JP2003162677A - Electronic business transactions server, electronic business transactions system, electronic business transactions method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To make one easily recognize risks in electronic business transactions. <P>SOLUTION: An electronic business transactions server 1, if it receives a transaction request from a kiosk terminal 2, authenticates the kiosk terminal 2 and sets, for the kiosk terminal 2, transaction condition of the limited amount of transaction or the like. The kiosk terminal 2 transmits the set transaction condition to the electronic business transactions server 1, which, based on the limited amount of transaction as the transaction condition, transmits risk information indicating a risk to be taken by the user to the kiosk terminal 2. The electronic business transactions server 1, upon receiving consent information from the kiosk terminal 2, transmits a secret number to the kiosk terminal 2. For conducting transactions, a request is made of the electronic business transactions server 1 for connection from a mobile terminal 3. The electronic business transactions server 1 authenticates the mobile terminal 3, and, after receiving the secret number that has been transmitted, makes the set transaction condition effective. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic commerce server, an electronic commerce system, an electronic commerce method, and a program, and more particularly, to an electronic commerce server, an electronic commerce system, an electronic commerce method, and a program in which risk can be easily recognized. .

[0002]

2. Description of the Related Art In commercial transactions, what kind of risks exist and in what cases are the users responsible?
The risks need to be clearly visible. The same applies to electronic commerce performed through a communication line.

[0003]

Conventionally, such a risk is not displayed on the mobile terminal. Therefore, the user may not know what kind of risk exists in electronic commerce. If the user does not recognize such a risk, there is a possibility that the usage amount becomes too large, the mobile terminal is inadvertently lost, or the mobile terminal is stolen by being attacked by a thug. When the mobile terminal is in the hands of a third party, the third party may carry out a transaction against the user's will. Therefore, it is necessary to facilitate risk recognition,
In addition, it is necessary to prevent transactions that are against the wishes of users.

The present invention has been made in view of such conventional problems, and provides an electronic commerce server, an electronic commerce system, an electronic commerce method, and a program in which risk in electronic commerce can be easily recognized. To aim. Another object of the present invention is to provide an electronic commerce server, an electronic commerce system, an electronic commerce method and a program capable of preventing a transaction against a user's will.

[0005]

In order to achieve this object, the electronic commerce server according to the first aspect of the present invention is
In an electronic commerce server for conducting electronic commerce,
Transaction condition acquisition means for acquiring the transaction conditions specified by the user of electronic commerce, and information indicating the risk that the user should bear based on the transaction conditions acquired by the transaction condition acquisition means,
Risk information transmitting means for transmitting to a user's terminal. With such a configuration, it is possible to easily recognize the risk and prevent a transaction against the user's will.

According to a preset relationship between the transaction condition and the risk that the user should bear, the risk condition transmission means is provided with risk information acquisition means for acquiring risk information based on the transaction condition acquired by the transaction condition acquisition means. The means may transmit the risk information acquired by the risk information acquiring means to the user's terminal.

[0007] Consent information about the risk information transmitted by the risk information transmitting means is received from the user terminal, and the transaction conditions specified by the user are associated with the identification information. Identification information transmitting means for storing and transmitting the identification information to the user terminal, identification information receiving means for receiving transaction request information and identification information, and the identification information transmitting means for transmitting to the user terminal It may be provided with a transaction prohibition means for comparing any of the identified information and the identification information received by the identification information receiving means, and inhibiting the requested transaction when the two identification information do not match.

If any of the identification information transmitted by the identification information transmitting means to the user terminal matches the identification information received by the identification information receiving means, the other conditions are satisfied, and the identification information becomes A transaction permitting means for permitting the transaction within the range of corresponding transaction conditions may be provided.

An electronic commerce system according to a second aspect of the present invention is an electronic commerce system for conducting electronic commerce, which is performed by a transaction condition setting terminal for setting a transaction condition of a user and a transaction terminal. A transaction condition of a transaction is set between the transaction condition setting terminal, the transaction condition and identification information are stored in association with each other, and the identification information is transmitted to the transaction condition setting terminal, and the transaction terminal performs the transaction. When the information requesting the request and the identification information are received, one of the identification information transmitted to the transaction condition setting terminal is compared with the received identification information, and when the two identification information do not match, the requested transaction And a server for electronic commerce that prohibits.

