JP2004021332A - Network connection service method, network connection service device, program for customer terminal and program for staffer terminal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To attain high reliability of an on-line transaction of a financial commodity; and to speed up processing. <P>SOLUTION: An on-line transaction system is formed by arranging a network connection service device 3 on a communication network 5 for specially executing face authentication service, and allows a transaction server 1 to execute the original on-line transaction only from a customer terminal 4 of realizing authentication of a face photograph by authenticating a customer by a network connection service device 3 by collating the face photograph by photographing the face photograph of the customer by a digital camera in the customer terminal 4 for the customer for executing the on-line transaction, and allows even a small and medium-scale enterprise to participate in the highly reliable on-line transaction without requiring a large-scale and high functional computer system for the enterprise side transaction server 1 for providing the on-line transaction. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a network connection service method, a network connection service device, a program for customer terminals, and a program for employee terminals.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, stock trading through the Internet has been actively performed. In this conventional online transaction, a customer connects to an Internet connection provider from a customer terminal, starts a browser, specifies a URL providing online transaction, accesses a website of the transaction provider's online transaction, and thereafter, It is used to execute the actual stock trading online.
[0003]
A trading intermediary company that provides online trading connects a trading server on the Internet, manages customers using the trading server, mediates stock trading, and accumulates transaction history for each customer. Then, in order to confirm the transaction results for each customer, the operator of the transaction intermediary company accesses the transaction server from the employee terminal, enters an ID and password for authenticating that he is a qualified person, and logs in. I take it.
[0004]
[Problems to be solved by the invention]
However, in the conventional online transaction technology, since the identity of the customer is confirmed by inputting the customer's ID and password, and the transaction can be started, a malicious party can steal the ID and password and impersonate the transaction. Accidents are likely to occur.
[0005]
In order to avoid this, it is conceivable to adopt a technique of confirming that the user is a legitimate user by performing fingerprint authentication or face photograph authentication with high security at the transaction server when starting the transaction.
[0006]
However, since these fingerprint authentication and face photo authentication handle image data, when the number of users increases, the transaction server prepares an extremely large-scale storage device for storing reference face photos for each user. Have to do it. In addition, the transaction server must perform authentication processing of image data in addition to the original business of accepting stock transactions and merchandise transactions, and performing settlement processing. This causes a problem that the response becomes poor.
[0007]
The present invention has been made in view of such a conventional technical problem, and a network connection service device that specializes in face authentication service is installed on a communication network. By executing the transaction by the device and enabling the transaction server to execute the original online transaction only for the customer whose face authentication is established, the reliability of the authentication is improved and the response of the online transaction is improved. An object of the present invention is to provide a network connection service technology that can be improved.
[0008]
The present invention also provides a network connection service technology capable of presenting, as evidence, a map indicating the position of an online customer terminal at the time of a transaction relating to a trouble case and a photograph of the user's face at that time when any trouble occurs due to the online transaction. The purpose is to provide.
[0009]
[Means for Solving the Problems]
2. The network connection service method according to claim 1, wherein a step of receiving a login from a customer terminal with a predetermined customer ID, a step of connecting between the customer terminal and a transaction server at an address designated by the customer terminal, Instructing the terminal to take a photo of the face of the customer; accepting the image data of the face photo sent from the customer terminal; registering the image data of the face photo in the storage device in association with the customer ID Collating with the reference facial image data that has been performed, and transmitting a collation result indicating whether the collation of the facial photo image data has been established or not established to the transaction server. is there.
[0010]
3. The network connection service method according to claim 2, wherein a step of receiving a login from a customer terminal with a predetermined customer ID, a step of connecting between the customer terminal and a transaction server at an address designated by the customer terminal, Instructing the terminal to take a photograph of the customer's face, accepting the image data of the customer's face sent from the customer terminal, and associating the image data of the face with the customer ID in a storage device. Collating with the reference face image data stored and stored; and, when the collation of the face photo image data is unsuccessful, notifying the customer terminal of the unsuccessful collation. Things.
[0011]
4. The network connection service method according to claim 3, wherein a step of receiving a login from a customer terminal with a predetermined customer ID, a step of connecting between the customer terminal and a transaction server at an address designated by the customer terminal, Instructing the terminal to take a photograph of the face of the customer; receiving image data of the photograph of the face of the customer, position data of the customer terminal, and transaction application data sent from the customer terminal; and storing the customer ID and time in the storage device. Attaching and storing a stamp; collating the image data of the face photo with image data of a reference face photo stored in a storage device in association with the customer ID; Transmitting a verification result indicating the establishment or non-establishment of the verification to the transaction server. It is characterized in.
[0012]
The network connection service method according to claim 4, wherein a step of receiving a login from a customer terminal with a predetermined customer ID, a step of connecting between the customer terminal and a transaction server at an address designated by the customer terminal, Instructing the terminal to take a photograph of the face of the customer; receiving image data of the photograph of the face of the customer, position data of the customer terminal, and transaction application data sent from the customer terminal; and storing the customer ID and time in the storage device. Attaching and storing a stamp; collating the image data of the face photo with image data of a reference face photo stored in a storage device in association with the customer ID; Notifying the customer terminal of the unsuccessful verification when the verification is unsuccessful. It is an butterfly.
[0013]
The network connection service method according to claim 5, wherein a step of receiving a login from the employee terminal with a predetermined employee ID, a step of receiving a transaction confirmation request from the employee terminal specifying a customer ID, a transaction condition, and a date and time; In response to the transaction confirmation request, reading the position data of the customer terminal at the time of the corresponding transaction application stored in association with the customer ID, transaction conditions, and date and time from the storage device; Extracting map data of an area on a map corresponding to the data, creating transaction point map data combining marks indicating points corresponding to the position data, and transmitting the transaction point map data to the employee terminal. And a step.
[0014]
The network connection service method of the invention according to claim 6, wherein a step of receiving a login from the employee terminal with a predetermined employee ID, a step of receiving a transaction confirmation request from the employee terminal specifying a customer ID, transaction conditions, and date and time; In response to the transaction confirmation request, reading the position data of the customer terminal at the time of the corresponding transaction application stored in association with the customer ID, transaction conditions, and date and time from the storage device; Extracting map data of an area on a map corresponding to the data, creating transaction point map data combining marks indicating points corresponding to the position data; Reading out the image data of the customer's face photograph stored in association with the ID, the transaction conditions, and the date and time; It is characterized in that a step of transmitting the image data of the face photograph of the transaction location map data and the customer to the employee terminal.
