JP2004342036A - Point management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security for transfer of common points between business partner terminals that handle business partner points and a common point management center in a point management system. <P>SOLUTION: When common points are transferred from a business partner terminal 3 to the common point management center (a common point site 2), common points and an authentication code issued from the common point management center are transmitted, and user ID identifying a user is transmitted besides the authentication code. The authentication code is included with user ID pre-transmitted from a user to be formed. The common point site 2 compares user ID, which is included in the authentication code transmitted from the business partner terminal 3, with user ID inputted at the business partner terminal 3. Consequently, security for transfer of common points between the business partner terminal 3 and the common point site 2 is secured. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a point management system that manages points by converting points managed by a plurality of operators into common points, and more particularly to security associated with moving points.
[0002]
[Prior art]
A point system is known in which points are given according to the purchase amount of a product, the degree of use of a used service, the degree of use of a card, and the like, and the accumulated points are returned to obtain goods and services.
[0003]
With the spread of such a point system, a situation has arisen in which one user has many types of points and must possess and use each point card properly. Each point can only be redeemed by products or services related to the point issuer, so points cannot be integrated and used, even though points distributed over many types will be of great value. There was a problem. In addition, there is a problem for the company that issues points in terms of the cost burden required for facility introduction, maintenance, and operation.
[0004]
A common point management system that solves such a problem is proposed in, for example, Patent Document 1. In this common point management system, common points are issued from each business, and a user can request any business to return points.
[0005]
Further, a point system that converts points issued and managed by a plurality of operators into reference points and uses the converted points as reference points is proposed in, for example, Patent Document 2. In this point system, when a user requests conversion of points from a conversion source point to a conversion destination point, it is checked with the issuing source of the conversion source point whether the user has the points.
[0006]
In addition, a point management institution or a common point management institution is provided at a site on a network, and a point is used on the network by accessing a homepage provided at each site. In order to use the point system by accessing the homepage in this way, it is necessary to prevent unauthorized access and ensure security.
[0007]
As a method of preventing unauthorized access to a homepage, a method of setting a password on the homepage is known. As a method of setting a password on this homepage, for example, a method of prohibiting anonymous connection by setting a WWW server, a method of setting a simple password by Java (registered trademark) Script, a method of performing user authentication by CGI, and a method of setting a URL A method of using a password is known.
[0008]
[Patent Document 1] JP-A-2002-216060
[0009]
[Patent Document 2] JP-A-2002-298051
[0010]
[Problems to be solved by the invention]
In the mode in which the points issued by each company are used, if the number of points on hand is small, the chance of using the points is reduced. This has the problem that fractional remaining points cannot be used for users, and for the company that issues points, uncollected points that have been treated as provisions for a certain period are taxable. There is a problem that is regarded as a profit.
[0011]
On the other hand, in the point service form in which various points issued by each business are converted to common points at a common point site and various services are used using the common points, common points are issued or point conversion is performed. Is performed, the opportunity to use the points increases, and the uncollected points can be reduced accordingly.
[0012]
However, in a system that converts points issued by multiple operators into common points and uses them, mutual access is possible between each operator and the organization that manages the common points. There are problems in terms of securing facilities and personnel and increasing costs.
[0013]
For example, there are various problems when the points given by each business are managed only by a card possessed by each user, and when the points held on this card are converted to common points and used.
[0014]
For example, on a point management system, points issued by a business (hereinafter, business points) are not centrally managed by a server or the like, but are recorded only on a card held by each user. Therefore, when transferring points on each card to the common point management institution, it is not possible to identify the user or to check whether the point data has been tampered with. It is difficult to move point data to a common point management organization (for example, a site that manages common points).
[0015]
For example, when transferring a business point held by an individual user to a common point, each business point is converted to a common point at the partner business terminal owned by the business partner that handles the business point, and the converted common point is converted. Move the points from the partner business operator terminal to the common point management organization. At this time, when the common points are moved between the partner business operator terminal and the common point management organization, a person other than the user moves the common points and changes the common points managed by the common point management organization. There is a possibility that fraud such as acquiring a prize using a common point may be performed.
[0016]
Also, from a cost standpoint, it is necessary to construct a new system on the business side in order to newly support the system of the common point management institution. You will be taking risks. For this reason, it is desired for the business operator to be able to move the points while maintaining security while using the existing system as it is.
[0017]
Therefore, the present invention solves the above-described problems, and in a point management system, improves security when moving common points between an affiliated business operator terminal that handles business points and a common point management organization. Aim.
[0018]
[Means for Solving the Problems]
When converting the business points held by individual users to common points and using this common point, the user must use a partner business terminal that owns the business partner that handles the business points The business points are converted into common points, and the converted business points are moved to a common point management organization.
[0019]
According to the present invention, when a common point is moved between the partner operator terminal and the common point management institution, the authentication code issued by the common point management institution together with the common point is sent, and the user is provided separately from the authentication code. Is sent. This authentication code is formed including the user ID sent from the user in advance. The common point management organization collates the user ID included in the authentication code sent from the partner operator terminal with the user ID input at the partner operator terminal. In this way, even if the authentication code is stolen, unauthorized user authentication is prevented by managing the user ID, and the security of the movement of the common point between the partner business operator terminal and the common point management organization is improved. Secure.
[0020]
In other words, in the present invention, authentication is performed based on the difference between two user IDs, a user ID included in an authentication code issued by the common point management institution and a user ID input separately. Common point management, without installing new facilities to enhance security in the existing network system established between the partner carrier terminal owned by the partner carrier handling the customer points and the common point management organization By issuing the authentication code on the institution side and returning the authentication code, the movement of the common point by an unauthorized person can be suppressed and the security can be enhanced.
[0021]
The point management system according to the present invention is a point management system for converting points issued by a plurality of point issuing organizations into common points managed and operated by a common point management organization, wherein the common point management organization includes a user ID for specifying a user. A function for issuing an authentication code including the above, and the authentication code and the user ID input at the partner operator terminal are taken from the partner operator terminal, and the user ID included in the authentication code and the user ID entered at the partner operator terminal are input. And a function of collating with the user ID.
[0022]
The common point management institution compares the user ID included in the issued authentication code with the user ID input from the partner operator terminal, and authenticates the authentication result between the partner operator terminal and the common point manager. It is a condition to permit or deny point movement. When the two user IDs match, the access is recognized as an authorized user, and the movement of the common point between the partner business operator terminal and the common point management organization is permitted.
[0023]
Here, the point issuing organization is an issuing organization that issues points (business points) used by users for each business. By accessing a business site provided by each business operator, the user can receive and use business company points. The management of the issued business points is not limited to the point issuing organization but may be performed by the point management organization.
[0024]
This point management organization is a management organization that manages business points issued by the point issuing organization and can be provided at the business site. The user can use the business points by accessing a business site provided by each business for point management.
[0025]
In addition, the common point management organization is an organization that manages common points, forms an alliance with the point management organization and the point issuing organization, and establishes common points for business points issued and managed by the point management organization and the point issuing organization. To each other and mutually agree to use this common point. The common point management organization can manage common points by using a common point site provided on the network.
[0026]
The common point management organization receives access from users or affiliated operators that are affiliated with the operator, and adds common points converted from each operator point, subtracts common points used, etc. Point management associated with the movement of.
