JP2013101496A - Electronic commerce support system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system capable of dissolving inconvenience that a user needs to prepare an IC card to be used for financial settlement every time of performing the financial settlement related to electronic commerce.SOLUTION: When a signature data transmission request is received from an authentication server 5, a user terminal 3 transmits signature data stored by the user terminal 3 to the authentication server 5, and when a signature data generation request is received from the authentication server 5, stores the signature data generated by an IC card 2 using an authentication seed received from the authentication server 5 and transmits the signature data to the authentication server 5. When an authentication request is received from an electronic commerce server 4, the authentication server 5 confirms validity of the signature data acquired from the user terminal 3, and when there is no validity, transmits the signature data generation request including the authentication seed to the user terminal 3, acquires the signature data again from the user terminal, and then collates the authentication seed obtained by decoding the signature data acquired from the user terminal 3.

Description

  The present invention relates to a technique for authenticating a user and a financial institution card possessed by the user in financial settlement in electronic commerce (EC) on the Internet.

  Credit settlement is most often used for financial settlement in electronic commerce (EC) on the Internet. When performing credit settlement in electronic commerce, a credit card entered by the user into a user terminal (for example, a personal computer) It is common to make the validity of a credit card authenticate to an authentication server operated by a credit company, etc. based on the card number, nominee and expiration date, etc., but the credit card card number, nominee and valid With only the deadline, there was a possibility of “spoofing” damages where a third party illegally used credit card information.

  An invention for preventing “spoofing” in which credit card information is illegally used by a third party has already been disclosed. For example, in Patent Document 1, customer and credit card information is used by using a ciphertext generated by an IC card (IC chip). However, in such a technique, it is necessary to prepare an IC card for each electronic transaction, and there is a problem that the convenience of the user is impaired.

Japanese Patent Application No. 2006-515197

  Therefore, the present invention provides an electronic commerce support system that can eliminate the inconvenience of having to prepare an IC card used for financial settlement every time financial settlement related to electronic commerce is performed in financial settlement of electronic commerce. For the purpose.

  A first invention that solves the above-described problem is a system that includes at least an IC card storing user card information, a user terminal operated by the user, and an authentication server that verifies the card information. In order to generate a ciphertext used for authentication related to electronic transaction financial settlement, the IC card uses a plaintext based on an authentication seed delivered from the user terminal and card information stored in a memory as a signature generation key. The signature generation means for generating signature data by encrypting with is provided.

  In addition, when the user terminal receives a signature data transmission request from the authentication server, the signature data generated by the IC card is stored, and the signature data can be used at the time of authentication related to the financial settlement of electronic commerce. When the signature data stored in the user terminal is transmitted to the authentication server and a signature data generation request is received from the authentication server, the authentication seed received from the authentication server is delivered to the signature generation unit of the IC card, Signature data obtained from the IC card is stored, and signature holding means for transmitting the signature data to the authentication server is provided.

  Further, when the authentication server receives an authentication request from the electronic commerce server accessed by the user terminal, the authentication server acquires the user ID of the user from the user terminal so that the signature data generated by the IC card can be verified. User identification means, validity verification means for confirming whether the signature data has already been generated, and authentication if the validity verification fails, as validity verification of the signature data corresponding to the user ID acquired from the user terminal When generating a seed, storing an authentication seed corresponding to the user ID, and transmitting a signature data generation request including the generated authentication seed to the user terminal, and when the validity verification is successful Or a signature data generation request transmitted to the user terminal and then the signature stored in the user terminal An authentication seed obtained by obtaining data and decrypting the signature data obtained from the user terminal with a verification key paired with the signature generation key, and an authentication seed corresponding to the user ID obtained from the user terminal Signature verification means for verifying that the verification of the signature data is successful if the verification and verification of the authentication seed are successful.

  Further, the second invention is the electronic commerce support system described in the first invention, wherein the signature generation requesting means of the authentication server is capable of verifying the validity of the signature data generated by the IC card. After generating the authentication seed, the expiration date of the authentication seed is calculated, the authentication seed and the expiration date are stored in association with the user ID, and the validity verification unit of the authentication server uses the signature corresponding to the acquired user ID As validity verification of data, the expiration date of the signature data is confirmed.

