JP2003132210A - Authentication service system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize the labor saving of an authentication system in the agreements or procedures of various providers with customers. SOLUTION: In this authentication service system for taking over authentication customer data from an authentication service provider to a member store, an authentication service server acquires authentication customer data from a customer and issues unique identification number and password therefor to register the authentication customer data; constructs and manages an authentication service Web site; receives the identification number and the like and the agreement kind data related to the member store from the customer who accessed the authentication Web site; reads out the authentication customer data on the basis of the identification number and the like; displays the authentication customer data on the authentication service Web site and asks the acceptance of takeover; and transmits the authentication customer data and the like to the member store server according to the receipt of acceptance data.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication system including identity verification necessary for various contracts and procedures with financial institutions via a communication network.

[0002]

2. Description of the Related Art Currently, various contracts and procedures with financial institutions via a communication network (including the Internet and future broadband), for example, opening an account in the case of a bank,
A system is in place to apply for telephone banking, internet banking, and change addresses. For example, Internet banking is one of the Internet connection services provided by mobile phone networks. A bank that enables an internet banking service for performing the above contracts and procedures from a mobile phone provides the service by constructing a website for a mobile phone network.

In the above-mentioned system for contracts and procedures via a communication network, an authentication system including identity verification is usually incorporated, and it is necessary to enter a password or ID number given in advance. Enter customer data for authentication such as name, telephone number, etc. Also,
When targeting new customers, such as opening an account, in order to prevent money laundering, etc., face-to-face identification at the reception desk and verify the identity, and enter the customer data for authentication in a document. It is common to perform the procedure to do.

On the other hand, for example, when a new mobile phone contract is made in a mobile phone company or the like, face-to-face identification and the entry of authentication customer data in writing are performed at the reception desk in the same manner as in the case of the above-mentioned financial institution. Also, when making a mobile phone contract,
A unique identification number assigned to each mobile phone is also issued. Customer information such as the identity-verified data, the customer data for authentication, and the identification number are stored as a customer database of the mobile phone company.

[0005]

As described above, the contents of the authentication procedure such as face-to-face and document identification and the acquisition of the customer data for authentication, which are carried out at the reception desks of the financial institution and the mobile phone company, overlap. There are many things. Therefore, if the customer data for authentication acquired at the time of mobile phone contract can be handed over to the financial institution, it can be diverted when the same customer performs the authentication procedure at the financial institution, and the work of the financial institution can be saved without the customer's trouble. It is expected to reduce the burden. For example, in the case of the authentication procedure that conventionally required visiting the reception desk of a financial institution, the procedure at the reception desk is no longer necessary and only the procedure via the communication network is sufficient. It is thought that there will be fewer items and the burden of input work will be reduced.

An object of the present invention is generally to realize labor saving of an authentication system in contracts and procedures between various businesses and customers. That is, the present invention makes it possible for business operators, such as mobile phone companies and financial institutions, who perform substantially the same authentication system, to pass on the customer data acquired during the authentication on one side to the other, and to hand over the customer data to the other side. It is an object of the present invention to provide an authentication service system in which the other business operator can perform authentication based on the obtained data.

[0007]

In order to achieve the above object, the present invention has the following constitution. (1) The first configuration of the authentication service system according to the present invention includes an authentication service provider and a member store provided with the authentication service by the authentication service provider, and further, a common customer for both parties. Exists. This authentication service system is a system that transfers authentication customer data from an authentication service provider to its member store via an appropriate communication network. The authentication service server provided in the authentication service provider mainly realizes the functions of this system. The member store is provided with a member store server that functions as the system by transmitting information to the authentication service server. The customer can perform information transmission with each of the websites managed and constructed by the authentication service server and the member store server by using a customer terminal that is accessible via an appropriate communication network.