When the electronic commerce server receives the information requesting the transaction and the identification information from the transaction terminal, the electronic commerce server compares any of the identification information transmitted to the transaction condition setting terminal with the received identification information. When the two pieces of identification information match each other, the transaction may be configured to be permitted within the range of the requested transaction condition by satisfying the other transaction condition.

The electronic commerce method according to the third aspect of the present invention includes the step of storing a preset relationship between the transaction conditions of the electronic commerce and the risk that the user should bear, and the user of the electronic commerce specified. Receiving trade terms,
It is provided with a step of reading information indicating a risk that the user should bear based on the received transaction conditions, and a step of transmitting the read risk information to the user's terminal in order to clearly show the read risk information to the user.

A program according to a fourth aspect of the present invention is
A procedure of storing a preset relationship between a transaction condition of electronic commerce and a risk that the user should bear in a computer, a procedure of receiving a transaction condition specified by the user of the electronic commerce transaction,
It is a program to execute the procedure of reading the risk information indicating the risk that the user should bear based on the received transaction conditions, and the procedure of transmitting the risk information to the user's terminal to clearly show the read risk information to the user. .

[0013]

DETAILED DESCRIPTION OF THE INVENTION An electronic commerce system according to an embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows the configuration of the electronic commerce system according to this embodiment.
The electronic commerce system according to the present embodiment is a system for performing commerce using a network and a computer as a core, and includes an electronic commerce server 1, a kiosk terminal 2, and a mobile terminal. Three
And are connected via a communication line or the like.

As shown in FIG. 2, the electronic commerce server 1 includes a CPU (Central Processing Unit) 11 and an RO.
M (Read Only Memory) 12 and RAM (Random Acces
s Memory) 13, display 14, keyboard 1
5, mouse 16, and HDD (Hard Disk Drive) 17
And are equipped with.

The electronic commerce server 1 is a computer for setting transaction conditions and conducting electronic commerce with a user. The electronic commerce server 1 also transmits and receives transaction information regarding electronic commerce with the mobile terminal 3.

The ROM 12 stores a program for conducting such electronic commerce, and the CPU 11 executes the program stored in the ROM 12. And RAM13
Temporarily stores the data required to execute the program.

The HDD 17 is a storage device for storing information required for electronic commerce exchanged with the kiosk terminal 2 or the mobile terminal 3.

The electronic commerce server 1 uses the HDD 17
In addition, the transaction conditions of the user are stored for each transaction. The transaction conditions are conditions such as a transaction limit amount designated by the user, a payment method and timing of the price, a user authentication means such as a password and an IC card, and designation of a customer. The electronic commerce server 1 assigns a secret number each time a transaction condition is set in order to relate the transaction of the user to the transaction condition. Then, the electronic commerce server 1 stores the secret number in the HDD 17 in association with the transaction condition.

The electronic commerce server 1 is the HDD 1
In 7, the information indicating the relationship between the transaction limit amount and the risk that the user should bear is stored. This risk information is information indicating the risk that the user should bear, such as the amount of damage that may occur, based on the transaction limit amount. The relationship between the transaction limit amount and the risk is preset.

When the electronic commerce server 1 transmits / receives data to / from the kiosk terminal 2 or the mobile terminal 3, the electronic commerce server 1 uses the asymmetric encryption method to authenticate the terminal and the user himself / herself. Authenticate with. The asymmetric encryption method is a method in which a secret key (data) and a public key (data) are paired, and data transmitted / received is encrypted / combined using these two keys. Electronic commerce server 1
Stores the public key of the kiosk terminal 2 in the HDD 17.

