JP6103492B2 - Member authentication method and member authentication system - Google Patents

Description

  The present invention is a member authentication method and member authentication system capable of improving security when performing member authentication using a portable terminal equipped with a non-contact type IC card, and capable of eliminating the troublesomeness of members. About.

  In the product sales system, a customer is registered as a member, and when the member purchases the product, points are added to make the next purchase. In such a point addition type merchandise sales system, a member may authenticate whether he / she is a legitimate member when purchasing a merchandise at a store.

  Member authentication is performed based on a member card issued by a card issuing company to each member. That is, the store computer reads the member identification code displayed on the member card as a bar code, thereby authenticating the member. However, the member card and the bar code are easily forged. In addition, since member authentication is performed by bringing the member card to the store, if the member card is not brought or if it is lost due to theft, etc., authentication cannot be performed and points cannot be used. There is. For this reason, member authentication that is difficult to forge or member authentication is required even when a member card is not brought, and a system for performing member authentication using a portable terminal has been developed.

  Patent Document 1 discloses a member authentication system that eliminates the need for a membership card and improves security.

  In the member authentication system of Patent Document 1, a member registers in advance with a server on the headquarters side using a portable terminal, and when the member authentication is required thereafter, the portable terminal makes an authentication request. At the time of member registration, a fixed ID, a password, and a one-time ID are associated with personal information and stored in the database of the server.

  In Patent Document 1, when member authentication at a store is required, a member accesses a server on the headquarters side via a network using a mobile terminal. As a result, the server compares and authenticates the transmission information and the information in the database, and creates a one-time ID when authentication is established. The server encodes the created one-time ID into an electronic image such as a dot matrix, and transmits the encoded electronic image to the mobile terminal. The portable terminal displays an electronic image, and the store computer analyzes the electronic image and transmits it to the server at the head office to request authentication by the server. And when authentication is materialized, it is permitted to use the points stored in the portable terminal at the store.

  In such a configuration, since a one-point ID based on time is used for authentication, it becomes difficult to generate a one-point ID by duplication or forgery, and security can be improved.

JP 2009-76082 A

  However, in the authentication system of Patent Document 1, since the member's mobile terminal accesses the server to perform authentication, the member needs to operate the mobile terminal, and the burden on the member to the mobile terminal increases. However, authentication is troublesome. In particular, when the member is unfamiliar with the operation, authentication takes a long time and there is a problem that is not practical. In addition, since the member's mobile terminal requires a function capable of network communication, there is a problem that the model is limited. In addition, since the image analysis function for electronic images other than barcodes is required for the store computer, the existing store computer cannot be used, and the store computer is replaced or upgraded with an image analysis function. There is a need to.

  Here, as a portable terminal, a portable terminal that can read and write data at high speed by providing a non-contact type IC card may be used. A portable terminal having this non-contact type IC card has a difficulty in using it for member authentication because the security of data written on the non-contact type IC card is low.

  The present invention has been made in consideration of such conventional problems, and can improve security when performing member authentication using a portable terminal equipped with a non-contact type IC card. The purpose of the present invention is to provide a member authentication method and a member authentication system that can reduce the burden of member operations at the time of authentication, can eliminate troublesomeness, and can be authenticated by an existing store computer. To do.

The member authentication method of the present invention includes a step in which a member-side mobile terminal reads a member identification code of a member card, converts the member identification code into corporate member identification information for a card issuing company, and then writes the information to a contactless IC card, and the contactless IC The store-side mobile terminal reads the corporate member identification information written on the card in a non-contact state with the member-side mobile terminal, and extracts and displays the member identification code from the read corporate member identification information, and the store-side mobile The store computer of the card issuing company reads the member identification code displayed on the terminal, while the member identification code of the member card is read and the member is authenticated by comparing these member identification codes; and the store computer sure but when authenticating the members, and transmitting the authentication result to the store-side portable terminal, the store computer is the member When, characterized in that the store computer has the steps of recording the member identification code.

