JP2004086536A - Transaction information managing system and payment relating information managing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To safely and efficiently give/receive information between service providing systems while preventing the leakage of unnecessary individual information to suppliers when services are provided. <P>SOLUTION: Trade information generated by a primary service providing system is acquired, and the trade information and identification information specific thereto are coordinated with each other and stored in storage means. On the other hand, when the identification information is acquired from a secondary service providing system, trade information coordinated with identification information being the same thereas is extracted from the storage means and delivered to the secondary service providing system. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a transaction information management system and a payment-related information management system, and more particularly to a transaction information management system and a payment-related information management system for managing information safely and efficiently.
[0002]
[Prior art]
One of the services provided using the Internet is Internet mail order. The user can obtain a desired product without going directly to the store by accessing the Internet mail order site from his / her own terminal.
[0003]
Credit card settlement is most commonly used as a method of collecting money at an Internet mail-order site. Many operators of Internet mail-order sites outsource payments to specialized payment companies, such as credit card companies.
[0004]
When receiving an order to purchase a product at the Internet mail-order site, obtain a credit card number online from the user who applied and send it to the above-mentioned settlement company, and obtain the examination result regarding the payment ability from the above-mentioned settlement company After that, the order merchandise is delivered to the user, so that reliable payment collection is secured. Usually, the credit card number is transmitted from the user after being subjected to an encryption process so that only the settlement company can decrypt it.
[0005]
[Problems to be solved by the invention]
However, from the viewpoint of a user using the Internet mail-order site, there is a concern that the credit card number transmitted for disclosure only to the settlement company is decrypted and misused at the stage of passing through the operator.
[0006]
[Object of the invention]
In order to solve the problems described above, the present invention provides a system in which, when the order receiving service and the settlement service for the resulting price are performed by different businesses, unnecessary personal information is leaked to each of the businesses when the service is provided. It is an object of the present invention to prevent information from being transmitted and to realize safe and efficient information exchange between systems that provide both services.
[0007]
[Means for Solving the Problems]
In order to solve the above-mentioned problem, the invention according to claim 1 includes an information storage unit, a communication unit with an external system, and an information processing unit that controls an operation of each of the units, and the processing unit is a user. A1 step of acquiring, via the above-mentioned communication means, transaction information generated by the primary service providing system along with the provision of the primary service from the primary service providing system that provides the primary service to the primary service providing system; B1 step of generating unique identification information for identification.
[0008]
Then, the processing means transmits the acquired transaction information to the primary service providing system via the communication means, and stores the identification information in the storage means in association with the generated identification information. Step d1 is performed.
[0009]
Further, the processing means includes an e1 step of acquiring the identification information via the communication means from a secondary service providing system for providing the user with a secondary service based on the transaction information; The f1 step of reading the transaction information associated with the identification information obtained from the system from the storage unit and the g1 step of transmitting the read transaction information to the secondary service providing system via the communication unit are executed.
[0010]
According to a second aspect of the present invention, there is provided an information storage unit, a communication unit with an external system, and an information processing unit for controlling the operation of each of the above units. A2 step of acquiring, via the above-mentioned communication means, the price-related information generated by the order-receiving system in accordance with the provision of the order-receiving service from the order-receiving system for providing the information, and a unique identification for identifying the acquired price-related information. B2 step of generating information.
[0011]
The processing means includes a step c2 of storing the acquired price-related information in association with the generated identification information and storing the identification information in the storage means; And transmitting d2 to the system.
[0012]
Further, the processing means includes an e2 step of obtaining the identification information via the communication means from a payment system that provides the user with a payment service based on the payment-related information; and the identification information obtained from the payment system. Step f2 of reading out the payment-related information associated with the payment means from the storage means described above, and step g2 of transmitting the read payment-related information to the settlement system via the communication means described above.
[0013]
The “product” here is not limited to tangible personal property, but includes a wide range of goods whose value can be converted into money, such as image data and music data.
[0014]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0015]
Prior to a specific description of the system configuration, the relationship between the business operator and the transaction manager and the relationship between the user and the transaction manager in the present embodiment will be described.
