JP2004110487A - Electronic settlement authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic settlement authentication system reliably preventing the leak of secret information such as credit card information without restricting the behavior or time of a user. <P>SOLUTION: When this electronic settlement authentication system 4 receives electronic commerce data including a user identifier from an electronic commerce service provider device 6, it calls back a user terminal 1 on the basis of the user identifier. The system comprises a means transmitting via a public network 100 electronic commerce data including announcement requiring secret information for electronic settlement and a call back identification number permitting specifying call back information, a means receiving the secret information via the public network 100, a means transmitting the secret information to a credit card settlement system 5 and receiving authentication result data regarding the secret information of the user from the credit card settlement system 5, and a means transmitting the authentication result data to the electronic commerce service provider device 6. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an electronic payment authentication system, and more particularly, to an electronic payment authentication system in electronic commerce such as online shopping via the Internet.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, in electronic commerce using the Internet network, credit companies have been widely used for payment of product purchases and the like. For this reason, when purchasing a product, it is becoming more frequent to notify the user of credit card information or the like used as payment account information on the Internet. However, transmission of credit card information and the like via the Internet network requires transmission data encryption technology, secret communication technology, etc. due to problems such as information being stolen and misused on the network. Adopting a method to prevent theft of credit card information etc. by adopting it, or registering a password and credit card information in advance with an e-commerce service provider and authenticating yourself with a password when purchasing products, etc. A method of omitting transmission of credit card information or the like has been considered.
[0003]
However, even in the above technology, since the Internet network passes through an unspecified number of servers, information security problems, management problems due to management of credit card information and the like by a plurality of service providers, and However, there is an operational problem that a service provider that has not been registered in advance cannot be used.
[0004]
Therefore, according to the electronic payment authentication system and the electronic commerce service provider device described in JP-A-2000-7633, an electronic payment authentication system that can be used by a plurality of service providers is provided, and a public network is used from the electronic payment authentication system. By making a callback to the user, it is possible to prevent leakage of credit card information, etc., and by enabling personal authentication and credit card authentication, a simple and secure method that does not require prior registration of credit card information etc. Realizes e-commerce.
[0005]
FIG. 6 shows the operation of the electronic payment authentication system and the electronic commerce service provider device. In the figure, ISP is an Internet service provider, CSP is an e-commerce service provider, and between the user and the ISP and between the electronic payment authentication system and the user are ISDN lines or analog telephones, which are public networks. Connected by line. The ISP and the CSP are connected by the Internet network, and the electronic payment authentication system and the credit card payment system are connected by a dedicated line or a packet switching network.
[0006]
The user issues a call to the local exchange to the ISP, the user and the ISP are connected, and the user and the CSP are connected via the user and the ISP. The user sends order information to the CSP, and the CSP sends the order information to the electronic payment authentication system.
[0007]
The electronic payment authentication system calls back the user, and the electronic payment authentication system and the user are connected via a public network. The electronic payment authentication system announces to input confidential information such as credit card information. And the user inputs confidential information such as credit card information through the telephone terminal.
[0008]
The electronic payment authentication system disconnects the connection with the user via the public network, sends confidential information such as credit card information that is input to the credit card payment system, and inquires about the credit card payment system. The authentication result such as the card information is transmitted to the electronic payment authentication system.
[0009]
The electronic payment authentication system sends the authentication result to the CSP, and the CSP notifies the user of the authentication result. The basic user disconnects the connection with the CSP upon receiving the authentication result, and the CSP ships the product to the user.
[0010]
Then, the CSP bills the merchandise price for the electronic commerce to the credit card payment system, and the credit card payment system bills the user for the price.
[0011]
[Problems to be solved by the invention]
However, in the electronic payment authentication system and the electronic commerce service provider device described in JP-A-2000-76336, leakage of credit card information and the like can be prevented by making a callback using a public network. Authentication of identity, credit card information, etc. starts from the time the user is connected to the callback and the user is required to immediately answer the phone when the user is called back, so the user is called back to the contact. The user has to wait until the user waits, the user's actions and time are limited, and the merits of e-commerce are that the user can purchase products anytime, anywhere.
