JP2004318691A - Customer data management method, customer data management terminal, electronic commerce system, and storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize a customer authentication capable of maintaining the high security of customer information in a purchase procedure on the Internet and preventing an illegal spoofing access to a customer with respect to a customer management method in acting of purchase and delivery, a customer management terminal in acting of purchase and delivery, an electronic commerce system and a storage medium. <P>SOLUTION: This customer data management method for managing the access authentication from a customer comprises: a process for receiving customer ID and a password from the customer and fingerprint image data; a process for extracting featured values from the fingerprint image data after the establishment of the authentication of the customer ID and the password; and a process for executing authentication according to the accuracy of the extracted featured values. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
TECHNICAL FIELD The present invention relates to a customer management method in purchase and delivery agency, a customer management terminal device in purchase and delivery agency, an electronic commerce system, and a storage medium. Further, the present invention is suitable for customer authentication for preventing unauthorized access to a customer due to impersonation.
[0002]
[Prior art]
Japanese Patent Application Laid-Open No. 10-161979 discloses a method of logging in to a server using fingerprint authentication as a method of logging in to a server. Japanese Patent Laid-Open No. 2000-057341 proposes an authentication system using a fingerprint management server.
[0003]
[Problems to be solved by the invention]
However, in Japanese Patent Application Laid-Open No. H10-161979, fingerprint authentication is client-dependent, and there is no fingerprint authentication algorithm or means for protecting against output leakage to a third party. Japanese Patent Application Laid-Open No. 2000-057341 provides a more secure authentication system by transferring fingerprint data to a server and performing collective authentication by the server. However, in managing an extremely large number of clients, users, or customers, only the grouping proposed in Japanese Patent Application Laid-Open No. 2000-057341 causes maintenance such as user registration / update and an increase in the number of servers. Further, there is a problem that it takes a very long time to perform authentication, that is, it takes a very long time to collate the fingerprint data transferred to the server with the fingerprint database.
[0004]
SUMMARY OF THE INVENTION In view of the above problems, an object of the present invention is to simplify a complicated authentication procedure and enhance security of user information.
[0005]
[Means for Solving the Problems]
The customer data management method of the present invention is a method for managing access authentication from a customer, comprising the steps of receiving fingerprint image data from the customer together with the customer ID and password, and authenticating the customer ID and password. After the establishment, a step of extracting a feature amount from the fingerprint image data and a step of performing authentication based on the accuracy of the extracted feature amount are provided.
[0006]
Another feature of the present invention is that, in the step of performing authentication based on the accuracy of the extracted feature amount, a registered database extracted from fingerprint image data from a managed database using the customer ID as a key. By comparing the extracted feature quantity with the extracted feature quantity, the accuracy of the feature quantity extracted from the fingerprint image data can be obtained at one time.
[0007]
BEST MODE FOR CARRYING OUT THE INVENTION
(First embodiment)
FIG. 1 is a block diagram for performing user registration, authentication, and a purchase procedure at a purchase / delivery agency site 110 on the Internet according to an embodiment of the present invention. Referring to FIG. 2, a flow from the purchase / delivery agency site 110 to the purchase of articles handled at the sales site 104 will be described with reference to FIGS. 2 and 3.
[0008]
FIG. 2 is a flowchart for registering the user 102 at the purchase / delivery agency site 110. First, in step 201, the user 102 activates a web browsing program of a client computer used by the user 102, and accesses a URL for member registration of the purchase / delivery agency site 110 using the web browsing program. In step 202, the purchase / delivery agency site 110 transmits, to the user 102, data for prompting the user 102 to input a member name, address, and the like shown in FIG. I do. In step 203, data necessary for the registration form, for example, data such as the name and address of the user is input and transmitted to the purchase / delivery agency site 110 by the https protocol. In step 204, the purchase / delivery agency site 110 checks whether there is any registered data, such as a duplicate name or address, in the database of the registered user in the received data. If the received data is new, in step 205, the purchase / delivery agency site 110 issues a member ID, and transmits data for prompting the user to set authentication data necessary for performing member authentication of the member ID. In the present embodiment, the data necessary for the authentication is the password and the fingerprint pattern of the user. In step 205, the purchase / delivery agency site 110 uses the form for inputting the password and the form used by the user 102. A form to be read by the fingerprint image reading device 111 connected to the client computer is transmitted by the https protocol. In step 206, the user 102 enters a password in the received form, drives the fingerprint image reader 111, causes the fingerprint image reader to read the fingerprint of at least one finger, for example, the right index finger, Transfer the read image data to the computer. In step 207, the user 102 encrypts the fingerprint image read data transferred to the client computer and the password, and transfers the encrypted fingerprint image read data to the form received in step 206 so as to be input. Transmits the form in which the data is input to the purchase / delivery agency site 110 using the https protocol. In step 208, upon receiving the authentication data, the purchase / delivery agency site 110 decrypts the encrypted fingerprint image read data and password, and registers the decrypted fingerprint image read data as the member ID authentication data.
