JP2000259709A - System and method for managing electronic commertial transaction and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a service concerning authentication/settlement from an external server to a tenant selling a service or commodities on the Internet. SOLUTION: An online service provider 12 and a tenant server 11 hold groups of the same authenticating codes. A uniquely selected code is issued to a final customer 14, whose effectiveness of financial transaction information is confirmed by online authentication by the provide 12, from the provider 12. Secondary authentication of investigating the illegality of a code is executed by investigating whether a code inputted from the customer 14 matches with an unused code within the group of codes held in the server 11, registering a matched code by making correspond to individual information of the customer 14, for example.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an electronic commerce management system, an electronic commerce management method, and a recording medium used for electronic commerce using the Internet.

[0002]

2. Description of the Related Art In recent years, electronic commerce (EC) using the Internet has been developed.
Is attracting attention. EC is a system for buying and selling goods and services online using the Internet.
The services that have been used in store sales and mail order sales can be provided online on the Internet. By using this EC, end customers such as general consumers can purchase contents such as software, images, and music data and articles on the Internet without going to an actual store. By establishing a virtual shop (tenant) on the Internet, service providers can start business without actually opening a store. 2) Efficient marketing by searching catalogs on the Internet. Can do, and so on.

However, in order to actually operate EC,
It is necessary to establish a mechanism for performing highly reliable authentication and payment online, including the security environment.

[0004] Conventionally, as a form of realizing a mechanism for performing authentication and settlement online, 1) opening a store in a virtual mall managed and operated by an Internet service provider allows the Internet service provider to authenticate to the Internet service provider; And a method in which all functions for settlement are entrusted, and 2) a system in which a tenant establisher who establishes a virtual shop (tenant) on the Internet itself builds a system for authentication and settlement.

[0005]

The first method is to open a virtual shop (tenant) by renting a free storage area on a server of an Internet service provider, that is, to provide a virtual shop (tenant) to the Internet service provider. This method is applicable only when outsourcing hosting.

For this reason, in the case where a tenant establishment applicant uses a Web server managed by the company to establish the tenant, the tenant is established using a server physically different from the server of the Internet service provider. Not applicable when establishing Also,
When using hosting of other companies in this way, restrictions on the provision of free services by tenant establishers will occur, and the end customer who can use the virtual shop will be limited to the members of the Internet service provider There are also restrictions such as.

[0007] Therefore, when a tenant who wants to open a tenant opens a tenant using a Web server managed by the company, the latter method needs to be used.

[0008] However, establishing a system for the tenant creator to perform credit card authentication and settlement on-line by himself / herself includes the construction of a security environment,
It is technically extremely difficult and the construction of the system requires enormous costs. Therefore, it is often impossible to establish a system by the tenant establisher itself because of the risk of initial investment, and it is often impossible to give up.

[0009] The present invention has been made in view of such circumstances, and a tenant establisher who wishes to sell content or goods online on the Internet is provided by:
If you want to sell content or goods on a server that outsources hosting to another company or manages your own, an online service provider that provides online authentication / payment services for financial transaction information such as credit cards Provided is an electronic commerce management system, an electronic commerce management, and a recording medium for realizing a new mechanism capable of easily using the authentication / settlement service by the online service provider even if the server is located in a different place or server. The purpose is to do.

[0010]

In order to solve the above-mentioned problems, the present invention provides a service related to authentication and settlement to a tenant server which provides a content or article sales service on the Internet by an online service provider. An e-commerce management system for providing, wherein the online service provider and the tenant server have the same code group used to identify an end customer who can receive service from the tenant server. Wherein the online service provider performs authentication of financial transaction information input by an end customer who intends to purchase content or goods from the tenant server online by communication with a certification authority, Validation of the financial transaction information To the final customer but has been confirmed,
Means for issuing a code uniquely selected from the code group, wherein the tenant server sets the final customer based on the code input from the final customer and the code group held in the tenant server. And a means for permitting or prohibiting the execution of the sales service requested by the end customer based on the result of the code authentication by the code authentication means. It is characterized by the following.