[0016]
The company in the present embodiment means a company that has registered a predetermined business member with the transaction manager. The business member registration includes a business member registration as an order receiving company and a business member registration as a settlement company. The former is a registration based on the premise that a user will be introduced to a product through a site operated by the user and that a service to sell the product will be provided, and retailers that sell and ship products such as books and clothes as a business. It is assumed that the company is the target. On the other hand, the latter is a registration on the premise that a payment service for the price of a product for which a purchase application has been made through the above-mentioned ordering contractor's site is performed, and is assumed to be a financing company such as a credit card company. . A company that performs business member registration must select either business member registration as a contractor or business member registration as a settlement company according to the business form.
[0017]
In addition, the number of the above-mentioned businesses is expanded at any time by the business member registration of a new company, but for convenience of explanation, in the present embodiment, the business 20A registered as an order receiving business and the business 20A The description proceeds assuming that only the operator 20B and the operator 30H and the operator 30I registered as members of the settlement operator exist.
[0018]
On the other hand, a user in the present embodiment means an individual who has registered a user member with the transaction manager. After the completion of the user member registration, the transaction manager issues unique authentication information (ID, password) for each site operated by the business currently registered as a business member. This authentication information is issued differently for each system. This is because if this is a single entity, there is a concern that a malicious business will use the authentication information to illegally log in to a site operated by another business. However, in the present embodiment, it is necessary to repeat the authentication information input procedure within the single sign-on validity period to be described later, even when continuously using sites operated by a plurality of operators. Absent. This point will be described in detail later in the section on "single sign-on service".
[0019]
Next, the overall configuration of the present embodiment will be described with reference to the block diagram of FIG.
[0020]
This embodiment is configured by connecting a user terminal 10, an order receiving system 20, a settlement system 30, and a transaction information management system 40 via the Internet 50. Although only one user terminal 10 is shown in FIG. 1 for convenience of explanation, it is assumed in this embodiment that a plurality of user terminals 10 exist. In addition, as described above, in the present embodiment, it is assumed that only the operator 20A, the operator 20B, the operator 30H, and the operator 30I are currently registering as an operator member. Includes an order receiving system 20A operated by a business 20A and an order receiving system 20B operated by a business 20B. The settlement system 30 includes a settlement system 30H operated by a business 30H and a settlement system operated by a business 30I 30I.
[0021]
This will be described in more detail.
[0022]
The user terminal 10 is a personal computer owned by the user who has performed the user member registration, and includes a memory, a hard disk, a CPU, a computer display, a pointing device, a router, and the like.
[0023]
The transaction information management system 40 includes a storage unit 41, a communication unit 42, and a processing unit 43.
[0024]
The storage unit 41 is, for example, a memory, a register, or a hard disk, and it does not matter whether the storage unit 41 is physically a single unit or a plurality of units.
[0025]
The storage means 41 includes an authentication information database 41a and a transaction information database 41b.
[0026]
The authentication information database 41a stores, for each user, user identification information, authentication information corresponding to a system operated by each business operator, and a single sign-on (SSO) identification ID as needed. FIG. 2 shows the data structure of the authentication information database 41a. The left side of the figure shows user identification information unique to each user. This user identification information is the primary key of the database. The center of the figure shows authentication information corresponding to the order receiving system 20A, the order receiving system 20B, the settlement system 30H, and the settlement system 30I. As described above, each of the authentication information is an ID and a password required to log in to each of the above-described systems, and is issued upon user member registration. After being issued, the authentication information is stored in the authentication information database 41a in association with the user identification information of the user, and is transmitted to each of the order receiving system 20 and the settlement system 30.
[0027]
The right side of the figure shows a single sign-on (SSO) identification ID associated with the user identification information. This single sign-on (SSO) identification ID identifies that the user is in a login state in any of the systems (order receiving system 20A, order receiving system 20B, settlement system 30H, settlement system 30I) operated by the business operator. The validity period (for example, one hour after generation) is predetermined. Therefore, after the validity period has elapsed, it is set so as to be deleted from the authentication information database 41a. For example, as shown in FIG. 2, the user identification information of “Y1001” and “Y1003” is associated with the single sign-on (SSO) identification information, while the user identification information of “Y1002” and “Y1004” is associated. Not associated with identification information. This means that the user corresponding to “Y1002” and “Y1004” has been deleted because the single sign-on (SSO) identification information has not been generated or the expiration date has passed.
