JP2002063526A - System and method for individual authentication when using credit card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a method which can surely authenticate an individual who uses a credit card. SOLUTION: Portable telephone set data, a credit card number, and a credit card password number are supplied as card discrimination data to a portable telephone carrier computer system 21. Further, the card discrimination data are transferred from the portable telephone carrier computer system to a credit card company computer system 22 and registered as registered discrimination data. When a credit card is used, the credit card data, portable telephone set data, and credit card password code recorded on the credit card are transmitted from a terminal device 31 to the credit card company computer system. The credit card company computer system receives the data and compares the receive data with registered discrimination data and permits the terminal device to use the credit card when they match with each other.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a system and method for authenticating an individual when using a credit card, and more particularly to a system for authenticating an individual using a mobile phone line or the Internet when using a credit card.

[0002]

2. Description of the Related Art In recent years, when purchasing goods or paying for services, payment is often made using a credit card (hereinafter simply referred to as a card). Here, with reference to FIG. 3, purchase of a product using a card will be described. When purchasing a product at a store or the like, when the card is presented, the store authenticates the card. That is, the store reads the data in the card as card data using the terminal device 11 having the card reader communication function (normally reads the card number). The card data is transferred to the card company computer system 11 via a communication line (including the Internet).
Sent to

[0003] The computer system 12 checks the status of the card based on the card data. That is,
The computer system 12 reports the theft,
And whether there are any refusal conditions such as exceeding the usage limit. If there is no rejection condition, that is, if available, the computer system 12 sends a message to that effect to the terminal device 11 as inquiry data.

[0004] When the inquiry data indicates that the inquiry data can be used, the store prepares a payment slip in which the amount of payment and the method of payment are described, and requests a signature from the user (card owner). When the user signs the payment slip, the payment is completed. In other words, when the payment slip is signed, the payment by the card is completed and the product is delivered to the customer (or a service (service) in place of the product)
I do).

[0005] On the other hand, if the inquiry data is rejection condition data, the store informs the customer to that effect, and the negotiation is not completed.

[0006] For example, in a supermarket or the like, after registering a purchased article at a cash register (the registration is completed by reading a bar code of the purchased article at a cash register), the data of the card is read by a magnetic reading device portion of the cash register. , Has completed the payment act.

[0007]

In the conventional payment by card, after reading the data in the card,
Considering that it is only required to sign the payment slip (in a supermarket, etc., the data in the card may only be read), it is difficult for the store to confirm the authenticity of the signature, etc. Even if a person who has illegally acquired (for example, stolen or forged) has used this illegally acquired card, the payment act will be completed if the holder is signed on the payment slip. That is, even if an unauthorized acquisition card is used, there is a problem that an individual cannot be substantially recognized and illegal use cannot be prevented.

[0008] It is an object of the present invention to provide a system and method capable of securely authenticating an individual when using a credit card.

[0009]

According to the present invention, there is provided a portable telephone company which receives at least portable telephone data relating to a portable telephone, a credit card number, and a credit card password assigned to the credit card as credit card identification data. A computer system, a credit card company computer system connected to the mobile phone carrier computer system via a communication line, for transferring the credit card identification data from the mobile phone carrier computer system, and registering the credit card identification data as registration identification data; When using a credit card connected to a card company computer system via a communication line, the credit card data recorded on the credit card, the mobile phone data and the credit card PIN are transmitted And a terminal device to send to the credit card company computer system as transmit data,
The credit card company computer system receives the transmission data as reception data, and compares the received data with the registered identification data to give a license to use the credit card to the terminal device when a match is found. A personal authentication system when using a credit card is obtained.

Further, according to the present invention, at least the mobile phone data relating to the mobile phone, the credit card number, and the credit card PIN assigned to the credit card are sent to the mobile phone carrier computer system as credit card identification data. A first step, a second step of transferring the credit card identification data from the mobile phone carrier computer system to a credit card company computer system via a communication line and registering the same as registration identification data; From the terminal device to the credit card company computer system via a communication line, credit card data recorded on the credit card, the mobile phone data, and the credit card PIN are set as transmission data. A third step of sending to the credit card company computer system, and receiving the transmission data as reception data in the credit card company computer system, collating the received data with the registered identification data, and matching the registered data with the terminal device. And a fourth step of giving a license to use the credit card.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the drawings.

Referring to FIG. 1, a card user (hereinafter referred to as a customer) performs registration for personal authentication before using the card. That is, the mobile phone used for personal authentication is registered.

When registering a mobile phone, when using the mobile phone 21, the customer calls the computer system 22 of the mobile phone operator (for example, dialing a specific service number ##, the computer system 22 is called). Then, when the computer system 22 is called, the number of the mobile phone 21 is automatically registered. Thereafter, the customer uses the card PIN, the identification number of the card company (a number for identifying the card company), the card number, and other associated setting function (such as the expiration date of this registration) number from the mobile phone 21 as computer data as identification data. Send to system 22.