In this electronic commerce management system,
The online service provider and the tenant server have the same code group, and the processing such as authentication / settlement to be executed by the tenant server is performed by the online service provider on behalf of the online service provider, and only the secondary authentication is performed by the tenant server. Done. That is, a uniquely selected code is issued from the online service provider to the end customer for which the validity of the financial transaction information has been confirmed by online authentication by the online service provider. In the tenant server, for example, it is checked whether or not the code input from the end customer matches an unused code in a group of codes held in the tenant server, and the matched code is associated with the personal information of the end customer. Secondary registration is performed by checking the validity of the code.

As described above, by using a mechanism for performing necessary authentication separately on the online service provider side and the tenant server side, the tenant server and the online service provider are physically different servers, It is possible to provide the service provided by the online service provider to the tenant server even if the servers are located far apart from each other. Therefore,
Tenant entrepreneurs do not have to be directly involved in difficult technical issues as online service provider tenants, and the costs to be incurred are much less than starting their own on their own. Also, basically, it is only necessary to exchange information between the end customer and the tenant server and between the end customer and the online service provider, so just implement a mechanism for exchanging information with the end customer in the tenant server, The service provided by the online service provider can be provided, and the authentication / settlement service can be received without disclosing confidential matters regarding the tenant business to the online service provider. Furthermore, once authentication is performed, there is no need to access the server of the online service provider, so that the burden due to an increase in the number of accesses can be reduced.

Preferably, the code issued from the online service provider is stored as a cookie value in the terminal of the end customer. As a result, the tenant server can automatically acquire the code from the terminal of the final customer, so that the input work by the final customer can be greatly reduced.

Further, instead of the tenant server directly determining the validity of the code acquired from the final customer, the validity can be determined by inquiring of the online service provider and responding from the online service provider. In this case, there is no need to prepare the code group in the tenant server, so it is possible to avoid problems such as lack of security caused by distributing the code group to the tenant server. There is no problem caused by code mismatch between the two.

[0015]

Embodiments of the present invention will be described below with reference to the drawings.

(First Embodiment) FIG. 1 shows a first embodiment of the present invention.
1 shows a configuration of a management system for electronic commerce according to an embodiment. This system uses the Internet 10
It is used for electronic commerce (EC) for buying and selling services and products, and provides services such as authentication / settlement to a server of a virtual shop established on the Internet 10. As shown in the figure, a tenant server 11, an online service provider 12, a certification authority 13, and an end customer 14 are connected to the Internet 10.

The tenant server 11 is connected to the Internet 1
0 is a web server of a virtual shop (tenant) that sells contents such as software, images, and music data, and various articles. This tenant server 11
As shown in the figure, when the tenant server 11 is realized on a recording area on the Internet service provider (ISP) 15 in which the tenant of the tenant server 11 is registered as a member (the Internet service provider 15 transmits
Hosting is outsourced), and the tenant server 11 may be realized by a web server operated by the tenant server 11 itself.

Online service provider 12
Is for providing services such as authentication and settlement to each of the plurality of tenant servers 11 online, and is usually realized by a server different from the tenant server 11. Note that the online service provider 12 itself may have a function as an Internet service provider (ISP).

The services provided by the online service provider 12 to the tenant server 11 include management of credit card authentication, resale of contents and goods, settlement, personal information of customers, purchase details, service use restrictions, and the like. The processing is executed on behalf of the tenant server 11 by the online service provider 12.

Online service provider 12
Is communicably connected to a certification organization 13 such as cyber cash operated and managed by a third party. The online service provider 12 connects to the certification organization 13 for processing such as credit card authentication and settlement. ,
This is done by inquiring.

The end customer 14 is a user who uses various services provided on the Internet 10, and accesses the tenant server 11 through a WWW browser executed on a terminal such as a personal computer, thereby obtaining the tenant server 11. It is possible to carry out a procedure for purchasing the contents and goods for which the sales service is provided online.