[0015]
According to a seventh aspect of the present invention, in the network connection service method according to the fifth or sixth aspect, a step of receiving image data of a face photograph of the employee sent from the employee terminal, and storing the image data of the face photograph in a storage device. Collating with the reference face image data stored in association with the employee ID, and notifying the employee terminal of the unsuccessful collation when the collation of the face photo image data is not successful. It is characterized by the following.
[0016]
The network connection service device according to the invention of claim 8 is connected to a communication network and mediates communication between the customer terminal and the transaction server, and associates the customer's reference face image data with the customer ID. The image data of the customer's face picture sent from the customer terminal and the image data of the customer's face picture sent from the customer terminal are compared with the image data of the customer's reference face picture stored in the image data storage apparatus. An image data collating unit, and transmitting a collation result by the image data collating unit to the transaction server through the communication processing unit.
[0017]
A network connection service device according to a ninth aspect of the present invention is a communication processing unit connected to a communication network for mediating communication between a customer terminal and a transaction server, and associating image data of a customer's reference face photograph with a customer ID. The image data of the customer's face picture sent from the customer terminal and the image data of the customer's face picture sent from the customer terminal are compared with the image data of the customer's reference face picture stored in the image data storage apparatus. An image data collating unit, wherein when the collation by the image data collating unit is unsuccessful, the customer terminal is notified of the unsuccessful collation through the communication processing unit.
[0018]
The network connection service device according to claim 10, wherein the communication processing unit is connected to a communication network and mediates communication between the customer terminal and the transaction server; and a face photograph for each transaction sent from the customer terminal A data storage device that receives the image data of the customer terminal, the position data of the customer terminal and the transaction application data, and attaches and stores the customer ID and the time stamp; and the image data of the photograph of the face of the customer sent from the customer terminal. An image data matching unit that matches image data of a reference face photograph of the customer stored in the data storage device in advance, and a comparison result by the image data matching unit is transmitted to the transaction server through the communication processing unit. It is characterized by transmission.
[0019]
A network connection service device according to claim 11, wherein the communication processing unit is connected to a communication network and mediates communication between a customer terminal and a transaction server; and a customer sent from the customer terminal when the customer applies for a transaction. A data storage device for storing the image data of the photograph of the face, the position data of the customer terminal and the customer ID with a time stamp attached thereto, and the image data of the photograph of the customer sent from the customer terminal to the data An image data matching unit that matches the image data of the reference face photograph of the customer registered in advance in the storage device, and when the matching by the image data matching unit is not successful, the customer terminal determines that the matching is not successful. The notification is made through the communication processing unit.
[0020]
The network connection service device according to the twelfth aspect of the present invention provides a communication processing unit that communicates with an employee terminal via a communication network, and for each transaction, the date and time, customer ID, position data of the customer terminal at the time of transaction, and image data of a photograph of the face of the customer A user data storage device for storing map data of a predetermined area, and a user data storage device for responding to a transaction confirmation request specifying a customer ID and a transaction date and time from the employee terminal. And a data search unit that reads out the position data of the customer terminal at the corresponding transaction date and time, and extracts, from the map data storage device, map data of an area on a map corresponding to the position data, and corresponds to the position data. A transaction point map creator that creates transaction point map data combining marks indicating points to be exchanged; A user image search unit that reads out image data of the customer's face photo at the relevant transaction date and time from the user data storage device, and in response to the transaction confirmation request, stores the transaction point map data and the customer's face photo at the relevant transaction date and time. The image data is transmitted to the employee terminal.
[0021]
According to a thirteenth aspect of the present invention, in the network connection service device according to the eleventh or twelfth aspect, an employee image data storage device for storing image data of a photograph of a face of an employee in association with the employee ID is transmitted from the employee terminal. An employee image collating unit for collating image data of a face photograph of an incoming employee with image data stored in the employee image data storage device in association with the employee ID, and When the collation of the image data of the face photograph is not established, the unsuccessful collation is notified to the employee terminal.
[0022]
A program for a customer terminal according to the invention of claim 14 is a process for connecting to a predetermined authentication service server via a communication network, a process for accessing a transaction providing server at a predetermined address through the communication network, and selecting and inputting a transaction screen. Receiving the transaction ID, receiving the input of the transaction condition, receiving the transmission instruction of the transaction condition, capturing the transmission instruction of the transaction condition, photographing with a digital camera, receiving the customer ID, , A transaction condition, and a process of transmitting image data by the digital camera.
[0023]
According to a fifteenth aspect of the present invention, there is provided a customer terminal program for connecting to a predetermined authentication service server via a communication network, accessing a transaction providing server at a predetermined address through the communication network, and receiving a transaction start request. Processing, processing for receiving an input of a customer ID and transaction conditions, processing for receiving a transmission instruction for the transaction conditions, processing for photographing with the digital camera when receiving the transmission instruction for the transaction conditions, When a transmission instruction is received, a computer is made to execute a process of acquiring position data from a GPS sensor and a process of transmitting the customer ID, transaction conditions, image data and position data by a digital camera. It is.
[0024]
An employee terminal program according to a sixteenth aspect of the present invention provides a process for receiving a transaction confirmation request, a process for receiving input of an employee ID and a transaction to be confirmed, a process for receiving a transaction confirmation request transmission instruction, A process of accessing via a communication network, a process of photographing with a digital camera when receiving a transmission instruction of the transaction confirmation request, and a process of transmitting the employee ID and image data from the digital camera to the authentication service server. Is executed by a computer.
[0025]
An employee terminal program according to a seventeenth aspect of the present invention provides a process for receiving a transaction confirmation request, a process for receiving an input of an employee ID and a transaction to be confirmed, a process for receiving an instruction to transmit a transaction confirmation request, A process of accessing via a communication network, a process of photographing with a digital camera when receiving a transmission instruction of the transaction confirmation request, and a process of transmitting position data from a GPS sensor when receiving a transmission instruction of the transaction confirmation request. It is characterized by causing a computer to execute a process of acquiring and a process of transmitting the employee ID, image data from a digital camera, and position data to the authentication service server.
