JP2001195455A - System for preventing credit card from fraudulent use when using credit card without presenting credit card itself as in mail order sales or the like - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent a credit card from being used fraudulently in mail order sales. SOLUTION: This system makes a credit card company generate and manage a code for mail order use approval beforehand, in addition to the notice and checking of the various information written on the face of a credit card, notifies a card holder of the code and uses one code for each usage of the credit card by adding the notice and checking of the code that is not allowed to be used again, when using the credit card in mail order sales.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to the field of financial security.

[0002]

2. Description of the Related Art A credit card is used to pay for goods and services by presenting a credit card by a purchaser, that is, a card holder, and signing a credit card use slip instead of cash payment.
Note that the signature may be omitted. By presenting the card, we confirm the identity, confirm the purchase intention, and estimate the credit approval of the credit card company.
It is used as proof of purchase intention and purchase fact. At this time, the credit card company usually checks online whether the card is an accident card and reinforces identity verification,
The credit, that is, whether the approval limit has been exceeded is checked to approve the use. These mechanisms are originally constructed on the premise of face-to-face sales, and are based on presenting the actual credit card. However, in the conventional method of using a credit card for mail-order sales, the purchaser uses a communication means to communicate information described on the credit card surface, such as the credit card brand, holder's name, card number, expiration date, and the like. Announce,
Based on the information, the seller inputs and transmits the corresponding items to a credit card use terminal or the like, and receives a check and approval by a credit card company. That is, even in the case of mail order sales, the seller currently uses the same approval system as face-to-face sales in which the actual credit card is presented, even though the seller has not confirmed the actual credit card.

[0003]

In the conventional system, it is presumed that the card holder is the only person who announces the information described on the credit card surface, that is, knows only the information. Since the check via the credit card use terminal only checks the validity of the information itself written on the card surface, all uses are approved as valid unless the card itself is an accident card Will be done. Therefore, it is possible to easily use the credit card by impersonating the card holder if the information is obtained by some method, even if the card holder is not the card holder. However, the information described on the credit card surface can be easily obtained by a third party, such as a vendor that has sold in the past or a credit card use slip that was used in the past by some means. Yes, it is not possible to judge and confirm that the cardholder is a valid cardholder just by knowing the information written on the credit card surface. Therefore, from the viewpoint of a mail-order sales seller, there is always a risk of being exposed to a defense not remembering the purchase. In addition, from the point of view of the purchaser, that is, the cardholder, announcing the identification information described on the credit card face of the user creates a risk of being misused by others, and credits in mail-order sales with confidence. It will foster the psychology that the card cannot be used. The present invention solves these problems caused by the inadequacy of the personal identification method when using a credit card for mail-order sales.

[0004]

[MEANS FOR SOLVING THE PROBLEMS] In addition to the credit card surface identification information conventionally used, information called "mail order approval code" is used as information for personal identification.
Information that is valid at the time of use is added to information that can only be known by the user, so that the user can be surely identified. That is, the "mail order use approval code" is information that can be known only by the card holder in general until it is used after it is notified from the credit card company. From the time the cardholder uses a credit card to notify the seller of the fact, it can be known by others, but even if a malicious third party knows,
Since each piece of information is allowed to be used only once, the information is already unusable when the third party knows it, and unauthorized use by the third party is impossible. In addition, the process of notifying the credit card company of the "mail order use approval code" to the cardholder, or the unused "mail order use approval code" that may occur due to information handling failure by the cardholder after notification In the case of leakage to three parties, checking the "password" can prevent unauthorized use. As a result, it is possible to eliminate the defense without remembering the purchase from the point of view of the seller, and to prevent unauthorized use from the point of view of the purchaser, that is, the cardholder.

[0005]

DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 shows a "mail order use approval code".
7 is a flow of generation of a notification and a notification process. (A101) A credit card company generates and assigns one or a plurality of different mail-order use approval codes to all credit cards or credit cards of desired credit card holders regularly or irregularly. The requirement of the "mail order use approval code" to be generated is a combination of character codes that can be recognized by a computer, and the combination of character codes and the number of digits cannot be easily estimated by a malicious third party. Of the order. In addition, "mail order use approval code" used in the past
Is checked so that it is not regenerated until a certain period has elapsed. (A102) The "mail order use approval code" generated in (A101) is recorded and recorded as information belonging to the corresponding credit card in a database for checking and approving use of the credit card. (A103) The "mail order use approval code" generated in (A101) is notified to the corresponding credit card holder. Notification is made by ordinary communication means such as mail, telephone, and the Internet, which can be received by the credit card holder. FIG. 2 is a flow chart of a process for checking and approving input information when using a credit card in mail-order sales. (B101) The purchaser, that is, the cardholder, asks the seller for identification information of the credit card described on the credit card face, a password, and a “mail order approval code”.
The seller inputs the notified information to a terminal for using a credit card or the like and transmits the information to a computer system of a credit card company or a contract company of the business. The computer system matches the input and transmitted information with a database for checking and approving credit card use. (B102) The computer system determines whether the identification information of the credit card is that of a valid card, whether the personal identification number is valid as that of the credit card, or that the “mail order approval code” is that of the credit card in the database. Check if it exists and is unused. (B103) When all the check results in (B102) are Yes, the use is approved. (B104) Data is updated in a database for checking and approving use of the credit card so that it can be determined that the corresponding "mail order use approval code" has been used. More specifically, the corresponding data is deleted or a used flag is displayed. After the update is completed, the process ends. (B201) If any one of the check results in (B102) above is No, the use is rejected and the process ends.

According to the present invention, since the identity can be surely confirmed, the present invention has a remarkable effect in preventing unauthorized use as compared with the conventional system. More specifically, it is possible to prevent an illegal crime committed by an unscrupulous business operator due to credit card number theft in the Internet crime that has been increasing in recent years. In addition, it is possible to prevent a purchaser from "not remembering" unauthorized defense when canceling a non-returnable product or service.

[Procedure amendment]

[Submission date] March 31, 2000 (200.3.3.
1)

[Procedure amendment 1]

[Document name to be amended] Statement

[Correction target item name] Brief description of drawings

[Correction method] Added

[Correction contents]

[Brief description of the drawings]

FIG. 1 is a flowchart of a mail-order use approval code generation and notification process.

[Figure 2] When using a credit card in mail order
Flowchart of input information check and approval processing

[Explanation of symbols] Y · N A code representing the branch after the judgment processing. The process branches to Y when the judgment result is positive, and to N when it is incorrect. Xnnn A code identifying the process. X is a letter, nn
n is a number.

Claims (1)

[Claims] Claims: 1. A credit card is used in a mail-order transaction, that is, in a transaction form in which a buyer and a seller sell and purchase at a physically separated place via communication means such as mail, telephone, and the Internet. When performing, that is, when using the credit card without presenting the actual credit card from the purchaser to the seller, the purchaser, that is, the possession of the card, is used as information for identity verification, purchase intention confirmation, and use approval. A method in which a credit card company confirms that this information matches information managed by itself, and approves the use of the information, as described below or in combination with the information notified by the seller to the seller. Identification information of the credit card on the card surface issued by the credit card company, that is, information on the credit card brand, holder's name, card number, expiration date, etc. The cardholder is registered in advance with the credit card company A personal identification number code that is generated and managed by the credit card company and notified to the cardholder in advance. One code is used for each use, and it is not permitted to reuse it. Hereinafter, this code is referred to as a “mail order use approval code”.