In the first configuration, the authentication service server has the following components (a) to (g). (a) A means for obtaining authentication customer data from a customer and issuing a unique identification number and password to the customer. (b) A database that registers the customer data for authentication acquired from the customer in association with the identification number and password. (c) A means of building and managing an authentication service website. (d) A means for receiving the identification number and password and contract type data relating to the member store from the customer who has accessed the authentication service website. (e) A means for referring to the database on the basis of the identification number and the password to retrieve authentication customer data regarding the customer. (f) A means for displaying the authentication customer data on the authentication service website and requesting the customer for consent to take over the authentication customer data. (g) Means for transmitting the authentication customer data and the contract type data to the member store server in response to receiving the consent data from the customer.

(2) In the above configuration (1), preferably, the authentication customer data is transmitted to the member store server, and the access of the customer is transferred from the authentication service website to the member store website. Let

(3) In the above configuration (1) or (2), preferably, the member store server makes a contract with the member store website based on the contract type data transmitted from the authentication service server. In addition to displaying the application page, the authentication customer data is used to display the contract application page.

(4) In the second configuration of the present invention, the authentication service server of the authentication service provider is
It has the components (a) to (h). (a) A means for obtaining authentication customer data from a customer and issuing a unique identification number and password to the customer. (b) A database that registers the customer data for authentication acquired from the customer in association with the identification number and password. (c) A means of building and managing an authentication service website. (d) The member store server that has received the contract type data relating to the member store from the customer who has accessed the member store website has transferred the access of the customer from the member store website to the authentication service website. In response to the,
A means for requesting the input of the identification number and password on the authentication service website. (e) A means for receiving the identification number and password from the customer. (f) A means for referring to the database based on the identification number and the password to retrieve the customer data for authentication related to the customer. (g) A means for displaying the authentication customer data on the authentication service website and requesting the customer for consent to take over the authentication customer data. (h) Means for transmitting the authentication customer data to the member store server in response to receiving consent data from the customer.

(5) In the configuration of (4) above, preferably, the customer data for authentication is transmitted to the member store server, and the customer's access is changed from the authentication service website to the member store website. Shift to.

(6) In the above configuration (4) or (5), it is preferable that the member store server displays a contract application page on the member store website based on the contract type data. The customer data for authentication is used to display the contract application page.

(7) In the third configuration of the present invention, the authentication service provider in the above configuration (1) is a mobile phone company, and the authentication service is provided from this mobile phone company through a communication network. The member store is a bank. Moreover, the common customer for both parties is a mobile phone user as well as a bank customer.

In the third configuration, the authentication service server provided in the mobile phone company has the following components (a) to (g). (a) A means for obtaining authentication customer data from a mobile phone user, and issuing a unique identification number and a password stored in the mobile phone to the mobile phone user. (b) A database for registering the customer data for authentication acquired from the mobile phone user in association with the identification number and password. (c) A means of building and managing an authentication service website. (d) A means for receiving the password and the contract type data related to the bank from the mobile phone user who has accessed the authentication service website and recognizing the stored identification number. (e) A unit for referring to the database based on the identification number and the password and extracting authentication customer data regarding the mobile phone user. (f) A means for displaying the authentication customer data on the authentication service website and asking the mobile phone user for consent to take over the authentication customer data. (g) Means for transmitting the authentication customer data and the contract type data to the bank server in response to receiving the consent data from the mobile phone user.

(8) In the configuration of (7) above, preferably, the authentication customer data is transmitted to a bank server, and the access of the mobile phone user is transferred from the authentication service website to the bank website. Let

(9) In the above configuration (7) or (8), preferably, the bank server makes a contract application page on the bank website based on the contract type data transmitted from the authentication service server. Is displayed and the authentication customer data is used to display the contract application page.

(10) In the fourth structure of the present invention,
In the above configuration (7), the authentication service provider is a mobile phone company, and the member store to which the mobile phone company provides the authentication service is a bank. Moreover, the common customer for both parties is a mobile phone user as well as a bank customer.