When registering the identification data, the computer system 22 sends a registration confirmation message to the mobile phone 21. The customer hears the registration confirmation message and, if there is no problem, sends an acknowledgment number. by this,
The computer system 22 registers the identification data (hereinafter referred to as registered card recognition data). Upon hearing the registration content confirmation message, if there is a problem or the like, the message is canceled from the mobile phone and a change / correction instruction is sent.

Thereafter, in the computer system 22,
The registered card recognition data is sent to the computer system 23 of the card company via the Internet line. And
The registered card recognition data is stored in the computer system 23. Thereby, the registration of the mobile phone is completed.

When using the Internet to register a mobile phone, the customer accesses the computer system 22 via the Internet using the personal computer 24 (that is, the homepage (HP) of the mobile phone operator on the Internet). To access). Then, click the registration field on the homepage to open the registration page.

The customer selects a mobile phone number, a card password, a credit company identification number, a card number, and other associated setting functions according to instructions on the registration page. Then, when the customer clicks send, the above selection result is sent to the computer system 22 as identification data. If there is no error in the identification data, the computer system 22 sends a reception completion sign to the personal computer and completes the registration of the identification data.

Thereafter, in the computer system 22,
The registered card recognition data is sent to the computer system 23 of the card company via the Internet line. And
The registered card recognition data is stored in the computer system 23. Thereby, the registration of the mobile phone is completed.

When a normal telephone line is used at the time of registration of a mobile phone, the customer must use a home telephone or a public telephone 2
5, the computer system 22 is called.
In the computer system 22, for example, an operation instruction is sent to the customer by a computer synthesized sound. The customer sends the mobile phone number, card PIN, credit company identification number, card number, and other associated setting functions as identification data based on the operation instruction. At this time, the identification data is registered in the computer system 22 by, for example, dialing a number directly from the telephone set 25 or sending the selected number by DTMF. Then, a registration confirmation guide is sent from the computer system 22 and the customer sends a confirmation number from the telephone 25, whereby the registration is completed.

Here, with reference to FIG. 2, personal authentication when purchasing a product using a card will be described. Upon payment by card, the card is presented to the store, and the card data is read by the card reader of the terminal device 31 as described in the related art, and the card data is transmitted to the computer system 23 via a communication line (including the Internet). Sent through. Further, payment conditions such as a payment amount and a payment method are input from the terminal device 31 as card data. At this time, data on the mobile phone (for example, mobile phone number) is given to the terminal device 31. There are various methods for giving data relating to the mobile phone to the terminal device 31. For example, if the mobile phone has an external terminal such as an optical signal, the mobile terminal is connected to the terminal device 31 using the external terminal. Will be given.

Further, the customer inputs the card PIN directly from the terminal device 31. In this manner, card data (for example, card type, card number, and payment conditions such as payment amount and payment method), data related to the mobile phone (mobile phone data: mobile phone number), card PIN (to the card) On the other hand, the card password registered with the card company is sent to the computer system 23 as transmission data via the Internet. The mobile phone password registered with the mobile phone operator is sent to the computer system 23 as needed.

The computer system 23 receives the transmission data as reception data, and confirms the reception data.
That is, the computer system 23 collates the card data as described in the related art. Further, the computer system 23 compares the mobile phone data with the registration card recognition data (mobile phone registration data). At this time, the card password is also used as a collation item.

As a result of the collation performed as described above, if all conditions are acceptable, the computer system 23
Sends a card license signal indicating the card license to the terminal device 31 of the store via the Internet.

When receiving the card use permission signal, the terminal device 31 starts printing a slip. Thereafter, the store asks the user (card holder) for a signature. When the user signs the payment slip, the payment is completed. In other words, when the payment slip is signed, the settlement by the card is established and the product is delivered to the customer (or a service (service) is performed instead of the product).

As described above, before the use of the card, the data (card use definition data) for specifying the card use is transmitted to the computer system 22 of the mobile phone carrier via a mobile phone line or the Internet.

As the card use regulation data, for example,
The card type, card number, mobile phone number, and card PIN are used. Instead of a card password, a password (mobile phone password) used when managing data of the mobile phone may be used. If the card use regulation data is changed every predetermined period (for example, one month), security for preventing unauthorized use of the card is further improved. In order to improve security, the expiration date of the password may be used.

As described above, the computer system 22
Then, the received data is sent to the computer system 23 of the card company. Thereby, when using the card, the data of the card and the mobile phone are read at a store or the like, and the read data is sent to the computer system 23 of the card company, and whether the card is a genuine card and is used by a genuine user It can be collated.

When reading data from the card, for example, a magnetic reader (card reader) is used. On the other hand, when reading the built-in data of a mobile phone, it is conceivable to use a data I / O connector for the current mobile phone type. May be rewritten. Therefore, considering safety, as described above,
A function of unilaterally outputting a signal from a mobile phone (for example, a function of unidirectionally transmitting an optical signal such as an LED or a laser beam) is desired.

When the card is recognized as a legitimate card, the subsequent processing is performed by the conventional card settlement system.

