JP2004086599A - Credit card information management device, management method, and program thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a credit card information management device having a management function of a credit card number with high security, in a server for Web pages to receive the credit card number and attribute information. <P>SOLUTION: An identification number issuing part 12 issues an identification number common to the credit card number information and the attribute information which are received from a credit card user. A transmitting/receiving part 11 transmits a first encrypted information which is an encrypted information of the identification number and the credit card number and a second encrypted information which is an encrypted information of the identification number and the attribute information, to the server of a credit card company. According to it, an encryption/decryption processing part 14 decrypts the received and encrypted identification number and examination result information, and an information recording part 13 records the examination result information into a member management database 15 by correlating with the identification number. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a computer system, and more particularly to a credit card information management device, a management method, and a program thereof.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, when providing various services that require a credit card examination on a communication network such as the Internet, a database server uses a Web interface to provide a credit card user's credit card number and attribute information (name and address). And phone numbers). The database server holds a credit card number and attribute information.
[0003]
[Problems to be solved by the invention]
However, the above-described method of holding a credit card number on the database server requires a separate database server to be built in addition to a Web server that provides a Web interface. Therefore, in order to construct a Web site that can provide the above-described various services of the related art as inexpensively as possible, it is preferable to use, for example, a rental server. However, the rental server is usually constituted only by a Web server providing a Web interface, and is not provided with a database server behind the rental server. Therefore, it is difficult to provide a service for handling a credit card number by an ordinary method. .
Therefore, the present invention provides a credit card information providing a highly secure credit card number management function in a Web server that receives a credit card number and attribute information even if the Web server that provides a Web interface does not have a database server. It is an object to provide a management device, a management method, and a program thereof.
[0004]
[Means for Solving the Problems]
The present invention has been made to solve the above-mentioned problem, and the invention according to claim 1 is a receiving unit that receives credit card number information and attribute information of the credit card user from a credit card user, Identification number issuing means for issuing an identification number common to the credit card number information and the attribute information; a database for recording the attribute information in association with the identification number; and the identification number and the credit card number information First encryption means for encrypting the identification number and the attribute information with a first key, and encrypting the identification number and the attribute information with a second key to generate second encryption information. A second encrypting unit for generating the first encrypted information and the second encrypted information, and a storage unit for separately storing the first encrypted information and the second encrypted information. Examination information transmitting means for transmitting to the server of the credit card company, and correspondingly, the identification number and the examination result information encrypted from the server of the credit card company, and A credit card information management device, comprising: a decryption means for decrypting; and a review result information recording means for recording the review result information in the database in association with the identification number.
[0005]
According to a second aspect of the present invention, there is provided a credit card information management method in a credit card information management device provided with a database for recording attribute information and an identification number of a credit card user. A receiving step of receiving card number information and attribute information of the credit card user; an identification number issuing step of issuing an identification number common to the credit card number information and the attribute information; and the identification number and the credit A first encryption step of encrypting the card number information with a first key to create first encrypted information;
A second encryption step of creating the second encrypted information by encrypting the identification number and the attribute information with a second key, and separately performing the first encrypted information and the second encrypted information; A check information transmitting step of transmitting the first encrypted information and the second encrypted information to a server of a credit card company; A decryption step of receiving a number and examination result information from a server of the credit card company and decrypting the same with a third key; and examination result information for recording the examination result information in the database in association with the identification number. A credit card information management method characterized by comprising a recording step.
[0006]
According to a third aspect of the present invention, there is provided a program for causing a computer of a credit card information management device provided with a database for recording attribute information and an identification number of a credit card user to execute the program. A receiving step of receiving card number information and attribute information of the credit card user; an identification number issuing step of issuing an identification number common to the credit card number information and the attribute information; and the identification number and the credit A first encryption step of encrypting the card number information with a first key to create first encrypted information; and encrypting the identification number and the attribute information with a second key to generate a second encrypted information. A second encryption step of creating encryption information, a storage step of separately storing the first encryption information and the second encryption information, An examination information transmitting step of transmitting the first encrypted information and the second encrypted information to the server of the credit card company, and, in response to this, the encrypted identification number and the examination result information, A computer performs a decryption process of receiving from the server of the credit card company and decrypting with the third key, and a review result information recording process of recording the review result information in the database in association with the identification number. It is a program.
[0007]
Further, according to the invention described in claim 4, the identification number and the first encryption information obtained by encrypting the credit card number information of the credit card user with the first encryption, the identification number and the credit card user's Receiving means for receiving, from a credit card information management device, second encrypted information obtained by encrypting attribute information with a second encryption, and decryption for decrypting the first encrypted information and the second encrypted information; Means for performing examination processing based on the decrypted credit card number information and the attribute information to generate examination result information; and an encryption means for encrypting the identification number and the examination result information. And a transmitting unit for transmitting the identification number and the examination result information encrypted by the encrypting unit to the credit card information management device. Tokado is an examination processing apparatus.
