JP2004030217A - Authentication method and apparatus, and settlement method using the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technique for authentication and settlement when an electronic wallet is used on condition that security is ensured even in the absence of a dedicated authenticating apparatus. <P>SOLUTION: A user accesses a common server by using a WWW browser on a user terminal (S10). The common server sends a user ID, an affiliated store ID, a specific code, a specific code validity time, etc., to the user terminal (S12). The user presents the information to a salesclerk of the affiliated store (S14). The salesclerk of the affiliated store inputs the specific code to an affiliated store terminal to access the common server (S16). The common server sends the user ID, affiliated store ID, specific code validity time, etc., to the affiliated store terminal (S18). The salesclerk of the affiliated store compares those pieces of information with the display contents of the user terminal and authenticates the user (S20) when they match with each other to deal the user as if a prepaid card etc., were presented. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a settlement technique when using an electronic wallet such as a prepaid point or a service point having exchange value with a product as well as cash. In particular, it relates to a technology for authenticating a person who uses an electronic wallet.
[0002]
[Prior art]
When purchasing merchandise or receiving service at a store or the like, cash, a prepaid card, a credit card, or the like is used for settlement. A prepaid card or a credit card has a function of being exchangeable for a product like cash, and can be used to purchase a product or the like without having cash, and thus is excellent in convenience. Generally, these methods are based on the unique information recorded on the recording medium on the card, and if necessary, further acquire user information from a financial institution information network to perform settlement. However, since these cards need to be presented when used, they need to be carried. Therefore, there is a risk of loss or theft, as with cash. In addition, counterfeiting may occur for stores and card companies. In order to solve these problems, a non-card is desirable.
[0003]
As a payment method using a non-card, there is payment using a barcode. In addition, in the situation where mobile phones have become widespread in recent years and many people own them, if these can be used instead of cards, convenience is further improved. Therefore, in the prior art, after a user sends a settlement request from a mobile phone to a settlement center via a network, the settlement center performs authentication and settlement, and transmits settlement completion information as barcode information to the user's mobile phone. I do. After that, in the store, the settlement information is transmitted by reading the barcode information with the barcode reader, and the delivery of the product or the service is performed. The above prior art is disclosed in, for example, JP-A-2002-24730.
[0004]
[Problems to be solved by the invention]
Under such circumstances, the inventor has come to recognize the following problem. The conventional system allows the user to settle the card using the mobile phone normally possessed, so that the user does not need to carry a prepaid card or a credit card, and the convenience is improved. However, there is a problem that stores and card companies need to manufacture and install a dedicated barcode reader in order to use this system. On the other hand, in the case of performing non-card payment by a method not using a barcode, for example, a method of authenticating a user with a password has a problem that the password is generally stolen by a third party and security is not sufficient.
[0005]
The present invention has been made in view of such a situation, and an object of the present invention is to provide a settlement technique when an electronic wallet such as a prepaid point or a service point having exchange value with a commodity is used like cash. In particular, the present invention provides a technology for authenticating a person who uses an electronic wallet when there is no such card and there is no dedicated device such as a barcode reader. Further, the present invention provides a technique that does not lower security in user authentication when there is no such card and there is no dedicated device such as a barcode reader.
[0006]
[Means for Solving the Problems]
One embodiment of the present invention relates to an authentication method. The method includes the steps of: acquiring identification information known to the user from the user; setting a specific code having a time limit based on the identification information; and outputting the code to the user. Acquiring a specific code from the authenticator, and outputting to the authenticator information on the authenticated person corresponding to the specific code in order to assist the authenticator in identifying the authenticated person. In this method, the validity time of the specific code is determined by assuming the time normally required for the certifier to specify the authenticatee after outputting to the authenticatee. The above is realized, for example, by the processing of the “common server”.
[0007]
The “valid time” is a time during which the specific code functions, but also includes a single access.
From the “assumed”, a predetermined time may be added to the effective time. For example, extra time for a task performed by a human.
According to this method, it is possible to further enhance security by using not only known identification information but also information having a time limit for recognition of the person to be authenticated.
[0008]
The specific code may be set including information on the effective area, and the information on the person to be authenticated may be output to the certifier included in the effective area.