In the present system, the online service provider 12 and the tenant server 11 hold the same “password” group (order ID in the case of selling goods) in their respective databases 121 and 111. The group of passwords (order ID in the case of sale of goods) is the last customer 14 who wants to purchase content or goods from the tenant server 11 whose validity of financial transaction information such as a credit card number has been confirmed by authentication. This is a group of authentication codes used to assure the existence of the authentication code, and is used to identify a valid end customer who has been authenticated.

FIG. 2 shows the principle of the authentication process using these code groups.

1. 1. The end customer 14 enters financial transaction information such as a credit card number for authentication through a web browser. 2. When the authentication agent system 122 of the online service provider 12 confirms the validity of the financial transaction information through the authentication organization 13, the unused code is uniquely selected from the code group of the database 121. 3. Issue selected code to end customer 14 4. The final customer 14 accesses the tenant server 11 and inputs a code. 5. The tenant server 11 checks whether the code input by the final customer 14 matches an unused code in a code group held in the database 11 in advance. When it is confirmed that the unused code matches, the tenant server 11 starts the service to the end customer 14. Thus, the online service provider 12 and the tenant server 11 use the same password (in the case of selling goods, Order ID) group,
It is possible to use a mechanism in which necessary authentication is individually performed between the online service provider 12 and the tenant server 11. Even if the tenant server 11 and the online service provider 12 are physically different servers, or even if the servers exist in physically separated places, the online service provider 12
Can be provided to the tenant server 11. Basically, information can be exchanged between the end customer 14 and the tenant server 11 and between the end customer 14 and the online service provider 12, so that the tenant server 11 exchanges information with the end customer 14. The service provided by the online service provider 12 can be received only by implementing a mechanism for the service.

Next, a specific processing procedure in this system will be described with reference to FIGS.

FIG. 3 shows the final customer 14 and the tenant server 1
1 shows the flow of information between the online service providers 12, and FIG. 4 shows the flow of processing of each of the end customer 14, the tenant server 11, and the online service provider 12. FIG. 5 shows an input form displayed on the screen of the final customer 14 by the tenant server 11 or the online service provider 12.

1. When the end customer 14 searches the web page of the tenant server 11 through the web browser and selects the content or product desired to be purchased on the web page, the personal information input form as shown in FIG. And is displayed on the WEB browser of the final customer 14 on the screen. End customer 14 is WE
Through the browser B, personal information such as the name of the final customer (C1), the address of the final customer (C2), the date of birth of the final customer (C3), the user ID (B4), and the telephone number is entered on the input form. Normally, the e-mail address of the final customer is used as the user ID (B4).

2. 1. The personal information input in step (1) is stored in a database 121 of a server (for example, a secure server) of the online service provider 12. As a mechanism for transmitting personal information directly from the end customer 14 to the server of the online service provider 12, a CGI that processes data input on the input form is used.
(Common Gateway Interface) A well-known method such as describing a WEB server name / CGI name indicating the location of a program on a WEB page (HTML file) constituting an input form can be used. As a result, the personal information is directly passed to the CGI of the server of the online service provider 12, and the CGI
Thus, cooperation with the database system of the online service provider 12 is performed. After the personal information is registered in the database 121 of the secure server, FIG.
An input form for inputting financial transaction information as shown in (B) is sent from the server of the online service provider 12 to the end customer 14.

3. The end customer 14 enters the credit card number,
Financial transaction information (B1) having financial value, such as debit card information, prepaid card information, and check information, and accompanying information such as the expiration date (B2), the price of the content or article to be purchased (A4), and the like are input. This information is
The data is transmitted to the online service provider 12 in a state of being encrypted by SSL (Secure Sockets Layer) or the like which is provided as a standard in the HTTP protocol of a normal Web browser. When the online service provider 12 receives the information, it sends it to the certification authority 13
Authenticates the validity of the information in real time by connecting to and querying the server.

