used, the data of the credit card number does not flow or accumulate anywhere on the Internet. However, since this system is not premised on e-commerce using a credit card in the first place, leakage of a credit card number or the like cannot be a problem, and is caused by e-commerce assuming the use of a credit card on a communication network. It does not solve the problem at all.

  An object of the present invention is to provide an electronic commerce support method capable of smoothly and safely performing electronic commerce on a communication network, and an electronic commerce support server for realizing the method.

  Another object of the present invention is to provide an electronic commerce support method capable of paying with a credit card without knowing a credit card number by another person in electronic commerce, and an electronic commerce support server for realizing the method.

  Furthermore, an object of the present invention is to provide an electronic commerce support method capable of reducing the chargeback risk on the virtual store side in credit sales in electronic commerce, and an electronic commerce support server for realizing the method.

  Still another object of the present invention is to provide an electronic commerce support method capable of reducing the cost required to prevent leakage of card information at a virtual store or NSP having a member server in which member card information is stored, and electronic commerce for realizing the method. To provide a support server.

  The purpose is to associate a credit card number with a unique number different from the credit card number stored in the credit card for each user in an electronic commerce support server that supports the purchase of goods or services by the user. A management unit that manages the payment, and a transmission unit that transmits an instruction for payment to the user when the payment request accompanying the purchase is received, and the unique number received in response to the instruction is stored in the management unit. It is achieved by an electronic commerce support server characterized in that it has a settlement unit that converts the credit card number into a credit card number for settlement.

  In the electronic commerce support server of the present invention, the management unit further manages personal attribute information in association with each other, and the instruction for settlement includes an instruction for requesting input of the personal attribute information, The personal authentication is performed using personal attribute information received in response to the input, and payment is performed.

  In the electronic commerce support server of the present invention, the personal information includes one or more of the user's telephone number information, name information, birthday information, and security code.

  In addition, the purpose of the above is to receive a payment instruction accompanying the purchase in the payment method executed on the computer used by the user when purchasing goods or services, and operate the credit card according to the instructions. And sending a unique number different from the credit card number stored in the credit card to the electronic commerce support server, and making a settlement using the credit card number associated with the unique number in the electronic commerce support server And receiving the result of the payment, which is achieved by a settlement method executed on a computer used by a user.

  Furthermore, in the electronic commerce support method for supporting the purchase of goods or services by a user, the object is to provide a credit card number and a unique number different from the credit card number stored in the credit card for each user. If the payment request associated with the purchase is received, an instruction for payment is transmitted to the user, and the unique number received in response to the instruction is assigned to the credit card number in the management unit. This is achieved by an electronic commerce support method characterized in that payment is made after conversion to.

  In the electronic commerce support method of the present invention, personal attribute information is also managed in association with each other, and the instruction for settlement includes an instruction for requesting input of the personal attribute information, and the received personal attribute corresponding to the input It is characterized in that payment is made by authenticating the person using the information.

  In the electronic commerce support method of the present invention, the personal information includes one or more of the user's telephone number information, name information, birthday information, and security code.

  Still further, in the electronic commerce support program for supporting the purchase of goods or services by a user, the above object is a unique number different from the credit card number and the credit card number stored in the credit card for each user. When the payment request accompanying the purchase is received, an instruction for payment is transmitted to the user, and the unique number received in response to the instruction is transmitted to the credit card in the management unit. This is achieved by an electronic commerce support program characterized by converting into a number and making a settlement.

  In the electronic commerce support program of the present invention, personal attribute information is also associated and managed, and the instruction for settlement includes an instruction for requesting input of the personal attribute information, and the personal attribute received in response to the input It is characterized in that payment is made by authenticating the person using the information.

  In the electronic commerce support program of the present invention, the personal information includes one or more of the user's telephone number information, name information, birthday information, and security code.

  As described above, according to the present invention, electronic commerce on a communication network can be performed smoothly and safely.

  In addition, according to the present invention, it becomes possible to pay by credit card without knowing the credit card number by others in electronic commerce.