The member authentication system of the present invention includes a member card on which a member identification code and a member identification ID are displayed, a member-side mobile terminal, a store computer of a card issuing company, and a store-side mobile terminal that can communicate with the store computer. The member-side mobile terminal includes a reading unit that reads the identification code of the member card, and a conversion unit that converts the read member identification code into corporate member identification information for the card issuing company. The store-side mobile phone comprising: a recording unit for recording company member identification information; and a non-contact type IC card in which the company member identification information recorded in the recording unit is written and is communicable with the store-side mobile terminal. The terminal includes a transmission / reception unit capable of transmission / reception with the store computer and corporate member identification information written in the non-contact type IC card. A reader / writer that is read in a non-contact state with the member-side mobile terminal; a decoding unit that extracts the member identification code from the corporate member identification information read by the reader / writer; and a display unit that displays the extracted member identification code. The store computer includes a transmitting / receiving unit capable of transmitting and receiving to / from the store side mobile terminal, a reading unit for reading the member identification code displayed on the store side mobile terminal and the member identification code of the member card, and the store that has read Comparing the member identification code of the mobile terminal with the member identification code of the member card, and authenticating the member when they match, and recording recording the member identification code when the authentication unit authenticates the member And a section .

  According to the present invention, the member identification code read by the member-side mobile terminal is converted into the corporate member identification information for the card issuing company, then written to the non-contact type IC card, and the corporate member identification written to the non-contact type IC card. The store-side mobile terminal reads the information, extracts the member identification code, and the store computer authenticates this member identification code, reducing the burden on the member-side mobile terminal during authentication and making it cumbersome at the time of authentication. Can be eliminated. Further, since the store computer only reads the member identification code displayed on the store side portable terminal and the member identification code of the member card, no replacement or version upgrade is required, and the existing store computer can be used as it is. Further, a mobile terminal equipped with a non-contact type IC card is used as the member-side mobile terminal, and even a mobile terminal equipped with a non-contact type IC card can improve security.

It is a block diagram which shows the member authentication system of one Embodiment of this invention. It is a block diagram which shows the principal part of a member authentication system. This is a sequence for performing member authentication. This is the second and subsequent member authentication sequence. It is a front view which shows the state which displayed the several card issuing company which the member side portable terminal has stored. It is a front view which shows the member identification code extracted from the corporate member identification information. It is a front view which shows the authenticated member identification code.

  Hereinafter, the present invention will be described in detail with reference to the illustrated embodiments. FIG. 1 is a block diagram showing the overall configuration of a member authentication system according to an embodiment of the present invention, and FIG. 2 is a block diagram showing the main part of FIG.

  As shown in FIG. 1, the member authentication system of this embodiment includes a member-side mobile terminal 2 owned by a member, a store computer 6 provided in each store operated by a card issuing company, and stores. The store-side mobile terminal 4 is provided. The card issuing company issues a membership card 7 to each member, and each member owns the issued membership card.

  The store computer 6 of each store can use, for example, a POS terminal such as a POS cash register. Done. Each store computer 6 includes a barcode reader 6a as a reading unit 62 (see FIG. 2), and reads the member identification code 7a displayed on the membership card 7 as a barcode. In this embodiment, as will be described later, the barcode reader 6 a reads the member identification code displayed by the store-side mobile terminal 4 in addition to the member identification code 7 a displayed by barcode on the member card 7.

  The store side portable terminal 4 can be held by a store clerk of each store, and communication with the store computer 6 is performed by an operation by the store clerk. At the time of member authentication, the store clerk possesses the store-side mobile terminal 4 and accesses the member-side mobile terminal 2 and also accesses the store computer 6.

  As the member-side mobile terminal 2 and the shop-side mobile terminal 4, a commercially available smartphone, iphone, ipod, tablet (all are registered trademarks), and other mobile terminals can be used. Here, as the member-side mobile terminal 2, a mobile terminal incorporating a non-contact type IC card is used. The non-contact type IC card is a chip that generates power by electromagnetic induction and performs communication. For example, FeliCa (registered trademark) can be used.

  FIG. 2 shows a block diagram for authenticating a member. The store-side mobile terminal 4 can communicate with the store computer 6 during normal transactions including member authentication. When the member is authenticated, the store-side communication portable terminal 4 only accesses (reads) the member-side portable terminal 2 once as described later. Therefore, the member does not need to access the server 3 or the store computer 6 using the member-side mobile terminal 2, and the operation burden on the member at the time of member authentication can be reduced.