4. If the authentication is successful, that is, if the validity of the financial transaction information and the supplementary information is confirmed, the server of the online service provider 12 preliminarily sets the “password” (the password as in the case of content sales) provided in the tenant server 11 If necessary, use an order ID for selling the goods.) An unused “password” is arbitrarily selected from the same “password” group as the group, and the “password” is replaced by e-mail, mail, fax, WEB
Display on the browser, voice, telephone, any other communication
It is handed over to the final customer 14 using information transmission means.

5. In order to confirm receipt of the password by the end customer 14, a password input form as shown in FIG. 5C is sent from the online service provider 12 to the end customer 14. The end customer 14 enters the “password” received from the online service provider 12 through the web browser on the input form.
And notifies the online service provider 12 of the “password”. As a result, the validity of the "password" of the final customer 14 is registered in the database 121 of the online service provider 12, and the user ID of the final customer 14 is registered on the database 121.
(E-mail address) and the password are associated with each other. Further, by determining the amount information registered in the database 121, a billing process and a settlement process are performed. Note that the billing / settlement may be performed at another timing. Then, after the final customer 14 displays, for example, a result indicating that the password verification is successful on the WEB page, the WEB browser of the final customer 14 refers to.
The link destination of page B is automatically switched to tenant server 11.

6. The tenant server 11 transmits to the end customer 14 an input form for inputting the “user ID” and the “password” as shown in FIG. The final customer 14 inputs the "user ID" and the "password". Since the tenant server 11 has the same “password” group as the “password” group prepared in the server of the online service provider 12 in advance,
By checking for an unused one in this "password" group, it is possible to directly exchange information with the server of the online service provider 12 without exchanging information.
You can easily check the validity of a "password".
When the validity of the “password” is confirmed, the tenant server 11 registers the input “user ID” and “password” as a pair in the database 111.
By this registration, the end customer 14 can acquire the access right to the tenant server 11.

[7] Thereafter, the end customer 14
It is possible to receive the sales service by the tenant server 11 while directly receiving the password authentication from the tenant server 11 as necessary without going through the service provider 12.

On the other hand, if the “password” is not valid, the provision of the service by the tenant server 11 is prohibited.

With such a mechanism, the tenant server 1
1 can be provided to the end customer 14 without bothering the server of the online service provider 12 and the line to the server. In addition, authentication of financial transaction information such as credit card numbers and the accompanying information is basically performed for each service,
In other words, the process is executed every time the final customer 14 selects the content or product desired to be purchased in the procedure 1. Further, regarding access to a page where paid contents such as images are collected, access from the end customer 14 may occur repeatedly while updating the page due to the nature of the service. In such a case, as described above, once the authentication of the financial transaction information such as the credit card number and the accompanying information is performed, the password authentication between the tenant server 11 and the end customer 14 is thereafter performed. Only done.

As described above, in the system according to the first embodiment, the authentication code (password, order ID) issued from the online service provider 12 to the final customer 14 is used, and the tenant server 11
A secondary authentication system is built on the side. With the construction of this secondary authentication system, the tenant server 11 and online /
Without exchanging customer information and information necessary for authentication with the service provider 12, the end customer 14 and the tenant server 11, and the end customer 14 and the online
Necessary authentication processing can be performed only by communication between the service providers 12. Therefore, the tenant establisher only needs to implement a mechanism for exchanging information with the end customer 14 on the tenant's WEB server, and the online tenant is constituted by an external server physically different from the tenant server 11. -It is possible to receive a required authentication / settlement service from the service provider 12.

In practice, it is necessary to additionally set a procedure for code authentication in the tenant's web server. This is because a computer program for performing the code authentication process is stored on a CD-ROM. It can be easily realized simply by introducing it to the tenant's WEB server through a recording medium such as.

(Second Embodiment) Next, a second embodiment of the present invention will be described.

The management system according to the second embodiment has an online service provider 12 similar to the first embodiment.
The tenant server 11 has the same code group, and the tenant server 11 constructs a secondary authentication system by code authentication. However, the tenant server 11 has a mechanism for further simplifying the final customer authentication procedure.