[0009]
In this embodiment, a publicly known public key method, for example, an RSA encryption method is used as an encryption algorithm. Also, a fingerprint authentication algorithm as authentication data from a fingerprint image can use, for example, a method based on minutiae matching. References to the method based on Minutet's matching include, for example, IEEE Transactions on PAMI, Vol. 19, no. 1, January 1997. Next, a flow in which the user 102 who has completed the member registration procedure purchases articles handled at the sales site 104 from the purchase / delivery agency site 110 will be described with reference to FIG. First, in step 301, the user 102 activates a web browsing program of a client computer used by the user 102, and accesses a URL for member authentication of the purchase / delivery agency site 110 using the web browsing program. Upon receiving the access from the user 102, the purchase / delivery agency site 110 transmits a member authentication request to the user 102 by using the https protocol. In this embodiment, data for requesting input of a member ID, a password, and a fingerprint image is transmitted. In step 302, the user 102 inputs the registered member ID and password from input devices such as a keyboard, and performs registration using the fingerprint image reading device 111 connected to the client computer used by the user 102. The performed finger is placed on the reading unit of the fingerprint image reading device, and the fingerprint is read. The entered member ID, password, and fingerprint image are encrypted, and the encrypted member ID, password, and fingerprint image are attached according to the authentication request data received from the purchase / delivery agency site 110, and It is transmitted to the purchase / delivery agency site 110 by a protocol. In step 303, the purchase / delivery agency site 110 decrypts the encrypted member ID, password, and fingerprint image received from the user 102, and performs member authentication. In the member authentication procedure, the password information of the corresponding member ID is loaded on the memory from the member database based on the decoded member ID. If there is no corresponding member ID in the member database, the process returns to step 302. Next, the decrypted password is compared with the password loaded on the memory. If the password authentication fails, the process returns to step 302. If the password authentication succeeds, the fingerprint authentication data of the corresponding member ID is loaded on the memory. From the decrypted fingerprint image, fingerprint authentication data is extracted and collated with the authentication data loaded on the memory. If the fingerprint authentication fails, the process returns to step 302, and if the fingerprint authentication succeeds, the member authentication is established. In the next step 304, the purchase / delivery agency site 110 transmits the data in the URL serving as the order form shown in FIG. 5, for example. The purchase desired item is transmitted to the purchase / delivery agency site 110. In step 305, the operator of the purchase / delivery agency site 110 searches for a site that sells the purchase item specified by the user 102. Specifically, a sales site that handles the name of the purchased product is searched from the portal site 108 or the portal site 109 according to the conventional example, and price and delivery date information is obtained. In step 306, the operator of the purchase / delivery agency site 110 transmits the obtained information such as the sales site, price, and delivery date, and at least one piece of information most suitable for the item desired by the user 102 to purchase. To be sent by e-mail. In step 307, when the user 102 receives the electronic mail, if there is no sales site suitable for the purchase condition suitable for the purchase condition, the user 102 stops the purchase procedure and ends. If there is at least one sales site suitable for the purchase condition, in step 308, one of the sites desired to be purchased is selected from among the sales sites suitable for the purchase condition, and information for purchasing from the site is included. The e-mail is transmitted to the purchase / delivery agency site 110. In step 309, upon receipt of the purchase decision confirmation e-mail from the user 102, the purchase / delivery agency site 110 sends the purchase / delivery site that does not include the user information of the user 102 at all to the sales site determined by the user 102. The purchase procedure is performed according to the conventional example using the unique registration information of the agency site. However, since the destination is the user 102, the transmission of the destination of the user 102 to the sales site determined by the user 102 lowers the security of the user information. Reference numeral 110 requests the sales site for information on a place to ship the goods purchased by the user 102 to the sales site. The purchase / delivery agency site 603 shown in FIG. By the area network, a delivery procedure is performed from a place designated by the sales site for shipping the goods purchased by the user 602 to an arrival place designated by the user 602. For example, the server of the purchase / delivery agency site 603 automatically calculates the branch 607 closest to the arrival location from the branch 609 closest to the shipping location, and sends the purchased product of the user 602. Is issued to the terminal connected to the branch 609 located closest to the shipping place.
