JP2002056330A - Paying means authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a liquidation system having a low load and high safety for both a consumer and a merchant. SOLUTION: When the consumer gains access to a shop server to buy a commodity or the like at a user terminal, the authentication information such as a credit card number is enciphered and inputted from his terminal device. The shop server transmits the inputted authentication information to an intermediate server in an enciphered state. The intermediate server deciphers the authentication information and transmits the deciphered authentication information to an authentication server for authentication. The intermediate server informs the shop server of the authentication result, and the shop server returns a response such as permission information to the user terminal based on this report. Since the shop server cannot decipher the authentication information and the newly provided intermediate server deciphers the authentication information to gain access to the authentication server, the liquidation system capable of reducing the load on the shop side and preventing the leakage of customer information can be constructed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technology for authenticating payment means such as so-called electronic money or electronic check which does not require a card such as a debit card, a bank card, a prepaid card and a credit card.

[0002]

2. Description of the Related Art Via a network of this kind, "consumers and other potential buyers (hereinafter referred to as" consumers ")
MER)), "Apply for a purchase contract for goods or services from a consumer", and / or "Accept an application for a purchase contract for goods or services to a consumer". An example of a credit card payment authentication system that is a typical payment method in the case (hereinafter, a person who provides goods or services using such means is referred to as “MERCHANT” regardless of profit or non-profit) Is shown in FIG.

Consumers (CONSU) using the system shown in FIG.
In the case where the connection between the MER) and the retail store (MERCHANT) is connected via the Internet or the like, and the credit card payment is authenticated in the online state, the following processing is performed.

First, the consumer (CONSUMER) may be a computer device controlled by a browser program installed in advance or a mobile terminal such as a mobile phone (terminal device; "user terminal" in FIG. 1).
The information required for the authentication of credit card (“card”) payment (“CONSUMER”) is used to determine whether the card that the consumer intends to use for payment is available for the payment. CONSUMER) must provide the merchant (MERCHANT) and the credit card company with the card brand, card number, cardholder name, card expiration date, payment amount, and credit card company for the payment amount. By entering the authorization information on the input screen.
Apply for a contract. The computer device generates and transmits data obtained by encrypting the authorization information together with the order information.

[0005] Next, the encrypted authorization information is received by the store server, the cipher is decrypted, and the decrypted information is recorded in the storage device.

Next, while the connection state between the user terminal and the store server is maintained, the store data is required to be authenticated in the data format specified by the card company (hereinafter referred to as “data”).
"Authorization request"), and then, at about the same time, send the authorization request to a network for transmitting credit card authentication information, such as CAFIS, through an output device, and the network sends the authorization request to the credit card company. A device that authenticates according to a predetermined standard (a case where the device exists in a credit card company, a case where it exists in a business entity that manages the network or a business subcontractor of a credit card company, hereinafter referred to as an “authentication device”). Send.

[0007] When the authentication processing is executed in the authentication device, the result (authorization answer) is returned to the store server via the network and recorded in the storage device.

[0008] Finally, the authorization result is displayed on the computer (user terminal) of the consumer (CONSUMER).

[0009]

However, the first prior art has the following problems.

First, the construction of a server by a retail store (MERCHANT) is complicated, time-consuming, and costly.

[0011] In addition, the environment and operation level of the server of the retail store (MERCHANT) are various, and the consumer (CONSUMER)
Can not give a sense of security.

In other words, in this technique, the user's authorization information is stored in an unencrypted state in the recording device of the store server. However, the recording device of the store server may not be designed sufficiently secure. In many cases, there is a risk that the authorization information of the consumer (CONSUMER) may be stolen by a malicious third party accessing the recording device of the store server.

[0013] Further, there is a problem that a consumer (CONSUMER) becomes disadvantageous when a dispute occurs.