The kiosk terminal 2 is a computer arranged in a place where users can use it, and exchanges information with the electronic commerce server 1. The kiosk terminal 2 is configured as shown in FIG. 2 like the electronic commerce server 1, stores a program for transmitting / receiving data to / from the electronic commerce server 1 in the ROM, and transmits / receives to / from the RAM. Store the required data. In addition, the kiosk terminal 2
The HDD stores a secret key used when authenticating the kiosk terminal 2.

The mobile terminal 3 is a portable terminal used by a user for transactions and has a communication function. The mobile terminal 3 may be, for example, a mobile phone or PHS.
(Personal Handyphone System), PDA (Personal D
igital Assistance) and mobile computers.

The mobile terminal 3 has a liquid crystal display,
Dial key, speaker, microphone, antenna,
Equipped with. The liquid crystal display is for displaying transmission / reception information, operation information and the like. The dial keys are for performing calling procedures and the like. The speaker is for outputting the received voice. The microphone is for inputting the user's voice. The antenna is for transmitting and receiving a call signal.

The mobile terminal 3 has a memory,
A program for transmitting / receiving data to / from the electronic commerce server 1 and data required for transmission / reception are stored in this memory. In addition, the mobile terminal 3 stores a private key and a public key certificate used when authenticating the mobile terminal 3 in this memory. This public key certificate is created by digitally signing the information of the public key corresponding to the private key stored in the memory of the mobile terminal 3 and the owner of the public key by a predetermined certification authority.

In the present embodiment, when there are a plurality of kiosk terminals 2, the secret key of the kiosk terminals 2 is common to each kiosk terminal 2, and when there are a plurality of mobile terminals 3, the mobile terminals 3 are mobile. The secret key of the terminal 3 is different for each mobile terminal 3.

Next, the operation of the electronic commerce system according to this embodiment will be described. When the user sets transaction conditions, the kiosk terminal 2 is used to transmit a transaction request to the electronic commerce server 1. The electronic commerce server 1 receives the transaction request and transmits / receives information and the like for setting transaction conditions to / from the kiosk terminal 2.

This operation will be described based on the flowchart shown in FIG. The kiosk terminal 2 transmits a connection request to the electronic commerce server 1 (step S11). The electronic commerce server 1 receives the connection request from the kiosk terminal 2 (step S12).

The electronic commerce server 1 generates a random number,
The random number is stored in the HDD 17 (step S13).
The electronic commerce server 1 transmits the stored random number to the kiosk terminal 2 (step S14). Kiosk terminal 2
A random number is received (step S15).

The kiosk terminal 2 encrypts the received random number with the secret key stored in the HDD (step S1).
6). The kiosk terminal 2 transmits the encrypted encrypted data to the electronic commerce server 1 (step S17).

The electronic commerce server 1 receives the encrypted data (step S18). Electronic commerce server 1
Extracts the public key of the kiosk terminal 2 from the HDD 17 and decrypts the received encrypted data with the public key of the kiosk terminal 2 (step S19).

The electronic commerce server 1 compares the random number stored in the HDD 17 with the decrypted data (step S20). As a result of the comparison, the electronic commerce server 1 determines whether the stored random number and the decrypted data match, and authenticates the kiosk terminal 2 (step S2).
1).

If the stored random number and the decrypted data do not match (No in step S21), the electronic commerce server 1 determines that the authentication of the kiosk terminal 2 is unsuccessful, and performs communication to prohibit the transaction. Cut (step S2
2) The process is terminated.

On the other hand, when the stored random number and the decrypted data match (Yes in step S21),
The electronic commerce server 1 determines that the kiosk terminal 2 has been successfully authenticated, and authenticates the user himself / herself. An ID code or the like is used for this authentication, for example. Then, when the authentication of the user is successful, the electronic commerce server 1 transmits information for setting the transaction conditions to the kiosk terminal 2 (step S23).

The kiosk terminal 2 is the electronic commerce server 1
The information for setting the transaction conditions is received from (step S24). The kiosk terminal 2 displays the transaction limit amount entry screen as shown in FIG. 4 on the display based on the received information (step S25).

According to this display, the user operates the keyboard of the kiosk terminal 2 to enter the transaction limit amount. The kiosk terminal 2 displays an “OK” button and an “NG” button together with this message. The "OK" button
It is a button to confirm the entered transaction limit.
The "NG" button is a button for correcting the entered transaction limit amount.