  Further, the third invention is the electronic commerce support system described in the first invention or the second invention, wherein the validity of the card information stored in the IC card is added to the signature data generated by the IC card. The authentication server stores the card information stored in the IC card possessed by the user in association with the user ID of the user, and the signature verification means includes the user terminal When the verification of the authentication seed obtained from the signature data acquired from the card is successful, the card information obtained from the signature data is compared with the card information corresponding to the user ID acquired from the user terminal, and the authentication seed and the card information If the verification is successful, it is determined that the verification of the signature data is successful.

  Further, in a fourth invention, in the electronic commerce support system according to any one of the first to third inventions, the authentication server can authenticate a user who operates the user terminal. The user password is stored in association with the user ID of the user, and the user identification means acquires a password from the user terminal in addition to the user ID of the user, and the password acquired from the user terminal and the user terminal The password corresponding to the user ID acquired from the password is verified, and the signature verification means determines that the verification of the signature data has failed when the password verification fails.

  As described above, according to the present invention, the ciphertext (signature data) used in the authentication related to the financial settlement of the electronic commerce and generated by the IC card is stored in the user terminal, and the financial settlement related to the electronic commerce is performed. At this time, since the ciphertext stored in the user terminal is used, the inconvenience that the user has to prepare an IC card used for financial settlement can be eliminated.

The figure explaining the electronic commerce support system concerning this embodiment. The figure explaining user DB of an authentication server. The flow figure explaining operation at the time of performing settlement of electronic commerce. The flowchart for demonstrating signature data generation processing. The flowchart for demonstrating signature data verification processing.

  Now, preferred embodiments of the present invention will be described in detail with reference to the drawings. The embodiment described below is only one embodiment of the present invention, and the present invention is not limited to the embodiment described below, and various modifications and changes are possible.

  FIG. 1 is a diagram for explaining an electronic commerce support system 1 according to the present embodiment. The electronic commerce support system 1 illustrated in FIG. 1 is a system developed to eliminate the inconvenience of having to prepare an IC card 2 used for financial settlement every time financial settlement related to electronic commerce is performed. Operated by a user terminal 3 operated by a user who conducts electronic commerce, an IC card 2 (for example, a credit card) issued by a financial institution, and an EC site (EC: electronic commerce) that sells products and services on the Internet 6 At least a card information stored in the IC card 2 and an authentication server 5 for authenticating the user. The user terminal 3, the electronic commerce server 4 and the authentication server 5 are connected via the Internet 6. Connected.

  The IC card 2 of the electronic commerce support system 1 shown in FIG. 1 is a card on which a one-chip microcomputer having a CPU, RAM, ROM, EEPOM, cryptographic coprocessor, etc. is mounted. Specifically, an IC card issued by a credit company A type of credit card is preferred.

  As shown in FIG. 1, the IC card 2 included in the electronic commerce support system 1 includes a card communication unit 20 that communicates with the user terminal 3 and a signature generation unit 21 that generates signature data of card information. The memory 2 stores card information including a user name, a card number, and a card expiration date, and a signature generation key used when generating signature data.

  The card communication means 20 provided in the IC card 2 is a means realized using a physical interface and a communication circuit corresponding to the physical interface (for example, UART: Universal Asynchronous Receiver Transmitter). In this case, the physical interface becomes a contact terminal, and when the IC card 2 is a non-contact type, the physical interface becomes an antenna coil.

  Further, the signature generation means 21 provided in the IC card 2 is a means realized by a command using a cryptographic coprocessor of a one-chip microcomputer, etc., and the authentication seed generated on the authentication server 5 side is delivered, and the signature data Is received from the user terminal 3, the signature generation means 21 generates a plaintext based on the card information stored in the memory 22 of the IC card 2 and the authentication seed transmitted from the user terminal 3, and then the signature. The signature data is generated by encrypting the plaintext with the generation key, and the generated signature data is transmitted to the user terminal 3.