  The member-side mobile terminal 2 includes a reading unit 21, a conversion unit 22, a non-contact type IC card unit 23, a display unit 24, a recording unit 25, an input unit 26, a transmission / reception unit 28, and a control unit 29.

  The reading unit 21 has the same function as a camera such as a CCD incorporated in a commercially available portable terminal. In this embodiment, the reading unit 21 is used to read the member identification code 7 a displayed on the member card 7 as a barcode. The member identification code 7a displayed as a barcode on the member card 7 includes member identification information such as a member ID. As the membership card 7, a point accumulation type point card, credit card, or other card can be selected.

  The conversion unit 22 converts the member identification code read by the reading unit 21 into company member identification information for the card issuing company. Since the member-side mobile terminal 2 stores a plurality of card issuing companies in the recording unit 25, and the member card 7 and the card issuing company that issued the member card 7 are associated with each other, The card issuing company corresponding to the membership card is selected from the plurality of card issuing companies in the recording unit 25. The conversion unit 22 converts the member identification code read by the reading unit 21 into company member identification information by associating it with the card issuing company selected by the member.

  In this case, the conversion unit 23 converts the member identification code in association with the corporate member identification information, and when the corporate member identification information is specified, the member identification code is also specified. For example, when the member identification code is the number “12345” and the code of the card issuing company is the number “67”, the conversion unit 23 converts the code into a number “1234567” so as to associate them.

  The recording unit 25 records the corporate member identification information converted by the conversion unit 23. The corporate member identification information is information related to the member identification code of the member card 7, and after the recording unit 25 records the corporate member identification information related to the member identification code in this way, the member card 7 is once read. In this case, it is not necessary to read the membership card 7 again. In this case, when the recording unit 25 records a plurality of card issuing companies, the recording unit 25 records company member identification information for each card issuing company.

  In the non-contact type IC card 23, company member identification information recorded in the recording unit 25 is written. The non-contact type IC card 23 has a structure including an IC chip in which corporate member identification information is written and an antenna connected to the IC chip, and a magnetic field from a reader / writer 42 included in the store-side mobile terminal 4 described later. Acts on the antenna to generate power in the antenna, and this power is supplied to the IC chip. The company member identification information written in the IC chip can be read by supplying power. Such a non-contact type IC card 23 reads and writes data without contact with the reader / writer 42.

  The input unit 26 is used for inputting e-mail texts and the like. In this embodiment, the input unit 26 is used instead of the reading unit 21 reading the member identification code 7 a of the member card 7. In the member card 7, in addition to the member identification code 7a, a member identification ID corresponding to the member identification code is displayed by numbers, alphabets, etc., and the input unit 26 is used for inputting the member identification ID. When a member identification ID (for example, “12345”) is input instead of the member identification code, the conversion unit 22 converts it into corporate member identification information (for example, “1234567”) based on the member identification ID.

  The display unit 24 is formed of a liquid crystal panel or the like, and displays predetermined data visually. The transmission / reception unit 28 performs communication with other member-side mobile terminals 2 and other communication via a network or the like.

  The control unit 29 controls the overall driving of the member-side mobile terminal 2. In this embodiment, the control unit 29 reads the reading unit 21, converts the conversion unit 22, records or deletes the recording unit 25, and writes the corporate member identification information recorded in the recording unit 25 to the non-contact type IC card 23. And reading, input of member identification ID of the input part 26, communication by the transmission / reception part 28, and other processes are controlled.

  The store-side mobile terminal 4 is a mobile terminal that can communicate with the store computer 6. The store clerk uses the store side portable terminal 4 to authenticate the member. Since the store-side portable terminal 4 is portable, the degree of freedom with respect to the authentication location, authentication time, etc. by the store clerk can be expanded, and authentication becomes easy.

  The store-side mobile terminal 4 includes a transmission / reception unit 41, a reader / writer 42, a display unit 43, a decoding unit 44, and a control unit 45.

  The transmission / reception unit 41 communicates with the store computer 6 and the member portable terminal 2. In addition, the transmission / reception unit 41 can also communicate with the server 3 and other store-side portable terminals 4.