[0026]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. 1 and 2 show the configuration of an online transaction system according to one embodiment of the present invention. The online system is, for example, a trading server 1 operated by a company handling financial products, which mediates trading transactions of financial products such as trading transactions of stock securities, trading transactions of public and corporate bond securities, and employee terminals 2 used by employees of the company, for example. , An authentication service server 3 operated by a connection service company that provides an Internet connection service such as an Internet connection service provider (ISP), a customer terminal 4 used by a customer, and communication between these terminals and the server. For this purpose, a communication network 6 such as the Internet, a wireless communication network 7, and a LAN 8 are connected at all times or at any time.
[0027]
Note that the communication network 6, the wireless communication network 7, the LAN 8, and the like are not limited to these, and may be an intranet, WAN, or the like as a communication connection network interposed in any data communication between terminals, between servers, and between terminals and servers. Telephone communication network and the like can be widely used. Further, the employee terminal 2 is not particularly limited to one connected to the corporate LAN 7 by wire or wirelessly, but is personally owned by the employee and trades from home through a wireless or wired communication line and communication network. It includes a computer and a wireless mobile phone used to access the server 1 for dealing with customers.
[0028]
Further, as for the customer terminal 4, a description will be given of a case where a customer can access the transaction server 1 through a wireless telephone line everywhere on the road. However, the customer terminal 4 can access the transaction server 1 through a wired telephone line or a BB communication line at home or office. , Including wireless mobile phones.
[0029]
The transaction server 1 is a server operated by a company handling financial products, and has equipment and functions necessary for trading financial products. As shown in FIG. 2, the main devices and functions of the transaction server 1 include a communication processing unit 101 that performs communication processing with the employee terminal 2, the authentication service server 3 and the customer terminal 4, and a response to access from the employee terminal 2. A transaction processing unit 102 for processing communication with the authentication service server 3 and responding to access from the customer terminal 4; a transaction history such as an ID, a password, customer information, transaction date, and transaction details for each customer for customer management. And a market database 104 for storing and managing various data related to the financial products handled, and a transaction information database 105 for storing and managing transaction details. In this embodiment, the database is shown as including a storage device that simply stores data and a data write / read / update process and a data search function.
[0030]
The employee terminal 2 is a computer used by employees who deal with customers in a financial product handling company. The employee terminal 2 is also connected to an internal network installed by the company. It also includes a computer that accesses the transaction server 1 via the server 3. As shown in FIG. 2, the main devices and functions of the employee terminal 2 include a communication processing unit 201 that processes data communication through the communication network 5, the wireless communication network 6, or the in-house LAN 7, a data storage device 202, A control device 203 for performing arithmetic operation control processing of a function, an HMI (Human Machine Interface) 204 such as a display, a keyboard, and a pointing device as an interface with the user, a digital camera 205 for taking a photograph of the user's face, It has a GPS sensor 206 that receives a signal from a GPS (Global Positioning System) satellite and detects the current position.
[0031]
The authentication service server 3 performs authentication based on a face photograph described later when the transaction server 1 is accessed from an external employee terminal 2 or accesses the transaction server 1 from a customer terminal 4 and then connects to the transaction server 1. Run a connection service that allows. As shown in FIG. 2, the authentication service server 3 includes, as main devices and functions, a communication processing unit 301 for performing network connection processing, a user management unit 302 for performing registration management of users such as customers, employees, and companies; A user authentication processing unit 303 for executing personal authentication based on image data of a face photograph of a customer; an image database 304 holding image data of a face photograph of each user; a text database 305 holding user information; It has a map database 306 that holds map data of the whole of Japan and the host area.
[0032]
The customer terminal 4 is a computer used by a customer who has entered into a sales contract with a financial product trading company, such as the purchase and sale of stocks and the sale of public and corporate bonds. As shown in FIG. The functions include a communication processing unit 401 that performs data communication with the transaction server 1, the authentication service server 3, and the like via the communication network 5, a data storage device 402, a control device 403 that performs arithmetic control processing of various functions, an HMI 404, and a user face. A digital camera 405 for taking a picture and a GPS sensor 406 are provided.
[0033]
Next, stock trading by an online trading system including a trading server 1, an employee terminal 2, an authentication service server 3, a customer terminal 4, and a communication network 5 connecting them with the above functions. The operation process at the time will be described with reference to the sequence diagrams of FIGS.
[0034]
<1> Customer registration process
As shown in the sequence diagrams of FIGS. 3 and 4, a customer who wants to apply for a stock trading transaction using the transaction server 1 is sent from the customer terminal 4 to the authentication service server 3 through the wireless communication network 6 and the communication network 5. Connect and start a browser to access transaction server 1 (steps S1 and S2). The connection to the authentication service server 3 is executed at the OS level simultaneously with the activation of the terminal 4 in a constant connection environment, but in the case of dial-up connection, the customer himself / herself needs to connect to an appropriate access point when necessary. Done by
[0035]
Next, when the customer inputs the URL of the home page of the transaction server 1 and sends a connection request, the customer terminal 4 is connected to the transaction server 1 via the authentication service server 3. The transaction server 1 accepts this access and transmits a home page including a membership application button (steps S3 to S5).
[0036]
When the customer clicks the membership application button on the customer terminal 4 and transmits the membership registration application, the transaction server 1 transmits a new membership registration acceptance processing page to the customer terminal 4 (steps S6 to S8).
[0037]
The customer enters a customer ID and a password on an enrollment registration page displayed on the HMI of the customer terminal 4 and further enters required customer information such as a name, an address and a telephone number, and then submits a registration application. A transmission instruction is issued (steps S9, S10). Note that the customer ID may be assigned in advance on the server 1 side, but here, the customer can set an arbitrary ID.
[0038]
When the customer gives the customer terminal 4 an instruction to transmit a registration application including a customer ID, a password, customer information, and the like, the control device 403 of the customer terminal 4 gives a photographing instruction to the digital camera 405, and takes a photograph of the customer's face. Then, the image data is obtained (step S11).