In the fourth configuration, the authentication service server provided in the mobile phone company has the following components (a) to (g). (a) A means for obtaining authentication customer data from a mobile phone user, and issuing a unique identification number and a password stored in the mobile phone to the mobile phone user. (b) A database for registering the customer data for authentication acquired from the mobile phone user in association with the identification number and password. (c) A means of building and managing an authentication service website. (d) The bank server, which has received the contract type data relating to the bank from the mobile phone user who has accessed the bank website, has transferred the access of the mobile phone user from the bank website to the authentication service website. A means for requesting the input of the password on the authentication service website according to. (e) A means for receiving the password from the mobile phone user and recognizing the stored identification number. (f) A means for referring to the database based on the identification number and the password and extracting authentication customer data regarding the mobile phone user. (g) Means for displaying the authentication customer data on the authentication service website and for asking the mobile phone user for consent to take over the authentication customer data. (h) A means for transmitting the authentication customer data to the bank server in response to receiving the consent data from the mobile phone user.

(11) In the configuration of the above (10), preferably, the authentication customer data is transmitted to the bank server, and access of the mobile phone user is made from the authentication service website to the bank website. Shift to.

(12) In the configuration of (10) or (11) above, preferably, the bank server displays a contract application page on the bank website based on the contract type data, and also for the authentication. Customer data is used to display the contract application page.

(13) In any one of the above configurations (7) to (12), preferably, the unique identification number stored in the mobile phone is stored in a storage device built in the mobile phone. It

(14) In any one of the configurations (7) to (12), the unique identification number stored in the mobile phone is stored in an IC card that can be attached to and detached from the mobile phone.

[0024]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of an authentication service system according to the present invention will be described below with reference to the drawings. I) Outline of System Configuration FIG. 1 is a diagram showing an outline of the configuration of an authentication service system according to the present invention and showing steps S1 to S4 of a pre-processing flow in an authentication service procedure using the present system.

The most important feature of this authentication service system is that the authentication customer data presented by the customer 20 when making a contract with the authentication service provider 10 is passed from the authentication service provider 10 to the member store 30. This is used as customer data for authentication when the customer 20 makes a contract with the member store 30. Here, the member store 30 is one of one or more businesses that are affiliated with the authentication service providing business of the authentication service providing business 10. The authentication service providing business 10 is generally a business whose business involves performing face-to-face identity verification similar to the member store 30 at the reception counter 17 and acquiring authentication customer data. Further, generally, the present system is implemented as one of the customer services associated with the original business of the authentication service provider 10 (business other than the authentication service provision). Each function of this service system in the authentication service provider 10 is mainly realized by the authentication service server 12. Further, the authentication service server 12 has a database 16 for storing the authentication data acquired from the customer.
It is equipped with.

The present invention will be described below based on an embodiment in which the authentication service provider 10 is a mobile phone company, the customer 20 is a mobile phone user, and the member store 30 is a bank. In this case, it is preferable that the present service system is implemented in a form incorporated in or added to an authentication system at the time of a new contract that has been conventionally performed at a reception counter of a mobile phone company.

The bank server 32 in FIG. 1 is a server that is responsible for a business part related to reception and authentication of various procedures via the communication network in the bank business system, and is connected to the authentication service server 12 of the authentication service provider 10. The functions of the present invention are realized by exchanging data between them and cooperating with each other. The bank server 32 also includes a database 36, which is an appropriate storage unit for storing the authentication customer data acquired for the customer. The bank server 32 is a name when the member store is a bank, and is generally a member store server provided in the member store for implementing this system.

Authentication service server 12 and bank server 3
2 also has a function of constructing and managing websites 14 and 34 provided by the mobile phone company 10 and the bank 30, respectively. These websites 14, 34 are provided to provide the authentication service according to the present invention to customers. The website 34 can generally be referred to as a member store website.

Further, the actual form of the authentication service server 12 and the bank server 32 is composed of appropriate one or a plurality of computers and their peripheral devices, and each function is realized by a program executed by the computer.

Although not all mobile phone users 20 including new and existing contractors desire to use the authentication service according to the present invention, the following description will be given to mobile phones that have approved the use of this service. It is assumed that the target is the user 20. The mobile phone 22 is capable of connecting to the Internet, has a browser function for displaying information on a website for a mobile phone network on the display device 24, and has a function of inputting and transmitting data using the input device 26. It is equipped with.