  Furthermore, according to the present invention, the charge-back risk on the virtual store side in credit sales in electronic commerce can be reduced.

  Furthermore, according to the present invention, it is possible to reduce the cost required for preventing the leakage of card information at a virtual store or NSP having a member server in which member card information is stored.

  An electronic commerce support method according to an embodiment of the present invention and an electronic commerce support server that implements the method will be described with reference to FIGS. First, a schematic configuration of the electronic commerce support system according to the present embodiment will be described with reference to FIG.

  FIG. 1 shows a network configuration in the present embodiment. As shown in FIG. 1, in the electronic commerce support system 1 according to the present embodiment, virtual stores (two illustrated in the figure) 40, 42 connected to the communication network 32 and opened in a virtual space; There is a communication terminal (one illustrated in the figure) 2 of a product purchase applicant who accesses the virtual stores 40 and 42 and purchases a product with a credit card.

  The communication network 32 is either a domestic or international value-added communication network (VAN) or a combination of them. There is a so-called Internet as a composite example of domestic and international value-added communication networks. In addition, for example, a communication network including a packet communication network used for data transfer with a mobile phone or the like and a digital public telephone line such as ISDN as a network component is included. Further, the communication network 32 of this embodiment includes a communication network in which a digital television broadcasting network (including both wired lines such as wireless or cable TV) and a public telephone line is linked. As described above, the communication network 32 of the present embodiment is a broad concept including any of these various forms of communication broadcasting networks and composites thereof.

  For example, when the communication network 32 is the Internet, the communication terminal 2 of the product purchase applicant is a workstation or PC having an e-mail transmission / reception function and a browser function, and is connected via a communication line 6 such as a dedicated line or a public line Are connected to a communication network 32 via an ISP (Internet Service Provider (a form of NSP)) 30. The browser has a function of accessing a predetermined URL (Uniform Resource Locator) on the Internet and displaying a home page. The communication terminal 2 of the product purchase applicant can access the virtual stores 40 and 42 on the Internet via a browser to acquire product information or transmit an intention to purchase the product. .

  In addition, the virtual stores 40 and 42 have an electronic commerce server 46 for processing various requests (requests) related to the product purchase from the communication terminal 2 of the product purchase applicant, and the communication terminal of the product purchase applicant via the Internet. 2 can provide product information, and can exchange data for proceeding with the product purchase procedure with the communication terminal 2 of the product purchase applicant.

  Further, for example, when the communication network 32 is a network including a packet communication network, the communication terminal 2 of the product purchase applicant is a mobile phone having an e-mail transmission / reception function and a browser function. The data can be transmitted / received to / from the virtual stores 40 and 42.

  Recent advances in information technology (IT) have made it easier to use communication networks using PCs. In addition, mobile phones, personal handy phones (PHS (registered trademark)), portable information terminals, etc. Electronic commerce using the communication terminal 2 including at least one of these is frequently performed in a wide range, and a service using a mobile phone as an Internet connection terminal has already been started. For example, in i-mode (trademark of NTT DoCoMo) provided by NTT DoCoMo, Inc., a mobile phone having a browser function is connected to the Internet via an i-mode server, and the virtual stores 40 and 42 are accessed to obtain products. It can be purchased.

  In the electronic commerce support system according to the present embodiment, an electronic commerce support server 44 is further connected on the communication network 32. The electronic commerce support server 44 responds to the authentication support request output from the virtual stores 40 and 42 via the communication network 32. The electronic commerce support server 44 requests the browser of the communication terminal 2 to output credit card information based on the IP address of the communication terminal 2 of the product purchase applicant sent from the virtual stores 40 and 42 together with the authentication support request. The screen is displayed. The electronic commerce support server 44 can specify the card number of the credit card based on the sent credit card information.