[0027]
According to the present invention, in the movement management of the common point, the authentication code issued by the common point management organization includes the user ID and confirms the coincidence with the user ID which is input separately. Prevent increase of common points and use of common points.
[0028]
The affiliated business operator terminal is a terminal provided by an affiliated business operator that is affiliated with a business of a point issuing institution that issues business points, and is provided, for example, in a store or a game facility. The affiliated business operator adds business points to the user and uses the business points according to the usage status. At this time, the affiliated business operators access the business site provided for the point management by each business operator from the affiliated business operator's terminal owned by each business partner, and perform the point processing of the business company points. Further, by accessing the common point management institution, the partner business operator terminal performs conversion from business points to common points and point management associated with the use of common points.
[0029]
The partner company terminal of the present invention captures the authentication code issued by the common point management institution through the mobile terminal owned by the user. The user accesses the common point management institution, receives an authentication code from the common point management institution, and sends the authentication code to the partner company terminal of the partner company. Thereby, the partner business operator terminal can acquire the authentication code from the common point management organization.
[0030]
At this time, the user notifies the common point management organization of the user ID. The common point management institution creates an authentication code using the notified user ID.
[0031]
Note that the mobile terminal may be any terminal having a function of connecting to a common point management institution via a network and a function of connecting to an affiliated company terminal, such as a mobile phone and a mobile device.
[0032]
The first mode of sending an authentication code from a mobile terminal to a partner company terminal uses image reading. In this mode, the common point management organization converts the authentication code into a two-dimensional bar code and sends it. The mobile terminal displays the recognized two-dimensional barcode sent from the common point management organization on the display screen, and the partner business operator terminal reads this two-dimensional barcode display. The partner company terminal includes a barcode reader that reads a two-dimensional barcode.
[0033]
A second mode of transmitting an authentication code from a mobile terminal to a partner company terminal uses short-range communication such as infrared communication. In this embodiment, the portable terminal converts the authentication code received from the common point management organization into an infrared signal and transmits the infrared signal, and the partner company terminal receives the infrared signal to acquire the authentication code. In order to obtain the authentication code, the partner company terminal includes a receiving unit that receives an infrared signal. In addition, short-range communication using a weak signal can be used.
[0034]
As described above, the partner operator terminal includes the first input unit that acquires the authentication code (two-dimensional barcode) from the common point management institution via the mobile terminal, and further inputs the user ID from the user. A second input unit; By these two input means, the partner company terminal acquires the user ID in two forms.
[0035]
Further, the point management system of the present invention has various modes for determining the validity of the authentication code.
[0036]
In the first and second embodiments, the elapsed time after the issuance of the authentication code is managed, and the authentication code that has passed for a long time after the issuance is invalidated. This limits the time required for unauthorized use such as theft or decryption of the authentication code, reduces the risk of decryption or duplication of the authentication code, and secures security. In the first mode, an expiration date is set for the issued authentication code. In the second mode, the common point management institution sets the time from issuance of the authentication code to capture of the authentication code from the partner business operator terminal. When the measured time is within the set time, the movement of the common point is permitted, and when the measured time exceeds the set time, the movement of the common point is not permitted.
[0037]
The point management system of the present invention can also include time information and identification information in the authentication code as a third or fourth mode for improving the security of the authentication code.
[0038]
In the third mode in which the authentication code includes the time information, the common point management organization issues an authentication code including the time information to the mobile terminal, captures the authentication code from the partner operator terminal via the mobile terminal, and captures the authentication code. The time information in the authentication code is compared with the time information at the time of issuance. If the two pieces of time information match, movement of the common point between the partner business operator terminal and the common point management organization is permitted. This time information can also be used for setting the expiration date of the authentication code.
[0039]
In the fourth mode in which the authentication code includes the identification information, the common point management institution fetches the identification information from the mobile terminal, issues an authentication code including the obtained identification information to the mobile terminal, and forms an alliance via the mobile terminal. The authentication code including the identification information is taken in from the business operator terminal. On the other hand, the partner business operator terminal inputs the identification information separately and sends it to the common point management organization. The common point management organization determines the difference between the two pieces of identification information, and determines the validity of the authentication code. When the input identification information matches the identification information in the authentication code, the movement of the common point between the partner operator terminal and the common point management institution is permitted.
[0040]
In the form in which the business points are stored only by card, the partner business terminal is a business point corresponding to the common points transferred from the business points recorded on the card issued by each point issuing organization to the common point management organization , And the function of updating the points of the card with the business points is provided, whereby the business points recorded on the card can be updated.
[0041]
In the case where the business points are stored at the point issuing organization of each business, the partner business terminal changes from the business points recorded on the card issued by each point issuing organization to the common points transferred to the common point management organization. By subtracting the corresponding business point, the business point managed by the point issuing organization is updated by sending the business point to the point issuing organization.
[0042]
In addition, the partner carrier terminal has a function of converting points issued by each point issuing organization into common points managed by a common point management organization, and converts common points obtained by converting input points into common point management organizations. Move to
[0043]
As a form of sending the authentication code to the common point management institution, the acquired two-dimensional barcode is converted into a member key and only displayed, and the two-dimensional barcode before conversion is sent to the common point management institution. In addition, as a form of sending the authentication code to the common point management organization, the acquired authentication code is converted into a member key and displayed only, and the authentication code before conversion is sent to the common point management organization.
[0044]
By displaying a member key different from the actual two-dimensional barcode or authentication code on the display screen of the mobile terminal, even if the member key displayed on the mobile terminal is stolen, it is transmitted to the common point management organization. Since the two-dimensional barcode or authentication code to be used is different from the member key, it is possible to prevent the authentication code from being leaked.
[0045]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0046]
First, each mode of authentication performed in the point management system of the present invention will be described.
[0047]
In the system using points, a unique issuing company point is issued from a point issuing organization operated by a company such as a company. The user enjoys benefits such as providing services and giving and receiving prizes by using the business partner points in a business partner having a business tie-up with each business such as stores and game facilities.
[0048]
Along with the system of business points operated by each business operator, a common point system that converts these business business points to issue common points and enables common businesses to enjoy the benefits of the points even between different business enterprises There is.
[0049]
This system using common points has a common point site as a common point management institution that manages common points, and an affiliated business operator terminal owned by each affiliated business operator. By exchanging the common point data, the user receives the service and the prize by the common point, and manages the business point and the common point held by each user.
[0050]
The present invention secures the security of personal authentication by using the authentication code issued by the common point site when moving the common point between the affiliated business operator terminal and the common point management organization.
[0051]
The present invention can perform personal authentication using an authentication code in a plurality of modes. FIG. 1 to FIG. 3 are schematic diagrams for explaining an aspect of personal authentication using an authentication code according to the present invention. Each figure shows an example in which the business points recorded on the card are converted into the common points to update the common points of the common point site, and the business points held on the card are updated.
[0052]
The first authentication mode will be described with reference to FIG. The first authentication mode is a mode in which, in point conversion, a user performs authentication in accessing a common point site from an affiliated company terminal. FIG. 1 shows an example in which a two-dimensional barcode is used as an authentication code between the mobile terminal and the partner company terminal and the common point site.
[0053]
In the point management system 1, a user requests an authentication code from the mobile terminal 4 to the common point site 2, and the common point site 2 forms an authentication code in response to the request and issues the authentication code to the mobile terminal 4. At this time, the user notifies the common point site 2 of a user ID for specifying the user.