  A user terminal 3 of the electronic commerce support system 1 illustrated in FIG. 1 is a device realized by a personal computer having a CPU, a chipset, a RAM, a ROM, and the like. As illustrated in FIG. 1, the user terminal 3 is an IC card. 2 receives a request for transmission of signature data from the authentication server 5 and authenticates the signature data stored in the data storage device 32 of the user terminal 3. When it is transmitted to the server 5 and a signature data generation request is received from the authentication server 5, the authentication seed delivered from the authentication server 5 is delivered and a command for operating the signature generation means 21 is transmitted to the IC card 2. 2 is stored in the data storage device 32 and the signature data is stored in the authentication server 5. And a signature holding means 31 to be transmitted.

  The card communication means 20 provided in the user terminal 3 is realized by using a reader / writer circuit corresponding to the IC card 2, and the network communication means 30 is realized by using a network interface. Further, the signature holding means 31 is provided. Is realized by a browser add-in program installed in the user terminal 3.

  In this way, the signature data generated by the IC card 2 is stored on the user terminal 3 side, and when the user terminal 3 receives the signature data generation request from the authentication server 5, the signature stored on the user terminal 3 side is stored. By transmitting data to the authentication server 5, it is not necessary to prepare the IC card 2 used by the user every time financial settlement relating to electronic commerce is performed. The signature data may be stored in the user terminal 3 using a cookie of a web browser.

  The electronic commerce server 4 of the electronic commerce support system 1 illustrated in FIG. 1 is a device implemented by a server having a CPU, a chipset, a RAM, a ROM, and the like. As illustrated in FIG. A network communication means 40 for communication and an authentication request means 41 for making an authentication request to the authentication server 5 when receiving a settlement request relating to electronic commerce from the user terminal 3 are provided.

  The network communication means 40 provided in the electronic commerce server 4 is realized using a network interface, and the authentication request means 41 is realized as one function of the EC site.

  The authentication server 5 of the electronic commerce support system 1 illustrated in FIG. 1 is a device realized by a server having a CPU, Chipset, RAM, ROM, etc. As illustrated in FIG. 1, the authentication server 5 performs network communication. Network communication means 50 for receiving the authentication request from the electronic commerce server 4 accessed by the user terminal 3, the user identification means 51 for obtaining the user ID of the user from the user terminal 3, and the user ID obtained from the user terminal 3 And the validity verification means 52 for verifying the validity of the signature data corresponding to, and if the validity verification fails, an authentication seed is generated and stored in correspondence with the user ID, and the signature data including the generated authentication seed The signature generation request means 53 for transmitting the generation request to the user terminal 3 and when the validity verification is successful, or After the validity verification fails and the signature data generation request is transmitted to the user terminal 3, the signature data stored in the user terminal 3 is acquired, and the user terminal 3 uses the verification key paired with the signature generation key. Signature verification means 54 for comparing the authentication seed obtained by decrypting the acquired signature data and the authentication seed stored in the authentication server 5 is provided. The network communication means 50 provided in the authentication server 5 includes a network interface. Each means is realized by a computer program for causing the authentication server 5 to function as each means. In the authentication server 5, a user DB that stores information related to the user is provided in the data storage device 55 in association with the user ID for identifying the user.

  FIG. 2 is a diagram for explaining the user DB of the authentication server 5. The user ID included in the authentication server 5 includes a user password associated with the user ID, a user password used for user password verification, an expiration date of signature data generated by the IC card 2 possessed by the user, and a user terminal. 3 stores the authentication seed generated when a signature data generation request is made and the user's payment information, and the user's payment information includes an IC possessed by the user as information necessary for financial payment related to electronic commerce. In addition to the card information (user name, card number, and card expiration date) stored in the card 2, the user's address, telephone number, and date of birth are included.