[0039]
In order to automate the photographing of the face photograph, a command for operating an API incorporated in the customer terminal 4 may be incorporated in advance into the membership application screen, and the API may be operated when a transmission instruction is received. Then, when a transmission instruction is received, the instruction is transmitted to the authentication service server 3 once, a command for operating the API is transmitted from the authentication service server 3 to the customer terminal 4, and the command is automatically executed. Good.
[0040]
Subsequently, the customer terminal 4 checks by simple pattern matching whether or not the photograph taken by the digital camera 405 is definitely a photograph of a human face (step S12). This simple confirmation processing of whether or not the photograph is a face photograph avoids a situation in which the photograph taken by the digital camera 405 is a face photograph, and the direction of the digital camera 405 is shifted and the photograph of the face is not photographed correctly. It is intended to be implemented. Therefore, pattern matching of image data is extremely rough, and has a circular or elliptical contour corresponding to the outer shape of the face, and the inside of the contour is a color close to flesh color, and the left and right of the upper and lower central bands of the contour There is a black circle corresponding to the eyeball and small white areas corresponding to the white eyes on the left and right sides of the black circle.
[0041]
When it is confirmed that the photograph is a facial photograph, image data of the facial photograph is transmitted from the customer terminal 4 to the transaction server 1 via the authentication service server 3 together with text data such as a customer ID, a password, and customer information ( Step S13). However, if it is not possible to confirm that the image data is a facial photograph image data due to a customer's intentional fraud or an operation failure of the digital camera 405, the transmission of this image data is stopped and the registration procedure is interrupted. (Step S14).
[0042]
The authentication service server 3 verifies whether or not the customer registration data group sent from the customer terminal 4 to the transaction server 1 is a new registration. On the other hand, a process for confirming that the image data is a face photograph image data is performed (step S15). If it is determined that the data group is a data group of a new registration application and it is confirmed that the image data is a facial photograph image data, the facial photograph image data is associated with the customer ID and stored in the image database (DB) 304 ( Step S16). The authentication service server 3 transfers the text data such as the customer ID, the password, and the customer information to the transaction server 1 together with the registration of the image data (step S17).
[0043]
If the face photo cannot be confirmed by the authentication service server 3, the registration of the image data of the face photo is stopped (step S18), and the fact is notified to the transaction server 1 (step S19).
[0044]
In the transaction server 1, when data such as a customer ID, a password, and customer information are transferred from the authentication service server 3, the data is registered and stored in a customer information database (DB) 103, and the customer terminal 4 that has applied for membership is applied to the transaction server 1. It transmits (steps S20, S21). On the other hand, when the transaction server 1 cannot receive a face photograph confirmation from the authentication service server 3 and receives a notification that registration is not possible, the transaction server 1 notifies the customer terminal 4 of the application source of the refusal of membership (step S22).
[0045]
Thus, while a new customer can apply for membership online from the customer terminal 4 to the transaction server 1, the transaction server 1 can register face image data in the authentication service server 3 when joining. it can.
[0046]
In addition, in the above enrollment continuation processing, in order to further enhance the security regarding the registration of a new face photograph of a customer, the image data of the face photograph is once transmitted from the customer to the transaction server 1, and after the regular registration is accepted, The transaction server 1 may transmit the image data of the face photograph together with the customer information to the authentication service server 3 as a reference and store the image data. Also, at the time of the first membership registration, the position data detected by the GPS sensor 406 provided in the customer terminal 4 is transmitted together with the image data of the photograph of the customer's face, and the transaction server 1 stores the position data at the time of the registration procedure. You may make it save as.
[0047]
<2> Financial instrument transaction processing
Next, a description will be given, with reference to the sequence diagrams of FIGS. 5 to 7, of a procedure process when a legitimately registered customer performs a stock sale transaction using the customer terminal 4. The customer starts a browser from the customer terminal 4 and connects to the authentication service server 3 (steps S31 and S32).
[0048]
When the browser is activated and the connection with the authentication service server 3 is completed, the customer inputs the URL of the transaction server 1 to the customer terminal 4 and requests access (steps S33, S34). The transaction server 1 transmits the page of the transaction screen to the customer terminal 4 (Step S35).
[0049]
The customer enters the user ID and password from the transaction reception screen of the customer terminal 4 and performs a login procedure (steps S36 and S37). The transaction server 1 collates the customer ID and the password with the contents of the customer information database 104, and if the collation is established, transmits a page of the full-scale transaction screen to the customer terminal 4 (Steps S38, S39).
[0050]
The customer inputs desired transaction conditions from the transaction screen of the customer terminal 4 and gives an instruction to transmit a transaction application (steps S40 and S41).
[0051]
When the customer gives an instruction to transmit the transaction conditions to the customer terminal 4, the control device 403 of the customer terminal 4 gives a photographing instruction to the digital camera 405 so that the photograph of the customer's face is photographed and the image data is acquired (step). S42). It should be noted that also here, in order to automate face photographing, a command for operating an API built in the customer terminal 4 may be incorporated in the transaction screen in advance, and the API may be operated when a transmission instruction is received. Then, when a transmission instruction is received, the instruction is transmitted to the authentication service server 3 once, a command for operating the API is transmitted from the authentication service server 3 to the customer terminal 4, and the command is automatically executed. Good.
[0052]
Subsequently, the customer terminal 4 checks by simple pattern matching whether or not the photograph taken by the digital camera 405 is definitely a photograph of a human face (step S43). Then, when a simple confirmation of the face photograph is obtained, the customer terminal 4 causes the GPS sensor 406 to detect the position data (step S44). Then, the image data and the position data of the face photograph are transmitted from the customer terminal 4 to the transaction server 1 via the authentication service server 3 together with the customer ID and the text data of the transaction conditions (step S45).
[0053]
On the other hand, in the face photograph confirmation processing in step S43, if the image data of the face photograph cannot be confirmed due to intentional fraud by the customer or due to a failure in operation of the digital camera 405, the image data Is stopped, and online trading of stocks is interrupted (step S46).