[0054]
In the following, a description will be given using a member ID as the user ID. The member ID is a member identification and identification information of the common point site. The common point site creates an authentication code including the member ID notified by the user.
[0055]
The authentication code is issued for each user, and different code information can be issued in response to each request from the user. Here, an example is shown in which the authentication code is converted into a two-dimensional barcode and transmitted.
[0056]
Upon receiving the authentication code (two-dimensional barcode) issued by the common point site 2, the user goes to a store or a gaming facility of a partner company that intends to use the business point held on the card 5, and receives the authentication. The code (two-dimensional barcode) is sent to the partner company terminal 3 of the partner company. As the use of the business points, for example, the business points recorded on the card 5 are converted into the common points, the common points of the common point site 2 are updated, and the common points stored in the common point site 2 are updated. To receive services or receive goods.
[0057]
The partner business operator terminal 3 receives the authentication code (two-dimensional barcode) from the mobile terminal 4 and acquires the member ID from the user. The acquisition of the member ID can be performed by an input means such as a key provided in the affiliated business operator terminal 3. The user also inputs a common point to be used. The partner business operator terminal 3 sends the authentication code (two-dimensional barcode) received from the mobile terminal 4, the member ID input from the input means, and the common points to be used to the common point site 2. The common point site 2 collates the member ID included in the authentication code sent from the affiliated business operator terminal 3 with the member ID input at the affiliated business operator terminal 3 to obtain an authentication code (two-dimensional bar code). Is checked, and the legitimacy of the user who intends to use the common point and the validity of the movement of the common point are determined. If the validity is confirmed, point processing of the common point is performed.
[0058]
When the validity of the user and the validity of the movement of the common point are confirmed in the common point site 2, the partner company terminal 3 provides the user with goods such as services and premiums, The business point recorded on the card 5 is updated.
[0059]
In addition, the authentication code may include expiration date information, whereby the expiration date can be managed and the validity of the authentication code can be determined.
[0060]
The authentication code is issued at the common point site, and by making the code different for each issuance, each point process can be specified, and security can be enhanced. Furthermore, in the present invention, the security of the authentication code is enhanced by acquiring the member ID in two forms at the common point site 2 and determining the difference. Even if the authentication code is stolen, unauthorized use can be prevented by managing the member ID.
[0061]
The two-dimensional barcode can be used when transmitting the authentication code from the mobile terminal to the partner operator terminal, and when using the two-dimensional barcode displayed on the mobile terminal.
[0062]
The second authentication mode will be described with reference to FIG. The second authentication mode is a mode in which in the point conversion, the user ID and the identification information of the authentication code are used for the authentication in accessing the common point site from the partner company terminal. The second authentication mode is different in that identification information is added in addition to the user ID of the authentication code used in the first authentication mode, and the other points are the same as the first authentication mode. Therefore, hereinafter, only the different configuration will be described, and the description of the common configuration will be omitted.
[0063]
The identification information is information set by the user, and together with the authentication code issued by the common point site, guarantees the legitimacy of the user who intends to use the common point. The user transmits identification information from the mobile terminal 4 to the common point site 2. The identification information can be character information such as numbers, alphabets, and characters that can be handled by the mobile terminal, and is set arbitrarily by the user.
[0064]
The common point site 2 issues an authentication code incorporating the identification information transmitted from the mobile terminal 4 and sends the authentication code to the mobile terminal 4 again. The mobile terminal 4 sends the authentication code (two-dimensional barcode) including the identification information transmitted from the common point site 2 to the partner company terminal 3 as in the first authentication mode. The partner company terminal 3 sends the authentication code (two-dimensional barcode) including the identification information to the common point site 2 and sends the identification information separately input by the user.
[0065]
The common point site 2 collates the member ID similarly to the above-described authentication mode, and collates the identification information included in the transmitted authentication code (two-dimensional barcode) with the identification information input separately. According to the second authentication mode, security can be enhanced by increasing data to be collated, and even if the member ID is stolen, the identification information arbitrarily formed by the user can be used. Security can be increased.
[0066]
The third authentication mode will be described with reference to FIG. The third authentication mode is a mode in which, in the point conversion, the authentication in accessing the common point site from the partner carrier terminal is performed by the user ID of the authentication code and the time information, and the validity of the authentication code is determined by using the time information. Is determined. This third authentication mode is different in that time information is added in addition to the user ID of the authentication code used in the first authentication mode, and the other points are the same as the first authentication mode. Therefore, hereinafter, only the different configuration will be described, and the description of the common configuration will be omitted.
[0067]
The time information is, for example, information such as the time at which the authentication code was issued, and guarantees the validity of the authentication code issued by the common point site and the legitimacy of the user who intends to use the common point.
[0068]
The common point site 2 issues an authentication code incorporating the time information and sends it to the mobile terminal 4. The mobile terminal 4 sends the authentication code including the time information transmitted from the common point site 2 to the partner business operator terminal 3 as in the first authentication mode. The partner business operator terminal 3 sends the authentication code including the time information to the common point site 2.
[0069]
The common point site 2 checks the sent authentication code with the issued authentication code, extracts time information, and checks the issued time information. According to the third authentication mode, security can be enhanced by increasing data to be collated.
[0070]
Further, in the third authentication mode, the use time of the authentication code can be limited using the time information. As the time after the authentication code is issued becomes longer, the security security decreases. Therefore, the period during which the issued authentication code can be used is limited, thereby preventing a decrease in security.
[0071]
The point management system of the present invention can be applied not only to a mode of managing business points on a card but also to a mode of managing business points on a business site.
[0072]
In the following, a case where the present invention is applied to a mode of managing business points on a card will be described with reference to FIGS. 4 to 25, and a mode of managing business points on a business site will be described with reference to FIGS. 26 to 30. I do.
[0073]
First, a case will be described in which the present invention is applied to a mode in which business points are managed on a card.
[0074]
FIG. 4 is a schematic diagram for explaining a configuration example of a point management system for managing business points on a card according to the present invention. In FIG. 4, the point management system 1 includes a common point site 2 and a partner company terminal 3. The authentication code acquired via the mobile terminal 4 is sent from the partner company terminal 3 to the common point site 2, and the member ID is sent from the partner company terminal 3 to the common point site 2. The common point site 2 authenticates by comparing the member ID included in the authentication code (two-dimensional barcode) with the member ID input separately, and moves the common point when the authentication is confirmed.
[0075]
The common point site 2 includes a transmission / reception unit 2a for transmitting / receiving an authentication code, a member ID, and a common point to / from the mobile terminal 4 or the affiliated company terminal 3, and a common point management unit 2b for managing the common point. A configuration for performing authentication is provided. The configuration for performing the authentication includes an authentication code issuing unit 2c for issuing an authentication code including a member ID, a member ID included in the authentication code received from the partner company terminal 3, and an input from the partner company terminal 3. A collation means 2f for collating with the member ID. In addition, an authentication code conversion unit 2e for extracting the member ID and the expiration date information from the authentication code (two-dimensional barcode) is provided. The authentication code issuing unit 2c can be an arbitrary device such as a device using random number generation, and generates an authentication code using the member ID fetched from the transmission / reception unit 2a. The transmission / reception unit 2a can have a function of converting an authentication code into a two-dimensional barcode and transmitting the barcode.