[0028]
The transaction information database 41b stores associations between transaction identification information, transaction identification IDs, and payment status. FIG. 3 shows the data structure of the transaction information database 41b. The left side of the figure shows transaction information. The transaction information includes the price-related information relating to the price of the ordered product and the account number of the payment transfer account owned by the order receiving system 20. When an order is purchased in the order receiving system 20, the order is received. It is generated on the system 20 side. The transaction identification ID is a unique character string generated each time transaction information is acquired from the order receiving system 20. Further, the payment information is information for specifying that the payment of the amount corresponding to the payment-related information of each transaction information has been completed, and there are two types of “paid” and “unpaid”. For example, the transaction identification ID of “T10034” is associated with payment information of “paid”, while the transaction identification ID of “T10134” is associated with payment information of “unpaid”. This is because the equivalent amount of the payment-related information included in the transaction information associated with “T10034” has already been deposited, while the equivalent amount of the payment-related information included in the transaction information associated with “T10034” has been deposited. Not mean.
[0029]
The communication unit 42 is, for example, a router.
[0030]
The processing unit 43 includes, for example, a central processing unit such as a CPU, a bus, and other necessary interfaces. It may include a plurality of CPUs that perform distributed processing.
[0031]
The order receiving system 20 is a server operated by a company that provides an order receiving service (primary service) to the user, and includes a memory, a hard disk, a CPU, a computer display, a pointing device, a router, and the like.
[0032]
The order receiving service provided by the order receiving system 20 is a service in which the user terminal 10 introduces a product that accepts an order for mail order, and solicits an application for purchasing the product from the user. As described above, in the present embodiment, it is assumed that there are an order receiving system 20A and an order receiving system 20B that are operated by different businesses. For example, the order receiving system 20A accepts a purchase application for clothing. While the service is provided, the order receiving system 20B may handle different kinds of commodities, or may handle the same kind of commodities, such as providing a service for accepting a purchase application for home electric appliances.
[0033]
Further, the order receiving system 20 includes an order receiving service authentication database (not shown) and an order information database (not shown).
[0034]
As shown in FIG. 4, the order receiving service authentication database stores association between user identification information and authentication information (ID, password) for each user. The association between the user identification information and the authentication information in the database is generated on the transaction information management system 40 side every time a new user is registered as a user member, and is acquired by the order receiving system 20 at any time. This is stored in the order receiving service authentication database.
[0035]
On the other hand, the order information database stores the product identification information of the product selected by the user as a purchase application target, and a delivery destination specifying item presented by the user as the delivery destination. The business operator, which is the operator of each order receiving system 20 in the present embodiment, manages the products handled by himself by attaching individual product identification information to each product.
[0036]
The payment system 30 is a server operated by a business operator that provides a payment service (secondary service) to the user, and includes a memory, a hard disk, a CPU, a computer display, a pointing device, a router, and the like. The settlement service provided by the settlement system 30 is a service that undertakes settlement processing relating to the price of the application target product based on a credit card number issued by an operator (credit company) that is an operator of the settlement system 30. It is. Therefore, in order for the user to receive the provision of the payment service, the user not only needs to perform the above-mentioned user member registration but also needs to provide the payment service provider H as the operator of the payment system 30H or the payment service provider I as the operator of the payment system 30I. Information (name, age, place of work, annual income, etc.) must be presented, and a credit card issued after undergoing necessary examinations regarding repayment ability.
[0037]
The payment system 30 includes a payment service authentication database (not shown) and a credit-related information database (not shown).
[0038]
The payment service authentication database stores the association between the user identification information and the authentication information for each user, similarly to the order receiving service authentication database described in FIG. The point that the association between the user identification information and the authentication information is accumulated as needed each time a new user member is registered is the same as in the order receiving service authentication database.
[0039]
On the other hand, the credit-related information database stores the current purchase limit of each user who has been issued a credit card from the business operator in association with the credit card number issued to the user. The business operator who has registered as a business member as a settlement company sets up a certain credit limit for each user when issuing a credit card, and reimburses the price of the product for which the user has applied within the credit amount, They will be settled once a month. Therefore, the credit amount of a certain user is set at 500,000 yen per month, and when the user has already applied for a 100,000 yen product, the current purchase limit of the user is 400,000 yen. Will be.