That is, the user terminal has no record of selection of a product, indication of intention to apply, transmission of authorization information, reply of the authorization result, and the like, and the record is stored only in the recording device of the store server. Therefore, if the retail store (MERCHANT) and the consumer (CONSUMER) are the opposing parties due to defective goods or delivery, etc., the record to be proved exists only on the recording device of the store server, so the retail store (MERCHANT) It is not possible to deny the possibility of using only records that are favorable to the consumer or falsifying the records in favor of the retail store (MERCHANT).
ONSUMER) is disadvantaged. Or Consumer (CONSUMER)
Cannot exclude that they have such anxiety.

In addition, retailers (MERCHANT) and consumers (CONS
There is also a problem that the operation method of sending and replying data to and from UMER) is different, and it is not possible to achieve common operation for multiple retail stores (MERCHANT) that combine the settlement of goods or services and the logistics there were.

As a second technology, a consumer (CONSUMER), a retail store (MERCHANT) and a payment business (typically a credit card company, but also a prepaid card issuing business, a bank, a credit business) , May be a settlement agency). FIG. 2 shows the outline. Note that there is typically a SET method.

In this method, first, a computer (user terminal) of a consumer (CONSUMER) is stored in a computer program (hereinafter, referred to as “CONSUME”) designated by a settlement company.
R) payment program ”) and the consumer (CONSUMER)
Digital certificate (hereinafter referred to as “CONSU
MER) key).

Next, the store server of the retail store (MERCHANT) also has a computer program (hereinafter referred to as a "retail store payment program") designated by the payment business operator, and the payment business operator has the retail store (MERCHANT). ) Is incorporated in the electronic certificate (hereinafter referred to as “retail store key”).

Consumers (CONSUMER) are retailers (MERCHANT)
When you apply for the purchase of goods or services, you need to provide information on how to apply for the purchase of goods or services and define the payment method.
(For example, information such as "What credit card to pay and how many times to pay") and "Consumer (CONSUMER)
It is encrypted with a "payment program", signed with a "CONSUMER key", and sent to a retailer (MERCHANT).

The merchant (MERCHANT) decrypts the "information for applying for the purchase of goods or services" of the information encrypted and transmitted from the consumer (CONSUMER) by the "retail store settlement program". Note that, depending on the program, the “definition of payment method” cannot be deciphered.

Further, the merchant (MERCHANT) signs the “definition of payment method” as it is, with the “retail store key” and transmits it to the settlement company.

The settlement company decrypts the encrypted “definition of payment method”, authenticates whether the payment method is usable, and transmits the authentication result to the retail store (MERCHANT). I do.

According to such a method, the consumer (CONSUMER)
Does not have to worry about the security of the store server at the retail store (MERCHANT) or the retail store (MERCHANT) abusing the information contained in the "definition of payment methods", but the consumer (CON
SUMER) computer (user terminal), "Consumer (CON
SUMER) Payment Program and Consumer Key
And the operation on the consumer (CONSUMER) side becomes complicated.

As a third technique, a consumer (CONSUMER), a retailer (MERCHANT), and a settlement company (typically a courier service or a convenience store) in charge of delivery of goods to the consumer (CONSUMER). It has also been proposed to perform processing between the three parties (see FIG. 3).

In this method, the consumer (CONSUMER) does not worry that the retailer (MERCHANT) manages or misuses the credit card and other payment information transmitted by the consumer (CONSUMER). It is not necessary.

However, there has been a problem that the consumer (CONSUMER) has to pay cash to the home delivery company, or has to go to a convenience store to receive goods or give cash.

In addition, a retail store (MERCHA
There is also a problem that it cannot be used in transactions completed by transmitting music, images, computer programs and other data from the consumer (NT) to the consumer (CONSUMER).

As described above, the second or third technique for performing the processing among the three parties is not enough to give a sense of security while saving the trouble of the consumer (CONSUMER). There has been a long-awaited need for a system that improves the first prior art.

[0029] The present invention has been made in view of the above points, and is intended for consumers (CONSUMER) and retailers (MERCHANT).
It is a technical task to provide a payment means authentication system which has a low burden on consumers and a high confidentiality of card information and the like for consumers (CONSUMER).