The “effective area” is an area where the specific code functions, and also includes a predetermined store where the specific code functions.
According to this method, it is possible to further increase the security by adding a spatial concept of an effective area to information having a time limit used for recognition of a person to be authenticated.
[0009]
Another embodiment of the present invention relates to an authentication method. The method includes the steps of: obtaining, from a subject, predetermined information relating to the subject and a specific code having a time limit set by the common server; outputting the specific code to the common server; Acquiring the authenticated person information from the common server, and identifying the authenticated person based on the predetermined information and the authenticated person information. In this method, the validity time of the specific code may be determined by assuming a time normally required for the identification target to specify the identification target after the identification target acquires. The above is realized, for example, by the processing of the “certifier terminal”.
The specific code is set including information on the valid area, and when the specific code is included in the valid area, the subject information may be acquired from the common server.
[0010]
When the certifier accumulates points in the point card having exchange value with the product at a predetermined store, the person to be authenticated may be specified even if he does not have the point card. When the person to be authenticated uses a point on the point card having exchange value with a product at a predetermined store, the person to be authenticated may be specified without having the point card.
The “point” is a unit having an exchange value with a product like money. For example, prepaid points and service points.
The “product” includes services and the like.
According to this method, even if the user does not have a point card, the point holder can be recognized while ensuring high security.
[0011]
Yet another embodiment of the present invention relates to an authentication device. This device includes an authenticator terminal operated by the authenticated person, an authenticator terminal operated by the authenticator, and information required when the authenticator terminal identifies the authenticated person. And a common server that outputs to In this device, the authenticator terminal acquires the subject information from the common server within the validity time of the specific code based on the specific code having the timedness acquired by the subject terminal from the common server, and The person to be authenticated may be specified based on the user information.
The certifier terminal acquires the authenticatee information from the common server within the effective area within the effective time of the specific code based on the specific code having the timedness and the effective area obtained by the authenticated terminal from the common server, The person to be authenticated may be specified based on the information on the person to be authenticated.
[0012]
Yet another embodiment of the present invention relates to a settlement method. This method comprises the steps of: performing authentication of a person to be authenticated based on the authentication method according to any one of claims 1 and 2; acquiring payment information on the person to be authenticated from the authenticator; Making a payment based on the payment.
Yet another embodiment of the present invention relates to a settlement method. This method includes the steps of: performing authentication of a person to be authenticated based on the authentication method according to any one of claims 3 and 4; outputting payment information of the person to be authenticated to a payment server; Acquiring the settlement completion signal after the settlement by the settlement server.
In addition, any combination or rearrangement of the above-described components, and those expressing the present invention as a method, a computer program, or the like are also effective as embodiments of the present invention.
[0013]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a configuration diagram of a settlement system 100 according to the embodiment. The settlement system 100 has a user terminal 10, a member store terminal 12, and a common server 14.
The user terminal 10 is a terminal operated by a user who uses an electronic wallet such as a prepaid point. The user terminal 10 has a function of accessing the common server 14 via a network. For example, it is a mobile phone terminal or a PDA. Further, the user terminal 10 does not need to be owned by the user, and may be installed in a store.
[0014]
The affiliated store terminal 12 is a terminal used when the affiliated store performs authentication and settlement for a user who uses the electronic wallet. The member store terminal 12 has an interface for inputting predetermined information and a function of accessing the common server 14 via a network. A general-purpose personal computer (hereinafter, referred to as “PC”) may be used as long as it has these functions, and need not be a dedicated device.
[0015]
The common server 14 manages the ID and the number of balance points of the electronic wallet owned by the user, and transmits information necessary for authentication and settlement to those in response to requests from the user terminal 10 and the member store terminal 12. Device. FIG. 2 is a configuration diagram of the common server 14. The common server 14 includes a login authentication unit 30, a specific code input unit 32, an information output unit 34, an authentication information confirmation unit 36, a payment information confirmation unit 38, and a completion information output unit 40. This configuration can be realized in terms of hardware by the CPU, memory, or other LSI of any computer, and can be realized in terms of software by a program or the like loaded in the memory. The functional blocks are drawn. Therefore, it is understood by those skilled in the art that these functional blocks can be realized in various forms by hardware only, software only, or a combination thereof. Further, it is not necessary for one device to have these functions, and a plurality of devices may be used.