[0076]
Further, the term management unit 2f determines the validity of the authentication code based on the term of validity information. If the expiration date has passed, the authentication code is invalidated.
[0077]
The affiliated business operator terminal 3 is a terminal provided in an affiliated business operator (for example, a store or a game facility) having an alliance with the business operator that issues and manages business points, and is connected to each business site. Business points can be managed. FIG. 4 omits a configuration for performing data processing between the business site and the business site.
[0078]
The partner business operator terminal 3 includes a transmitting means 3a for transmitting an authentication code, a member ID and a common point to the common point site 2, a point converting means 3b for converting the business point to the common point, and a point for recording on the card 5. Card rewriting means 3c for rewriting and means for taking in an authentication code (two-dimensional barcode) from the portable terminal 4 are provided.
[0079]
The point conversion means 3b calculates a corresponding common point from the number of business points for which conversion is desired. The conversion to the common point can be performed by multiplying the conversion point set in advance by the business operator point. The transmitting unit 3a transmits the common points converted by the point converting unit 3b to the common point site 2.
[0080]
The authentication code (two-dimensional barcode) is taken in from the portable terminal 4. As means for taking in the authentication code, for example, a two-dimensional barcode reading means 3d and an IrDA terminal 3e are provided. The two-dimensional barcode reading unit 3d reads a two-dimensional barcode displayed on the display unit of the mobile terminal. Further, the IrDA terminal 3e receives an infrared signal transmitted from the mobile terminal, and acquires an authentication code from the infrared signal.
[0081]
The mobile terminal 4 includes means for receiving the authentication code (two-dimensional barcode) transmitted from the common point site 2 and sending the received authentication code (two-dimensional barcode) to the partner business operator terminal 3. For example, when transmitting an authentication code using a two-dimensional barcode, the portable terminal 4A includes a transmitting / receiving unit 4a that receives a transmission signal from the common point site 2, and a two-dimensional barcode that acquires a two-dimensional barcode from the received signal. An acquisition unit 4b and a display unit 4d for displaying a two-dimensional barcode are provided.
[0082]
When transmitting the authentication code by an infrared signal, the portable terminal 4B includes a transmitting / receiving unit 4a for receiving a transmission signal from the common point site 2, an authentication code obtaining unit 4b for obtaining an authentication code from the received signal, An infrared signal generating means for generating an infrared signal in accordance with the authentication code. In the mobile terminals 4A and 4B, the transmission / reception unit 4a and the display unit 4d can be the transmission / reception unit and the display unit normally included in the mobile terminal.
[0083]
In the common point site 2, when there is access from the mobile terminal, the member ID is received from the user, and the authentication code issuing means 2c issues the authentication code including the member ID and different for each access, and transmits the same to the mobile terminal 4. At this time, it is not necessary to record the issued authentication code. The transmission / reception unit 2a can also convert the authentication code into a two-dimensional bar code and transmit the bar code.
[0084]
The mobile terminal 4 displays the transmitted authentication code (two-dimensional barcode) in a two-dimensional barcode or sends it to the partner company terminal 3 by infrared rays. The partner operator terminal 3 receives the data by the two-dimensional barcode reading means 3d or the IrDA terminal 3e, and sends it back to the common point site 2 from the transmitting means 3a. Further, the affiliated company terminal 3 sends the member ID input using a key or the like provided to the terminal to the common point site 2 from the transmission / reception means 3a. The input of the member ID is not limited to a key, and any input means such as reading a card can be used.
[0085]
In the common point site 2, the member ID is extracted from the authentication code by the authentication code conversion means 2d. The matching means 2e checks the member ID extracted from the authentication code and the member ID sent from the affiliated business operator terminal 3 to confirm the validity of the access. In addition, when inputting information for specifying a user in the affiliated business operator terminal 3, in addition to inputting and displaying the member ID, information relating to the authentication code can be displayed. In displaying the authentication code, the authentication code may not be directly displayed, but the authentication code may be converted to form a member key, and the member key may be displayed.
[0086]
FIG. 5 is a schematic diagram for explaining another configuration example of the point management system of the present invention for managing business points on a card. In this configuration example, time information is used for authentication matching in addition to authentication code matching. The configuration example shown in FIG. 5 is different from the configuration of the common point site 2 shown in FIG. Hereinafter, the different configuration will be described, and the common configuration will be omitted.
[0087]
The common point site 2 includes a transmission / reception unit 2a for transmitting / receiving an authentication code, a member ID, and a common point to / from the mobile terminal 4 or the affiliated company terminal 3, and a common point management unit 2b for managing the common point. A configuration for performing authentication is provided. The configuration for performing the authentication includes an authentication code issuing unit 2c for issuing an authentication code, a time information forming unit 2g for forming time information, a time information recording unit 2h for recording the issued time information, and a received authentication code. An authentication code converting means 2d for extracting a member ID from the user, a time information obtaining means 2i for extracting time information from the received authentication code, a member ID included in the authentication code received from the affiliated operator terminal 3, and an affiliated operator terminal 3. There is provided a collating unit 2e for collating with the input member ID and collating the time information included in the authentication code with the time information recorded in the time information recording unit 2h.
[0088]
Further, the term management unit 2f can also manage the term of the authentication code using the time information.
[0089]
The mobile terminal 4 and the partner company terminal 3 can be configured similarly to the configuration shown in FIG. 4, and receive an authentication code including time information from the common point site 2, and 3 again to the common point site 2.
[0090]
The matching unit 2f can increase the security of the legitimate access by checking the time information in addition to the matching based on the member ID.
[0091]
The flowchart illustrated in FIG. 6 illustrates an example of an authentication process performed by the common point site. Steps S1 to S4 show an authentication code issuance process, and steps S5 to S12 show an authentication process using the authentication code returned from the partner operator terminal via the mobile terminal. Here, the case where the expiration date management is performed is shown.
[0092]
The common point site 2 receives a login process using a member ID and a password sent from the mobile terminal 4 (step S1), and selects a menu (step S2). The authentication code issuing means 2c issues an authentication code using the member ID (step S3). The transmission / reception unit 2a transmits the issued authentication code or the converted two-dimensional barcode (Step S4).
[0093]
In the affiliated business operator terminal 3, a member ID and a member key for specifying the user are input and transmitted to the common point site 2. The member ID is ID information indicating that the member is a member of the common point, and the member key is information formed based on the authentication code (two-dimensional barcode). The member ID is input from input means (not shown) of the affiliated business operator terminal 3 and displayed on display means (not shown). The member key is automatically generated from the authentication code (two-dimensional barcode) in the terminal, and is displayed on a display (not shown).
[0094]
The partner company terminal 3 transmits an authentication code (two-dimensional barcode), a member ID, and a common point site in order to ensure the legitimacy of the user.
[0095]
In addition, the authentication code or the two-dimensional barcode is converted to the member key, and the member key is displayed on the display means of the affiliated operator terminal, and the member key is displayed, and the unconverted authentication code is sent to the common point site. Is also good. Thus, even if the member key is illegally known, it takes time until the authentication code is illegally acquired, so that illegal use of the common point can be suppressed.