  The reader / writer 42 reads corporate member identification information written in the non-contact type IC card 23 of the member-side mobile terminal 2. The reader / writer 42 holds the member-side mobile terminal 2 over the store-side mobile terminal 4 to read the corporate member identification information while the store-side mobile terminal 4 and the member-side mobile terminal 2 are not in contact with each other.

  The display unit 43 is formed by a liquid crystal panel or the like to display predetermined data visually. The display unit 43 in this embodiment displays a member identification code. The member identification code to be displayed is not the one directly transmitted from the member portable terminal 2 or the one read from the member card 7, but the member identification code extracted from the corporate member identification information by the decoding unit 44. In this embodiment, the display unit 43 displays the member identification code with a barcode.

  The decoding unit 44 decodes the corporate member identification information read by the reader / writer 42 and extracts a member identification code from the corporate member identification information in addition to the decoding. For example, in the case of corporate member identification information “1234567”, the decoding unit 44 extracts “12345”, which is a member identification code, from this corporate member identification information.

  The control unit 45 controls the driving of the transmission / reception unit 41, the reader / writer 42, the display unit 43, and the decoding unit 44 described above.

  The store computer 6 includes a transmission / reception unit 61, a reading unit 62, an authentication unit 63, a recording unit 64, a point clearing unit 65, and a control unit 66. As the store computer 6, a POS terminal provided in the store can be used as it is.

  The transmission / reception unit 61 enables communication with the store portable terminal 4. The transmission / reception unit 61 can also communicate with the server 3 on the headquarters side, and data access is performed with the server 3 on the headquarters side.

  The reading unit 62 reads the member identification code displayed on the store-side portable terminal 4 and the member identification code 7a displayed on the member card 7, and reads a barcode displayed on a general product. 6a (see FIG. 1) is used as it is. Therefore, as the store computer 6, a computer installed in the store can be used as it is. The reading unit 62 may be other than a barcode reader such as a CCD camera. The reading of the member identification code displayed on the store side portable terminal 4 and the member identification code 7a displayed on the member card 7 by the reading unit 62 is performed at the time of member authentication.

  The authentication unit 63 authenticates the member by comparing the member identification code of the store-side mobile terminal 4 read by the reading unit 62 and the member identification code displayed on the member card 7. In this comparison, when the two member identification codes match, the member is authenticated, and when they do not match, the member is not authenticated. Such an authentication unit 63 authenticates that the member identification code of the member side portable terminal 2 extracted by the store side portable terminal 4 is the same as the member identification code 7a of the member card 7, and the authentication unit 63 is authorized. The member-side mobile terminal 2 displaying the member identification code by authenticating the member is authenticated as the legitimate terminal of the member.

  The recording unit 64 stores data related to merchandise, data related to money, and other data. In this embodiment, the recording unit 64 records the member identification code authenticated by the authentication unit 63 as a regular member. The recorded member identification code is used for member identification from the second time after the first time. For this reason, it is necessary to present a membership card for the first time. However, after authenticating as a regular member, it is not necessary to present the membership card.

  The point clearing unit 65 clears the member's points after the authenticating unit 63 authenticates as a regular member. For example, when a product is purchased, the points are subtracted according to the product price.

  The control unit 66 controls driving of the transmission / reception unit 61, the reading unit 62, the authentication unit 63, the recording unit 64, and the point control unit 65 described above.

  Next, an authentication sequence according to this embodiment will be described with reference to FIG. FIG. 3 shows the first member authentication sequence. After the first member authentication is completed, this sequence is unnecessary, and the second and subsequent authentications are performed according to the sequence shown in FIG.

  In FIG. 3, the member reads the member identification code 7a of the member card 7 by the member-side mobile terminal 2 (step S1). The member identification code 7a is displayed as a barcode, and this barcode display is read. The conversion unit 22 of the member-side mobile terminal 2 converts the read member identification code 7a into company member identification information for the card issuing company (step S2). The converted corporate member identification information is recorded in the recording unit 25 (step S3). The recording unit 25 records the member identification code (for example, “12345”) and the card issuing company (for example, “67”) that issued the member card 7 in association with each other (for example, “1234567”). "). The corporate member identification information recorded in the recording unit 25 is used for the second and subsequent member authentications shown in FIG.