  For this reason, the electronic commerce support server 44 associates and manages, for each user, a credit card number and a unique number different from the credit card number stored in the credit card, and a settlement request accompanying the purchase. If there is a credit card number, it has a transmitter that sends instructions for payment to the user, and a payment unit that converts the unique number received in response to the instructions into a credit card number in the management unit and performs payment. doing.

  The management unit of the electronic commerce support server 44 accesses an authentication database (not shown) installed in the credit card issuing company based on the specified credit card number, and stores the credit card stored in the authentication database. The credit availability data is retrieved, the credit availability data of the credit card with the card number is created, and the data is transmitted from the transmission unit to the virtual stores 40 and 42.

  Here, in addition to the connection through the communication network 32, a dedicated line connection, an OBN (open business network) connection, an Internet VPN connection, or the like may be selected between the virtual stores 40 and 42 and the electronic commerce support server 44. Is possible. OBN is a business-specific IP (Internet Protocol) service that is separated from the Internet, and is low in cost and can obtain high security and broadband high-speed communication comparable to a dedicated line in almost all areas in Japan. The Internet VPN is a service that can use the Internet like a dedicated network. Although it is easy to connect to overseas, there are cases where the security is low and the bandwidth is narrow compared to the dedicated line or OBN.

  Next, a schematic configuration on the communication terminal 2 side according to the present embodiment will be described with reference to FIG. The communication terminal 2 is connected to the ISP 30 via the communication line 6. Connected to the communication terminal 2 is a read / write device 4 that reads and writes various data from the storage device of the IC card 10 with a credit card function.

  The communication terminal 2 includes a display device 24 that displays a browser screen and a printing device 26 that prints the screen. In addition, the communication terminal 2 has a control unit 20 that performs overall control of the apparatus and executes various arithmetic processes, and a storage device 22 that stores various data. The control unit 20 stores various data of the IC card 10 input from the read / write device 4 in the storage device 22, or reads predetermined data from the storage device 22 and performs calculations.

  FIG. 3 shows a schematic configuration of the IC card 10 according to the present embodiment. The IC card 10 has a credit card function. The IC card 10 includes a storage device 12 composed of a semiconductor memory such as a flash EEPROM, a communication control unit 16 and an antenna 18 for communicating with the outside in a non-contact manner, and a control unit for comprehensively controlling them. 14.

  When the IC card 10 is held over the read / write device 4, data transmission / reception by electromagnetic waves is performed between the antenna 18 of the IC card 10 and an antenna (not shown) in the read / write device 4. The electromagnetic wave data is encrypted by, for example, triple DES that is triple-encrypted based on a data encryption standard published by the US Bureau of Commerce Standards Bureau.

  The storage device 12 in the IC card 10 stores unique number data for the electronic commerce support server 44 to specify the credit card number of the card. The unique number data is written in the storage device 12 of the IC card 10 when the IC card 10 is issued from a credit card issuing company. The unique number is, for example, a code string in which alphanumeric characters of about 16 to 24 digits are mixed, and corresponds to a credit card number on a one-to-one basis, but is composed of a code different from the number.

  At least the unique number data is sent to the electronic commerce support server 44 as the credit card information. Of course, a card expiration date, other personal identification information, etc. may be added as the credit card information. When a network other than the CAFIS communication network such as OBN is used, personal attribute information other than the credit card number can also be transmitted. In this case, the electronic commerce support server 44 manages a credit card number and a unique number different from the credit card number in association with each other as well as personal attribute information as in the customer database shown in FIG. . The personal attribute information is attribute information attached to the credit card owner. For example, birthday information (birth date 4 digit information, birth date 8 digit information or 6 digit information), telephone number information (all Or a part of it), security code, name information (including Kana, Kana name, English name, and one or more combinations of English names). Here, “associate and manage” may be managed by one database as shown in FIG. 4, and certain key information (for example, customer number (not shown)) such as RDB (relational database). , Unique number, credit card number), and may be managed using a plurality of databases.