[0012]
Also, as a second problem, in the electronic payment authentication system and the electronic commerce service provider device described in the above publication, the authentication and payment processing after the callback in the electronic payment authentication system is performed continuously, so that the service provider After notifying the product to be purchased to the user, the user cannot disconnect the callback until the series of operations of the electronic payment authentication system and credit card payment system are completed, and the series of operations due to the problem of the public network used at the time of the callback may be interrupted. Even if it is for a long time, the user must wait until all operations are completed, the user's actions and time are limited, and the merits of e-commerce that you can purchase products anytime, anywhere There was a problem that was restricted.
[0013]
Therefore, the present invention has been made in view of the above-mentioned problems in the related art, and it is possible to reliably prevent leakage of confidential information such as credit card information, and to limit a user's action and time. An object of the present invention is to provide an electronic payment authentication system that does not receive the electronic payment.
[0014]
[Means for Solving the Problems]
In order to achieve the above object, the present invention provides an electronic commerce for transmitting and receiving e-commerce information between a user terminal and an e-commerce service provider device via an Internet network, and for settlement of the e-commerce payment by a credit card settlement system. An electronic payment authentication system for commercial transactions, wherein when electronic commerce data including a user identifier is received from the electronic commerce service provider device, a user terminal is called back based on the user identifier, and secret information for electronic payment is provided. Means for transmitting electronic commerce data including a notification requesting a callback and a callback identification number capable of specifying callback information via a public network, and means for receiving the confidential information via the public network And transmitting the confidential information to the credit card payment system, Means for receiving the authentication result data for secret information of the user from the credit card payment system, characterized by comprising a means for transmitting the authentication result data to the electronic commerce service provider equipment.
[0015]
According to the present invention, the user transmits confidential information such as credit card information to the electronic settlement authentication center following the callback identification number announced at the time of the callback, so that the user can confirm the callback. This eliminates the need to wait for a contact to be called back, and allows the user to disconnect the callback during a series of operations of the electronic payment authentication system and credit card payment system. You can fully enjoy the merits of e-commerce, that is, you can purchase products anytime, anywhere, without being restricted by the actions and time of your business, and you can make electronic payments using a public network that is secure for security It becomes.
[0016]
The electronic payment authentication system can receive the confidential information from the user terminal or a public terminal via the public network. That is, the user may transmit the confidential information from the user terminal that has received the callback to the electronic payment authentication system, or may transmit the confidential information from the public terminal, thereby improving the convenience for the user.
[0017]
Further, the electronic payment authentication system can settle the payment of the electronic commerce via the credit card payment system and a public network. This makes it possible to prevent leakage of confidential information such as credit card information between the electronic payment authentication system and the credit card payment system.
[0018]
BEST MODE FOR CARRYING OUT THE INVENTION
Next, embodiments of the present invention will be described in detail with reference to the drawings.
[0019]
FIG. 1 is a block diagram showing an entire configuration of an electronic commerce system including an electronic payment authentication system according to the present invention. The electronic commerce system includes a user terminal 1, a public terminal 2, an Internet Service provider device (hereinafter, referred to as “ISP”) 3, electronic payment authentication system 4, credit card payment system 5, electronic commerce service provider device (hereinafter, referred to as “CSP”) 6, user terminal 1, public terminal 2, a public network 100 interconnecting the ISP 3, the electronic payment authentication system 4 and the credit card payment system 5, and an Internet network 200 interconnecting the ISP 3, the electronic payment authentication system 4, the credit card payment system 5 and the CSP 6. Be composed.
[0020]
The user terminal 1 includes an information terminal 1-1 such as a personal computer and a telephone terminal 1-2, and is connected to the ISP 3 via a public network 100 such as an ISDN or an analog telephone network, and passes through the ISP 3. And has a function of transmitting and receiving information for electronic commerce by connecting to the CSP 6 connected to the Internet network 200.