  As a verification of the validity of the signature data corresponding to the user ID acquired from the user terminal 3, it is at least necessary to check whether the signature data has been generated, but the signature data generated by the IC card 2 is used as the user terminal. If the signature data stored in the user terminal 3 and used in the user terminal 3 is used for financial settlement of electronic commerce, the signature data generated by the IC card 2 must be provided with no expiration date. Therefore, the validity verification unit 52 according to the present embodiment confirms whether the signature data has been generated, as well as the validity period of the signature data. Confirm.

  Furthermore, in order to identify the user who operates the user terminal 3, it is necessary to obtain the user ID of the user from the user terminal 3, but the user identification means 51 of the present embodiment In addition to the user ID of the user, the user password is acquired and the password is verified so that the user to be operated can be authenticated.

  From here, the operation | movement at the time of performing settlement of electronic commerce is demonstrated. FIG. 3 is a flowchart for explaining the operation when performing settlement of electronic commerce.

  When the user of the electronic commerce support system 1 according to the present embodiment purchases a service or product sold on the electronic commerce server 4, when the user performs an operation for financial settlement of the service or product by operating the user terminal 3, A settlement request for electronic commerce is transmitted from the user terminal 3 to the electronic commerce server 4 (S1).

  When the electronic commerce settlement request is transmitted from the user terminal 3, the authentication requesting means 41 of the electronic commerce server 4 operates, and the authentication requesting means 41 of the electronic commerce server 4 authenticates the authentication request related to the electronic commerce financial settlement. It transmits to the server 5 (S2). When an authentication request is sent from the electronic commerce server 4 to the authentication server 5, the HTTP environment variable (such as the IP address of the user terminal 3) of the user terminal 3 received when the electronic commerce settlement request is transmitted from the user terminal 3. Transferred to the authentication server 5, the authentication server 5 communicates with the user terminal 3 using the HTTP environment variable of the user terminal 3.

  When receiving an authentication request related to electronic commerce financial settlement from the electronic commerce server 4, the user identifying means 51 of the authentication server 5 first makes an electronic commerce settlement request in order to identify the user operating the user terminal 3. The user terminal 3 is requested to send a user ID and password (S3).

  Upon receiving a user ID and password transmission request from the authentication server 5, the user terminal 3 displays a user ID and password input screen on the user terminal 3, and the user ID and password input on the input screen are displayed on the authentication server 5. (S4).

  When the user ID and password are transmitted from the user terminal 3, the user identification unit 51 of the authentication server 5 acquires the password corresponding to the user ID transmitted from the user terminal 3 from the user DB and receives it from the user terminal 3. The password and the password acquired from the user DB are collated (S5).

  When the user identification unit 51 of the authentication server 5 collates the password received from the user terminal 3, the user identification unit 51 of the authentication server 5 branches the process according to the password verification result received from the user terminal 3 ( S6) If the verification of the password fails, the signature verification unit 54 is called to perform the signature data verification process (S10) without calling the validity verification unit 52.

  When the verification of the password received from the user terminal 3 is successful, the user identification unit 51 of the authentication server 5 calls the validity verification unit 52, and the validity verification unit 52 corresponds to the user ID transmitted from the user terminal 3. It is verified whether the signature data is valid by confirming whether the signature data to be generated has been generated and whether the date at this time is within the validity period of the signature data (S7).

  When the validity of the signature data corresponding to the user ID has been successfully verified, that is, the signature data corresponding to the user ID transmitted from the user terminal 3 has been generated, and the date at this time is the validity of the signature data If it is within the time limit, the validity verification unit 52 of the authentication server 5 calls the signature verification unit 54 without performing the signature generation request unit 53 and performs the signature data verification process (S10).

  If the verification of the validity of the signature data corresponding to the user ID fails, the signature data corresponding to the user ID transmitted from the user terminal 3 is not generated, or the date at this time is the expiration date of the signature data Otherwise, the validity verification unit 52 of the authentication server 5 calls the signature generation request unit 53, and the signature generation request unit 53 transmits a signature data generation request to the user terminal 3 (S8). A signature data generation process (S9) is executed in the user terminal 3 and the authentication server 5.