[0096]
The common point site receives the member ID and the authentication code (two-dimensional barcode) (step S5). If a two-dimensional barcode is received, it is converted into an authentication code (step S6), and a member ID is extracted from the authentication code (step S7). The member ID extracted from the authentication code is collated with the member ID input on the affiliated business operator terminal 3 (step S8). If the member IDs do not match, the user is not authenticated (step S12).
[0097]
If the member IDs match, the expiration date is extracted. The expiration date information can be transmitted alone or included in an authentication code or a two-dimensional barcode, and the expiration date information is extracted from the code (step S9). It is determined whether the authentication code is within the validity period based on the extracted validity period information (step S10).
[0098]
If the member IDs match and it is within the expiration date, it is authenticated that the authentication code is valid and the access is valid (step S11).
[0099]
The processing contents of the points include a common point conversion request for converting business points into common points, a conversion request for providing services and prizes using the common points (hereinafter referred to as a prize conversion request), and the like. The conversion request used by the partner company is selected, and the partner terminal executes the selected conversion request. FIG. 7 is a processing example of a point conversion request and a prize exchange request using a common point performed by an affiliated business operator (hereinafter, an example of a store). Is shown. The numbers in parentheses below correspond to the numbers in FIG. Here, it is assumed that the users are point members and common point members of the business.
[0100]
When the user comes to the store (1), the user selects conversion of common points or exchange of prizes at the store counter (2). When the common point conversion request is selected (3), the store accesses the common point site (4), and performs store authentication using the store ID and password (5). Further, the user is authenticated as a common point member by using the member ID or the authentication code (6), and an operation of converting the business operator's point into the common point is performed. The user accesses the common point site in advance and obtains an authentication code including his / her member ID. In addition, the user inputs the member ID from the terminal of the affiliated company and sends it to the common point site. The common point site collates the member ID in the authentication code with the input member ID (21). After the authentication, an operation of converting the business operator n points to a common point is performed (7). The common point site receives the common point conversion operation and performs a common point transfer process (8). The store updates the business points recorded on the card (9).
[0101]
On the other hand, if a prize exchange request is selected (10), the store accesses the common point site (11) and performs store authentication using the store ID and password (12). Further, the user is authenticated as a common point member using the member ID and the authentication code (13), and a prize exchange operation using the common point is performed (14). The common point site receives the prize exchange operation and performs point processing of the common points (15). The store updates the business point recorded on the card (16).
[0102]
Hereinafter, the point processing for converting the business points recorded on the card into the common points will be described with reference to FIGS. 8 to 17, and the business points recorded on the card will be described with reference to FIGS. 18 to 25. The point processing for converting the premium will be described. The case where business points are managed by each point issuing organization will be described with reference to FIGS.
[0103]
First, the point conversion processing will be described. 8 and 9 are a block diagram for explaining a point conversion process and a diagram for explaining states. FIG. 10 shows a processing procedure in the affiliated company terminal (store terminal), and FIGS. 11 to 17 show examples of display screens in each procedure. 8 and 9, the same processes are denoted by the same reference numerals.
[0104]
In FIGS. 8 and 9, the user accesses the common point site from the portable terminal, and performs personal authentication using the member ID and the password (21). The common point site issues an authentication code for specifying an access or a user using the member ID (22) and sends it to the portable terminal. At this time, the authentication code may be converted into a two-dimensional barcode, and the converted two-dimensional barcode may be sent (23). The mobile terminal transfers the transmitted authentication code (two-dimensional barcode) to the store terminal. Here, the store terminal corresponds to the above-mentioned affiliated business operator terminal.
[0105]
One mode of transferring the authentication code is to convert the authentication code into a two-dimensional bar code, display it on the display means of the portable terminal (24), and use the reader such as a bar code reader provided in the store terminal to read this two-dimensional bar code. The reading is performed (25). In another mode of transfer of the authentication code, the authentication code is transmitted by short-range communication such as infrared communication (26), and is received by receiving means such as IrDA provided in the store terminal (27).
[0106]
The shop terminal 3 forms transmission data together with the transferred authentication code (28) and the member ID (29) separately input by the user. The store terminal 3 accesses the common point site (30), performs store authentication using the store ID and the password (31), and transmits the formed member ID and authentication code transmission data to the common point site (30). 32).
[0107]
The common point site 2 authenticates the common point member by the member ID in the transmitted transmission data and the member ID included in the authentication code. Here, the two-dimensional barcode is converted into an authentication code (33, 34).
[0108]
After the authentication is completed, the user inputs the business point to be converted into the common point into the store terminal (35), and the store terminal converts the business point into the common point (36) and transmits the converted common point to the common point site. (37). The common point site updates the common point account with the transmitted common points (38). Further, the store terminal updates the business point of the card held by the user by the point rewriting means (39).
[0109]
Next, a processing example of the store terminal will be described with reference to FIGS. 10 and 11 to 17.
[0110]
The store terminal reads the authentication code (two-dimensional barcode) including the member ID issued by the common point from the user's mobile terminal (41), and then displays the top screen. FIG. 11 shows an example of the top screen. An input window for a store ID and a password for accessing the common point site is displayed on the top screen (42). The login to the common point site is performed by inputting the store ID and the password (43).
[0111]
Upon login, a menu for selecting a desired service is displayed on the display screen. FIG. 12 shows an example of a menu screen, on which services such as point conversion, prize conversion, and inquiry are displayed. FIG. 13 is a display example when the point exchange service is selected (44).
[0112]
Next, an input window for inputting the member ID and the member key is displayed as in the display example of FIG. 14 in order to perform the member authentication of the common point. The user inputs the member ID from the key of the store terminal. As for the member key, the store terminal converts the authentication code to form a member key, and automatically inputs the member key. After confirming the input, the user clicks the “member authentication” button and transmits the same to the common point site (45). The common point site performs authentication confirmation using the member ID and the authentication code.
[0113]
If the member authentication is successful, the success of the member authentication is displayed on the display screen as shown in the display example in FIG. 15, and the bibliographic items such as the member ID, name, date of birth, etc. and the common point balance are displayed. At the same time, a window for inputting the number of points is displayed, and the point number of the business operator's point desired to be converted into the common point is input. FIG. 16 shows an example of a conversion content confirmation screen, which displays information such as a point issuer, a conversion point amount, the number of common points issued by conversion, and a converted common point balance (46).
[0114]
After the point exchange is completed (47), information such as the point issuer, the converted point amount, the number of common points issued by conversion, the converted common point balance, and the like are displayed as in the display example shown in FIG. (48).
[0115]
Next, the premium conversion process will be described. FIGS. 18 and 19 are a block diagram for explaining the prize conversion process and a diagram for explaining the state. FIG. 20 shows a processing procedure in the affiliated business operator terminal (store terminal), and examples of display screens in each procedure are shown in FIGS. 18 and 19, the same processes are denoted by the same reference numerals.
[0116]
In FIGS. 18 and 19, the user accesses the common point site from the portable terminal and performs personal authentication using the member ID and the password (51). The common point site uses the member ID to issue an authentication code for specifying access or a user (52), and sends the authentication code (two-dimensional barcode) to the portable terminal (53). The mobile terminal transfers the transmitted authentication code (two-dimensional barcode) to the store terminal. The transfer of the authentication code can be performed in the same manner as the point conversion. The authentication code is converted into a two-dimensional bar code, and displayed on the display means of the portable terminal (54). (55), an authentication code is transmitted by short-distance communication such as infrared communication (56), and received by a receiving means such as IrDA included in the store terminal. This can be done by receiving (57).