[0021]
The public terminal 2 is connected to the ISP 3 via the public network 100, connected to the CSP 6 connected to the Internet network 200 via the ISP 3, and has a function of transmitting and receiving information for electronic commerce.
[0022]
The ISP 3 is configured by an information processing device such as a host computer, a workstation, and a server. When the ISP 3 receives a connection request from the user terminal 1 to the CSP 6 via the public network 100 configured by an ISDN or an analog telephone network, etc. Has a function of connecting to the CSP 6 connected to the Internet network 200.
[0023]
The CSP 6 is composed of information processing devices such as a host computer, a workstation, and a server. The CSP 6 provides a Web page (home page) for electronic commerce on the Internet and the like. Upon receiving information for electronic commerce such as information, a function of assigning a user identifier and transmitting the same as electronic commerce data to the electronic settlement authentication system 4 via the Internet 200, and electronically transmitting the settlement authentication result regarding the electronic commerce. It has a function of receiving from the payment authentication system 4 via the Internet network 200.
[0024]
The electronic settlement authentication system 4 can authenticate the settlement of each user from electronic commerce data including user identifiers from a plurality of CSPs 6, and functions as an authentication center provided centrally for the plurality of CSPs 6.
[0025]
The electronic payment authentication system 4 is configured by an information processing device such as a host computer, a workstation, and a server. When electronic commerce data including a user identifier is received from the Internet 200, the electronic payment authentication system 4 is configured by a public network such as an ISDN or an analog telephone network. The user terminal 1 is called back based on the user identifier via the network 100. When the callback is made, in addition to an announcement prompting transmission of confidential information such as user information, merchandise information, and credit card information from the electronic commerce data, a call is made. A function of announcing a callback identification number capable of specifying back information, receiving a callback identification number transmitted from the user via the public network 100, confidential information such as credit card information, and receiving the callback identification number. User based on user identifier It is determined whether or not it is the callback identification number transmitted when the user terminal is called back, and if it is determined that the callback identification number has already been transmitted, it is transmitted from the user via the public network 100. Receiving confidential information such as credit card information, giving the user's billing amount according to the callback received from the CSP 6 via the Internet network 200, and transmitting the billing information to the credit card settlement system 5 via the public network 100. It has a function and a function of adding a user identifier to the authentication result received from the credit card payment system 5 via the public network 100 and transmitting the result to the CSP 6 via the Internet 200 as the payment authentication result.
[0026]
The credit card payment system 5 is composed of an information processing device such as a host computer, a workstation, a server, and the like. The confidential information such as credit card information received from the electronic payment authentication system 4 via the public network 100, It has a function of confirming that there is no problem in payment due to debit or the like, and transmitting an authentication result as to whether payment is possible as payment information to the electronic payment authentication system 4 via the public network 100.
[0027]
FIG. 2 is a block diagram showing the configuration of the electronic payment authentication system 4 shown in FIG. 1. The electronic payment authentication system 4 includes a user information storage / control unit 4-1-1 and an announcement unit 4-1-2. And a switching unit 4-1.
[0028]
The switching unit 4-1 receives electronic commerce data including the user identifier from the CSP 6 via the Internet network 200, and sends the data to the user information storage / control unit 4-1-1. 4-1-1, a function to call back the user terminal 1 via the public network 100 to the contact information of the user information when the callback identification number, the user information and the product information are received; / Receive a callback identification number, user information, and product information from the control unit 4-1-1, and receive an announcement from the announcement unit 4-1-2 that prompts the transmission of confidential information such as credit card information (announcement unit 4-1-2 previously stores an announcement that prompts the transmission of confidential information such as credit card information). A function of sending the user terminal 1 via the public network 100 to the user terminal 1 and receiving secret information such as a callback identification number and credit card information transmitted from the user terminal 1 via the public network 100, and storing and controlling the user information. 4-1-1, the credit card information received from the user information storage / control unit 4-1-1, and the amount charged for the electronic commerce are transmitted to the credit card settlement system 5 via the public network 100. Upon receiving the function and the authentication result as to whether or not the payment received from the credit card payment system 5 via the public network 100 is possible, the authentication result is sent to the user information storage / control unit 4-1-1. A function of assigning a user identifier transmitted from the control unit 4-1-1 to the authentication result and transmitting the result to the CSP 6 via the Internet network 200; That.
