JP2004021663A - Individual authentication method for commerce system using network - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enhance the security of individual authentication in a commerce system. <P>SOLUTION: In the commerce system for performing an individual authentication by use of a credit card number and a personal identification number, authentication by sign image data is added to the individual authentication method in addition to the personal identification number. A transactor inputs the credit card number and personal identification number through a personal terminal and a sign through a sign input device, and transmits them to a customer agent. The computer of the customer agent is connected to the authentication computer of a card company through a network, and the authentication computer, which stores the personal identification number to the credit number and the image data of the sign, performs the credit check with the authentication data of the transactor. When the data are mutually matched, the sign image data registered in the authentication computer is replaced by the sign image data transmitted from the transactor, whereby the authentication is completed, and a commercial transaction is then performed. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a personal authentication method for commercial transactions using a credit card, and more particularly to a personal authentication method for enhancing authentication security between a trader and a business partner / card company.
[0002]
[Prior art]
In recent years, with the rapid spread of the Internet, a commercial transaction system for authenticating an individual using a credit card number and a password has been put into practical use.
[0003]
In this main system, a trader inputs and transmits a credit card number and a password from a Web browser, and a credit card number and a password are used by an authentication computer of the card company to perform credit check and conduct business transactions.
[0004]
[Problems to be solved by the invention]
In the conventional commercial transaction system, security is very weak, and illegal transactions can be performed by leaking a personal identification number.
[0005]
An object of the present invention is to provide a method for enhancing personal authentication security in a commercial transaction system.
[0006]
[Means for Solving the Problems]
In order to achieve the above object, in the present invention, a signature is registered as image data together with a personal identification number in a database of an authentication computer of a card company during a credit card issuance procedure.
[0007]
In conducting a commercial transaction, a trader inputs a credit card number and a password from the Web screen, captures the image as image data from a sign input device into a terminal, and transmits the credit card number + a password + sign image data.
[0008]
The computer of the business partner is connected to the authentication computer of the card company via a network, and performs a credit check on the authentication data transmitted from the business partner.
[0009]
If the data match, an approval completion is transmitted to the business partner, and the commercial transaction is performed.
[0010]
In order to prevent signature authentication failure due to aging (changes in handwriting, etc.), the card company computer notifies the trader of the completion of approval and updates the database with the latest signature image data sent from the trader. .
[0011]
As a result, it is possible to prevent unauthorized transactions due to leakage of the personal identification number.
[0012]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0013]
FIG. 1 is a block diagram showing an embodiment of a commercial transaction system to which the present invention is applied. In FIG. 1, reference numeral 10 denotes a supplier computer, reference numeral 20 denotes a terminal used by the supplier, reference numeral 30 denotes a card company computer, reference numeral 40 denotes a network (such as the Internet), reference numerals 50 to 60 refer to the supplier computer 10 and the supplier terminal 20 through the network. A communication line 70 connects the supplier computer 10 and the card company computer 30.
[0014]
A signature input device 21 is connected to the transaction terminal, and the card company computer 30 has an authentication database. The signature input device 21 creates signature image data by reading a signature input by hand using an exclusive input pen as image data. The signature image data and the password are used as authentication data.
[0015]
The card company computer 30 has an external storage device 31. The external storage device 31 is used to store owner information, a card number, a personal identification number, and signature image data.
[0016]
Next, the commercial transaction processing by the commercial transaction system will be described with reference to the flowchart of FIG. FIG. 2 shows a process in which a trader approves that he is a valid credit card user and conducts a commercial transaction using a credit card with a business partner until the commercial transaction is completed.
[0017]
When a trader carries out a commercial transaction using the Internet, he enters a card number and a password from a trader terminal 20 using a Web browser or dedicated software (step 101), and uses a dedicated input pen to input a signature. Then, the card number, the personal identification number, and the signature image data are transmitted to the supplier computer 10 as authentication data (step 103).
[0018]
Upon receiving the authentication data (step 104), the supplier computer 10 transmits the authentication data received from the trader to the card company computer 30 for credit card authentication (step 105).
[0019]
When the card company computer 30 receives the authentication data from the supplier computer 10 (step 106), the card company computer 30 reads the personal identification number and signature image data from the credit card number from the authentication database 31 (step 107), and obtains the password of the received authentication data. The number is compared with the signature image data (step 108) to check the credit.
[0020]
If the data match, in order to prevent signature authentication failure due to secular change (change in handwriting or the like), the signature image data sent from the trader is used as the latest signature and the authentication database is updated (step 109). After the update is completed, the authentication completion is transmitted to the supplier computer (step 110). When the authentication completion is received, the supplier computer 10 transmits an authentication completion notification to the trader terminal 20 (step 111). (Step 112).
[0021]
If the data does not match, an authentication refusal is transmitted to the supplier computer 10 (step 114). When the supplier computer 10 receives the rejection, it transmits an authentication rejection notification to the trader terminal 20 (step 115). I do.
[0022]
Although the embodiment of the present invention has been described above, the present invention can be used not only for commercial transactions using the Internet but also for personal authentication at the time of payment by a credit card at a store.
[0023]
【The invention's effect】
As described above, according to the present invention, although unauthorized transactions can be easily performed by leaking a personal identification number in commercial transactions, security against unauthorized transactions can be enhanced by adding authentication using signature image data.
[Brief description of the drawings]
FIG. 1 is a system configuration block diagram illustrating an embodiment of the present invention.
FIG. 2 is a flowchart showing a procedure of an authentication process in FIG. 1;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 ... Business partner computer, 20 ... Transaction terminal, 30 ... Card company computer, 50, 60, 70 ... Communication line, 31 ... External storage device, 21 ... Signature input device.

Claims (1)

In a personal authentication method of a commercial transaction system using a network using a commercial transaction system in which a trader device, a supplier device, and an authentication device are connected to each other via a network,
In advance, the authentication device stores a credit number, a personal identification number, and signature image data indicating a trader's signature in association with each other for each credit card used for commercial transactions,
The transaction device receives an input of a credit card credit number used in a transaction to be performed, a password number and a sign image data indicating a sign image data, and receives the accepted credit number, a password number and a sign image data. , Sending to the supplier device,
The supplier device transmits the transmitted credit number, password and signature image data to the authentication device,
The authentication device compares the transmitted credit number, personal identification number and signature image data with a previously stored credit number, personal identification number and signature image data, and performs an authentication process for the individual identified as a result of the comparison. As a result of the authentication, if the transaction is determined to be fraudulent, the stored signature image data is rewritten to the transmitted signature image data.

Images