  When a plurality of card issuing companies are stored in the recording unit 25, the member selects a card issuing company corresponding to the member card 7 from the plurality of card issuing companies. FIG. 5 shows a state in which the display unit 24 of the member-side mobile terminal 2 displays a plurality of card issuing companies 81 to 84 stored in the recording unit 25, and the member issues a card corresponding to the member card 7 from this display state. A company (for example, “XX members 82”) is selected. As a result, the conversion unit 22 associates the member identification code (for example, “12345”) of the member card 7 with the card issuing company, and converts it into company member identification information (for example, “1234567”).

  The corporate member identification information recorded in the recording unit 25 is written in the non-contact type IC card 23 (step S4). The corporate member identification information written in the non-contact type IC card 23 is read by the store side portable terminal 4 (step S11). This reading is performed by the reader / writer 42 of the store side portable terminal 4. Further, the reading is performed in a non-contact state in which the member-side mobile terminal 2 is simply held over the store-side mobile terminal 4.

  In the store-side mobile terminal 4, the decoding unit 44 decodes the read company member identification information, and extracts a member identification code from the company member identification information (step S12). For example, in the case of corporate member identification information “1234567”, the decoding unit 44 extracts “12345”, which is a member identification code, from this corporate member identification information. The extracted member identification code is displayed on the display unit 43 of the store side portable terminal 4. FIG. 6 shows a display state of the member identification code by the display unit 43, and the member identification code is displayed by a barcode.

  The reading unit 62 (bar code reader 6a) of the store computer 6 reads the member identification code displayed by the store side mobile terminal 4 as a bar code (step S21). In parallel with this, the reading unit 62 reads the member identification code 7a displayed on the member card 7 as a barcode (step S22). These steps S21 and S22 may be read in reverse order.

  The authentication unit 63 of the store computer 6 performs authentication by comparing the member identification code of the store-side mobile terminal 4 read by the reading unit 62 with the member identification code 7a of the member card 7 (step S23). As a result of the comparison, when the two member identification codes match, the member (member side portable terminal 2) is authenticated as a regular member. With this authentication, the recording unit 64 records the member identification code. The recorded member identification code is used for the second and subsequent member authentications shown in FIG.

  After the authentication unit 63 authenticates the member, the authentication result is transmitted to the store-side portable terminal 4, and the store-side portable terminal 4 receives the authentication result (step S14). FIG. 7 shows a state in which the display unit 43 of the store-side mobile terminal 4 displays the transmitted authentication result, and the member identification code is displayed as a barcode.

  After the authentication unit authenticates the member, the point clearing unit 65 of the store computer 6 clears the member's points (step S25).

  According to such an embodiment, the non-contact type IC card 23 is used for the member-side mobile terminal 2 to generate corporate member identification information from the member identification code and perform member authentication based on the corporate member identification information. Even the member-side mobile terminal 2 can perform authentication with improved security. Further, the member-side mobile terminal 2 only writes the corporate member identification information to the non-contact type IC card 23, and the store-side mobile terminal 4 reads the corporate member identification information from the non-contact type IC card 23 and the store computer 6 authenticates. Therefore, the operation burden on the member side portable terminal 2 at the time of authentication is reduced, and the troublesomeness at the time of authentication can be eliminated. Moreover, since the network communication function is not required for the member-side mobile terminal 2, the degree of freedom in selecting the member-side mobile terminal 2 is expanded.

  Furthermore, since the store computer 6 only reads the member identification code displayed on the store-side mobile terminal 4 displayed on the bar code and the member identification code 7a of the member card 7, such as a QR code (registered trademark) or the like. There is no need to read a matrix type two-dimensional code, a function for that is unnecessary, and no replacement or version upgrade is required. For this reason, the existing store computer can be used as it is.

  FIG. 4 shows a sequence in which a member visits the store and the second and subsequent member authentications are performed after the first authentication is completed by the sequence of FIG.

  The member selects a card issuing company to be used from the member-side mobile terminal 2 (step S001), and corporate member identification information relating to the selected card issuing company is written to the non-contact type IC card 23 (step S002).