[0010]
(Second embodiment)
The present invention is not limited to the first embodiment described above. In the first embodiment, the fingerprint image is used as a key for authentication. However, other biometric authentication of the user includes a voiceprint, a fundus image, a handwriting, a face image, DNA, and the like. By using authentication based on one or a combination of authentications, more accurate user authentication can be performed.
[0011]
(Third embodiment)
The present invention is not limited to the above-described first and second embodiments. In the first embodiment, the verification is speeded up by using three keys of the member ID, the password, and the fingerprint authentication in the member authentication procedure. However, if the verification speed is not a problem, such as when the user forgets the password, the member authentication using only the fingerprint authentication as a key may be performed.
[0012]
(Fourth embodiment)
The invention is not limited to the three embodiments described above. In the first embodiment, in step 306, price and delivery date information is obtained by the intervention of an operator. However, by a search using an automatic patrol robot employed by many portal sites, it is possible to automatically obtain a sales site that has optimal conditions by using the product name as a key from the search results.
[0013]
【The invention's effect】
As described above, according to the present invention, user registration is managed not only by keyboard input but also by using biometric information as a key, and by managing user registration at one site, users can be protected by impersonation. It is possible to realize a website that enhances the security of user information by not only worrying about lack of sex but also simplifying complicated purchase procedures and performing purchase and delivery instead.
[Brief description of the drawings]
FIG. 1 is a diagram showing a block configuration of an Internet purchase registration procedure and a purchase procedure according to the present invention.
FIG. 2 is a diagram showing a flow of a member registration procedure for Internet purchase according to the present invention.
FIG. 3 is a diagram showing a flow of an Internet purchase procedure of a registered user according to the present invention.
FIG. 4 is a diagram showing a structure of a member registration form for Internet purchase according to the present invention; FIG. 5 is a diagram showing a structure of an order form in Internet purchase according to the present invention;
FIG. 6 is a diagram showing a LAN configuration of a purchase / transport agency site according to the present invention.

Claims (14)

The registered customer data includes an ID for identifying the customer and a customer data management method that is a key for authenticating at least one customer,
A customer data management method, comprising: an authentication step for increasing the accuracy of the authenticity of the authentication request with respect to the authentication request from the customer corresponding to the customer data. 2. The customer data management method according to claim 1, wherein keys for authenticating the customer are a password and a fingerprint image. In addition to the above-mentioned claim 1 or claim 2, a key for authenticating a customer is encrypted, and a decryption step of decrypting / decrypting the encrypted key is provided. And customer data management method. In addition to the second or third aspect, the method further includes a step of extracting a feature amount from the fingerprint image, and a feature amount comparing step of comparing the extracted feature amount with a previously registered feature amount. A customer data management method characterized in that: The customer data management method according to any one of claims 1 to 4, wherein the authentication request from the customer is made via the Internet. The registered customer data includes an ID for identifying the customer and a customer data management device that is a key for authenticating at least one customer,
A customer data management device, comprising: an authentication unit that increases the accuracy of authenticity of the authentication request with respect to the authentication request from the customer corresponding to the customer data. 7. The customer data management method according to claim 6, wherein the key for authenticating the customer is a password and a fingerprint image. In addition to the above-mentioned claim 6 or claim 7, a key for authenticating a customer is encrypted, and a decryption means for decrypting / decrypting the encrypted key is provided. And customer data management device. In addition to the above-mentioned claim 7 or claim 8, the apparatus further comprises means for extracting a feature amount from a fingerprint image, and feature amount comparing means for comparing the extracted feature amount with a previously registered feature amount. A customer data management device, characterized in that: 10. The customer data management device according to claim 6, wherein the authentication request from the customer is made via the Internet. A plurality of terminal devices are connected via a communication line, and in the electronic commerce system performed between the terminal devices,
Comprising a customer terminal device and a customer management terminal device,
The customer terminal device includes a key input device for inputting at least one key for an authentication request, and issues an authentication request by a key input device of the customer terminal device,
An electronic commerce system, wherein the customer management terminal device includes an authentication unit that increases the accuracy of the authenticity of the authentication request issued from the customer terminal device. 12. The electronic commerce system according to claim 11, wherein one of the key input devices is a fingerprint reading device. A storage medium storing a program for executing the method according to any one of claims 1 to 5 so as to be readable from a computer. A storage medium storing a program constituting each means according to any one of claims 6 to 10 so as to be readable from a computer.

Images