[0040]
Next, the operation of the present embodiment will be described separately for a single sign-on service, an order receiving service, and a settlement service.
[0041]
[Single sign-on service]
[0042]
In the present embodiment, the four business entities of the business entity 20A, the business entity 20B, the business entity 30H, and the business entity 30I are registered as the business member in the transaction information management system 40. As described above, different authentication information for logging in to the order receiving system 20A, the order receiving system 20B, the settlement system 30H, and the settlement system 30I operated by the above four companies is issued as described above. When the user logs in to the system operated by any one of the above-mentioned businesses by performing a procedure for inputting authentication information by the single sign-on service, the authentication at the time of logging in to the system managed by another business is performed. The information input procedure can be omitted.
[0043]
5 and 6 are flowcharts showing the operation in the single sign-on service. Here, the description will be made on the assumption that the user terminal 10 first logs in to the order receiving system 20A to receive the service, and then logs in to the settlement system 30H to receive the service. The left side of the figure shows the processing executed by the user terminal 10, the left side of the center shows the processing executed by the order receiving system 20A, the right side of the center shows the processing executed by the settlement system 30H, and the right side of the figure shows the transaction information. The processing executed by the processing unit 43 of the management system 40 is shown.
[0044]
First, the user terminal 10 accesses the order receiving system 20A via the Internet 50 (S100).
[0045]
The order receiving system 20A generates display data of an authentication information input screen for requesting input of authentication information, and transmits this to the user terminal 10 (S120).
[0046]
The user terminal 10 displays the authentication information input screen acquired from the order receiving system 20A on its computer display (S140). The user inputs the authentication information issued at the time of the user member registration as corresponding to the order receiving system 20A.
[0047]
The user terminal 10 transmits the authentication information input by the user via the authentication information input screen to the order receiving system 20A (S160).
[0048]
The order receiving system 20A that has obtained the authentication information (ID, password) collates the obtained authentication information with the contents of the order receiving service authentication database, and authenticates the user (S180).
[0049]
The order receiving system 20A that has authenticated the user as an authorized user transmits the acquired authentication information to the transaction information management system 40 (S200).
[0050]
The processing unit 43 of the transaction information management system 40 acquires the authentication information transmitted by the order receiving system 20A via the communication unit 42 (S220).
[0051]
The processing unit 43 that has obtained the authentication information generates a unique single sign-on (SSO) identification ID (S240).
[0052]
The processing unit 43 inquires the authentication information database 41a of the storage unit 41, and specifies the user identification information of the user who associates the same authentication information with the acquired authentication information (S260). As described above, the record for each user in the authentication information database 41a associates the user identification information as the primary key with the authentication information corresponding to each of the order receiving system 20A, the order receiving system 20B, the payment system 30H, and the payment system 30I. Become. Therefore, the processing unit 43 searches the authentication information corresponding to the order receiving system 20A in each record for the same authentication information as the obtained authentication information, and specifies the user identification information as the primary key of the record storing the same. Things.
[0053]
The processing unit 43 stores the generated single sign-on (SSO) identification ID in the authentication information database 41a in association with the specified user identification information (S280).
[0054]
The processing unit 43 transmits the generated single sign-on (SSO) identification ID to the order receiving system 20A via the communication unit 42 (S300).
[0055]
The order receiving system 20A that has acquired the single sign-on (SSO) identification ID from the transaction information management system 40 transmits the generated single sign-on (SSO) identification ID to the user terminal 10 and provides the user terminal 10 with an order receiving service. Provided (S320). The specific operation in the order receiving service will be described later in detail in the section of “order receiving service”.
[0056]
The user terminal 10 that has acquired the single sign-on (SSO) identification ID stores the single sign-on (SSO) identification ID in the storage area and receives the provision of the order receiving service from the order receiving system 20A (S340).
[0057]
After providing the service from the order receiving system 20A, the user terminal 10 accesses the settlement system 30H (S360).
[0058]
The settlement system 30H requests the user terminal 10 for a single sign-on (SSO) identification ID (S380).
[0059]
The user terminal 10 reads out the single sign-on (SSO) identification ID from the storage area and transmits it to the payment system 30H (S400).