  The reader / writer 42 of the store side mobile terminal 4 reads the corporate member identification information from the non-contact type IC card 23 of the member side mobile terminal 2. This reading can be performed without contact between the member-side mobile terminal 2 and the store-side mobile terminal 4. The decoding unit 44 of the store-side mobile terminal 4 decodes the read company member identification information and extracts a member identification code (step S102). The extracted member identification code is displayed on the display unit 43 (step S103). The display is performed by a barcode.

  The reading unit 62 (bar code reader 6a) of the store computer 6 reads the member identification code displayed by the store side mobile terminal 4 as a bar code (step S201). The authentication unit of the store computer 6 performs authentication by comparing the member identification code recorded in the recording unit 64 during the first authentication with the member identification code read from the store-side mobile terminal 4 (step S202). When these member identification codes match as a result of comparison, the member is authenticated as a regular member, and the point clearing unit 65 performs point clearing (step S203).

  In such second and subsequent authentications, the member card 7 is not required, and authentication can be performed only with the member-side mobile terminal 2. Therefore, even if the member card 7 is not brought or lost, the member can be authenticated, so that the product can be purchased.

  In the above embodiment, the member-side mobile terminal 2 reads the member identification code 7a displayed on the member card 7, but not limited to this, the member identification ID corresponding to the member identification code 7a is input to the input unit 26. It may be entered by typing. The entered member identification ID is handled in the same manner as the member identification code 7a and used for member authentication. That is, corporate member identification information is generated based on the member identification ID, and the generated corporate member identification information is written to the non-contact type IC card 23 and read from the non-contact type IC card 23 to the store-side mobile terminal 4. Then, the member identification ID is extracted from the read corporate member identification information. In the store computer 6, the extracted member identification ID is compared with the member identification ID displayed on the member card 7 to authenticate the member.

2 Member-side mobile terminal 4 Store-side mobile terminal 6 Store computer 7 Member card 7a Member identification code 21 Reading unit 22 Terminal-side OTP generation unit 23 Non-contact IC card 24 Display unit 25 Recording unit 26 Input unit 41 Transmission / reception unit 42 Reader / writer 43 Display Unit 44 Decoding Unit 61 Transmission / Reception Unit 62 Reading Unit 63 Authentication Unit 64 Recording Unit 65 Point Clearing Unit

Claims (2)

Member portable terminal having a contactless IC card, reads the member identification code of a membership card, after converting to the corporate member identification information for the card issuing company, a step of writing to the non-contact type IC card,
The store-side mobile terminal reads the corporate member identification information written in the contactless IC card in a non-contact state with the member-side mobile terminal, and extracts and displays the member identification code from the read corporate member identification information. Stages,
The store computer of the card issuing company reads the member identification code displayed on the store-side mobile terminal, and reads the member identification code of the member card and authenticates the member by comparing these member identification codes; ,
When the store computer authenticates the member , sending the authentication result to the store-side mobile terminal;
The member authentication method comprising: a step of recording the member identification code when the store computer authenticates the member. A system comprising a member card on which a member identification code and a member identification ID are displayed, a member side portable terminal, a store computer of a card issuing company, and a store side portable terminal communicable with the store computer,
The member-side mobile terminal records a reading unit that reads the identification code of the member card, a conversion unit that converts the read member identification code into corporate member identification information for the card issuing company, and the converted corporate member identification information A recording unit; and a non-contact type IC card in which corporate member identification information recorded in the recording unit is written and can be communicated with the store-side mobile terminal.
The store-side mobile terminal includes a transmitter / receiver capable of transmitting / receiving to / from the store computer, and a reader / writer that reads corporate member identification information written in the contactless IC card in a contactless state with the member-side mobile terminal A decoding unit that extracts the member identification code from the corporate member identification information read by the reader / writer, and a display unit that displays the extracted member identification code,
The store computer includes a transmission / reception unit capable of transmitting and receiving to and from the store side mobile terminal, a reading unit that reads the member identification code displayed on the store side mobile terminal and the member identification code of the member card, and the store side that has read An authentication unit that compares the member identification code of the mobile terminal with the member identification code of the member card and authenticates the member when they match, and a recording unit that records the member identification code when the authentication unit authenticates the member And a member authentication system.

Images