  In this case, personal attribute information is not stored in the storage device 12 of the IC card. When the electronic commerce server 46 instructs the credit card operation (screen 56 in FIG. 6), a screen (for example, pop-up) instructing input of personal attribute information is displayed together with the screen 56 in FIG. , Prompts for input of the personal attribute information. In this case, the personal attribute information to be input can be one or more of the above. Further, the number of personal attribute information to be input may be determined based on the purchase price. For example, 2000 yen or more is one piece of personal attribute information (security code), and 4000 yen is two pieces of personal attribute information (security code and birthday information).

  When the personal attribute information input by the user is received, the electronic commerce support server 44 determines whether the input personal attribute information matches the information managed in the customer database illustrated in FIG. If some information (for example, birthday information) does not match, the payment may not be permitted. If they match, the electronic commerce support server 44 performs a settlement process. By doing so, even if a malicious third party obtains the credit card itself, the personal attribute information is not known, so that the payment process is not performed and a more secure transaction environment can be provided to the user.

  The operation procedure in the electronic commerce support system 1 having the above configuration will be described with reference to FIGS. 1 to 4 and further using FIGS. A description will be given using an example in which a person who wishes to purchase a product operates the communication terminal 2 and connects to the virtual store 40 that provides a homepage for electronic commerce on the communication network 32 (the Internet). FIG. 5 shows, in a time series, the steps of electronic commerce in the electronic commerce support system 1 according to the present embodiment, the communication terminal 2 of the product purchase applicant, the electronic commerce server 46 of the virtual store 40, and the electronic commerce support server 44. Show. FIG. 6 shows an example of a screen displayed on the browser of the communication terminal 2 of the product purchase applicant in each operation procedure.

  First, the product purchase applicant displays a web browser on the display device 24 of the communication terminal 2 and inputs a predetermined URL addressed to the virtual store. Through the communication network 32, the top page of the virtual store as shown in FIG. 50 is displayed. Next, the merchandise purchase applicant places a mouse pointer on, for example, the “product purchase site” button shown on the top page 50 and clicks it, and sends a display request for a product purchase screen (step S1).

  Upon receiving the display request for the product purchase screen, the electronic commerce server 46 displays the product purchase screen 52 as shown in FIG. 6 on the browser of the communication terminal 2 (step S2). When a product purchaser desires to input a search keyword for a desired product from the product purchase screen 52 on the communication terminal 2, the electronic commerce server 46 searches the product database (not shown) based on the search keyword input by the product purchase applicant. The search result is displayed on the product purchase screen 52.

  When a person who wishes to purchase a product finds a desired product on the product purchase screen 52 displayed on the browser of the communication terminal 2, the user moves the mouse pointer to “Purchase” on the product purchase screen 52 and clicks to perform electronic commerce. A product purchase request is sent to the server 46 (step S3).

  Upon receiving the product purchase request, the e-commerce server 46 of the virtual store transmits the data of the payment method selection screen 54 as shown in FIG. 6 for selecting the payment method and displays it on the browser of the communication terminal 2 ( Step S4). Here, when the merchandise purchase applicant selects payment by credit card, a credit card payment selection request is sent to the electronic commerce server 46 (step S5).

  Upon receiving the credit card settlement selection request, the electronic commerce server 46 sends a credit confirmation request together with the IP address of the communication terminal 2 of the product purchase applicant to the electronic commerce support server 44 via the communication network 32 (step S6). ).

  The electronic commerce support server 44, based on the IP address of the communication terminal 2 of the merchandise purchase applicant accompanying the authentication support request, holds the “card over the reading / writing device as shown in FIG. Please send the data of the input promotion screen 56 "Please display" on the browser of the communication terminal 2 (step S7).

  When a person who wishes to purchase a product holds the IC card 10 over the reading / writing device 4, an electromagnetic wave in which at least the unique number data among the credit card information stored in the storage device 12 of the IC card 10 is encrypted by triple DES. The data is received by the read / write device 4 as data. The encrypted unique number data received by the read / write device 4 is once decrypted, then subjected to SSL encryption processing and transmitted from the communication terminal 2 to the electronic commerce support server 44 (step). S8).