That is, in the case of the management system of the first embodiment, after the end customer 14 first inputs personal information,
Until the tenant server 11 is authenticated by the secondary authentication system, a plurality of operations must be performed, and it takes time and effort to purchase contents and articles, which causes a problem such as a decrease in purchase motivation. It is also possible. Also,
When inputting / transmitting financial transaction information such as credit card numbers and the accompanying information, the transmission button is accidentally double-clicked (usually a double-click operation means a decision with a mouse operation). There is a possibility that the billing will be performed twice and the billing will be written into the database as two times.

As described above, it is possible to reduce the input work of the final customer,
In order to prevent an input error, in the second embodiment, the information once input by the final customer 14 is stored in a storage area in the terminal of the final customer 14, thereby simplifying the authentication work.

Hereinafter, a specific processing procedure will be described with reference to FIGS. FIG. 6 shows an end customer 14, a tenant server 11, and an online service provider 1.
7 shows the flow of information between the two, and FIG.
The flow of processing of each of the tenant server 11 and the online service provider 12 is shown. FIG.
Indicates an input form displayed on the screen of the final customer 14 by the tenant server 11 or the online service provider 12.

1. When the end customer 14 searches the web page of the tenant server 11 through the web browser and selects the content or product desired to be purchased on the web page, the personal information input form as shown in FIG. And is displayed on the WEB browser of the final customer 14 on the screen. End customer 14 is WE
Through the browser B, personal information such as the name of the final customer (C1), the address of the final customer (C2), the date of birth of the final customer (C3), the user ID (B4), and the telephone number is entered on the input form. Normally, the e-mail address of the final customer is used as the user ID (B4).

2. 1. Is input to the database 111 of the tenant server 11. The tenant server 11 sends the final customer 14 to the terminal of the final customer 14.
Sends personal information such as “user ID” together with information such as service contents, price, and quantity requested by the user, and stores them in a local storage area in the terminal of the end customer 14.
It is stored by a method called kie. The “user ID” does not have to be input from the end customer 14, and a value uniquely assigned to the personal information of the end customer 14 by the tenant server 11 can be used. Cookie
Is a mechanism for exchanging information between a web browser and a web server. For example, tenant server 11
That specifies the web server of the online service provider 12 as an effective domain / path
If the WWW browser of the end customer 14 accesses the WEB server of the tenant server 11 or the online service provider 12, the cookie value is changed from the WWW browser of the end customer 14 to the WEB server of the access destination. Will be notified. This allows
The tenant server 11 and the web server of the online service provider 12 can acquire personal information and user ID from a local storage area in the terminal of the end customer 14.

3. Thereafter, an input form for inputting financial transaction information as shown in FIG. 8B is sent from the tenant server 11 to the final customer 14. Of course, the input form may be transmitted from the online service provider 12. The end customer 14 enters financial transaction information (B1) having financial value such as credit card number, debit card information, prepaid card information, check information, etc. on the input form through a web browser.
Additional information such as the expiration date (B2) and the price (A4) of the content or article to be purchased is input. These pieces of information are encrypted by the online service provider 12 in an encrypted state using SSL (Secure Sockets Layer) or the like.
And stored in the database 121 of the online service provider 12.

4. Online server provider 1
The server of 2. Is transmitted to the certification organization 13 to request authentication.

5. If the certification institution 13 determines that the financial transaction information and the supplementary information are valid, the server of the online server provider 12 pre-stores a “password” (such as a content sales password) provided in the tenant server 11. If necessary, the order ID is used for selling the goods.) An unused “password” is arbitrarily selected from the same “password” group as the group, and the password is transmitted to the terminal of the final customer 14, and the cookie is transmitted. In the local storage of the terminal of the end customer 14.

6 Tenant server 11 is the final customer 1
By obtaining a “password” from the terminal No. 4 and checking whether the “password” matches an unused one in the “password” group held in the database 111 of the tenant server 11, the validity of the “password” is determined. Find out. When the validity of the “password” is confirmed, the tenant server 11
Is 1. Information (personal information and "User I
D)) and the obtained “password”
Register in the database 111. By this registration, the final customer 14 can acquire the access right to the tenant server 11 and can purchase services or goods provided by the tenant server 11.