[0029]
The user information storage / control unit 4-1-1 receives the user identifier, the contact information, and the user as the user information from the electronic commerce data including the user identifier from the CSP 6 via the Internet network 200 received from the exchange unit 4-1. A function to extract and store the user identifier, product name, purchase quantity, and billing amount as name and product information, and generate a callback identification number based on the stored user identifier, and combine it with the stored user information and product information. And a function to transmit to the exchange unit 4-1 (at this time, as shown in FIG. 5, a database relating to the callback identification number, in which the user identification and the billing amount are associated with the callback identification number as a key, is also created). , A callback recognition number transmitted from the user terminal 1 via the public network 100 received from the exchange unit 4-1. If the callback identification number is extracted from secret information such as credit card information and the extracted callback identification number is found in the database of the callback identification numbers that have been called back, and they match, Is determined as the callback identification number transmitted when the user terminal is called back, the billing amount is extracted from the matched callback identification number, and subsequently attached to the credit card information and the like received from the exchange unit 4-1. Then, upon receiving from the exchange unit 4-1 a function of transmitting to the exchange unit 4-1 and an authentication result indicating whether or not the settlement received from the credit card settlement system 5 via the public network 100 is possible, the billing information is transmitted. Has a function of extracting a user identifier from the user's callback identification number stored in advance and transmitting it to the exchange unit 4-1. .
[0030]
The configuration of the electronic payment authentication system 4 according to the present invention has been described in detail above. However, devices other than the electronic payment authentication system 4 in FIG. 1 are well known to those skilled in the art and do not directly relate to the present invention. Therefore, the detailed configuration is omitted.
[0031]
Next, the operation of the electronic payment authentication system having the above configuration will be described in detail with reference to FIGS.
[0032]
The user transmits a request for connection to the CSP 6 capable of electronic commerce connected to the Internet 200 from the user terminal 1 to the ISP 3 via the public network 100 (FIG. 3-A1). After the user authentication received from the public network 100, the ISP 3 connects to the CSP 6 connected to the Internet network 200 if the user is already registered (FIG. 3-A2).
[0033]
The user inputs e-commerce data such as user information and merchandise information from the user terminal 1 according to an instruction on a Web page (home page) provided for e-commerce by the CSP 6 (FIG. 3-A3). Then, the user disconnects the communication with the ISP 3 connected via the public network 100 at this time by the user terminal 1 (FIG. 3-A4).
[0034]
Upon confirming the disconnection from the user via the public network 100, the ISP 3 disconnects the communication with the CSP 6 connected via the Internet network 200 (FIG. 3-A5).
[0035]
By the above operation, the user has made a request to the CSP 6 to purchase a product in electronic commerce.
[0036]
When the CSP 6 receives e-commerce information such as user information and merchandise information from a user via the Internet 200, the CSP 6 assigns a user identifier to the CSP 6 as e-commerce data (see FIG. 4) via the Internet 200. To the electronic payment authentication system 4 (FIG. 3-A6).
[0037]
When receiving the electronic commerce data including the user identifier from the Internet network 200, the electronic payment authentication system 4 calls back the user terminal 1 via the public network 100 based on the user identifier (FIG. 3-A7) and changes the user identifier. In addition to the announcement that prompts the transmission of user information, product information, and confidential information such as credit card information from the e-commerce data, a callback identification number that can identify the callback information is announced (FIGS. 3-A8 and 9). Then, the communication is disconnected (FIG. 3-A10).
[0038]
More specifically, the exchange unit 4-1 receives the electronic commerce data including the user identifier from the CSP 6 via the Internet network 200, and sends the data to the user information storage / control unit 4-1-1.
[0039]
The user information storage / control unit 4-1-1, based on the electronic commerce data received from the exchange unit 4-1, as user information, a user identifier, a contact, and a user name, and as product information, a user identifier, a product name, and a purchase quantity. And the charge amount is extracted and stored.