[0117]
The shop terminal 3 forms transmission data together with the transferred authentication code (58) and the member ID (59) separately input by the user. The store terminal 3 accesses the common point site 2 (60), performs store authentication using the store ID and the password (61), and transmits the formed member ID and authentication code transmission data to the common point site. (62).
[0118]
The common point site 2 extracts the member ID from the authentication code (63), compares the member ID in the transmitted transmission data with the member ID included in the authentication code (64), and outputs information such as the balance common point. Send
[0119]
After the authentication is completed, the user inputs the number of common points used for prize exchange to the store terminal (65) and transmits it to the common point site (66). The common point site updates the common point account with the transmitted common points (67). The store terminal converts the common points used for the conversion into business points (68), and updates the business points of the card held by the user by the point rewriting means (69).
[0120]
Next, a processing example of the store terminal will be described with reference to FIG. 20 and FIGS.
[0121]
After reading the authentication code including the member ID issued by the common point from the mobile terminal of the user (71), the store terminal displays the same top screen as that of FIG. An input window for a store ID and a password for accessing the common point site is displayed on the top screen (72). The login to the common point site is performed by inputting the store ID and the password (73).
[0122]
Upon login, a menu for selecting a desired service is displayed, similarly to the display screen shown in FIG. When prize exchange is selected from services such as point conversion, prize conversion, and inquiry, a display screen (FIG. 21) in which a prize exchange service is selected is displayed (74).
[0123]
Next, an input window for inputting a member ID and a member key is displayed as in the display example of FIG. 22 in order to perform member authentication of a common point. The user inputs the member ID from the key of the store terminal. As for the member key, the store terminal converts the authentication code to form a member key, and automatically inputs the member key. After confirming the input, the user clicks the “member authentication” button to transmit to the common point site (75). The common point site performs authentication confirmation using the member ID and the authentication code (76).
[0124]
If the member authentication is successful, the success of the member authentication is displayed on the display screen as shown in the display example of FIG. At the same time, a window for inputting the number of points is displayed, and the number of points of the common points used for the exchange of prizes is input (77). FIG. 23 is an example of a screen for confirming the premium exchange rate of the premium conversion, and displays information such as a point issuer, a common point balance before conversion, a premium exchange rate, and a balance of common points after conversion.
[0125]
After the point exchange is completed (78), information such as the point issuer, the common point balance before conversion, the prize exchange rate, and the balance of the common points after conversion are displayed as in the display example shown in FIG. 25 (79). ).
[0126]
Each of the above aspects manages the business points with a card held by the user, but the present invention can also be applied to a case where the business points are managed on the business site which is the point issuing organization. Hereinafter, a case where the business point is managed on the business site side will be described. This mode can be almost the same as the mode in which the business points are managed by a card.
[0127]
FIG. 26 is a processing example of a point conversion request and a prize exchange request using a common point performed by an affiliated business operator (hereinafter, an example of a store), as in FIG. 7 described above. The operation, the common point site operation, and the business site operation are shown. The numbers in FIG. 26 are the same as the numbers in FIG.
[0128]
When the user comes to the store (1), the user selects conversion of common points or exchange of prizes at the store counter (2). When the common point conversion request is selected (3), the store accesses the common point site (4), and performs store authentication using the store ID and password (5). Further, the user is authenticated as a common point member by using the member ID or the authentication code (6), and an operation of converting the business operator's point into the common point is performed. Here, the authentication (21) is performed by collating the member ID extracted from the authentication code with the member ID input at the store (7). The common point site receives the common point conversion operation and performs a common point transfer process (8). The store sends the business points used for the conversion to the business site and updates the business points recorded on the business site (9).
[0129]
On the other hand, if a prize exchange request is selected (10), the store accesses the common point site (11) and performs store authentication using the store ID and password (12). Further, the user is authenticated as a common point member using the member ID and the authentication code (13), and a prize exchange operation using the common point is performed (14). The common point site receives the prize exchange operation and performs point processing of the common points (15). The store sends the business point used for the premium conversion to the business site, and updates the business point recorded on the business site (16).
[0130]
Hereinafter, the point processing for converting the business points recorded on the business site into common points will be described with reference to FIGS. 27 and 28, and the business points recorded on the business site with reference to FIGS. Will be described with reference to the point processing for converting the premium.
[0131]
The point conversion processing will be described. 27 and 28 are a block diagram for explaining the point conversion process and a diagram for explaining the state. 27 and 28, the same processes are denoted by the same reference numerals.
[0132]
27 and 28, a user accesses a common point site from a portable terminal and performs personal authentication using a member ID and a password (81). The common point site issues an authentication code including a member ID for specifying the access and the user (82), and returns it to the portable terminal (83). The mobile terminal transfers the returned authentication code to the store terminal. One mode of transferring the authentication code is to convert the authentication code into a two-dimensional barcode, display it on the display means of the mobile terminal (84), and read this two-dimensional barcode with a reader such as a barcode reader provided in the store terminal. The reading is performed (85). In another mode of the transfer of the authentication code, the authentication code is transmitted by short-range communication such as infrared communication (86), and is received by receiving means such as IrDA provided in the store terminal (87).
[0133]
The store terminal forms transmission data with the transferred authentication code (88) together with the member ID (89) separately input by the user. The store terminal accesses the common point site (90), performs store authentication using the store ID and the password (91), and transmits the formed member ID and authentication code transmission data to the common point site (92). ).
[0134]
The common point site extracts the member ID from the authentication code, and checks whether the member ID in the transmission data matches the member ID included in the authentication code (93, 94).
[0135]
After the authentication is completed, the user inputs the business point to be converted into the common point into the store terminal (95), and the store terminal converts the business point into the common point (96) and transmits it to the common point site. (97). The common point site updates the common point account with the transmitted common points (98).
[0136]
The store terminal accesses the business site (99), authenticates the store with the store ID and password (100), and stores the information such as the member ID identifying the user and the business points used for the point exchange with the business. Send it to the site (101). The business site updates the points in the point account (102).
[0137]
Next, the premium conversion process will be described. FIG. 29 and FIG. 30 are a block diagram for explaining the prize conversion process and a diagram for explaining the state. 29 and 30, the same processes are denoted by the same reference numerals.
[0138]
In FIGS. 29 and 30, the user accesses the common point site from the portable terminal, and performs personal authentication using the member ID and the password (111). The common point site uses the member ID to issue an authentication code for specifying access or a user (112), and returns it to the portable terminal (113). The mobile terminal transfers the returned authentication code to the store terminal. The transfer of the authentication code can be performed in the same manner as the point conversion. For example, the two-dimensional barcode is displayed on the display means of the portable terminal (114), and the two-dimensional barcode is read by a reader such as a barcode reader provided in the store terminal (115). Is transmitted by short-range communication such as infrared communication (116), and is received by a receiving means such as IrDA provided in the store terminal (117).
[0139]
The store terminal forms transmission data with the transferred authentication code (118) together with the member ID (119) separately input by the user. The store terminal accesses the common point site (120), performs store authentication using the store ID and password (121), and transmits the input member ID and the transmission data of the authentication code to the common point site (122).