[0060]
The settlement system 30H transmits the single sign-on (SSO) identification ID acquired from the user terminal 10 to the transaction information management system 40 (S420).
[0061]
The processing unit 43 of the transaction information management system 40 that has acquired the single sign-on (SSO) identification ID from the settlement system 30H associates the acquired single sign-on (SSO) identification ID with the user identification information of one of the users. An inquiry is made to the authentication information database 41a of the storage means 41 (S440).
[0062]
When the obtained single sign-on (SSO) identification ID is associated with the user identification information of any one of the users, the processing unit 43 selects the payment system 30H from the authentication information associated with the user identification information. Is read out and transmitted to the settlement system 30H via the communication means 42 (S460).
[0063]
On the other hand, as described above, the validity period (for example, one hour after generation) of the single sign-on (SSO) identification ID is determined in advance, and is deleted from the authentication information database 41a after the validity period has elapsed. It has become. Therefore, when the single sign-on (SSO) identification ID is acquired from the settlement system 30H, the same single sign-on (SSO) identification ID may not already exist in the authentication information database 41a. In such a case, the processing unit 43 of the transaction information management system 40 transmits the re-authentication required notification to the settlement system 30H via the communication unit 42 (S480).
[0064]
The settlement system 30H that has acquired the re-authentication notification from the transaction information management system 40 generates display data of an authentication information input screen for requesting input of authentication information, and transmits the display data to the user terminal 10 (S500).
[0065]
The user terminal 10 displays the authentication information input screen acquired from the order receiving system 20 on the computer display (S520). The user inputs the authentication information issued at the time of the user member registration as corresponding to the settlement system 30H.
[0066]
The user terminal 10 transmits the authentication information input by the user via the authentication information input screen to the payment system 30H (S540).
[0067]
The payment system 30H that has obtained the authentication information from the user terminal 10 or the transaction information management system 40 collates the obtained authentication information with the contents of the payment service authentication database, and authenticates the user (S560).
[0068]
The payment system 30H that has authenticated the user provides a payment service to the user terminal 10 (S580). The specific operation in the payment service will be described in detail in the section of “payment service” later.
[0069]
According to the single sign-on process described above, a user who has logged in by performing a procedure of presenting authentication information to a system operated by any of the businesses registered as a business member in the transaction information system 40 has been set in advance. During the single sign-on validity period, when logging in to a system operated by another business operator, the procedure for disclosing authentication information can be omitted.
[0070]
The above description of the operation has been made on the assumption that the user terminal 10 first logs in to the order receiving system 20A to receive the service, and then logs in to the settlement system 30H to receive the service. For example, after the user terminal 10 logs in to the order receiving system 20A and receives the service, the user terminal 10 logs in to the order receiving system 20B to receive the service, and further logs in to the settlement system 30H to log in to the order receiving system 20A and the order receiving system 20B. Even if you use a system operated by three or more businesses, such as receiving payment services related to the price of the product for which you made a purchase application, provide authentication information during the single sign-on validity period Login to the second and subsequent systems without having to go through .
[0071]
[Order service]
[0072]
FIG. 7 is a flowchart showing the operation in the order receiving service. The left side of the figure shows the processing executed by the user terminal 10, the center of the figure shows the processing executed by the order receiving system 20, and the right side of the figure shows the processing executed by the processing means 43 of the transaction information management system 40.
[0073]
The user using the order receiving service accesses the order receiving system 20 through his / her user terminal 10 (S100). As described above, in the present embodiment, it is assumed that there is an order receiving system 20A and an order receiving system 20B. However, here, it is assumed that the user terminal 10 has accessed the order receiving system 20A. .
[0074]
The order receiving system 20A authenticates the user terminal 10 (S180). As described above, this authentication is performed in principle by asking the user to present the authentication information, and comparing the authentication information presented by the user with the contents of the order receiving service authentication database of the order receiving system 20A.
[0075]
The order receiving system 20A, which has authenticated the user terminal 10, introduces the name, price, nature, characteristics, etc. of each product that accepts an order application for mail order and generates display data of a product order support screen for accepting the purchase application. This is transmitted to the user terminal 10 (S181).