[0030]

According to the present invention, there is provided authentication information receiving means for encrypting information to be authenticated using a user terminal or the like as input means, and receiving the information to be authenticated in an encrypted form.
Further, the encrypted information to be authenticated is transmitted from the authentication information receiving means without being decrypted.

Then, the information to be authenticated which has been encrypted is received by the authentication mediating means and decrypted, and the decrypted information to be authenticated is authenticated via the Internet or a dedicated line. The authentication result output from the means for authenticating the information to be authenticated is received via the Internet or a dedicated line. Further, the authentication mediation unit transmits the authentication result to a customer management unit separated from the transmitting unit by an electronic barrier.

The authentication mediation means stores the authentication result received from the authentication means and the information to be authenticated decrypted by the authentication mediation means for each of a plurality of payees, and performs each payment by batch processing. You may make it transmit first.

As described above, according to the present invention, the information to be authenticated cannot be decrypted at the store server which is the payee, and the information to be authenticated is decrypted by the authentication mediation means (mediation server) newly intervened. Since the information is transmitted to the means for performing authentication (authentication server), it is possible to construct a system that can reduce the burden on the consumer (CONSUMER) and the retail store (MERCHANT) and can prevent leakage of customer information.

[0034]

BEST MODE FOR CARRYING OUT THE INVENTION

[0035]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 4 shows a system configuration according to the embodiment of the present invention.

In this embodiment, the user terminals used by the consumer (CONSUMER) are all terminals that can communicate on a TCP / IP basis, including general-purpose personal computers,
It is connected to the network (Internet) by communication means such as dial-up. This user terminal has
For example, Microsoft Windows or LINUX is installed as an OS (operating system), and the World Wide Web (WW
W) As a browser program for browsing, a program called Internet Explorer of the company or Netscape of Netscape is installed. Note that the terminal does not necessarily need to be such a personal computer, and may be an information viewing terminal such as a television receiver having a browser function or a mobile phone having a browser function.

On the other hand, a store server (retail store), a mediation server,
The authentication server is a computer system having the same configuration, but as an OS (operating system),
It suffices if Microsoft Windows NT, UNIX (registered trademark), and LINUX are installed and the server program runs on this OS. Further, a mainframe computer can be used as the server.

In this embodiment, without decrypting the encrypted information to be authenticated, the encrypted
A program (hereinafter referred to as an encapsulation program) to be transmitted to the mediation server (which may be divided into several threads during transmission) is installed in a computer device (store server) used by the retail store (MERCHANT).

The encapsulation program is JAVA
(Registered trademark).

The store server is connected to the Internet,
It is connected to the mediation server by a communication line such as a dedicated line.

In the above configuration, the consumer (CONSUMER)
Using a computer device (user terminal) controlled by a browser program installed in advance, the type and number of a credit card (hereinafter referred to as a card)
The contract application is made by inputting payment information such as (card number), cardholder name, card expiration date, payment method, etc. together with order information on the input screen displayed on the store server by the store server. Here, the user terminal generates the encrypted data and transmits the data to the store server.

Next, the enciphered information received by the store server and encrypted at the user terminal is not decompressed (decrypted) by the encapsulation program, but is collected as a set of data (hereinafter referred to as "encrypted capsule"). ) Is transmitted to the mediation server as it is.

In the intermediary server, a decryption program installed in the server decrypts the encrypted capsule and generates a series of data (hereinafter, referred to as “authentication data”) according to a format specified by the card company. A device for authenticating a card via a network such as CAFIS constructed using a dedicated line for card authentication through the output device almost simultaneously with the authentication data through an output device (hereinafter referred to as an "authentication device"). Send to

The authentication device executes an authentication process based on the decrypted information to be authenticated, and returns the result to the mediation server.

This authentication result is registered in the storage device of the mediation server.