  When executing the signature data generation process (S9), the signature generation request unit 53 of the authentication server 5 calls the signature verification unit 54 of the authentication server 5 and executes the signature data verification process (S10). In other words, the signature data verification process (S10) is executed immediately after successful verification of the signature data, or after the signature data generation process (S9) is executed due to the failure of the validity verification.

  When the signature data verification process (S10) is completed, the signature generation request means 53 of the authentication server 5 notifies the verification result of the signature data to the user terminal 3 and the electronic commerce server 4 (S11), and this on the authentication server 5 side. When the process related to the procedure is finished and the user terminal 3 and the electronic commerce server 4 are notified of the verification result of the signature data from the authentication server 5 (S12, S13), this procedure on the user terminal 3 and the electronic commerce server 4 side is performed. The process related to is terminated.

  Next, the contents of the signature data generation process will be described in detail. FIG. 4 is a flowchart for explaining the signature data generation process.

  When the signature generation request unit 53 of the authentication server 5 fails to verify the validity of the signature data corresponding to the user ID transmitted from the user terminal 3, the signature generation request unit 53 executes a signature data generation process (S9). The signature generation request unit 53 generates an authentication seed to be transmitted to the IC card 2 via the user terminal 3, and transmits the generated authentication seed to the user terminal 3 (S20).

  The method for generating the authentication seed is arbitrary. For example, the serial number managed on the signature generation requesting means 53 side of the authentication server 5 can be used as the authentication seed, or the signature generation requesting means 53 of the authentication server 5 is used. Can be used as an authentication seed.

  When the signature generation request unit 53 of the authentication server 5 generates an authentication seed to be transmitted to the IC card 2 via the user terminal 3, the signature data expiration date (for example, half a year) is calculated (S21), and the user identification unit 51 stores the authentication seed generated in S20 of FIG. 4 and the expiration date calculated in S21 of FIG. 4 in the user DB in association with the user ID obtained from the user terminal 3 (S22). The process related to this procedure ends.

  When the authentication seed is received from the authentication server 5, the signature holding unit 31 of the user terminal 3 operates, and the signature holding unit 31 of the user terminal 3 operates the terminal communication unit 33 to receive the authentication seed received from the authentication server 5. It is transferred to the IC card 2 and the signature generation means 21 of the IC card 2 is operated (S23).

  When the signature generation means 21 of the IC card 2 receives the authentication seed from the user terminal 3 and operates (S24), the signature generation key 21 stored in the memory 22 of the IC card 2 is used. The signature data is generated by encrypting the plain text based on the card information stored in the authentication terminal and the authentication seed transmitted from the user terminal 3, and the card communication means 20 is operated to send the generated signature data to the user terminal 3. This is transmitted (S25), and the processing relating to this procedure on the IC card 2 side ends.

  When the signature holding unit 31 of the user terminal 3 receives the signature data from the IC card 2, the signature holding unit 31 stores the signature data received from the IC card 2 in the data storage unit 32 of the user terminal 3 (S26). The process related to this procedure ends.

  Next, the contents of the signature data verification process (S10) will be described in detail. FIG. 5 is a flowchart for explaining the signature data verification process.

  In the signature data verification process (S10), first, the signature verification unit 54 of the authentication server 5 issues a signature data transmission request to the user terminal 3 (S30), and the signature holding unit 31 of the user terminal 3 When the transmission request is received, the signature data stored in the data storage device 32 of the user terminal 3 is transmitted to the authentication server 5 (S31).

  When the signature verification unit 54 of the authentication server 5 receives the signature data from the user terminal 3, it acquires the authentication seed and settlement information corresponding to the user ID acquired by the user identification unit 51 from the user terminal 3 from the user DB (S32). .

  When the authentication seed is acquired from the user DB, the signature verification means 54 of the authentication server 5 decrypts the signature data received from the user terminal 3 with the verification key (S33), and the authentication seed and user DB included in the decrypted text of the signature data (S34).