(Third Embodiment) Next, a third embodiment of the present invention will be described.

The management system of the third embodiment differs from the first and second embodiments only in the code authentication procedure in the tenant server 11, and all other procedures have been described in the first or second embodiment. Same as the ones. Less than,
The code authentication used in the third embodiment will be described.

That is, in the first and second embodiments, the online service provider 12 and the tenant server 11 have the same code group.
The service provider 12 had to pass the code list to the tenant 11. This not only increases the risk of the code list leaking to a third party, but also wastes the dual management of codes between the online service provider 12 and the tenant server 11.
In addition, since the tenants perform authentication based on the code list distributed to each tenant, the security was inevitably reduced. The third embodiment aims to eliminate the problems of security and code consistency in a code authentication system. Therefore, in the system of the third embodiment,
The code list is held only in the database 121 of the online service provider 12, and the tenant server 11
Does not keep a code listing. The code authentication process by the tenant server 11 is performed when the tenant server 11
This is done by querying the service provider 12 for authentication of the code.

1. End customer 14 inputs financial transaction information such as a credit card number for authentication through a web browser 2.3. When the authentication agent system 122 of the online service provider 12 confirms the validity of the financial transaction information through the authentication organization 13, the unused code (password or order ID) is uniquely selected from the code group of the database 121. Yes 4. The online service provider 12 associates the selected code with the user ID and
4. Record the code and issue the code to the end customer 14 5. The end customer 14 accesses the tenant server 11 and inputs a code. The tenant server 11 accesses the online service provider 12 with a dedicated program, passes the code acquired from the end customer 14 to the code authentication system 123 of the online service provider 12, and the code is a valid code. 6. Inquire whether or not The code authentication system 123 uses the database 12
It is checked whether the code received from the tenant server 11 is correct by comparing it with the code group of No. 1. In this case, if it exists in the code group of the database 121, it may be simply recognized as correct, or
The user ID may be transmitted from the tenant server 11 to the online service provider 12 together with the code, and may be collated with the code corresponding to the user ID registered in the database 121.

8. 7. Authentication result of tenant server 1
Report to 1.

9. 7. Tenant server 11 Judge the validity of the code by the report of, and if the code is correct, start the service requested by the end customer 14,
If the code is not correct, execution of the service is prohibited.

Also in the third embodiment, the secondary authentication mechanism using a code can be implemented in the tenant server 11 only by introducing a computer program for executing the procedures 6 and 8 to the tenant's WEB server via a recording medium. Can be.

[0056]

As described above, according to the present invention,
By realizing a new mechanism in which the online service provider authenticates financial transaction information and performs code authentication on the tenant server, the tenant server and the online service provider may be physically different servers, It is possible to provide services such as authentication / payment by an online service provider to a tenant server even if the servers are located far apart from each other. As a result, tenant establishers do not have to be directly involved in difficult technical issues as tenants of online service providers, and the costs to be incurred are much less than if they were launched on their own.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of an electronic commerce management system according to a first embodiment of the present invention.

FIG. 2 is an exemplary view for explaining the principle of authentication processing in the system according to the first embodiment;

FIG. 3 shows an end customer in the system of the first embodiment,
The figure which shows the flow of information between a tenant server and an online service provider.

FIG. 4 shows an end customer in the system of the first embodiment,
The figure which shows the flow of a process of each of a tenant server and an online service provider.

FIG. 5 is a view showing an example of an input form used in the system according to the first embodiment;

FIG. 6 is a diagram showing a flow of information among an end customer, a tenant server, and an online service provider in the system according to the second embodiment of the present invention.

FIG. 7 shows a final customer in the system of the second embodiment,
The figure which shows the flow of a process of each of a tenant server and an online service provider.

FIG. 8 is a view showing an example of an input form used in the system of the second embodiment.

FIG. 9 is a view for explaining the principle of authentication processing of the system according to the third embodiment of the present invention.