[0054]
The authentication service server 3 verifies whether or not a transaction application has been made with respect to a data group such as transaction conditions sent from the customer terminal 4 to the transaction server 1. For the data, the reference image data of the corresponding customer is extracted from the image database 304 based on the customer ID, pattern matching processing is executed, and it is checked whether or not the photograph is a true customer's face photograph (step S47).
[0055]
If the face photo is verified in step S47, the authentication service server 3 registers the image data received this time together with the position data in the image database 304 in association with the customer ID. At this time, a time stamp of the transaction date and time is also registered (step S48). At the same time, the authentication service server 3 transfers the customer ID and the transaction application condition to the transaction server 1 (Step S49).
[0056]
If the verification of the face photograph is established from the authentication service server 3 and the contents of the customer ID and the transaction condition are transferred, the transaction server 1 accepts the transaction condition and registers it in the transaction information database 105 in association with the customer ID. Then, the settlement processing is performed, and the transaction completion is transmitted to the customer terminal 4 (steps S50, S51). The customer confirms the completion of the transaction and the display of the transaction conditions displayed on the customer terminal 4 (step S52).
[0057]
On the other hand, when the verification of the face photograph in step S47 is not successful, the failure of verification is notified to the transaction server 1 (step S55). When the transaction server 1 receives the notification of the unsuccessful verification of the face photograph, it notifies the customer terminal 4 of the transaction requester of the refusal of the transaction due to the unsuccessful verification (step S56). The customer confirms the reason for the transaction refusal displayed on the customer terminal 4 (step S57). If the customer sees the rejection confirmation screen and wants to correctly apply for a transaction again, the procedure will be repeated from the photographing of the face photograph.
[0058]
<3> Operation from employee terminal
When an employee of a financial product transaction company accesses the transaction server 1 from the employee terminal 2 to check market conditions and transactions, the access procedure to the transaction server 1 follows the processing procedures shown in the sequence diagrams of FIGS. 8 and 9. . When an employee uses the employee terminal 2 to access the always-connected transaction server 1 via the LAN 7, a transaction screen is displayed (step S61), and an employee ID and a password are entered to access the transaction server 1. (Step S62), a market condition reference request is transmitted (step S63). On the other hand, after verifying the ID and the password, the transaction server 1 transmits the stock market information from the market database 105 to the requesting employee terminal 2 (step S64). Note that an employee can access the transaction server 1 from outside the company via a wireless or wired communication network 5, but in this case, the customer follows the same procedure as when the customer accesses from the customer terminal 4. The employee terminal 2 is connected to the authentication service server 3 through a communication network or a wired communication network, and the procedure of accessing the transaction server 1 by inputting the URL of the transaction server 1 from a browser is performed.
[0059]
When the employee operates the stock transaction by looking at the market information on the employee terminal 2 (steps S65 and S66), a photograph of the face is taken by the digital camera 205 to confirm the identity (step S67). In addition, the automation of the photographing of the face photo may be configured such that a command for operating the API incorporated in the employee terminal 2 is incorporated in the transaction screen in advance, and the API is operated when a transmission instruction is received, When the transmission instruction is received, the instruction may be transmitted to the authentication service server 3 once, and a command for operating the API may be transmitted from the authentication service server 3 to the employee terminal 2 so as to be automatically executed.
[0060]
If the photograph of the face of the employee who performs the operation is taken and the image data is acquired, a simple face photograph confirmation process is performed on the employee terminal 2 (step S68). Here, if it is confirmed that the acquired image data is a human face, then the position is detected by the GPS sensor 206, and the position data is acquired (step S69).
[0061]
Next, the employee terminal 2 transmits the acquired image data and position data of the face photograph to the transaction server 1 together with the employee ID and the operation content (step S70). The transaction server 1 transfers the image data and the position data among the various data received from the employee terminal 2 to the authentication service server 3 together with the employee ID (step S71).
[0062]
The authentication service server 3 performs a pattern matching on the image data transferred from the transaction server 1 with the image data of the reference face photograph of the employee registered in the image database 304 in advance. Whether or not it is collated (step S72).
[0063]
If the face photo is verified, the image data of the current face photo and the position data of the operation place are associated with the employee ID, and a time stamp is added to the image data and registered in the image database 304 (step S73). At the same time, the authentication service server 3 notifies the transaction server 1 of the verification completion of the face photograph (step S74).
[0064]
Upon receiving the notification of the verification completion from the authentication service server 3, the transaction server 1 accepts the transaction instruction received from the employee terminal 2, executes the stock transaction, and associates the transaction information database 104 with the employee ID that performed the operation. Register (step S75). At the same time, the transaction server 1 transmits a transaction execution confirmation to the employee terminal 2, and the employee confirms the transaction executed by himself / herself on the screen display of the employee terminal 2 (steps S76 and S77).
[0065]
On the other hand, when the comparison of the face photograph in step S71 is not established, the transaction server 1 is notified of the unsuccessful comparison (step S78). The transaction server 1 that has received the notification of the unsuccessful verification transmits a message to the effect that the access is made by an unqualified person to the employee terminal 2 and causes the operator to confirm it (steps S79 and S80).
[0066]
As a result, it is possible to reliably prevent an unqualified employee or outsider from accessing the transaction server 1 and operating a financial product transaction.
[0067]
<4> Processing when trouble occurs
When a trouble occurs due to the online transaction and it becomes necessary to confirm the applicable transaction between the customer and the employee, the financial product trading company makes the employee access the authentication service server 3 from the employee terminal 2 and A photograph of the customer's face and a map of the location at the time of applying for a transaction can be obtained and presented to the customer. The processing procedure in this case will be described with reference to the sequence diagrams of FIGS.
[0068]
The employee connects the employee terminal 2 to the communication network or LAN, performs a login procedure, and requests a trouble processing screen (steps S91 to S93). In response to this, the transaction server 1 transmits a trouble processing screen to the requesting employee terminal 2 (step S94).
[0069]
The employee enters the transaction number where the trouble has occurred on the trouble processing screen of the employee terminal 2 and gives a transmission instruction (steps S95 and S96).