[0140]
The common point site checks whether the member ID extracted from the authentication code matches the member ID input at the store, and transmits information such as a balance common point (123, 124).
[0141]
After the authentication is completed, the user inputs the number of common points used for prize exchange to the store terminal (125) and transmits it to the common point site (126). The common point site updates the common point account with the transmitted common points (127). Further, the store terminal converts the common points used for the conversion into business points (128), accesses the business site (129), performs store authentication using the store ID and password (130), and identifies the user. The information such as the specified member ID and the business point used for the point exchange are transmitted to the business site (131, 132). The business site updates the points in the point account (133). After processing the points, the user receives a prize from the store (134).
[0142]
The first to third authentication modes are modes in which authentication is performed by collating a user ID (member ID) included in an authentication code with a user ID (member ID) input separately. With respect to the authentication mode using the user ID (member ID), authentication may be performed by checking the authentication code itself.
[0143]
Hereinafter, other authentication modes (fourth authentication mode to sixth authentication mode) for verifying the authentication code itself will be described.
[0144]
The fourth authentication mode will be described with reference to FIG. The fourth authentication mode is a mode in which an authentication code is used to authenticate the access from the partner carrier terminal to the common point site in the point conversion.
[0145]
In the point management system 1, a user requests an authentication code from the mobile terminal 4 to the common point site 2, and the common point site 2 forms an authentication code in response to the request and issues the authentication code to the mobile terminal 4. This authentication code is issued for each user, and issues different code information in response to each request from the user.
[0146]
Upon receiving the authentication code issued by the common point site 2, the user goes to the store or amusement facility of the affiliated company that intends to use the business point held on the card 5, and transfers the authentication code of the affiliated company. Send to terminal 3. As the use of the business points, for example, the business points recorded on the card 5 are converted into the common points, the common points of the common point site 2 are updated, and the common points stored in the common point site 2 are updated. To receive services or receive goods.
[0147]
Upon receiving the authentication code from the mobile terminal 4, the partner company terminal 3 sends a common point used together with the received authentication code to the common point site 2. The common point site 2 compares the authentication code sent from the affiliated business operator terminal 3 with the authentication code issued by itself, thereby verifying the legitimacy of the user who intends to use the common point and moving the common point. Is determined, and if the validity is confirmed, the common point processing is performed.
[0148]
When the validity of the user and the validity of the movement of the common point are confirmed in the common point site 2, the partner company terminal 3 provides the user with goods such as services and premiums, The business point recorded on the card 5 is updated.
[0149]
The authentication code is issued at the common point site, and by making the code different for each issuance, each point process can be specified, and security can be enhanced.
[0150]
Next, a fifth authentication mode will be described with reference to FIG. The fifth authentication mode is a mode in which, in the point conversion, the authentication in accessing the common point site from the partner business operator terminal is performed using the authentication code and the identification information. The fifth authentication mode is different in that identification information is added in addition to the authentication code used in the fourth authentication mode, and the other points are the same as the fourth authentication mode. Therefore, hereinafter, only the different configuration will be described, and the description of the common configuration will be omitted.
[0151]
The identification information is information set by the user, and together with the authentication code issued by the common point site, guarantees the legitimacy of the user who intends to use the common point. The user transmits identification information from the mobile terminal 4 to the common point site 2. The identification information can be character information such as numbers, alphabets, and characters that can be handled by the mobile terminal, and is set arbitrarily by the user.
[0152]
The common point site 2 issues an authentication code incorporating the identification information transmitted from the mobile terminal 4 and sends the authentication code to the mobile terminal 4 again. The mobile terminal 4 sends the authentication code including the identification information transmitted from the common point site 2 to the partner business operator terminal 3 as in the first authentication mode. The partner business operator terminal 3 sends the authentication code including the identification information to the common point site 2.
[0153]
The common point site 2 collates the sent authentication code with the issued authentication code, extracts the identification information, and collates the identification information with the identification information sent from the user. According to the second authentication mode, security can be enhanced by increasing data to be collated.
[0154]
Next, a sixth authentication mode will be described with reference to FIG. The sixth authentication mode is a mode in which, in the point conversion, the authentication in accessing the common point site from the partner operator terminal is performed by using the authentication code and the time information. This sixth authentication mode is different in that time information is added in addition to the authentication code used in the fourth authentication mode, and the other points are the same as the fourth authentication mode. Therefore, hereinafter, only the different configuration will be described, and the description of the common configuration will be omitted.
[0155]
The time information is, for example, information such as the time at which the authentication code was issued, and together with the authentication code issued by the common point site, guarantees the legitimacy of the user who intends to use the common point.
[0156]
The common point site 2 issues an authentication code incorporating the time information and sends it to the mobile terminal 4. The mobile terminal 4 sends the authentication code including the time information transmitted from the common point site 2 to the partner business operator terminal 3 as in the fourth authentication mode. The partner business operator terminal 3 sends the authentication code including the time information to the common point site 2.
[0157]
The common point site 2 checks the sent authentication code with the issued authentication code, extracts time information, and checks the issued time information. According to the sixth authentication mode, security can be enhanced by increasing data to be collated.
[0158]
Further, in the sixth authentication mode, the use time of the authentication code can be limited using the time information. As the time after the authentication code is issued becomes longer, the security security decreases. Therefore, the period during which the issued authentication code can be used is limited, thereby preventing a decrease in security.
[0159]
The point management system of the present invention can be applied not only to a mode of managing business points on a card but also to a mode of managing business points on a business site.
[0160]
Hereinafter, a case where the present embodiment is applied to a mode in which business points are managed on a card among the above two management modes will be described with reference to FIGS.
[0161]
FIG. 34 is a schematic diagram for explaining a configuration example of a point management system of the present invention for managing business points on a card. In FIG. 34, the point management system 1 includes a common point site 2 and an affiliated company terminal 3. By transmitting the authentication code acquired via the mobile terminal 4 from the affiliated business operator terminal 3 to the common point site 2, authentication is performed using the authentication code and the common point is moved.
[0162]
The common point site 2 includes a transmitting and receiving means 2a for transmitting and receiving an authentication code and a common point to and from the mobile terminal 4 or the affiliated business operator terminal 3, a common point managing means 2b for managing the common points, and performs authentication. And a configuration for The configuration for performing the authentication includes an authentication code issuing unit 2c for issuing an authentication code, an authentication code recording unit 2j for recording the issued authentication code, an authentication code received from the partner company terminal 3, and an issued authentication code. And a matching means 2e for matching with. It also has an authentication code conversion unit 2d for extracting an authentication code from a signal received by the transmission / reception unit 2a. Note that the authentication code issuing unit 2c can be an arbitrary device such as a device using random number generation. The transmission / reception unit 2a can also convert the authentication code into a two-dimensional bar code and transmit the bar code.
[0163]
The affiliated business operator terminal 3 is a terminal provided in an affiliated business operator (for example, a store or a game facility) that has an alliance with a business operator that issues and manages business points, and is connected to each business operator site to operate the business. Point management. In FIG. 34, a configuration for performing data processing between the business site and the business site is omitted.
[0164]
The partner business operator terminal 3 includes a transmitting means 3a for transmitting the authentication code and the common point to the common point site 2, a point converting means 3b for converting the business point to the common point, and a card for rewriting the points recorded on the card 5. A rewriting unit 3c and a unit for taking in an authentication code from the portable terminal 4 are provided.