[0076]
The user terminal 10 displays the product order support screen acquired from the order receiving system 20A on the computer display (S182). The user examines the content of each product on the product order support screen, selects a desired product for purchase, and confirms the screen.
[0077]
The user terminal 10 transmits the product identification information corresponding to the selected product to the order receiving system 20A (S183).
[0078]
The order receiving system 20A that has acquired the product identification information stores the product identification information in its storage area and inputs delivery destination specifying items (address, name, telephone number, etc., of the delivery destination) of the delivery destination of the ordered product. It generates display data of a delivery destination information request screen for sending the data to the user terminal 10 (S184).
[0079]
The user terminal 10 displays the delivery destination information request screen acquired from the order receiving system 20A on the computer display (S185). From this delivery destination information request screen, the user inputs delivery destination specifying items such as a delivery destination address, a name, and a telephone number, and fixes the screen.
[0080]
The user terminal 10 transmits the input destination specification items to the order receiving system 20A (S186).
[0081]
The order receiving system 20A that has acquired the input destination specification items generates the price-related information of the product corresponding to the product identification information stored in the storage area (S187). This price-related information is information for specifying the price of the product. The price-related information is generated by providing a database that defines the correspondence between the product identification information of each product and the price of the product in the order receiving system 20A. Is realized by processing such as inquiring the database of the price corresponding to.
[0082]
The order receiving system 20A stores transaction information, which is an association between the account number of the bank account opened by the order receiving company A as an operator of the order receiving system 20A as a payment destination for the product and the generated price-related information. Is transmitted to the transaction information management system 40 (S188).
[0083]
The processing unit 43 of the transaction information management system 40 acquires the transaction information via the communication unit 42 (S189).
[0084]
The processing unit 43 that has acquired the transaction information generates a unique transaction identification ID that identifies the acquired transaction information (S190).
[0085]
The processing unit 43 stores the acquired transaction information in association with the generated transaction identification ID in the transaction information database 41b of the storage unit 41 (S191).
[0086]
The processing unit 43 transmits the generated transaction identification ID to the order receiving system 20A via the communication unit 42 (S192).
[0087]
The order receiving system 20A that has acquired the transaction ID from the transaction information management system 40 transmits the transaction ID to the user terminal 10 of the user who is the applicant (S193).
[0088]
The user terminal 10 acquires the transaction identification ID from the order receiving system 20A and stores it in the storage area (S194).
[0089]
Thus, all the processes are completed.
[0090]
[Payment service]
[0091]
FIG. 8 is a flowchart showing the operation in the settlement service. The left side of the figure shows the processing executed by the user terminal 10, the center of the figure shows the processing executed by the settlement system 30, and the right side of the figure shows the processing executed by the processing means 43 of the transaction information management system 40.
[0092]
The user terminal 10 that has acquired the transaction identification ID from the order receiving system 20 accesses the settlement system 30 used for settlement of the ordered product (S360).
[0093]
Further, as described above, in the present embodiment, the businesses 30H and 30I are registered as business members in the transaction information management system 40 as businesses providing settlement services for ordered products to users. Therefore, when the user owns the credit card issued by the company 30H, the user accesses the settlement site 30H, while the user owns the credit card issued by the company I, the user accesses the settlement site 30I. The user can freely select a settlement system 30 to be used for settlement of the ordered product applied for by the order receiving system 20 this time. Here, it is assumed that the user terminal 10 has accessed the settlement system 30H.
[0094]
Here, it is desirable that the access be performed immediately after applying for a product purchase in the order receiving system 20. This is because, within a predetermined time limit (single sign-on validity period) after authentication in the order receiving system 20, it is possible to log in without requiring a procedure for inputting authentication information to the payment system 30.
[0095]
The payment system 30H authenticates the user terminal 10 (S560). This authentication is performed by, in principle, requesting the user to present authentication information, and comparing the authentication information presented by the user with the contents of the payment service authentication database of the payment system 30H. However, as described above, when the access is performed within the single sign-on validity period, the input procedure of the authentication information is omitted.
[0096]
The payment system 30H that has authenticated the user requests the transaction identification ID from the user terminal 10 (S561).
[0097]
The user terminal 10 reads out the transaction identification ID from the storage area and transmits this to the settlement system 30H (S562).