  After decrypting the received unique number data, the electronic commerce support server 44 specifies the card number of the credit card from the unique number data. The electronic commerce support server 44 stores, for example, a correspondence table between unique numbers and credit card numbers in a storage device (not shown), and identifies a credit card number from unique number data based on the correspondence table.

  Based on the identified credit card number, the electronic commerce support server 44 accesses the authentication database installed in the credit card issuing company, and searches the credit card credit data stored in the authentication database. , The credit card credit approval / rejection data of the card number is created. Next, the electronic commerce support server 44 attaches the unique number data corresponding to the credit card number to the created credit availability data and transmits it to the virtual store 40 (step S9).

  The electronic commerce server 46 of the virtual store 40 determines whether or not to accept the credit of the card and establish the electronic commerce based on the received credit availability data (step S10).

  If it is determined in step S10 that the credit is not accepted, the processing is terminated and the transaction failure screen 60 shown in FIG. The person who wants to purchase the product is consulted (step S11 shown by a broken line in FIG. 5).

  If it is determined that credit is permitted, a transaction establishment screen 58 as shown in FIG. 6 is displayed on the browser of the communication terminal 2 (step S12). Almost in synchronization with the display of the transaction establishment screen 58, the electronic commerce server 46 of the virtual store 40 creates a sales file, attaches the unique number data, and transmits it to the electronic commerce support server 44 (step S13).

  The electronic commerce support server 44 converts the unique number data of the received sales file into a credit card number, transmits the settlement result to the user, and when the credit sales sales by the card reaches a predetermined date, the electronic commerce support server 44 The settlement unit issues an invoice to the product purchaser (step S14).

  As described above, in the present embodiment, since the unique number data flows on the communication network 32 instead of the credit card number, the person who wishes to purchase a product on the communication network 32 including the virtual stores 40 and 42 and the ISP 30. No credit card number will flow or be stored and stored in any node. Furthermore, the unique number data flows even in electromagnetic wave data communication between the IC card 10 and the read / write device 4, and the credit card number is not transmitted / received.

  Thereby, the credit card holder can avoid the risk that the card number flows on the communication network 32 in each electronic commerce and is stolen. Furthermore, even if members are registered in a plurality of ISPs 30 or virtual stores 40 and 42, their credit card numbers are not stored in a plurality of member information databases connected to the communication network 32, so the risk of the card number being stolen is greatly increased. Can be reduced.

  According to the present embodiment, in the electronic commerce, only the electronic commerce support server 44 can handle the credit card number other than the genuine holder of the credit card, and the credit card number is stored. Only the database for authentication (not shown) of the credit card issuing company that can be accessed only by the electronic commerce support server 44 is present. That is, by using the support system according to the present embodiment, it is possible to realize an electronic commerce system in which the possibility that a credit card number is illegally acquired by a third party is extremely reduced.

  According to the present embodiment, it is not necessary for each virtual store 40 or ISP 30 to construct and manage a member information database in which member credit card numbers are stored in association with member IDs and passwords. For this reason, it is possible to greatly reduce the cost of maintaining and managing the security system for preventing the cracker from illegally leaking the member's credit card number.

  As described above, according to the present embodiment, an IC card that can smoothly and safely perform electronic commerce on a communication network, and an electronic commerce support method and system using the same can be realized. As a result, in electronic commerce, it becomes possible to pay with a credit card without worrying about the credit card number being known to others.

  Further, according to the present embodiment, it is possible to reduce the charge-back risk on the virtual store side caused by illegal electronic commerce due to “spoofing” in which the credit card number is illegally acquired. Furthermore, it is possible to reduce the cost required for measures for preventing leakage of card information at a virtual store or NSP having a member server in which member card information is stored.