Next, when the authentication result is “approval of payment”, notification data indicating “approval of payment” is transmitted to the store server.

The store server receiving the notification data,
The consent is notified to the user terminal, and as a result, the notification data indicating “approval of payment” is immediately displayed on the display device of the user terminal.

On the other hand, the mediation server periodically notifies the customer management server of information indicating the approved settlement method stored for each store by batch processing. The customer management server is electronically isolated from the store server connected to the Internet by restricting data exchange.

That is, it is ideal that the customer management server is separated from a web server or the like connected to the Internet by a security facility such as a firewall.

As described above, in the present embodiment, the intermediary server seamlessly intervenes in the credit card authentication process as a third party, thereby achieving the same effect as the three-way communication, while achieving the same effect as the consumer (CONSUMER) and the third party communication. It can eliminate the burden and risk of both retailers (MERCHANT) and solve the problem of three-way communication described in the prior art.

[0052]

According to the present invention, the store server, which is the payee, is prevented from decrypting the information to be authenticated, and the authentication mediation means (mediation server) newly intervening decrypts the information to be authenticated to perform authentication. (CONSUMER) and retail stores (MERC)
HANT), and a system that can prevent leakage of customer information can be constructed.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram showing an on-line real-time authentication method according to the related art.

FIG. 2 is a conceptual diagram showing a settlement method in three-way communication according to the related art.

[Figure 3] Consumers (CONSUMER) and retail stores (MERCHANT)
Conceptual diagram showing the relationship between the

FIG. 4 is a diagram illustrating a system configuration according to an embodiment;

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Hidehiro Shuku 2-8-8 Shiba 2-chome, Minato-ku, Tokyo F-term, Inc. F-term (reference)

Claims (6)

[Claims] 1. A means for encrypting and inputting information to be authenticated, an authentication information receiving means for receiving the information to be authenticated in an encrypted state and transmitting the encrypted information without decryption, and The transmitting means is a customer management means isolated by an electronic barrier, and receives and decrypts the encrypted information to be authenticated,
The decrypted information to be authenticated is sent to the means for authenticating the information to be authenticated via the dedicated line, and the authentication result output from the means for authenticating the information to be authenticated is received via the dedicated line. A payment means authentication system for transmitting the authentication result to the customer management means. 2. The payment means authentication system according to claim 1, wherein said means for encrypting and inputting the information to be authenticated is an applet program provided from said authentication information receiving means. 3. The payment means authentication system according to claim 1, wherein said means for encrypting and inputting the information to be authenticated is an applet program provided from said authentication mediation means. 4. A step of encrypting and inputting information to be authenticated at a user terminal, transmitting the information to be authenticated to a payee, and receiving the information to be authenticated encrypted at the payee, and encrypting the information. Transmitting the decrypted authenticated information to the authentication mediating means without decrypting; decrypting the encrypted authenticated information; and transmitting the decrypted authenticated information to the authenticating means; A payment means authentication method comprising: a step of receiving the authentication result for the information to be authenticated by the authentication mediation means; and a step of transmitting the authentication result received by the authentication mediation means to a payee. 5. The authentication mediation means accumulates, for each of a plurality of payees, an authentication result received from the authentication means and information to be authenticated decrypted by the authentication mediation means, and transmits the result to each of the payees by batch processing. 5. The payment means authentication method according to claim 4, wherein 6. A payment means authentication program using authentication mediation means, comprising the steps of: encrypting and inputting information to be authenticated at a user terminal and transmitting the information to be authenticated to a payee; Receiving the information to be authenticated in an encrypted form and transmitting the encrypted information to the authentication mediation means without decrypting the information; and decrypting the encrypted information to be authenticated, and decrypting the decrypted information. Transmitting the authentication information to the authentication means, receiving the authentication result for the information to be authenticated from the authentication means by the authentication mediation means, and transmitting the authentication result received by the authentication mediation means to the payee. Computer-readable storage medium storing a program.