[0070]
On the other hand, the employee terminal 2 executes automatic photographing of the face photograph by the digital camera 205, and confirms for the time being that the photographed face photograph is a face photograph (steps S97 and S98). If the employee terminal 2 can confirm that the photograph is a face photograph, the employee terminal 2 then causes the GPS sensor 206 to perform position detection, and trades the image data and the position data of the photograph with the transaction number data of the trouble case, the corresponding customer ID and the employee ID. The data is transmitted to the server 1 (steps S99, S100).
[0071]
Upon receiving the trouble processing request from the employee terminal 2, the transaction server 1 transfers the image data and the position data of the current face photograph to the authentication service server 3 for confirming the qualification of the employee and registering the case (step S101). .
[0072]
The authentication service server 3 compares the image data of the face photograph of the employee received from the transaction server 1 with the reference image data of the employee registered in the image database 304 (step S102). If the collation of the employee's face photo is established, it is confirmed that the access is from a regular employee, the image data and the position data of the facial photograph at the time of the access are registered in the image database 304, and the transaction server is registered. 1 is notified that the verification has been completed (steps S103 and S104).
[0073]
When the transaction server 1 receives the notification of the successful verification of the face employee from the authentication service server 3, the transaction server 1 stores the transaction information database 105 based on the transaction number and the customer ID of the trouble case previously received from the employee terminal 3. A search is performed to extract the corresponding transaction content, and the transaction content is transmitted to the requesting employee terminal 2 (steps S105 and S106).
[0074]
In the collation of the face photograph in step S102, when the collation is not established, the authentication service server 3 notifies the transaction server 1 of the unsuccessful authentication (step S107). In response, the transaction server 1 notifies the requesting employee terminal 2 of the operation by the unqualified person, and confirms the operation on the employee terminal 2 of the employee (steps S108 and S109). If a regular employee sees this display, he or she will access again or take a face photo again.
[0075]
If the verification of the employee's face photograph is successful in step S102, the authentication service server 3 searches the image database 304 based on the customer ID and the transaction date and time related to the transaction of the trouble case, together with the notification of the above-mentioned verification success. Then, the corresponding date and time, the image data of the customer's face photograph at the time of the relevant transaction and the position data of the transaction point are read (step S110).
[0076]
Subsequently, the authentication service server 3 searches the map database 306 for the read position data, reads out map data of the surrounding area including the relevant point, and combines the mark indicating the relevant point with the transaction point map. Is created (step S111).
[0077]
Subsequently, the authentication service server 3 transmits the extracted image data of the face photograph of the customer at the time of the transaction and the map data of the transaction point to the employee terminal 2 that requested the transaction (step S112).
[0078]
The employee terminal 2 displays the transaction contents 11 of the trouble case received from the transaction server 1, the customer's face photograph 12 at the time of the relevant transaction received from the authentication service server 3, and the map 12 of the transaction point, and presents them to the employee. In addition, the contents are printed out according to the instruction.
[0079]
As a result, in the online transaction system of the present embodiment, even when a customer with valid qualification makes a transaction application, it performs collation with a facial photograph, and by registering the facial photograph and position data at the time of the transaction application, In addition to improving the reliability of online transactions, even in the event of a trouble once, it is possible to respond to customers by showing a map of the vicinity of the relevant point by using the face photograph at the relevant date and time and position data.
[0080]
In addition, even when an employee accesses the transaction server 1 from the employee terminal 2, the collation based on the face photograph is performed, and the image data and the position data of the face photograph at the time of access are registered in the authentication service server 3. Trading operations can be suppressed, and highly reliable online trading can be operated.
[0081]
In addition, since the image data and the map data of the face photograph have a large data capacity, if the responsibility of collation is to be borne by the transaction server 1, the load on the transaction server 1 becomes enormous. However, by having the authentication service server 3 bear the responsibility of collating and creating a face photo, even a small company can pay a service fee to achieve high reliability. The advantage is that online transactions can be provided to customers.
[0082]
In the above-described embodiment of the online transaction system, a map of the transaction point is created together with the collation of the face photograph to enhance the evidence at the time of trouble occurrence. To a system in which the authentication service server 3 provides only a face photo collation service, or a system in which the authentication service server 3 provides only a face photo collation service and a customer face photo output service at the relevant date and time when a trouble occurs. You can also. In addition, authentication of a face photograph on the employee side can be omitted if a simpler system is required.
[0083]
【The invention's effect】
As described above, according to the network connection service method and the network connection service device of the present invention, in response to an online transaction request from a customer terminal, customer authentication based on a face photograph is performed at a network connection service site. Since the transaction request is forwarded to the transaction server, large and sophisticated computer systems are not required for the transaction server of the company that provides online transactions, and even small and medium-sized companies can participate in online transactions. it can.
[0084]
In addition, by performing face photo authentication using a dedicated computer system at the authentication service site, it is possible to easily increase the system for verification processing separately from online transactions in response to the increase in contracted companies and customers, The collation process can be speeded up, and the online transaction with high reliability can be flexibly dealt with at a high speed.
[0085]
Further, according to the network connection service method and the network connection service device of the present invention, the position data of the customer terminal is registered in the authentication service server together with the image data of the face photograph when the customer makes a transaction application, and when a trouble occurs, the customer's customer in the transaction concerned is registered. By outputting the photograph of the face and a map of the transaction application point, it is easy to deal with customers in the event of trouble. In addition, a mobile terminal can be used by a customer as a customer terminal, thereby enabling highly reliable ubiquitous online transactions.
[0086]
Further, according to the network connection service method and the network connection service device of the present invention, even when the employee accesses the transaction server, the collation based on the photograph of the employee can be performed, thereby preventing the illegal transaction by the employee. Even if you are not in an online trading company, you can access the trading server even when you are on the go, making it possible to respond quickly and flexibly to online trading, and to activate online trading.
[0087]
Further, according to the network connection service method and the network connection service device of the present invention, when the employee accesses the transaction server, the collation based on the face photograph is performed, and the position data of the employee terminal at the time of access is also transmitted. Can increase the evidence that can be used when a fraudulent transaction is discovered, and this can more effectively curb fraudulent operations by employees.