[0098]
The settlement system 30H that has acquired the transaction ID transmits the transaction ID to the transaction information management system 40 (S563).
[0099]
The processing unit 43 of the transaction information management system 40 that has acquired the transaction ID from the settlement system 30H reads the transaction information associated with the transaction ID from the transaction information database 41b (S564).
[0100]
The processing unit 43 transmits the read transaction information to the settlement system 30I via the communication unit 42 (S565).
[0101]
The settlement system 30H acquires the transaction information and stores it in the storage area (S566).
[0102]
Next, the payment system 30H generates the display data of the credit card number request screen for requesting the input of the credit card number, and transmits this to the user terminal 10 (S567).
[0103]
The user terminal 10 displays the credit card number request screen acquired from the settlement system 30H on its computer display (S568).
[0104]
The user terminal 10 transmits the credit card number input by the user via the credit card number request screen to the payment system 30H (S569).
[0105]
The settlement system 30H makes an inquiry to the credit-related information database based on the credit card number acquired from the user terminal 10, and the equivalent amount of the price-related information included in the acquired transaction information is within the range of the current purchase limit. It is determined whether it is within (S570).
[0106]
When the payment system 30H determines that the price is within the range of the purchase limit, the payment system 30H transfers a corresponding amount of the price-related information included in the transaction information to a deposit account specified by the acquired transaction information. (S571).
[0107]
The settlement system 30H notifies the user terminal 10 and the transaction information management system 40 that the payment has been completed (S572).
[0108]
The user terminal 10 that has been notified that the payment has been completed ends the connection state with the settlement system 30H (S573).
[0109]
On the other hand, the processing means 43 of the transaction information management system 40, which has been notified that the payment has been completed, changes the payment status associated with the transaction identification ID in the transaction information database 41b from "unpaid" to "paid". (S574).
[0110]
Thus, all the processes are completed.
[0111]
The order receiving system 20 accesses the transaction information management system 40 periodically (for example, once a day) and specifies the transaction identification ID, thereby completing the payment for the amount corresponding to the price-related information transmitted by itself. Inquire. In response to this inquiry, the processing means 43 of the transaction information management system 40 uses the settlement system 30H or the settlement system 30I when the transaction identification ID designated by the order receiving system 20 is associated with the deposit state of “paid”. It is determined that the payment has been completed, and the payment system notifies the order receiving system 20 of the payment completion for the corresponding amount of the payment-related information.
[0112]
The order receiving company, which is the operator of the order receiving system 20 that has received the notification of the payment completion, sends out the product applied by the user to the destination specified by the obtained destination specifying item.
[0113]
As described above, in the above-described embodiment, the order receiving system 20 once transmits the transaction information including the price-related information generated with the order for the product to the transaction information management system 40, and the transaction identification ID generated accordingly. In response to a request from the settlement system 30 obtained via the order receiving system 20 and the user terminal 10, the transaction information management system 40 transfers the transaction information to the settlement system 30. Therefore, in the case where services are continuously provided from systems operated by different business operators, such as the order receiving system 20 and the settlement system 30, personal information (for example, credits) required only at the time of settlement is provided on the order receiving system 20 side. Card number) is not disclosed, and conversely, information such as the order history of ordered products is not disclosed on the settlement system 30 side, so that a highly secure order receiving and settlement method can be realized. .
[0114]
In addition, the order receiving system 20 only needs to deliver the price-related information generated in accordance with the product purchase application to the transaction information management system 40 and transmit the acquired transaction identification ID to the user terminal 10 in exchange for the information, and to the specific settlement system 30. There is no need to deliver payment-related information directly. On the other hand, the settlement system 30 may acquire the transaction information corresponding to the transaction identification ID acquired from the user terminal 10 from the transaction information management system 40 and perform the settlement process for the corresponding amount of the price-related information included therein. There is no need to recognize whether the payment related information has been generated by the payment system. Therefore, the order receiving system 20 (20A, B, C, D, E...) And the payment system 30 (30H, 30H, 30H) operated by the new business operator are not changed without changing the current settings of the existing order receiving system 20 and the payment system 30. I, J, K, L ...) can be extended.
[0115]
The embodiment of the present invention is not limited to the above.