[0016]
The login authentication unit 30 receives a login request from the user terminal 10 and performs authentication. The specific code input unit 32 receives a specific code from the member store terminal 12. The information output unit 34 outputs predetermined information to the user terminal 10 or the member store terminal 12 according to the results of the login authentication unit 30 and the specific code input unit 32. The predetermined information will be described later. The authentication information confirmation unit 36 receives information on the completion of the authentication from the member store terminal 12, and confirms this. After the confirmation by the authentication information confirmation unit 36, the payment information confirmation unit 38 receives the information related to the payment from the affiliated store terminal 12, and performs a predetermined process. The completion information output unit 40 outputs completion information to the member store terminal 12 when the settlement is completed.
[0017]
FIG. 3 is a diagram showing a procedure of settlement in the use of prepaid points. It is assumed that the user already has the user ID of the prepaid point and the amount corresponding to the user ID has been transferred to a predetermined account. A user purchases a product using a prepaid point at a store affiliated with the prepaid point service.
[0018]
The user accesses the login authentication unit 30 in the common server 14 using the WWW browser of the user terminal 10. At this time, the user inputs a user ID, a password, and an ID of a member store to be used (S10). This is shown in FIG. When the user terminal 10 successfully logs in to the common server 14, the information output unit 34 in the common server 14 transmits the user ID, the member store ID, the specific code, the specific code valid time, the prepaid point balance, and the like from the database to the user terminal 10. (S12). FIG. 5 is a diagram showing a screen of the user terminal 10 which receives the above information and displays it. Here, the specific code is a code sequence having a certain length determined from a user ID, a member store ID, time, and the like. Here, the specific code received by the user terminal 10 at this time is valid only in the member store to be used in terms of location, and only temporally within the specific code valid time. The user presents this information to the clerk of the member store (S14).
[0019]
If the member store ID is correct, the clerk of the member store inputs the specific code to the user interface of the member store terminal 12, and accesses the specific code input part 32 of the common server 14 (S16). FIG. 6 is a diagram showing a display screen of the member store terminal 12. Here, the specific code input unit 32 may request the member store terminal 12 for authentication information about the member store such as a password. The information output unit 34 in the common server 14 transmits the user ID, the member store ID, the specific code valid time, the prepaid point balance, and the like corresponding to the specific code from the database to the member store terminal 12 (S18). FIG. 7 is a display screen of the member store terminal 12. The clerk of the member store compares the information with the display content of the user terminal 10 and, if they match, authenticates the user and treats the user in the same manner as a prepaid card is presented (S20). At that time, the clerk at the member store selects the Yes button 20 in FIG. 7 and transmits the information to the authentication information confirmation unit 36 in the common server 14 (S22).
[0020]
The member store terminal 12 transmits the user ID, the member store ID, the specific code, and the number of payment points to the payment information confirmation unit 38 in the common server 14 (S24). The number of payment points is the number of prepaid points used by the user for purchasing a product. Further, these pieces of information may be transmitted not to the common server 14 but to a separately existing payment server. The payment information confirmation unit 38 subtracts the number of payment points from the number of prepaid points corresponding to the user ID, and completes the payment. The completion information output unit 40 in the common server 14 transmits the settlement completion information to the member store terminal 12 (S26), and thereafter, the member store delivers the product to the user.
[0021]
As described above, according to the present embodiment, when using an electronic wallet such as a prepaid point having exchange value with goods as well as cash, there is no such card, and a dedicated device such as a barcode reader is also used. If not, a specific code which is randomly generated and has a valid time and a region is used, so that even if a general-purpose PC or the like is used, it is possible to perform authentication while ensuring security.
[0022]
The present invention has been described based on the embodiments. This embodiment is an exemplification, and it is understood by those skilled in the art that various modifications can be made to the combination of each component and each processing process, and that such modifications are also within the scope of the present invention. . Here are some examples.