[0008]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, a credit card information management device according to an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a member service application receiving system using a credit card information management device according to an embodiment of the present invention.
In this figure, reference numeral 1 denotes a rental server, which internally has a function of a credit card information management device. Further, on the rental server 1, a Web page of a service provider that provides a certain service is constructed. Here, the rental server 1 is rented to a service provider by a hosting service provider that provides a server lending service for constructing a Web page, and the service provider supplies a Web page to the rental server 1. We request a hosting service provider for construction, operation, and maintenance.
Reference numeral 2 denotes a credit card examination processing device of a credit card company, which receives credit card number information and attribute information held in the rental server 1 when the payment is made on the Web page, and An examination is performed, and the examination result information is transmitted to the rental server 1. Reference numeral 3 denotes a terminal of an enrollment applicant who enrolls in the service provided on the Web page.
The rental server 1 and the credit card examination processing device 2 of the credit card company constitute a membership service application receiving system, and the enrollment applicant is constructed on the rental server 1 from the terminal 3 via a communication network such as the Internet. Access the current Web page.
[0009]
In the rental server 1 of FIG. 1, reference numeral 11 denotes a transmission / reception unit (reception means, examination information transmission means) for transmitting / receiving various information to / from the terminal 3 or the credit card examination processing device 2 of a credit card company. Reference numeral 12 denotes an identification number issuing unit (identification number issuing means), which issues a key number (identification number) in response to receiving a credit card number and attribute information from a terminal. An information recording unit 13 records information received by the transmitting / receiving unit 11 and a key number issued by the identification number issuing unit 12 in the member management database. In addition, the information recording unit 13 includes examination result information recording means.
Reference numeral 14 denotes an encryption / decryption processing unit (a first encryption unit, a second encryption unit, and a decryption unit), which separately use a public key encryption method to separately store credit card numbers and attribute information. It performs encryption or decryption of the examination result information transmitted from the credit card examination processing device 2. Reference numeral 15 denotes a member management database (database), which holds the above-described key numbers, attribute information, and examination result information of the applicant for enrollment. Here, the examination result information is information indicating whether or not the examination by the credit card company has been passed, and holds a value indicating any one of three stages of unexamined, examination OK, and examination NG. .
[0010]
In the credit card examination processing device 2 of the credit card company shown in FIG. 1, reference numeral 21 denotes a transmitting / receiving unit (transmitting means, receiving means) for transmitting and receiving various information to and from the rental server 1. Reference numeral 22 denotes an encryption / decryption processing unit (encryption means, decryption means), which separately decrypts the credit card number and the attribute information using the public key encryption method. Encrypt the examination result information to be transmitted. Reference numeral 23 denotes an examination processing unit (examination processing means) that examines the enrollment of the enrollment applicant based on the credit card number and the attribute information of the enrollment applicant received from the rental server 1.
The public key cryptosystem is a technology for encrypting and decrypting various information using a public key and a secret key. For example, when transmitting a information from A to B, A transmits B to B A transmits the a information encrypted with the public key of B, and B decrypts the a information with the secret key of B. Conversely, when encrypting and transmitting the a information from B to A, B transmits A information encrypted with A's public key to A, and A decrypts a information with A's secret key.
[0011]
Each processing unit shown in FIG. 1 may be realized by dedicated hardware, and each processing unit is configured by a memory and a CPU (Central Processing Unit). May be realized by loading a program for realizing the function into a memory and executing the program.
The memory is a non-volatile memory such as a hard disk device, a magneto-optical disk device, or a flash memory, a recording medium such as a CD-ROM, which is readable only, or a volatile memory such as a RAM (Random Access Memory). Or a computer-readable and writable recording medium by a combination thereof.
[0012]
Next, the operation of the above-described member service application receiving system will be described with reference to FIG. FIG. 2 is a diagram showing an outline of processing of a member service application receiving system using a rental server 1 having a function of a credit card information management device.
As shown in this figure, first, the application applicant accesses the rental server 1 from the terminal 3 and browses the Web page. Then, the enrollment applicant enters the credit card number and the attribute information (name, address, telephone number, etc.) of the enrollment applicant into the terminal 3 in order to subscribe to the service. Then, the terminal 3 transmits the credit card number and the attribute information to the rental server 1, and the transmission / reception unit 11 of the rental server 1 receives the card number and the attribute information of the enrollment applicant (step S1). Note that the transmission of the credit card number and the attribute information from the terminal 3 to the rental server 1 is encrypted by SSL (Secure Socket Layer).