[0040]
The user information storage / control unit 4-1-1 generates a callback identification number based on the user identifier, and transmits the callback identification number to the exchange unit 4-1 together with the stored user information and product information. At this time, as shown in FIG. 5, a database relating to the callback identification number, in which the user identifier and the charge amount are associated with the callback identification number as a key, is also created.
[0041]
When the exchange unit 4-1 receives the callback identification number, the user information, and the product information from the user information storage / control unit 4-1-1, the exchange unit 4-1 calls the user terminal 1 via the public network 100 to the contact information of the user information. Back.
[0042]
When the user responds to the callback, the exchange unit 4-1 announces the callback identification number, user information, and product information received from the user information storage / control unit 4-1-1, and announce unit 4-1. After an announcement is made to prompt the transmission of confidential information such as credit card information stored in advance in 2, the communication is cut off.
[0043]
The user confirms the callback from the electronic payment authentication system 4 on the user terminal 1, and an announcement prompting transmission of confidential information such as credit card information transmitted from the electronic payment authentication system 4 via the public network 100. In addition, a callback identification number capable of specifying callback information is confirmed, and a connection is made to the electronic payment authentication system 4 via the public network by, for example, the public terminal 2 (FIG. 3-A11).
[0044]
In accordance with the instruction of the electronic payment authentication system 4, the user inputs the callback identification number for recognizing the user previously received from the electronic payment authentication system 4 via the public network 100 and the credit card information for performing the payment of the purchased product. Input from the public terminal 2 and disconnect (FIG. 3-A12 to 14).
[0045]
By the above operation, the user waits for the settlement authentication information regarding the settlement of the electronic commerce from the CSP 6.
[0046]
The electronic payment authentication system 4 receives a callback identification number and confidential information (see FIG. 4) such as credit card information transmitted from the user via the public network 100, and the received callback identification number is based on the user identifier. It is determined whether or not it is the callback identification number transmitted when the user terminal is called back. If it is determined that the callback identification number has already been transmitted, the user transmits the callback identification number via the public network 100. Receiving confidential information such as credit card information, etc., and providing a user's billing amount according to the callback received from the CSP 6 via the Internet network 200, and providing credit via the public network 100 as billing information (see FIG. 4). It is transmitted to the card settlement system 5 (FIG. 3-A15).
[0047]
More specifically, the exchange unit 4-1 receives confidential information such as a callback identification number and credit card information transmitted from the user terminal 1 via the public network 100, and stores the confidential information in the user information storage / control unit 4- Send to 1-1.
[0048]
The user information storage / control unit 4-1-1 extracts a callback identification number from the confidential information received from the exchange unit 4-1 and stores the callback identification number in the database of the callback identification number that has been called back by the extracted callback identification number. Is searched for, and if they match, it is judged as the callback identification number sent when the user terminal was called back, the billing amount is extracted from the matched callback identification number, To the credit card information and the like received from the exchange unit 4-1 and transmit it to the exchange unit 4-1.
[0049]
The exchange unit 4-1 transmits the credit card information received from the user information storage / control unit 4-1-1 and the charge amount of the electronic commerce to the credit card settlement system 5 via the public network 100.
[0050]
The credit card payment system 5 confirms from the confidential information such as credit card information and the like received from the electronic payment authentication system 4 via the public network 100 and the amount of the charge whether there is no problem in payment by direct debit or the like, and as payment information. An authentication result indicating whether or not settlement is possible is transmitted to the electronic settlement authentication system 4 via the public network 100 (FIG. 3-A16).
[0051]
The electronic payment authentication system 4 adds a user identifier to the authentication result received from the credit card payment system 5 via the public network 100, and transmits the result to the CSP 6 via the Internet 200 as the payment authentication result (FIG. 3-A17). .
[0052]
More specifically, the exchange unit 4-1 receives an authentication result indicating whether or not settlement is possible from the credit card settlement system 5 via the public network 100, and sends the authentication result to the user information storage / control unit 4-1-1. Send.