[Explanation of symbols]

10 ... Internet, 11 ... Tenant server, 12 ...
Online Service Provider, 13 ... Certification Authority,
111, 121: database, 122: authentication agent system, 123: code authentication system.

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Gen Saito Inventor F-term (reference) 5B049 AA05 AA06 BB11 CC00 CC10 CC36 DD05 EE05 EE23 GG07 in Big Bang Technology Co., Ltd. 14-5 Kodenmacho, Nihonbashi, Chuo-ku, Tokyo

Claims (10)

[Claims] 1. An electronic commerce management system for providing a service relating to authentication and settlement online to a tenant server providing content or goods sales services on the Internet by an online service provider, wherein the online service provider And the tenant server holds the same code group used to identify an end customer who can receive service from the tenant server, and the online service provider Means for performing online authentication of financial transaction information input from an end customer who intends to purchase content or goods by communication with a certification body, and for the end customer for which the validity of the financial transaction information has been confirmed. , Within the above code group Means for issuing a uniquely selected code, wherein the tenant server is configured to execute the code input from the final customer based on the code input from the final customer and the code group held in the tenant server. An electronic device comprising: a code authentication unit that authenticates validity; and a unit that permits or prohibits execution of a sales service requested by the end customer based on a result of code authentication by the code authentication unit. Commerce management system. 2. An electronic commerce management system for providing an online service provider with services related to authentication and settlement to a tenant server providing a content or article sales service on the Internet, wherein the online service provider And the tenant server holds the same code group used to identify an end customer who can receive service from the tenant server, and the online service provider Means for performing online authentication of financial transaction information input from an end customer who intends to purchase content or goods by communication with a certification body, and for the end customer for which the validity of the financial transaction information has been confirmed. , Within the above code group Means for issuing a uniquely selected code and storing the issued code as a cookie value in the terminal of the end customer, wherein the tenant server is stored as a cookie value in the terminal of the end customer A code authentication unit that obtains a code, and based on the obtained code and a code group held in the tenant server, authenticates the validity of the code input from the final customer; Means for permitting or prohibiting execution of the sales service requested by the end customer based on a result of the authentication. 3. An electronic commerce management system for providing a service related to authentication and settlement online to a tenant server that provides a content or goods sales service on the Internet by an online service provider, wherein the online service provider Means for holding a group of codes for identifying a final customer whose validity has been confirmed by authentication, and authentication of financial transaction information input by the final customer who intends to purchase content or goods from the tenant server, Means for executing online by communication with a certification body, and means for issuing a code uniquely selected from the code group to an end customer whose validity of the financial transaction information has been confirmed, The tenant server sends the code obtained from the end customer to the A code authenticating means for passing the code to a line service provider to inquire the validity of the code to the online service provider and for validating a code obtained from the end customer by a response from the online service provider; Means for permitting or prohibiting the execution of the sales service requested by the end customer based on the result of the code authentication by the electronic customer transaction management system. 4. The financial transaction information input from the end customer is directly notified from the end customer to the online service provider via the Internet without passing through the tenant server. Item 1
An electronic commerce management system according to any one of claims 1 to 3. 5. An e-commerce management system for providing a service related to authentication and settlement to a tenant server that provides content or article sales service on the Internet by an online service provider, wherein the tenant server is provided by the tenant server. Means for presenting an input form for inputting financial transaction information to an end customer who wishes to purchase content or goods for which sales services are provided; and financial transaction information input on this input form. Means for notifying the online service provider from the end customer and causing the online service provider to perform authentication of the financial transaction information; and when the validity of the financial transaction information is confirmed by the online service provider, the online service provider. A specific code issued from the service provider to the end customer is obtained from the end customer, and the validity of the code is determined by the same code group as the online service provider held in the tenant server. Or a code authentication unit for performing authentication by inquiring of the online service provider, and, based on the result of code authentication by the code authentication unit, permitting the tenant server to execute a sales service requested by the final customer. An electronic commerce management system comprising: a prohibition unit; 6. An electronic commerce management method for providing a service relating to authentication and settlement online to a tenant server providing content or goods sales services on the Internet