  The present invention is not limited to the above embodiment, and various modifications can be made. For example, in the above-described embodiment, the electronic commerce support server 44 requests unique number data from the communication terminal 2, but this may be delegated to the electronic commerce server 46 of the virtual store 40. However, the above-described embodiment in which the e-commerce support server 44 directly acquires the unique number data is superior in terms of security, and particularly when other credit card information such as a card expiration date or personal authentication data is requested. For this, it is preferable to adopt the method of the present embodiment in which the electronic commerce support server 44 directly receives transmission information from the communication terminal 2.

  In addition, the electronic commerce support server 44 of the above embodiment specifies the card number of the credit card from the received unique number data based on the correspondence table of the unique number and the credit card number. It is not limited to this. For example, the unique number may be derived from the credit card number by a predetermined algorithm and stored in the IC card, and the credit card number may be specified from the unique number data by the opposite procedure.

  An IC card storing unique number data is issued by a specific credit card company, and when using a credit card at a store other than the member store, the credit card number is presented, entered or transmitted. Of course, if it is necessary to do so, a credit card number may be displayed on the surface of the IC card.

  In the above embodiment, a non-contact type IC card has been described as an example. However, the present invention is not limited to this, and can naturally be applied to a contact type IC card. In this case, the data read / write terminal of the IC card is brought into contact with the data input / output terminal of the dedicated read / write device to transmit / receive data.

It is a figure which shows the network structure in the electronic commerce support system 1 by one embodiment of this invention. It is a figure which shows schematic structure by the side of the communication terminal 2 in the electronic commerce support system 1 by one embodiment of this invention. It is a figure which shows schematic structure of IC card 10 used with the electronic commerce support system 1 by one embodiment of this invention. It is a figure which shows an example of the data in the customer database in the electronic commerce support system 1 by one embodiment of this invention. It is a figure which shows the procedure of the electronic commerce in the electronic commerce support server 1 of the electronic commerce support system 1 by one embodiment of this invention in the communication terminal 2 and the electronic commerce server 46 of a virtual store in time series. It is a figure which shows the example of a screen displayed on the browser of the communication terminal 2 of a goods purchase applicant in each operation | movement procedure of the electronic commerce support system 1 by one embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Electronic commerce support system 2 Communication terminal 4 Read / write device 10 IC card 12 Storage device 14 Control unit 16 Communication control unit 18 Antenna 20 Control unit 22 Storage device 24 Display device 26 Printing device 30 ISP (NSP)
32 Communication network 40, 42 Virtual store 44 Electronic commerce support server 46 Electronic commerce server

Claims (15)