2) Example of Process Flow First, with reference to FIG. 1, steps S1 to S4 of the pre-process flow of the authentication service procedure using the authentication service system according to the present invention will be described.

Step S1: An uncontracted mobile phone user 20 applies for a new contract at the reception window 17 of the mobile phone company. The reception desk 17 is a department responsible for reception work of the mobile phone company 10, and preferably includes a reception terminal 18 connected to the authentication service server 12 of the present system by a communication network capable of bidirectional information transmission. Reception desk 1
In step 7, the identity verification is performed using a photo identification certificate and the like, and at the same time, the customer data for authentication is acquired. The authentication customer data includes information such as address, name, telephone number, and bank account used. The new contract application data including the customer data for authentication is input to the reception terminal and transmitted to the authentication service server. The same applies when the existing mobile phone user 20 applies to start using this service.

Step S2: Authentication service server 12
Receives the new contract application data, allocates a new telephone number to the new contract application data, and transmits it to the reception terminal 18. The telephone number is unique to each mobile telephone 22, and the storage device incorporated in each mobile telephone 22 stores a user-specific identification number that is associated with the telephone number in a one-to-one correspondence. This user-specific identification number is automatically recognized by the connection destination device when the mobile phone 22 connects to the network. In another embodiment, by storing the telephone number and the user-specific identification number in an IC card (issued by a mobile phone company) that can be attached to and detached from the mobile phone instead of the built-in storage device, the mobile phone is not dependent on the mobile phone. The user can be identified. For new mobile phone users 20,
The mobile phone 22 is handed over to the user at the reception desk 17. After that, the mobile phone user 20 starts a telephone call and the use of the Internet.

Step S3: On the other hand, the authentication service server 12 further assigns a user-specific password to the new contract application data and notifies the mobile phone user 20 of the password. The notification may be given immediately at the reception desk 17 or may be mailed at a later date.

Step S4: Authentication service server 12
Associates the acquired authentication customer data with the assigned identification number and password, registers them in the database 16, and stores them.

FIG. 2 shows a configuration diagram similar to that of FIG. 1, and includes steps S11 to S18 of an example of a processing flow for actually executing authentication in a bank in the authentication service procedure using this system. FIG. This processing flow is performed, for example, when the mobile phone user 20 wants to open a new account of the bank 30, when he / she wants to apply for telephone banking or Internet banking through the account held in the bank 30, and when he / she wants to change the address. And so on.

Step S11: Mobile phone user 20
Connects to the Internet and accesses the authentication service page of the website 14 of the mobile phone company 10 (hereinafter “page” means a web page constituting the website). The contract type selection page 14a is displayed on the website. The mobile phone user 20 selects a desired contract type on the contract type selection page 14a. For example, as a procedure via the Internet provided by the bank 30 (it is possible to select from a plurality of banks),
If you open a new account, apply for telephone banking, change your address, etc., select one of these. The selected contract type data is transmitted to the authentication service server 12.

On the authentication service page, the mobile phone user 20 inputs the password given in advance.
In addition, the identification number unique to the user stored in the mobile phone 22 is obtained by accessing the authentication service page.
The authentication service server 12 automatically recognizes it.

Step S12: The authentication service server 12 refers to the database 16 based on the input password and the recognized identification number, and confirms that the user is a legitimate user by collating with the registered data. After confirmation, the authentication service server 12 refers to the database 16 and extracts the authentication customer data corresponding to the mobile phone user 20.

Step S13: The authentication service server 12 displays the retrieved authentication customer data on the takeover confirmation page 14b on the website. In addition, the mobile phone user 20 is requested to consent whether or not the authentication customer data can be handed over to the bank 30.

Step S14: Mobile phone user 20
Inputs the consent. Authentication service server 12
Receives consent data.

Step S15: The authentication service server 12 transmits to the bank server 32 the authentication customer data together with the contract type data related to the selection of the mobile phone user 20. It is desirable that this transmission is encrypted and a dedicated line is used for ensuring security. Bank server 32
Receives contract type data and authentication customer data.
At the same time, the website accessed by the mobile phone user 20 is transferred from the website 14 of the mobile phone company 10 to the website 34 of the bank 30. Techniques for migrating between websites are known, and for example, clickable maps, link tags, etc. are used.