by an online service provider, the online service provider comprising: And the tenant server holds the same code group used to identify an end customer who can receive the service from the tenant server, and the content sold and sold by the tenant server Alternatively, by transmitting financial transaction information input from an end customer who desires to purchase goods from the end customer to the online service provider, authentication of the financial transaction information can be performed by communication between the online service provider and a certification body. The online service provider issues a code uniquely selected from the code group to the final customer whose validity of the financial transaction information has been confirmed by the authentication. Authenticating the code input from the final customer based on the code input from the tenant server and the code group held in the tenant server, based on the result of this code authentication, by the tenant server An e-commerce management method, which permits or prohibits execution of the sales service requested by the end customer. 7. An electronic commerce management method for providing a service relating to authentication and settlement online to a tenant server that provides a content or goods sales service on the Internet by an online service provider, the online service provider comprising: And the tenant server holds the same code group used to identify an end customer who can receive the service from the tenant server, and the content sold and sold by the tenant server Alternatively, by transmitting financial transaction information input from an end customer who desires to purchase goods from the end customer to the online service provider, authentication of the financial transaction information can be performed by communication between the online service provider and a certification body. The online service provider issues a code uniquely selected from the code group to the final customer whose validity of the financial transaction information has been confirmed by the authentication. The issued code is stored as a cookie value in the terminal of the end customer, the code stored as a cookie value in the terminal is obtained from the terminal of the end customer by the tenant server, and the obtained code and the tenant are obtained. Authenticates the validity of the code based on the code group held in the server, and permits the tenant server to execute the sales service requested by the end customer based on the result of the code authentication. Or an e-commerce management method characterized by prohibition. 8. An electronic commerce management method for providing an authentication and settlement service online by an online service provider to a tenant server providing a content or article sales service on the Internet, wherein the tenant server is By transmitting financial transaction information input from an end customer who desires to purchase content or goods being sold, the end customer transmits the financial transaction information to the online service provider. A code uniquely selected from a group of codes for identifying an end customer who can execute a service online from the tenant server by communicating with a certification authority, Issuing to the end customer the validity of the financial transaction information has been confirmed by authentication, passing the code obtained from the end customer from the tenant server to the online service provider, inquiring the online service provider for the validity of the code, Authenticating the validity of the code by a response from the online service provider, and permitting or prohibiting the execution of the sales service requested by the end customer performed by the tenant server based on the result of the code authentication. E-commerce management method characterized by the above-mentioned. 9. An electronic commerce management method for providing a service related to authentication and settlement on-line by an online service provider to a tenant server that provides content or article sales services on the Internet, wherein the tenant server is An input form for inputting financial transaction information is presented to an end customer who wishes to purchase content or goods for which sales services are provided, and the financial transaction information input on this input form is displayed by the end customer. Informs the online service provider of the financial transaction information, and causes the online service provider to perform authentication of the financial transaction information. When the validity of the financial transaction information is confirmed by the online service provider, A specific code issued to the end customer is notified from the end customer to the tenant server, and the validity of the code is authenticated on the tenant server.Based on the result of the code authentication, An electronic commerce management method, wherein execution of a sales service requested by the end customer performed by a tenant server is permitted or prohibited. 10. A recording recording a computer program applied to a tenant server for providing a service related to authentication and settlement from an online service provider to a tenant server that provides a content or article sales service on the Internet. A medium, wherein the computer program determines whether the validity of financial transaction information notified to the online service provider from an end customer who desires to purchase content or goods sold by the tenant server is the online service. The tenant server obtains, from the end customer, a specific code issued from the online service provider to the end customer when confirmed by the provider, and verifies the validity of the code to the tenant server. Comparing the online service provider with the same code group held in the online server, or authenticating by an inquiry to the online service provider; and based on the result of the code authentication, the tenant server performs the final customer. A procedure for permitting or prohibiting the execution of the sales service requested by the storage medium.