[0088]
According to the customer terminal program of the present invention, by incorporating into the customer terminal, when the customer accesses the transaction server from the customer terminal through the communication network for online transactions, to photograph and transmit the customer's face photo, This can be used for face photo collation on the authentication service server side, and can contribute to the realization of highly reliable online transactions.
[0089]
Also, according to the customer terminal program of the present invention, by incorporating the customer terminal, when the customer accesses the transaction server from the customer terminal through the communication network for online transactions, photograph the customer's face, By detecting and transmitting the location data of the location of the customer terminal, it can be used for verification of the face photo on the authentication service server side and used as evidence data when trouble occurs, realizing highly reliable online transactions Can contribute to
[0090]
According to the program for the employee terminal of the present invention, by incorporating it into the employee terminal, when the employee accesses the transaction server, the photograph of the employee's face is taken and transmitted, and the authentication service server is used to collate the face photograph. Can help prevent fraudulent transactions on the part of employees, and thus allow employees to access the transaction server even when they are away from the online trading company, even when they are away from home. Response, and online transactions can be activated.
[0091]
Further, according to the employee terminal program of the present invention, by incorporating it in the employee terminal, when the employee accesses the transaction server, the photograph of the employee's face is taken and transmitted. Can contribute to the prevention of fraudulent transactions on the part of employees, and by registering the location data of the points where employees have accessed the transaction server in the authentication service server, enhance the evidence that can be used when employees detect fraud. And unauthorized operations by employees can be suppressed more effectively.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a hardware configuration of an online transaction system according to one embodiment of the present invention.
FIG. 2 is a block diagram showing a functional configuration of an online transaction system according to one embodiment of the present invention.
FIG. 3 is a sequence diagram 1 of a customer registration process by the online system according to the embodiment.
FIG. 4 is a second sequence diagram of a customer registration process by the online system according to the embodiment.
FIG. 5 is a sequence diagram 1 of a stock transaction process by the online system according to the embodiment.
FIG. 6 is a second sequence diagram of the stock transaction processing by the online system according to the embodiment.
FIG. 7 is a sequence diagram 3 of the stock transaction processing by the online system according to the embodiment.
FIG. 8 is a sequence diagram 1 showing a procedure of a transaction operation by an employee using the online system according to the embodiment.
FIG. 9 is a sequence diagram 2 showing a procedure of a transaction operation by an employee using the online system according to the embodiment.
FIG. 10 is a sequence diagram 1 showing a procedure of a trouble handling operation by an employee using the online system according to the embodiment.
FIG. 11 is a sequence diagram 2 showing a procedure of a trouble handling operation by an employee using the online system according to the embodiment.
FIG. 12 is a sequence diagram 3 showing a procedure of a trouble handling operation by an employee using the online system according to the embodiment.
[Explanation of symbols]
1 transaction server
2 Employee terminal
3 Authentication service server
4 Customer terminals
5 Communication network
6. Wireless communication network
7 LAN
101 Communication processing unit
102 Transaction Processing Department
103 Customer Information Database
104 Market Database
105 Transaction Information Database
201 Communication processing unit
202 Data storage device
203 control device
204 HMI
205 Digital Camera
206 GPS sensor
301 Communication processing unit
302 User management unit
303 User Authentication Processing Unit
304 Image Database
305 Text database
306 Map data
401 communication processing unit
402 Data storage device
403 control device
404 HMI
405 digital camera
406 GPS sensor

Claims (17)

Accepting a login with a predetermined customer ID from the customer terminal;
Connecting between the customer terminal and the transaction server at the address specified by the customer terminal;
Instructing the customer terminal to take a photograph of the face of the customer;
Receiving image data of a face photograph sent from the customer terminal;
Collating the image data of the facial photograph with image data of a reference facial photograph registered in a storage device in association with the customer ID;
Transmitting to the transaction server a verification result indicating whether verification of the image data of the face photograph has been established or not. Accepting a login with a predetermined customer ID from the customer terminal;
Connecting between the customer terminal and the transaction server at the address specified by the customer terminal;
Instructing the customer terminal to take a photograph of the face of the customer;
Receiving image data of a photograph of the face of the customer sent from the customer terminal;
Collating the image data of the facial photograph with image data of a reference facial photograph stored in a storage device in association with the customer ID;
And a step of notifying the customer terminal of the failure of the verification when the verification of the image data of the face photograph is unsuccessful. Accepting a login with a predetermined customer ID from the customer terminal;
Connecting between the customer terminal and the transaction server at the address specified by the customer terminal;
Instructing the customer terminal to take a photograph of the face of the customer;
Receiving image data of a photograph of the face of the customer sent from the customer terminal, position data of the customer terminal, and transaction application data, and attaching and storing the customer ID and the time stamp in a storage device;
Collating the image data of the facial photograph with image data of a reference facial photograph stored in a storage device in association with the customer ID;
Transmitting to the transaction server a verification result indicating whether verification of the image data of the face photograph has been established or not. Accepting a login with a predetermined customer ID from the customer terminal;
Connecting between the customer terminal and the transaction server at the address specified by the customer terminal;
Instructing the customer terminal to take a photograph of the face of the customer;
Receiving image data of a photograph of the face of the customer sent from the customer terminal, position data of the customer terminal, and transaction application data, and attaching and storing the customer ID and the time stamp in a storage device;
Collating the image data of the facial photograph with image data of a reference facial photograph stored in a storage device in association with the customer ID;
And a step of notifying the customer terminal of the failure of the verification when the verification of the image data of the face photograph is unsuccessful. Receiving a login with a predetermined employee ID from an employee terminal;
Receiving a transaction confirmation request from the employee terminal, which specifies a customer ID, transaction conditions, and date and time;
Reading the position data of the customer terminal at the time of applying for the transaction, which is stored in association with the customer ID, the transaction condition, and the date and time from the storage device in response to the transaction confirmation request;
Extracting, from a map data storage device, map data of an area on a map corresponding to the position data, and creating transaction point map data combining marks indicating points corresponding to the position data;
Transmitting the transaction point map data to the employee terminal. Receiving a login with a predetermined employee ID from an employee terminal;
Receiving a transaction confirmation request from the employee terminal, which specifies a customer ID, transaction conditions, and date and time;
Reading the position data of the customer terminal at the time of applying for the transaction, which is stored in association with the customer ID, the transaction condition, and the date and time from the storage device in response to the transaction confirmation request;