Step S16: The bank server 32
Applicable contract application page 34 based on contract type data
a is displayed on the website 34. In addition, among the data of the input items required for the application displayed on the contract application page 34a, the data (address, name, etc.) that is the same as the authentication customer data inherited from the authentication service server 12 is included in the authentication customer data. Display the data in the input field from the beginning. Therefore, the mobile phone user 20 does not need to input these items.

Step S17: Mobile phone user 20
While browsing the display of the contract application page 34a, input necessary additional data for input items that are not satisfied in the input fields and input confirmation of application. As the additional data, for example, there is a password for a bank card that is selected and entered by oneself. The additional data and the application confirmation data are transmitted to the bank server 32. If there is no additional data, only the application confirmation data will be transmitted.

Step S18: The bank server 32
The additional data and the application confirmation data are received, and the additional data is registered in the database 36 as the authentication customer data of the bank 30 together with the authentication customer data inherited from the authentication service server 12, and is stored.

After that, the bank 30 performs a predetermined process according to the contract type. For example, in the case of opening a new account, a normal examination is performed based on the authentication customer data in the database 36, and if the examination is completed successfully, a predetermined account opening process is performed. When applying for telephone banking, make the required registrations.

FIG. 3 is also a diagram showing a configuration similar to that of FIG. 1 and showing steps S21 to S36 of an example different from FIG. 2 for the processing flow for executing authentication.

Step S21: mobile phone user 20
Connects to the Internet and accesses the contract type selection page 34b of the bank 30 website. On the contract type selection page 34b, the desired contract type is selected and the fact that the user is the mobile phone user 20 is input. That is, the bank is made aware that it is the target customer of this service system.

Step S22: Mobile phone user 20
When receiving the contract type data from the bank server 32
Notifies the authentication service server 12 that the contract application from the target customer has started. At the same time, mobile phone user 2
The website accessed by 0 is transferred from the website 14 of the bank 30 to the website 14 of the mobile phone company 10.

Step S23: The password input page 14a 'is displayed on the website 14. The mobile phone user 20 inputs the password given in advance. Further, the user-specific identification number stored in the mobile phone 22 is automatically recognized by the authentication service server 12 by accessing the website 14.

Step S24: The authentication service server 12 refers to the database 16 based on the input password and the recognized identification number, and confirms that the user is a legitimate user by collating with the registered data. After confirmation, the authentication service server 12 refers to the database 16 and extracts the authentication customer data corresponding to the mobile phone user 20.

Step S25: Authentication service server 1
2 displays the extracted authentication customer data on the takeover confirmation page 14b on the website. In addition, the mobile phone user 20 is requested to consent whether or not the authentication customer data can be handed over to the bank 30.

Step S26: Mobile phone user 20
Inputs the consent. Authentication service server 12
Receives consent data.

Step S27: The authentication service server 12 transmits the authentication customer data of the mobile phone user 20 to the bank server 32. It is desirable that this transmission is encrypted and a dedicated line is used for ensuring security. The bank server 32 receives the customer data for authentication.
At the same time, the website accessed by the mobile phone user 20 is transferred from the website 14 of the mobile phone company 10 to the website 34 of the bank 30.

Step S28: The bank server 32
The corresponding contract application page 34a is displayed on the website 34 based on the contract type data acquired in step S21. In addition, among the data of the input items required for the application displayed on the contract application page 34a, the data (address, name, etc.) that is the same as the authentication customer data inherited from the authentication service server 12 is included in the authentication customer data. Display the data in the input field from the beginning. The mobile phone user 20 does not need to input these items.

Step S29: Mobile phone user 20
While browsing the display of the contract application page 34a, input necessary additional data for input items that are not satisfied in the input fields and input confirmation of application. As the additional data, for example, there is a password for a bank card that is selected and entered by oneself. The additional data and the application confirmation data are transmitted to the bank server 32. If there is no additional data, only the application confirmation data will be transmitted.