Even if the card has been illegally acquired, the portable telephone which the original user would have (the portable telephone number is unique, and the portable telephone having the same portable telephone number is Since the data does not exist elsewhere, it is confirmed that the data is fraudulent at the time of data collation with "very high security and reliability", so that illegal use can be surely prevented. That is, the user's personal recognition at the time of card payment can be reliably performed.

By the way, when a mobile phone is lost,
If you contact the mobile phone operator (via telephone or Internet line), the mobile phone operator will contact the card company to that effect, and the mobile phone data (mobile phone number)
Can be disabled. As a result, unauthorized use of the card can be prevented.

Note that, instead of the mobile phone number, a mobile phone password used for the function and data management of the mobile phone may be used.

When changing the password for function operation (mobile phone password) used in the mobile phone, if another password delivered to the business operator is used in advance, the mobile phone can be used. Access to the telephone operator's computer system will increase security. In other words, if the mobile phone security code is changed every predetermined period or the user of the mobile phone changes the security code regardless of the period, in the unlikely event that the mobile phone data is read, the mobile phone data is read. Is performed, and even if an attempt is made to use an illegally duplicated mobile phone, unauthorized use can be prevented due to the mismatch of the mobile phone passwords.

When changing the mobile phone password,
The mobile phone operator's computer system permits the change of the mobile phone password when a pre-registered customer number is entered.

[0035]

As described above, according to the present invention, credit card data and mobile phone data are registered in advance, and when a credit card is used, not only the credit card data but also the mobile phone which is now becoming popular. Since the data (mobile phone data) is also collated, the authentication of the credit card user can be surely performed, and as a result, there is an effect that the unauthorized use of the credit card can be surely prevented.

[Brief description of the drawings]

FIG. 1 is a diagram for explaining registration of mobile phone data in a personal authentication system according to the present invention.

FIG. 2 is a diagram for explaining personal authentication when using a credit card in the personal authentication system according to the present invention.

FIG. 3 is a diagram for explaining settlement by a conventional credit card.

[Explanation of symbols]

 21 Cellular phone 22, 23 Computer system 31 Terminal device

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI theme coat ゛ (Reference) H04Q 7/38 H04B 7/26 109S F term (Reference) 2C005 HA03 HB09 JB40 3E044 BA05 DA06 DE01 5B049 AA05 BB11 BB46 CC39 DD04 DD05 EE05 EE23 FF09 GG03 GG05 GG06 GG07 5K067 AA32 BB04 DD13 DD17 DD24 DD51 EE03 EE37 FF07 FF13 FF26 HH07 HH22 HH23 HH24 HH36 KK15

Claims (10)

[Claims] 1. A mobile phone operator computer system for receiving at least mobile phone data relating to a mobile phone, a credit card number, and a credit card PIN assigned to the credit card as credit card identification data, and the mobile phone operator computer A credit card company computer system which is connected to the system via a communication line and which transfers the credit card identification data from the mobile phone carrier computer system and registers it as registration identification data; and When the credit card is connected and used, the credit card data recorded on the credit card, the mobile phone data and the credit card password are used as the transmission data as the credit card. A credit card company computer system that receives the transmission data as reception data, matches the reception data with the registration identification data, and matches the registration data with the terminal device. A personal authentication system for using a credit card, wherein a license for the credit card is given. 2. The personal authentication system according to claim 1, wherein a mobile phone is used to send the credit card identification data to the mobile phone carrier computer system. 3. The personal authentication system according to claim 1, wherein said communication line is the Internet. 4. Accessing the mobile phone operator's computer system using a personal computer connected to the Internet, browsing the homepage of the mobile phone operator,
4. The personal authentication system according to claim 3, wherein the card identification data is registered on the homepage. 5. The mobile phone carrier computer system is connected to a public communication line, and the mobile phone carrier computer system gives an operation instruction by a computer synthesized sound when receiving a call from the public communication line, 2. The personal authentication when using a credit card according to claim 1, wherein the card identification data is sent to the mobile phone carrier computer system via the public telephone line in response to the operation instruction. system. 6. The personal authentication system according to claim 1, wherein said mobile phone data is a mobile phone number. 7. The personal authentication system when using a credit card according to claim 1, wherein the mobile phone data is a mobile phone password used for functions and data management of the mobile phone. 8. The personal computer according to claim 7, wherein the personal identification number of the mobile phone is changed in order to secure the security of the use of the credit card. Authentication system. 9. When the mobile phone security code is changed,
9. The mobile phone carrier computer system according to claim 8, wherein when a customer number registered in advance is entered, a change of the mobile phone password is permitted.
Personal authentication system when using a credit card described in. 10. A first step of transmitting at least cell phone data, a credit card number, and a credit card PIN assigned to the credit card to a cell phone carrier computer system as credit card identification data, A second step of transferring the credit card identification data from a mobile phone carrier computer system to a credit card company computer system via a communication line and registering the credit card identification data as registration identification data; The credit card data recorded on the credit card via a communication line to a card company computer system, the mobile phone data, and the credit card password as transmission data of the credit card A third step of sending the credit card to the terminal device when the credit card company computer system receives the transmission data as reception data and matches the reception data with the registration identification data. And a fourth step of granting a license.