[0023]
In the embodiment, the case where the prepaid points are used has been exemplified. However, the use of authentication technology is not limited to this case. For example, authentication technology can be used when accumulating and using service points. The point is that the user needs to be recognized, and the use of the specific code can be used if security is enhanced.
[0024]
【The invention's effect】
According to the present invention, when using an electronic wallet such as prepaid points and service points that have exchange value with goods as well as cash, when these cards are not present and there is no dedicated device such as a barcode reader, It is possible to authenticate the person using the electronic wallet. Further, in the case where these cards are not provided and there is no dedicated device such as a barcode reader, it is possible to prevent security in user authentication from being lowered.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a settlement device according to an embodiment; FIG. 2 is a diagram showing a configuration of a common server in the device of FIG. 1;
FIG. 3 is a diagram showing a procedure of settlement by the apparatus of FIG. 1;
FIG. 4 is a view showing a display screen of a user terminal requesting a specific code by the apparatus of FIG. 1;
FIG. 5 is a view showing a display screen of a user terminal which has obtained a specific code by the apparatus of FIG. 1;
6 is a diagram showing a display screen of a member store terminal requesting information on a person to be authenticated by the apparatus shown in FIG. 1;
FIG. 7 is a diagram showing a display screen of a member store terminal performing collation by the apparatus of FIG. 1;
[Explanation of symbols]
Reference Signs List 10 user terminal, 12 member store terminal, 14 common server, 20 Yes button, 22 No button, 30 login authentication section, 32 specific code input section, 34 information output section, 36 authentication information confirmation section, 38 settlement information confirmation section, 40 Completion information output unit, 100 payment system.

Claims (10)

Obtaining identification information known to the subject from the subject;
Setting a specific code having a time limit based on the identification information, and outputting it to the authenticated person;
Obtaining the specific code from a certifier;
Outputting the authenticated person information corresponding to the specific code to the authenticated person in order to support the identification of the authenticated person in the authenticator,
The authentication method according to claim 1, wherein the validity time of the identification code is determined by assuming a time normally required for the certifier to identify the authenticatee after outputting to the authenticatee. 2. The authentication method according to claim 1, wherein the specific code is set including information on the effective area, and the information on the person to be authenticated is output to the certifier included in the effective area. Acquiring predetermined information relating to the subject and a specific code having a time limit set by the common server from the subject,
Outputting the specific code to the common server;
Obtaining the subject information corresponding to the specific code from the common server;
Identifying the subject to be authenticated based on the predetermined information and the subject information,
The authentication method according to claim 1, wherein the validity time of the specific code is determined by assuming a time normally required for specifying the subject after the subject has acquired the specified code. The authentication method according to claim 3, wherein the specific code is set including information on an effective area, and when the specific code is included in the effective area, the authentication target information is acquired from the common server. When the accredited person accumulates points in a point card having exchange value with a product at a predetermined store, the accredited person is specified even if the accredited person does not have the point card. Item 5. The authentication method according to any one of Items 1 to 4. When the authenticated person uses points on a point card having exchange value with a product at a predetermined store, the authenticated person is specified even if the point card is not possessed. Item 5. The authentication method according to any one of Items 1 to 4. A subject terminal operated by the subject;
A certifier terminal operated by the certifier,
A common server that outputs information required when the certifier terminal specifies the authenticatee to the certifier terminal and the authenticatee terminal,
The authenticator terminal acquires the subject information from the common server within the valid time of the specific code based on the timed specific code acquired by the user terminal from the common server. An authentication device for identifying the person to be authenticated based on authenticator information. The authenticator terminal is configured to be authenticated by the common server within the valid area within the valid time of the specific code based on the specific code having the time period and the valid area obtained by the authenticated terminal from the common server. The authentication device according to claim 7, wherein user information is obtained, and the user is specified based on the user information. Performing authentication of a person to be authenticated based on the authentication method according to any one of claims 1 and 2;
Obtaining payment information about the subject from the certifier;
Performing a payment based on the payment information;
A settlement method comprising: Performing authentication of a person to be authenticated based on the authentication method according to any one of claims 3 and 4;
Outputting payment information of the subject to the payment server;
After settlement by the settlement server, obtaining a signal of settlement completion,
A settlement method comprising:

Images