By the user's designation of the "NG" button, the kiosk terminal 2 again displays the transaction limit amount entry screen. According to the user's designation of the “OK” button, the kiosk terminal 2 sets the set transaction limit to the electronic commerce server 1
(Step S26). Electronic commerce server 1
Receives the transaction limit amount (step S27).

Upon receiving the transaction limit amount, the electronic commerce server 1 acquires the risk information from the HDD 17 based on the received transaction limit amount in accordance with the preset relationship between the transaction limit amount and the risk. Then, the electronic commerce server 1 transmits the acquired risk information to the kiosk terminal 2 so as to show it to the user (step S28).

The kiosk terminal 2 receives this risk information (step S29). The kiosk terminal 2 displays this risk information on the display (step S3).
0).

An example of this risk information displayed on the display is shown in FIG. On the display, the risk amount and the burden of proof are on the user side as risk information, and the risk that the user should bear is clearly shown to the user. The kiosk terminal 2 displays a “agree” button to agree with the transaction and a “don't agree” button to disagree with the transaction on the display together with the risk information.

The kiosk terminal 2 executes steps S25 to S30 again by the user's designation of the "not agree" button.

By the user's designation of the "agree" button, the kiosk terminal 2 transmits consent information indicating that the user has agreed to the electronic commerce server 1 (step S3).
1). The electronic commerce server 1 receives the consent information (step S32).

The electronic commerce server 1 generates the secret number X (step S33). The electronic commerce server 1 is
The secret number X is transmitted to the kiosk terminal 2 (step S3
4). The electronic commerce server 1 sends the transmitted secret number X
Is associated with the transaction limit amount specified by the user
Store in 7. The kiosk terminal 2 receives this secret number X (step S35).

In this way, the setting of transaction conditions relating to electronic commerce is completed. The user uses the mobile terminal 3 to perform electronic commerce according to the set transaction conditions.

This operation will be described with reference to the flowchart shown in FIG. The mobile terminal 3 requests a connection to the electronic commerce server 1 (step S41).

Incidentally, the connection request of the electronic commerce server 1 is
It should be performed before the preset time elapses after the transaction conditions are set. This is to prevent as much as possible an opportunity for a third party to perform an electronic commerce transaction against the user's will by limiting the time from setting the transaction conditions until the transaction is performed. The electronic commerce server 1 receives the connection request from the mobile terminal 3 (step S42).

The electronic commerce server 1 generates a random number,
The data is stored in the HDD 17 (step S43). The electronic commerce server 1 transmits this random number to the mobile terminal 3 (step S44).

The mobile terminal 3 is the electronic commerce server 1
The random number is received from (step S45). The mobile terminal 3 encrypts the received random number with the secret key stored in the memory (step S46).

The mobile terminal 3 transmits the encrypted data and the public key certificate stored in the memory to the electronic commerce server 1 (step S47). The electronic commerce server 1 is
Receive the encrypted data and the public key certificate (step S
48). The electronic commerce server 1 obtains the public key of the certification authority, decrypts the public key certificate using the public key of the certification authority, and extracts the public key of the mobile terminal 3.

The electronic commerce server 1 decrypts the received encrypted data using the retrieved public key of the mobile terminal 3 (step S49). Electronic commerce server 1
Compares the random number stored in the HDD 17 with the decrypted data (step S50).

The electronic commerce server 1 determines whether the stored random number and the decrypted data match, and authenticates the mobile terminal 3 (step S51). When the stored random number and the decrypted data do not match (step S5)
No in 1), the electronic commerce server 1 determines that the authentication of the mobile terminal 3 is unsuccessful, disconnects the communication to prohibit the transaction (step S52), and ends this processing.

On the other hand, when the stored random number and the decrypted data match (Yes in step S51), the electronic commerce server 1 determines that the authentication has succeeded, and sends a message indicating that the authentication has succeeded (step S53).