Step S30: The bank server 32
The additional data and the application confirmation data are received, and the additional data is registered in the database 36 as the authentication customer data of the bank 30 together with the authentication customer data inherited from the authentication service server 12, and is stored.

After that, the bank 30 performs a predetermined process according to the contract type. For example, in the case of opening a new account, a normal examination is performed based on the authentication customer data in the database 36, and if the examination is completed successfully, a predetermined account opening process is performed. When applying for telephone banking, make the required registrations.

3) General Embodiment When the present invention is generally carried out, the authentication service provider is not limited to the mobile phone company. In that case, the customer is not a mobile phone user and the user's unique identification number is not automatically recognized by the authentication service server as it would be stored in a mobile phone. In general, a customer who uses the service system will be notified beforehand by allocating an identification number and password unique to the user. When the customer uses this service system, he / she accesses the predetermined website as shown in the above processing flow example by an appropriate computer having an internet connection function and a browser function, and inputs the identification number in the step of inputting the password. And enter the password.

Further, although the Internet connection and the leased line connection are used in the above example, the system of the present invention can be applied to other communication networks including future broadband.

[0061]

The authentication service providing system according to the present invention is a system executed between an authentication service providing business operator and its member store whose authentication content overlaps with each other, and inherits the authentication customer data from the former to the latter. As a result, the authentication system in the latter can directly use the authentication customer data acquired from the former.

As a result, the member store does not need to identify himself or herself in writing and obtain customer data at the conventional reception counter, and it is possible to perform the authentication exclusively using the reception system via the communication network. . As a result, the work burden and cost of reception and authentication are significantly reduced.

For the customer, it is possible to save the trouble of performing the duplicate authentication procedure for both the authentication service provider and the member store. In particular, when applying for a given procedure to a member store, it is not necessary to go to the reception desk, and the application can be made only through the communication network. Further, the customer data for authentication passed from the authentication service provider to the member store does not need to be input by the customer again.

As a result, the effect of improving the customer service is obtained for the authentication service provider, and the member store also contributes to the improvement of the customer service and the business expansion.

[Brief description of drawings]

FIG. 1 is a diagram showing an outline of a configuration of an authentication service system according to the present invention and steps S1 to S4 of a flow of pre-processing in an authentication service procedure using the system.

FIG. 2 is a configuration diagram almost similar to FIG. 1, and includes steps S11 to S of a processing flow for actually performing authentication at a member store in an authentication service procedure using this system.
It is a figure which shows 18.

FIG. 3 is a configuration diagram almost similar to FIG. 1, and is a diagram showing steps S21 to S36 of an example different from FIG. 2 regarding a processing flow for executing authentication.

[Explanation of symbols]

10 Authentication service providers (mobile phone companies) 12 Authentication service server 14 Authentication Service Website 16 database 17 reception desk 18 reception terminals 20 Customers (mobile phone users) 22 Mobile phones 24 display 26 Input device 30 member stores (banks) 32 bank server 34 Bank Website 36 Database

Claims (14)