[0053]
The user information storage / control unit 4-1-1 sends the billing information upon receiving from the exchange unit 4-1 an authentication result as to whether the payment received from the credit card payment system 5 via the public network 100 is possible or not. In doing so, a user identifier is extracted from the user's callback identification number stored in advance and transmitted to the exchange unit 4-1.
[0054]
The switching unit 4-1 adds the user identifier transmitted from the user information storage / control unit 4-1-1 to the authentication result, and transmits the result to the CSP 6 via the Internet 200.
[0055]
Although the operation of the electronic payment authentication system 4 according to the present invention has been described in detail above, devices other than the electronic payment authentication system 4 are well known to those skilled in the art, and are directly related to the present invention. Therefore, a detailed description of the operation is omitted.
[0056]
Thus, in the above embodiment, when a callback is announced via the public network, a specific callback identification number is announced to the user, and then when the user transmits the callback identification number via the public network, Since the electronic payment authentication system can accept confidential information such as credit card information transmitted from the user continuously, even if the user goes out, transmission of credit card information and the like from a public terminal or the like is not possible. This makes it possible to realize an electronic payment authentication system that is not conscious of time and place.
[0057]
In the above embodiment, the user has confirmed the callback identification number and then connected to the electronic payment authentication system 4 by the public terminal 2 via the public network (FIG. 3-A11). The terminal 1 may be used to connect to the electronic payment authentication system 4.
[0058]
In the above embodiment, the electronic payment authentication system 4 and the credit card payment system 5 are connected to each other via the public network 100 in order to prevent leakage of secret information such as credit card information between the two. However, the connection does not necessarily need to be through the public network 100, and may be connected via a dedicated line or a packet switching network, as long as data such as credit card information, billing amount, and authentication result can be exchanged.
[0059]
【The invention's effect】
As described above, according to the present invention, it is possible to provide an electronic payment authentication system that can reliably prevent leakage of confidential information such as credit card information and that is not restricted by user actions or time. be able to.
[Brief description of the drawings]
FIG. 1 is a block diagram showing an overall configuration of an electronic commerce system including an electronic payment authentication system according to an embodiment of the present invention.
FIG. 2 is a block diagram showing a configuration of an embodiment of an electronic payment authentication system according to the present invention.
FIG. 3 is a sequence diagram of the electronic commerce system of FIG. 1;
FIG. 4 is a diagram illustrating an example of transmission / reception data of each block of the electronic commerce system of FIG. 1;
FIG. 5 is a diagram showing an example of a callback identification number database by the electronic payment authentication system according to the present invention.
FIG. 6 is a sequence diagram showing an example of a conventional e-commerce service.
[Explanation of symbols]
1 user terminal
1-1 Information terminals such as personal computers
1-2 Telephone terminal
2 Public terminals
3 Internet service provider device (ISP)
4 Electronic payment authentication system
4-1 Switching unit
4-1-1 User information storage / control unit
4-1-2 Announcement Department
5 Credit card payment system
6. Electronic commerce service provider equipment (CSP)
100 public network
200 Internet Network

Claims (3)

An electronic payment authentication system for electronic commerce for transmitting and receiving electronic commerce information between a user terminal and an electronic commerce service provider device via an Internet network, and settling the electronic commerce payment by a credit card settlement system. ,
Upon receiving e-commerce data including the user identifier from the e-commerce service provider device, the user terminal is called back based on the user identifier, an announcement requesting confidential information for electronic payment, and the callback information are specified. Sending e-commerce data over a public network, including a callback identification number that can
Means for receiving the confidential information via the public network,
Means for transmitting the confidential information to the credit card payment system and receiving authentication result data on the confidential information of the user from the credit card payment system;
Means for transmitting the authentication result data to the e-commerce service provider device. The electronic payment authentication system according to claim 1, wherein the electronic payment authentication system receives the confidential information from the user terminal or a public terminal via the public network. The electronic payment authentication system according to claim 1, wherein the electronic payment authentication system setstle the payment of the electronic transaction via the credit card payment system and a public network.

Images