[0116]
The payment system 30 in the above-described embodiment employs a configuration in which, when the transaction ID is acquired from the user terminal 10, the transaction ID is immediately transmitted to the transaction information management system 40 to acquire the corresponding payment-related information. Instead of simple real-time processing, a configuration may be adopted in which the process from transmission of the transaction identification ID to acquisition of the payment-related information is performed by batch processing. For example, the settlement system 30 stores the credit card number and the transaction ID acquired from each user terminal 10 in a predetermined period (for example, 24 hours) in its storage area, and stores each transaction ID in the transaction information management system 40. The processing of transmitting the transaction-related information to the corresponding transaction identification ID and acquiring the corresponding payment-related information for each transaction ID stored in the predetermined period may be adopted. Thereby, the use efficiency of the communication line can be improved.
[0117]
Further, the payment system 30 is operated by a credit company, and performs a payment by requesting a user presenting a transaction identification ID to present a credit card number of the user. It may be the operating entity of the settlement system 30. As a settlement method in the case where a bank becomes an operating entity of the settlement system 30, for example, a user opens an account for settlement in the bank in advance and receives a debit card from the bank in advance, and the settlement system 30 Acquires the identification information, the personal identification number, and the transaction identification ID of the debit card from the user terminal 10, acquires the price-related information corresponding to the transaction identification ID from the transaction information management system 40, and acquires the price of the purchase application product. A method of transferring a considerable amount from the user's account to the orderer's account can be assumed.
[0118]
Furthermore, in the order receiving system 20, a target for accepting a purchase application may be not only a product such as a book or clothing, but also a service such as a reservation agent for an air ticket or a concert ticket.
[0119]
【The invention's effect】
Since the present invention is configured and functions as described above, in the case where the order receiving service and the settlement service for the price caused by the order receiving service are performed by different operators, unnecessary information is provided to each of the operators when the service is provided. Can be prevented from leaking, and safe and efficient information exchange between the systems providing both services can be realized.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating an overall configuration according to an embodiment of the present invention.
FIG. 2 is an example of a data structure in an authentication information database.
FIG. 3 is an example of a data structure in a transaction information database.
FIG. 4 is an example of a data structure in an order receiving service authentication database.
FIG. 5 is a flowchart showing an operation in a single sign-on service (first half).
FIG. 6 is a flowchart showing an operation in a single sign-on service (second half).
FIG. 7 is a flowchart showing an operation in an order receiving service.
FIG. 8 is a flowchart showing an operation in the settlement service.
[Explanation of symbols]
10 User terminal
20 Order receiving system
30 Settlement system
40 Transaction Information Management System
41 storage means
42 Communication means
43 processing means
41a Authentication information database
41b Transaction information database

Claims (2)

Information storage means, communication means with an external system, and information processing means for controlling the operation of each means,
The processing means includes:
a1) acquiring, via the communication means, transaction information generated by the primary service providing system along with the provision of the primary service from a primary service providing system that provides a primary service to a user;
b1) generating unique identification information for identifying the acquired transaction information;
c1) storing the acquired transaction information in the storage unit in association with the generated identification information;
d1) transmitting the identification information to a primary service providing system via the communication means;
e1) obtaining the identification information via the communication means from a secondary service providing system for providing a secondary service based on the transaction information to the user;
f1) reading from the storage means transaction information associated with the identification information obtained from the secondary service providing system;
g1) transmitting the read transaction information to the secondary service providing system via the communication unit;
A transaction information management system that runs. Information storage means, communication means with an external system, and information processing means for controlling the operation of each means,
The processing means includes:
a2) obtaining, via the communication unit, the payment-related information generated by the order receiving system in accordance with the provision of the order receiving service from an order receiving system for providing an order receiving service of goods or services to a user;
b2) generating unique identification information for identifying the acquired payment-related information;
c2) storing the acquired price-related information in the storage unit in association with the generated identification information;
d2) transmitting the identification information to the order receiving system via the communication means;
e2) obtaining the identification information via the communication means from a payment system that provides the user with a payment service based on the payment-related information;
f2) reading from the storage means the payment-related information associated with the identification information obtained from the settlement system;
g2) transmitting the read price-related information to the payment system via the communication means;
Perform a payment related information management system.

Images