[Claims] 1. In an authentication service system for transferring authentication customer data from an authentication service provider to a member store of the authentication service provider via a communication network, an authentication service server provided in the authentication service provider is for authentication from a customer. Means for acquiring customer data and issuing a unique identification number and password to the customer; a database for registering the customer data for authentication acquired from the customer in association with the identification number and password; and an authentication service website. Means for constructing and managing; means for receiving the identification number and password and contract type data relating to the member store from the customer who has accessed the authentication service website; and referring to the database based on the identification number and password, Customer Day for customer certification Means for displaying the authentication customer data on the authentication service website and requesting the customer for consent to take over the authentication customer data, and in response to receiving consent data from the customer. An authentication service system comprising: means for transmitting the authentication customer data and the contract type data to a member store server. 2. The authentication according to claim 1, wherein the customer data for authentication is transmitted to a member store server, and the access of the customer is transferred from the authentication service website to the member store website. Service system. 3. The member store server displays a contract application page on the member store website based on the contract type data transmitted from the authentication service server, and the authentication customer data is displayed on the contract application page. The authentication service system according to claim 1 or 2, which is used for displaying. 4. In an authentication service system for handing over authentication customer data from an authentication service provider to a member store of the authentication service provider via a communication network, an authentication service server provided in the authentication service provider is for authentication from a customer. Means for acquiring customer data and issuing a unique identification number and password to the customer; a database for registering the customer data for authentication acquired from the customer in association with the identification number and password; and an authentication service website. A means for constructing and managing, and a member store server receiving contract type data relating to the member store from the customer who has accessed the member store website,
Means for requesting input of the identification number and password on the authentication service website in response to shifting the access of the customer from the member store website to the authentication service website; and the identification number from the customer And a means for receiving a password, a means for referring to the database based on the identification number and the password, and extracting authentication customer data regarding the customer, displaying the authentication customer data on the authentication service website and On the other hand, the authentication is provided with means for requesting the approval of the transfer of the authentication customer data, and means for transmitting the authentication customer data to the member store server in response to receiving the approval data from the customer. Service system. 5. The customer data for authentication is transmitted to the member store server, and the access of the customer is transferred from the authentication service website to the member store website. Authentication service system. 6. The member store server displays a contract application page on the member store website based on the contract type data, and uses the authentication customer data to display the contract application page. The authentication service system according to claim 4 or 5. 7. In an authentication service system for handing over authentication customer data from a mobile phone company to a bank via a communication network, an authentication service server provided in the mobile phone company acquires the authentication customer data from a mobile phone user. And means for issuing a unique identification number stored in a mobile phone to the mobile phone user and issuing a password, and registering the customer data for authentication acquired from the mobile phone user in association with the identification number and password. A database for establishing and managing an authentication service website, receiving the password and contract type data relating to the bank from the mobile phone user who has accessed the authentication service website, and recognizing the stored identification number. Means, said identification number and password Means for retrieving the authentication customer data relating to the mobile phone user based on the database, displaying the authentication customer data on the authentication service website, and handing over the authentication customer data to the mobile phone user. Authentication request system, and means for transmitting the authentication customer data and the contract type data to a bank server in response to receiving consent data from the mobile phone user. 8. The authentication according to claim 7, wherein the authentication customer data is transmitted to a bank server, and the access of the mobile phone user is transferred from the authentication service website to the bank website. Service system. 9. The bank server displays a contract application page on the bank website based on the contract type data transmitted from the authentication service server, and displays the authentication customer data on the contract application page. The authentication service system according to claim 7, which is used for the authentication service system. 10. In an authentication service system for handing over authentication customer data from a mobile phone company to a bank via a communication network, an authentication service server provided in the mobile phone company receives the authentication customer data from the mobile phone user. Means for issuing to the mobile phone user a unique identification number stored in the mobile phone and issuing a password, and associating authentication customer data acquired from the mobile phone user with the identification number and password A database to be registered, a means for constructing and managing an authentication service website, and a bank server that receives contract type data relating to the bank from the mobile phone user who has accessed the bank website, and the bank server accesses the bank user. Moved from the website to the above certification service website In response to the request, means for requesting input of the password at the authentication service website; means for receiving the password from the mobile phone user and recognizing the stored identification number; Means for extracting authentication customer data relating to the mobile phone user based on the database based on the database, displaying the authentication customer data on the authentication service website, and transferring the authentication customer data to the mobile phone user. An authentication service system comprising: means for requesting approval, and means for transmitting the authentication customer data to the bank server in response to receiving approval data from the mobile phone user. 11. The authentication customer data is transmitted to the bank server, and the access of the mobile phone user is transferred from the authentication service website to the bank website. Authentication service system. 12. The bank server displays a contract application page on the bank website based on the contract type data and uses the authentication customer data to display the contract application page. Item 10 or 11
Authentication service system described in. 13. The authentication service system according to claim 7, wherein the unique identification number stored in the mobile phone is stored in a storage device built in the mobile phone. . 14. The authentication service system according to claim 7, wherein the unique identification number stored in the mobile phone is stored in an IC card that is removable from the mobile phone.