  The signature verification unit 54 of the authentication server 5 branches the process depending on whether or not the authentication seed included in the decrypted text of the signature data matches the authentication seed acquired from the user DB. If the authentication seed does not match, the process proceeds to S37. Then, it is determined that the verification of the signature data has failed, and this procedure ends.

  The signature verification unit 54 of the authentication server 5 acquires the card information included in the decrypted text of the signature data from the user DB when the authentication seed included in the decrypted text of the signature data matches the authentication seed acquired from the user DB. It is confirmed whether the card information included in the settlement information matches (S35).

  If the card information included in the decrypted text of the signature data and the card information included in the payment information acquired from the user DB do not match, the signature verification unit 54 of the authentication server 5 proceeds to S37 and determines that the verification of the signature data has failed. If they match, the process proceeds to S36, where it is determined that the verification of the signature data is successful, and this procedure ends.

  In FIG. 3, when the password verification fails, the signature verification unit 54 of the authentication server 5 determines that the verification of the signature data has failed without executing the procedure illustrated in FIG.

DESCRIPTION OF SYMBOLS 1 Electronic commerce support system 2 IC card 21 Signature generation means 3 User terminal 31 Signature holding means 4 Electronic commerce server 41 Authentication request means 5 Authentication server 51 User identification means 52 Validity verification means 53 Signature generation request means 54 Signature verification means

Claims (4)

A system comprising at least an IC card storing user card information, a user terminal operated by the user, and an authentication server for verifying the card information,
The IC card includes signature generation means for generating signature data by encrypting plaintext based on the authentication seed delivered from the user terminal and card information stored in the memory with a signature generation key,
When the user terminal receives a signature data transmission request from the authentication server, the user terminal transmits the signature data stored in the user terminal to the authentication server. When the user terminal receives the signature data generation request from the authentication server, the user terminal receives the signature data generation request from the authentication server. A signature holding unit that delivers the authentication seed to the signature generation unit of the IC card, stores the signature data obtained from the IC card, and transmits the signature data to the authentication server;
The authentication server, upon receiving an authentication request from the electronic commerce server accessed by the user terminal, a user identification means for acquiring the user ID of the user from the user terminal, and a signature corresponding to the user ID acquired from the user terminal Validity verification means for confirming whether or not the signature data has already been generated as data validity verification, and if the validity verification fails, an authentication seed is generated, and the authentication seed is stored in association with the user ID. A signature generation request means for transmitting a signature data generation request including the generated authentication seed to the user terminal, and if the validity verification is successful, or a signature data generation request is transmitted to the user terminal. The signature data stored in the user terminal is obtained from the user terminal using a verification key paired with the signature generation key. The authentication seed obtained by decrypting the acquired signature data is verified against the authentication seed corresponding to the user ID acquired from the user terminal, and if the verification of the authentication seed is successful, the verification of the signature data is successful. Signature verification means
An electronic commerce support system characterized by this.   The signature generation request unit of the authentication server generates an authentication seed, calculates an expiration date of the authentication seed, stores the authentication seed and the expiration date in association with the user ID, and verifies the validity of the authentication server. The electronic commerce support system according to claim 1, wherein the means confirms an expiration date of the signature data as validity verification of the signature data corresponding to the acquired user ID.   The authentication server stores card information stored in the IC card possessed by the user in association with the user ID of the user, and the signature verification means obtains from signature data acquired from the user terminal. If the verification of the authentication seed is successful, the card information obtained from the signature data is compared with the card information corresponding to the user ID acquired from the user terminal, and if the verification of the authentication seed and the card information is successful, the signature data 3. The electronic commerce support system according to claim 1, wherein it is determined that the verification is successful. The authentication server stores the password of the user in association with the user ID of the user, and the user identification unit acquires a password from the user terminal in addition to the user ID of the user, and acquires the password from the user terminal. The password and the password corresponding to the user ID acquired from the user terminal are collated, and the signature verification unit determines that the verification of the signature data has failed when the password verification fails. The electronic commerce support system according to any one of 1 to 3.

Images