[0013]
Next, in the rental server 1, the identification number issuing unit 12 issues a key number (identification number) in response to the reception of the credit card number and the attribute information by the transmission / reception unit 11 (step S2). When the key number is issued, the information recording unit 13 records the attribute information received by the transmission / reception unit 11 and the key number issued by the identification number issuing unit 12 together with the examination result information in the member management database 15 (step). S3). When the information recording unit 13 records the examination result information in the member management database 15, the examination result information is recorded as a non-member.
[0014]
Further, the encryption / decryption processing unit 14 of the rental server 1 receives the transfer of the credit card number and the attribute information from the transmission / reception unit 11, and together with the key number issued by the identification number issuing unit 12, the credit card number and the attribute information Are encrypted separately. At this time, the encryption / decryption processing unit 14 separately encrypts the credit card number and the attribute information using two different public keys of the credit card company. In this encryption, the encryption / decryption processing unit 14 encrypts the credit card number with the public key 1 (step S4), and encrypts the attribute information with the public key 2 (step S5). . Then, the encryption / decryption processing unit 14 separately stores the encrypted credit card number and the encrypted attribute information in a storage unit (not shown) separate from the member management database 15 (step S6).
Then, the transmission / reception unit 11 transmits the credit card number and the attribute information encrypted by the encryption / decryption processing unit 14 of the rental server 1 to the credit card examination processing device 2 of the credit card company (Step S7).
[0015]
Next, in the credit card examination processing device 2 of the credit card company, the transmitting / receiving unit 21 receives the credit card number and the attribute information separately transmitted by the transmitting / receiving unit 11 of the rental server 1 (Step S8). Then, the encryption / decryption processing unit 22 of the credit card examination processing device 2 decrypts the credit card number with the private key 1 corresponding to the public key 1 (step S9), and furthermore, the private key corresponding to the public key 2 In step 1, the attribute information is decrypted (step S10).
Since the credit card number and the attribute information received by the transmission / reception unit 21 of the credit card examination processing device 2 of the credit card company are decrypted, the credit card number of the applicant for enrollment is obtained by using the encrypted key numbers. And a pair of attribute information is specified (step S11). Then, the examination processing unit 23 of the credit card examination processing device 2 examines the membership (step S12), and determines whether the examination is OK or NG. Then, the examination processing unit 23 generates examination result information holding information of examination OK or examination NG (step S13).
[0016]
Next, the encryption / decryption processing unit 22 of the credit card screening processing device 2 compares the screening result information generated by the screening processing unit 23 with the key number specifying the pair of the credit card number and the attribute information of the enrollment applicant, Encrypt with the public key 3 of the rental server 1 (step S14). This is called examination result information. Then, the transmitting / receiving unit 21 transmits the encrypted examination result information to the rental server 1 (Step S15).
[0017]
Then, the transmission / reception unit 11 of the rental server 1 receives the examination result information, and the encryption / decryption processing unit 14 decrypts the examination result information with the secret key 3 corresponding to the public key 3 (step S16). Then, the information recording unit 13 confirms the examination OK or the examination NG from the examination result information, confirms the key number, and examines the examination result information recorded in the member management database 15 in pair with the key number. Alternatively, it is updated to examination NG (step S17).
Then, for example, when the examination result information indicates that the examination is OK, this becomes the information for determining the service start for the enrollment applicant, and the service is started.
[0018]
Note that the credit card number and attribute information encrypted with the public key 1 and the public key 2 in the above-described embodiment are transmitted to the credit card examination processing device 2 and then stored in the storage unit in the rental server 1. Although the attribute information is stored in a separate directory or the like, it is stored so that the correspondence between the credit card number and the attribute information is not known.
[0019]
In FIG. 1, a program for realizing the function of the processing unit that performs various processes is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read and executed by a computer system. Each process may be performed. Here, the “computer system” includes an OS and hardware such as peripheral devices.
The “computer system” also includes a homepage providing environment (or a display environment) if a WWW system is used.
[0020]
The “computer-readable recording medium” refers to a portable medium such as a flexible disk, a magneto-optical disk, a ROM, and a CD-ROM, and a storage device such as a hard disk built in a computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) inside a computer system that is a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. , For a certain period of time.
[0021]
Further, the above program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting a program refers to a medium having a function of transmitting information, such as a communication network such as the Internet or a communication line such as a telephone line.
Further, the program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.
As described above, the embodiments of the present invention have been described in detail with reference to the drawings. However, the specific configuration is not limited to the embodiments, and includes a design and the like within a range not departing from the gist of the present invention.