Extracting, from a map data storage device, map data of an area on a map corresponding to the position data, and creating transaction point map data combining marks indicating points corresponding to the position data;
In response to the transaction confirmation request, reading image data of a photograph of the customer's face stored in association with the customer ID, transaction conditions, and date and time from the storage device;
Transmitting the transaction point map data and the image data of the photograph of the customer's face to the employee terminal. Receiving image data of a photograph of the face of the employee sent from the employee terminal;
Collating the image data of the facial photograph with image data of a reference facial photograph stored in a storage device in association with the employee ID;
7. The network connection service method according to claim 5, further comprising the step of notifying the employee terminal that the collation is unsuccessful when the collation of the image data of the face photograph is unsuccessful. A communication processing unit that is connected to the communication network and mediates communication between the customer terminal and the transaction server;
An image data storage device for storing image data of a customer's reference face photograph in association with a customer ID;
An image data matching unit that matches image data of a face photograph of the customer sent from the customer terminal with image data of a reference face photograph of the customer stored in the image data storage device,
A network connection service device, wherein a comparison result by the image data matching unit is transmitted to the transaction server through the communication processing unit. A communication processing unit that is connected to the communication network and mediates communication between the customer terminal and the transaction server;
An image data storage device for storing image data of a customer's reference face photograph in association with a customer ID;
An image data matching unit that matches image data of a face photograph of the customer sent from the customer terminal with image data of a reference face photograph of the customer stored in the image data storage device,
The network connection service device, wherein when the collation by the image data collating unit is not established, the customer terminal is notified of the unsuccessful collation through the communication processing unit. A communication processing unit that is connected to the communication network and mediates communication between the customer terminal and the transaction server;
A data storage device that receives image data of a face photograph for each transaction sent from the customer terminal, position data of the customer terminal, and transaction application data, and attaches and stores a customer ID and a time stamp;
An image data collating unit for collating the image data of the customer's face photo sent from the customer terminal with the image data of the customer's reference face photo stored in the data storage device in advance,
A network connection service device, wherein a comparison result by the image data matching unit is transmitted to the transaction server through the communication processing unit. A communication processing unit that is connected to the communication network and mediates communication between the customer terminal and the transaction server;
A data storage device for storing the image data of the photograph of the face of the customer, the position data of the customer terminal, and the customer ID that are sent from the customer terminal at the time of the customer's transaction application, with a time stamp attached;
An image data matching unit that matches image data of a face photograph of the customer sent from the customer terminal with image data of a reference face photograph of the customer registered in advance in the data storage device,
The network connection service device, wherein when the collation by the image data collating unit is not established, the customer terminal is notified of the unsuccessful collation through the communication processing unit. A communication processing unit that communicates with employee terminals through a communication network;
A user data storage device for storing the date and time, customer ID, position data of the customer terminal at the time of the transaction, and image data of a photograph of the face of the customer for each transaction;
A map data storage device for storing map data of a predetermined area;
A data retrieval unit that retrieves the user data storage device for a transaction confirmation request that specifies a customer ID and a transaction date and time from the employee terminal, and reads the position data of the customer terminal at the corresponding transaction date and time;
A transaction point map creating unit that extracts, from the map data storage device, map data of an area on a map corresponding to the position data, and creates transaction point map data combining marks indicating points corresponding to the position data; ,
A user image search unit that reads out image data of a photograph of the customer's face at the relevant transaction date and time from the user data storage device in response to the transaction confirmation request;
A network connection service device, wherein the transaction point map data and the image data of a photograph of the customer's face at the corresponding transaction date and time are transmitted to the employee terminal in response to the transaction confirmation request. An employee image data storage device for storing image data of a face photograph of an employee in association with the employee ID;
An employee image collating unit for collating image data of a face photograph of the employee sent from the employee terminal with image data stored in the employee image data storage device in association with the employee ID,
13. The network connection service device according to claim 11, wherein when the collation of the image data of the photograph of the employee's face by the employee image collating unit is unsuccessful, the employee terminal is notified of the unsuccessful collation. Processing for connecting to a predetermined authentication service server via a communication network;
A process of accessing a transaction providing server at a predetermined address through the communication network;
A process of receiving a selection input on the transaction screen,
A process of receiving an input of a customer ID and a transaction condition;
A process for receiving an instruction to transmit a transaction condition;
A process of photographing with a digital camera when receiving a transmission instruction of the transaction condition,
A computer program for causing a computer to execute the process of transmitting the customer ID, transaction conditions, and image data from a digital camera. Processing for connecting to a predetermined authentication service server via a communication network;
A process of accessing a transaction providing server at a predetermined address through the communication network;
Accepting a transaction start request;
A process of receiving an input of a customer ID and a transaction condition;
A process for receiving an instruction to transmit a transaction condition;
When receiving a transmission instruction of the transaction conditions, a process of shooting by the digital camera,
A process of acquiring position data from a GPS sensor when receiving a transmission instruction of the transaction condition;
A program for causing a computer to execute a process of transmitting the customer ID, transaction conditions, image data and position data from a digital camera, and a computer. Accepting a transaction confirmation request;
A process of receiving input of an employee ID and a transaction to be confirmed;
A process of receiving a transaction confirmation request transmission instruction,
A process of accessing a predetermined authentication service server via a communication network;
When receiving a transmission instruction of the transaction confirmation request, a process of shooting with a digital camera,
Transmitting an image of the employee ID and image data from the digital camera to the authentication service server. Accepting a transaction confirmation request;
A process of receiving input of an employee ID and a transaction to be confirmed;
A process of receiving a transaction confirmation request transmission instruction,
A process of accessing a predetermined authentication service server via a communication network;
When receiving a transmission instruction of the transaction confirmation request, a process of shooting with a digital camera,
A process of acquiring position data from a GPS sensor when receiving a transmission instruction of the transaction confirmation request;
A computer program for causing a computer to execute a process of transmitting the employee ID, image data from a digital camera, and position data to the authentication service server.

Images