In an electronic commerce support server that supports the purchase of goods or services via a communication terminal:
A receiving unit that receives the authentication support request and the IP address of the communication terminal from the electronic commerce server of the virtual store;
A screen display unit that, when receiving the authentication support request and the IP address, displays a screen requesting input of credit card information including at least a unique number to a communication terminal specified by the IP address;
A storage unit for storing a credit card number and the unique number in association with each other;
A conversion unit that converts the unique number input from the communication terminal into the credit card number stored in association with the unique number in the storage unit;
A search unit for searching an authentication database based on the credit card number converted by the conversion unit;
A credit approval / disapproval data creation unit for creating credit credit approval / disapproval data corresponding to the converted credit card number based on the search result of the search unit;
An electronic commerce support server comprising: a transmission unit that transmits the credit availability data created by the credit availability data creation unit to an electronic commerce server of a virtual store. The transmission unit is configured to communicate with the communication terminal specified by the IP address.
The transaction success screen is displayed when the credit approval / disapproval data does not permit credit, and the transaction approval screen is displayed when the credit approval / disapproval data allows credit. The electronic commerce support server described.   2. The electronic commerce support according to claim 1, wherein, when the unique number is stored in a storage device of an IC card, the screen display unit displays a screen for promoting input by the IC card. server.   The screen display unit further displays a screen requesting input of personal attribute information, and the number of the personal attribute information requested to be input is determined according to a purchase amount. 1. The electronic commerce support server according to 1. The storage unit stores a credit number, the unique number, and personal attribute information in association with each other, and whether the personal attribute information input by the communication terminal matches the personal attribute information stored in the storage unit. A determination unit for determining whether or not
5. The electronic commerce support server according to claim 4, wherein when the determination unit determines that all or some of the personal attribute information does not match, the processing is stopped. An e-commerce support server connected via a network with a communication terminal and an e-commerce server of a virtual store:
Receiving processing for receiving an authentication support request and the IP address of the communication terminal from the electronic commerce server of the virtual store;
Screen display processing for displaying a screen for requesting input of credit card information including at least a unique number to a communication terminal specified by the IP address when the authentication support request and the IP address are received;
Conversion processing for changing the unique number input from the communication terminal to the credit card number stored in association with the unique number;
A search process for searching an authentication database storing credit card credit approval / rejection data based on the credit card number converted by the conversion process;
Credit approval / disapproval data creation processing for creating credit card credit approval / disapproval data corresponding to the credit card number based on a result of searching the authentication database by the search processing;
And a transmission process for transmitting the credit availability data created by the credit availability data creation process to an electronic commerce server of a virtual store. Furthermore, for the communication terminal specified by the IP address,
A transaction failure screen display process for displaying a transaction failure screen when the credit permission / rejection data does not permit credit;
The computer program according to claim 6, wherein when the credit permission / rejection data allows credit, a transaction establishment screen display process for displaying a transaction establishment screen is executed.   Furthermore, when the said unique number is stored in the memory | storage device of an IC card, the IC card input promotion screen display process for displaying the screen for promoting the input by the IC card is executed. A computer program described in 1.   Further, a personal attribute information input request screen display process for displaying a screen for requesting input of personal attribute information is executed, and the number of the personal attribute information requested to be input is determined according to the purchase price. The computer program according to claim 6. A storage process for storing the credit number, the unique number, and the personal attribute information in association with each other;
A determination process for determining whether or not the personal attribute information input by the communication terminal matches the personal attribute information stored in the storage unit;
The computer program according to claim 9, wherein when it is determined by the determination process that all or some of the personal attribute information does not match, a stop process for stopping the process is executed. A processing method of an electronic commerce support server connected to a communication terminal and an electronic commerce server of a virtual store via a network:
Receiving the authentication support request and the IP address of the communication terminal from the electronic commerce server of the virtual store;
When the authentication support request and the IP address are received, a screen for requesting the communication terminal specified by the IP address to input credit card information including at least a unique number is displayed on the display unit of the communication terminal. A screen display step to be displayed;
A storage step of associating a credit card number with the unique number and storing the credit card number in the storage unit provided in the electronic commerce support server;
A conversion step of converting the unique number input from the communication terminal into the credit card number associated with the unique number and stored in the storage unit by the storing step;
A search step of searching an authentication database based on the credit card number converted by the conversion step;
A credit approval / disapproval data creation step of creating credit credit approval / disapproval data corresponding to the credit card number based on the search result of the search unit;
A transmission step of transmitting the credit availability data created by the credit availability data creation unit to an electronic commerce server of a virtual store.   In the transmission step, if the credit approval / disapproval data does not permit credit for the communication terminal specified by the IP address, a transaction failure screen is displayed, and the credit approval / disapproval data permits credit. 12. The electronic commerce support method according to claim 11, further comprising displaying a transaction establishment screen.   2. The electronic commerce support according to claim 1, wherein, in the screen display step, when the unique number is stored in a storage device of an IC card, a screen for promoting input by the IC card is displayed. Method.   The screen display step further displays a screen requesting input of personal attribute information, and the number of the personal attribute information requested to be input is determined according to a purchase amount. 14. The electronic commerce support method according to 13. In the storing step, the credit number, the unique number, and personal attribute information are stored in association with each other;
A determination step of determining whether or not the personal attribute information input by the communication terminal matches the personal attribute information stored in the storage unit;
The electronic commerce support method according to claim 14, wherein when the determination step determines that all or a part of the personal attribute information does not match, the processing is stopped.

Images