The mobile terminal 3 receives the authentication success message (step S54). The mobile terminal 3 transmits the secret number X (step S55).

The electronic commerce server 1 receives the secret number X (step S56). The electronic commerce server 1 is
All the secret numbers stored in the HDD 17 are compared with the received secret number X (step S57).

The electronic commerce server 1 determines whether or not any secret number stored in the HDD 17 and the received secret number X match (step S58). HDD1
If the secret number X is not stored in 7, the received secret number X does not match any of the secret numbers stored in the HDD 17. In this case (N in step S58)
o), the electronic commerce server 1 determines that the authentication of the user is unsuccessful, disconnects the communication to prohibit the transaction (step S52), and ends this process.

On the other hand, if the secret number X is stored in the HDD 17, the received secret number X matches the secret number X stored in the HDD 17. In this case (step S
58, Yes), the electronic commerce server 1 determines that the user authentication is successful and satisfies the other conditions to permit the transaction and allow the transaction within the transaction limit amount (step S59). ).

Then, the electronic commerce server 1 and the mobile terminal 3 transmit and receive transaction information, and the user conducts a transaction (steps S60, 61). In this way, the user can receive the electronic commerce service.

As described above, the electronic commerce server according to the present embodiment clearly informs the user of the risk that the user should bear according to the transaction limit amount set by the user, and the user's consent. After obtaining it, the transaction conditions were made effective. Therefore, the electronic commerce server according to the present embodiment has the following effects.

Since the risk information is made clear to the user, what kind of risk exists and what kind of case the user should take responsibility when conducting electronic commerce with a mobile terminal, The recognition becomes easy. Therefore, it is possible to prevent the usage amount from becoming too large. In addition, it is possible to prevent the carelessness of the user who loses the mobile terminal used for electronic commerce, and a third party who holds the mobile terminal can perform electronic commerce that is against the will of the legitimate user. You can prevent being exposed.

When carrying a mobile terminal and going out,
The user can freely set the transaction limit amount based on this risk information, and the degree of freedom of electronic commerce on the user's mobile terminal is expanded.

For the main body of the service that handles the electronic commerce server, after explaining the risks to the user in advance,
Since the service can be provided, unnecessary conflict can be avoided, the service can be provided to the user with peace of mind, and the number of users can be expected to increase.

When the authentication of the mobile terminal is unsuccessful, the transaction is prohibited, so that security in the transaction can be ensured.

Next, according to the electronic commerce system of the present embodiment, the transaction conditions are set by the kiosk terminal different from the mobile terminal which actually conducts the transaction.
The set transaction conditions are not stored in the mobile terminal, and even if the mobile terminal is lost, the set transaction conditions can be prevented from being stolen by a third party, and electronic commerce that is against the will of the legitimate user can be prevented. Can be prevented.

Since the electronic commerce server transmits the secret number to the kiosk terminal for which the transaction conditions are set and inputs the secret number into the mobile terminal, a third party unrelated to the user can use the secret number. Since the number cannot be recognized and transactions are prohibited, security can be ensured.

Further, even if the owner of the mobile terminal is not the owner of the mobile terminal, the owner can tell the secret number to a non-malicious third party, and the third party can also use the mobile terminal. Users will no longer be limited, so
The convenience is improved.

Various modes are conceivable for carrying out the present invention, and the present invention is not limited to the above-described modes. For example, the terminal for setting the transaction conditions is not limited to the kiosk terminal, but like a home computer or an ATM (Automated Teller Machine) terminal,
It is possible to set the transaction conditions such that confidentiality can be secured. For authentication of the mobile terminal, not only the secret number but also the telephone number of the mobile terminal can be used.

Further, in the above embodiment, the programs are described as being stored in the memory in advance. However, these programs run on flexible disks and CD-ROMs (Compact Disk Read-On).
It may be stored in a computer-readable recording medium such as a ly memory) or a DVD (Digital Versatile Disk), distributed, installed in a computer, operated as the above-mentioned means, or executed the above-mentioned steps. Alternatively, the program may be stored in a disk device or the like included in a server device on the Internet, and may be superimposed on a carrier wave and downloaded to a computer, for example.