[0022]
【The invention's effect】
As described above, according to the first, second, and third aspects of the invention, the identification number issuing means issues an identification number common to the credit card number information and the attribute information received from the credit card user, and the examination is performed. After the information transmitting means separately stores the first encrypted information obtained by encrypting the identification number and the credit number information and the second encrypted information obtained by encrypting the identification number and the attribute information in the storage section, Sent to the card company server. The decrypting means decrypts the encrypted identification number and the examination result information received in response thereto, and the examination result information recording means records the examination result information in the database in association with the identification number.
As a result, the credit card number information and the attribute information encrypted by different encryptions are separately transmitted or stored in the storage unit, so that the security is high. In addition, since the attribute information and the examination result information can be associated with each other using the identification number, there is no need to record the credit card number information associated with the attribute information in the database, and the security is high.
[0023]
Further, according to the invention of claim 4, the receiving means receives the first encrypted information and the second encrypted information, and the decrypting means transmits the first encrypted information and the second encrypted information. Decrypt. Then, the examination processing means performs examination processing based on the credit card number information and the attribute information obtained from the first and second encrypted information decrypted by the decryption means, and generates examination result information. The encrypting means encrypts the identification number and the examination result information, and the transmitting means transmits the encrypted identification number and the examination result information.
As a result, since the credit card user can be identified by the identification number and the examination result information can be transmitted without transmitting the credit card number to the credit card information management device, there is no need to exchange the credit card number and the security is improved. Is high.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a member service application receiving system using a credit card information management device according to an embodiment of the present invention.
FIG. 2 is a diagram showing an outline of processing of a member service application receiving system according to the embodiment.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Rental server 2 Credit card examination processing device 3 Terminal 11, 21 Transmission / reception section 12 Identification number issuing section 13 Information recording section 14, 22 Encryption / decryption processing section 15 Member management database 23 Examination processing section

Claims (4)

Receiving means for receiving credit card number information and attribute information of the credit card user from a credit card user,
Identification number issuing means for issuing an identification number common to the credit card number information and the attribute information,
A database that records the attribute information and the identification number in association with each other,
First encryption means for encrypting the identification number and the credit card number information with a first key to create first encryption information;
A second encryption unit that encrypts the identification number and the attribute information with a second key to create second encrypted information;
Storage means for separately storing the first encrypted information and the second encrypted information;
Examination information transmitting means for transmitting the first encrypted information and the second encrypted information to a server of a credit card company;
In response thereto, decryption means for receiving the encrypted identification number and examination result information from a server of the credit card company and decrypting the received information with a third key;
Examination result information recording means for recording the examination result information in the database in association with the identification number,
A credit card information management device comprising: A credit card information management method in a credit card information management device including a database that records attribute information and an identification number of a credit card user,
A receiving step of receiving credit card number information and attribute information of the credit card user from the credit card user,
An identification number issuing step of issuing an identification number common to the credit card number information and the attribute information,
A first encryption step of encrypting the identification number and the credit card number information with a first key to create first encrypted information;
A second encryption step of encrypting the identification number and the attribute information with a second key to create second encrypted information;
A storage step of separately storing the first encrypted information and the second encrypted information;
An examination information transmitting step of transmitting the first encrypted information and the second encrypted information to a server of a credit card company;
In response, a decryption step of receiving the encrypted identification number and the examination result information from the server of the credit card company and decrypting the same with a third key;
An examination result information recording step of recording the examination result information in the database in association with the identification number,
A credit card information management method comprising: A program to be executed by a computer of a credit card information management device provided with a database for recording attribute information and an identification number of a credit card user,
A receiving step of receiving credit card number information and attribute information of the credit card user from the credit card user,
An identification number issuing step of issuing an identification number common to the credit card number information and the attribute information,
A first encryption step of encrypting the identification number and the credit card number information with a first key to create first encrypted information;
A second encryption step of encrypting the identification number and the attribute information with a second key to create second encrypted information;
A storage step of separately storing the first encrypted information and the second encrypted information;
An examination information transmitting step of transmitting the first encrypted information and the second encrypted information to a server of a credit card company;
In response, a decryption step of receiving the encrypted identification number and the examination result information from the server of the credit card company and decrypting the same with a third key;
An examination result information recording step of recording the examination result information in the database in association with the identification number,
A program that causes a computer to execute. The first encrypted information in which the identification number and the credit card number information of the credit card user are encrypted with the first encryption, and the identification number and the attribute information of the credit card user are encrypted with the second encryption. Receiving means for receiving the second encrypted information from the credit card information management device;
Decryption means for decrypting the first encrypted information and the second encrypted information;
Examination processing means for performing examination processing based on the decrypted credit card number information and the attribute information, and generating examination result information;
Encryption means for encrypting the identification number and the examination result information,
Transmission means for transmitting the identification number and the examination result information encrypted by the encryption means to the credit card information management device,
A credit card examination processing device comprising:

Images