[0067]

As described above, according to the present invention,
Risk recognition becomes easier.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of an electronic commerce system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of an electronic commerce server of FIG.

FIG. 3 is a flowchart showing an operation for setting transaction conditions between the electronic commerce server and the kiosk terminal of FIG.

4 is an explanatory diagram showing a display example of a message for entering a transaction limit amount displayed on the display of the kiosk terminal of FIG. 1. FIG.

5 is an explanatory diagram showing a display example of risk information displayed on the display of the kiosk terminal of FIG. 1. FIG.

FIG. 6 is a flowchart showing an operation of performing a transaction between the electronic commerce server of FIG. 1 and a mobile terminal.

[Explanation of symbols]

1 Electronic Commerce Server 2 kiosk terminal 3 mobile terminals

Claims (8)

[Claims] 1. A server for electronic commerce for performing electronic commerce, wherein transaction condition acquisition means for acquiring transaction conditions designated by a user of electronic commerce, and use based on transaction conditions acquired by said transaction condition acquisition means A server for electronic commerce, comprising: risk information transmitting means for transmitting information indicating a risk that a person should bear to a user's terminal. 2. A risk information acquisition unit for acquiring risk information based on the transaction condition acquired by the transaction condition acquisition unit according to a preset relationship between the transaction condition and the risk to be borne by the user. The electronic commerce server according to claim 1, wherein the information transmitting means transmits the risk information acquired by the risk information acquiring means to a user's terminal. 3. The risk information transmitting means receives consent information indicating that the risk information is transmitted, the consent information indicating that the risk information is transmitted from the user terminal, and the transaction conditions designated by the user are associated with the identification information. An identification information transmitting unit that stores the identification information and transmits the identification information to the user terminal; an identification information receiving unit that receives the transaction request information and the identification information; and the identification information transmitting unit is the user terminal. Comparing any of the identification information transmitted to the identification information with the identification information received by the identification information receiving means, and disabling the requested transaction when the two identification information do not match, and a transaction prohibiting means. The electronic commerce server according to claim 2, characterized in that. 4. When any of the identification information transmitted by the identification information transmission means to the user terminal and the identification information received by the identification information reception means match, the other conditions are satisfied to thereby identify the identification information. The electronic commerce server according to claim 3, further comprising a transaction permission unit that permits a transaction within a range of transaction conditions corresponding to information. 5. An electronic commerce system for conducting electronic commerce, comprising: a transaction condition setting terminal for setting a transaction condition of a user; and a transaction condition setting terminal for setting a transaction condition of a transaction performed by a transaction terminal. Between the transaction conditions and the identification information, the identification information is transmitted to the transaction condition setting terminal, and the transaction request information and the identification information are received from the transaction terminal. And comparing any of the identification information transmitted to the transaction condition setting terminal with the received identification information, and if the two identification information do not match, a server for electronic commerce that prohibits the requested transaction. , An electronic commerce system characterized by the following. 6. The electronic commerce server, when the transaction request information and the identification information are received from the transaction terminal, identifies any of the identification information transmitted to the transaction condition setting terminal and the received identification information. The comparison is made, and when the two pieces of identification information match, by satisfying the other trading conditions, the trading is configured to be allowed within the range of the requested trading conditions. E-commerce system. 7. A step of storing a preset relationship between a transaction condition of electronic commerce and a risk to be borne by a user, a step of receiving a transaction condition specified by a user of the electronic commerce, and a received transaction condition. Electronic commerce, which comprises a step of reading information indicating the risk that the user should bear based on the above, and a step of transmitting the read risk information to the user's terminal in order to clearly show the read risk information to the user. Method. 8. A procedure for storing a preset relationship between a transaction condition of electronic commerce and a risk to be borne by a user in a computer, a procedure for receiving a transaction condition specified by a user of the electronic commerce, and a received transaction. A program for executing the procedure to read the risk information indicating the risk that the user should bear based on the conditions, and the procedure to send the read risk information to the user's terminal in order to clearly show it to the user.