[0165]
The point conversion means 3b calculates a corresponding common point based on the number of points to be converted. The conversion to the common point can be performed by multiplying the conversion point set in advance by the business operator point. The transmitting unit 3a transmits the common points converted by the point converting unit 3b to the common point site 2.
[0166]
The authentication code is taken in from the portable terminal 4. As means for taking in the authentication code, for example, a two-dimensional barcode reading means 3d and an IrDA terminal 3e are provided. The two-dimensional barcode reading unit 3d reads a two-dimensional barcode displayed on the display unit of the mobile terminal, and acquires an authentication code from the two-dimensional barcode. Further, the IrDA terminal 3e receives an infrared signal transmitted from the mobile terminal, and acquires an authentication code from the infrared signal.
[0167]
The mobile terminal 4 includes a unit that receives the authentication code transmitted from the common point site 2 and sends the received authentication code to the partner company terminal 3. For example, when transmitting an authentication code by a two-dimensional bar code, the portable terminal 4A includes a transmitting / receiving unit 4a that receives a signal from the common point site 2, and a two-dimensional bar code obtaining unit that obtains a two-dimensional bar code from the received signal. 4b and display means 4d for displaying a two-dimensional barcode.
[0168]
When transmitting the authentication code by an infrared signal, the portable terminal 4B transmits and receives the signal from the common point site 2 and the authentication code obtaining unit 4d that obtains the authentication code from the received signal. An infrared generating means 4e for generating an infrared signal by an authentication code is provided. In the mobile terminals 4A and 4B, the transmission / reception unit 4a and the display unit 4d can be the transmission / reception unit and the display unit normally included in the mobile terminal.
[0169]
In the common point site 2, when there is an access from the mobile terminal, the authentication code issuing unit 2c issues a different authentication code for each access, transmits it to the mobile terminal 4, and records it in the authentication code recording unit 2j.
[0170]
The portable terminal 4 sends the sent authentication code to the partner company terminal 3 by a two-dimensional barcode or infrared rays. The portable terminal 4 receives the data by the two-dimensional barcode reading means 3d or the IrDA terminal 3e, and sends it back to the common point site 2 from the transmitting means 3a.
[0171]
In the common point site 2, the authentication code sent by the matching means 2e is compared with the recorded authentication code to confirm the validity of the access. In addition, when inputting information for specifying a user in the affiliated business operator terminal 3, in addition to inputting and displaying the member ID, information relating to the authentication code can be displayed. In displaying the authentication code, the authentication code may not be directly displayed, but the authentication code may be converted to form a member key, and the member key may be displayed.
[0172]
FIG. 35 is a schematic diagram for explaining another configuration example of the point management system of the present invention for managing business points on a card. This configuration example uses time information for authentication collation in addition to authentication code collation. The configuration example shown in FIG. 35 is different in the configuration of the common point site 2 shown in FIG. Hereinafter, the different configuration will be described, and the common configuration will be omitted.
[0173]
The common point site 2 includes a transmitting and receiving means 2a for transmitting and receiving an authentication code and a common point to and from the mobile terminal 4 or the affiliated business operator terminal 3, a common point managing means 2b for managing the common points, and performs authentication. The configuration for is provided. The configuration for performing authentication includes an authentication code issuing unit 2c for issuing an authentication code, a time information forming unit 2g for forming time information, a recording unit 2k for recording the issued authentication code and time information, and a received authentication code. Time information acquisition means 2i for extracting time information from the code, an authentication code and time information received from the affiliated business operator terminal 3, and an authentication code and time information issued and stored in the storage means 2k. Means 2e.
[0174]
It also has an authentication code conversion unit 2d for extracting an authentication code from a received signal received by the transmission / reception unit 2a.
[0175]
The mobile terminal 4 and the partner company terminal 3 can be configured similarly to the configuration shown in FIG. 34, and receive the authentication code including the time information from the common point site 2, and 3 and return to the common point site 2 again.
[0176]
The collation unit 2e can enhance the security of the legitimate access by collating the time information in addition to the collation using the authentication code.
[0177]
The flowchart illustrated in FIG. 36 illustrates an example of an authentication process performed by the common point site. Steps S21 and S22 show an authentication code issuance process, and steps S2 to S32 show an authentication process using the authentication code returned from the partner operator terminal via the mobile terminal. Here, a case is shown in which time information is included and it is determined whether or not the elapsed time is within the time limit.
[0178]
The authentication code issuing unit 2c fetches the time information formed by the time information forming unit 2g and issues an authentication code. Note that the time information does not necessarily need to be information indicating a real-time time, and time information generated arbitrarily can be used (step S21). The transmitting / receiving means 2a transmits the issued authentication code (step S22).
[0179]
In the affiliated business operator terminal 3, a member ID and a member key for specifying the user are input and transmitted to the common point site 2. The member ID is ID information indicating that the member is a member of the common point, and the member key is information formed based on the authentication code (two-dimensional barcode). The member ID is input from input means (not shown) of the affiliated business operator terminal 3 and displayed on display means (not shown). The member key is automatically generated from the authentication code (two-dimensional barcode) in the terminal, and is displayed on a display (not shown).
[0180]
The conversion algorithm for obtaining the member key obtained by converting the authentication code can be arbitrary, but the common point site and the partner company terminal have the same conversion algorithm.
[0181]
The partner company terminal 3 transmits an authentication code (two-dimensional barcode), a member ID, and a common point site in order to ensure the legitimacy of the user.
[0182]
In addition, the authentication code or the two-dimensional barcode is converted to the member key, and the member key is displayed on the display means of the affiliated operator terminal, and the member key is displayed, and the unconverted authentication code is sent to the common point site. Is also good. Thus, even if the member key is illegally known, it takes time until the authentication code is illegally acquired, so that illegal use of the common point can be suppressed.
[0183]
The common point site receives the member ID and the member key (step S23). The member ID is extracted (step S24) and collated with the member ID recorded by the common point site (step S25). If the member IDs do not match, the authentication is not performed (step S32).
[0184]
If the member IDs match, time information is extracted. The time information can be transmitted alone or by being included in a member key or member ID. If the time information is included in other transmission data, the time information is extracted from the transmission data (step S26). Based on the extracted time information, the elapsed time after issuing the authentication code is calculated (step S27), and it is determined whether the elapsed time is within a preset time limit (step S28).
[0185]
The member key is extracted, converted into an authentication code (step S29), collated with the recorded authentication code, and it is determined whether there is a matching authentication code. If the authentication code is transmitted as it is in step S9, the received authentication code is collated without conversion from the member key (step S30). If the authentication codes match, it authenticates that the access is valid (step S31).
[0186]
In each of the above-described embodiments, the movement of the common point between the partner operator terminal and the common point management institution is shown in the transfer of the common point between the partner operator terminal and the common point management institution. The same can be applied to the transfer of the common point from the common point management organization to the partner business operator terminal.
[0187]
According to the embodiment of the present invention, data of the same content is transmitted through different routes, such as a member ID included in the authentication code and a member ID input at a terminal of a store or the like, and this difference is determined. Even if one of them is stolen, unauthorized use can be prevented, and security at the time of access and user authentication can be enhanced.
[0188]
According to the embodiment of the present invention, it is necessary to store the issued authentication code on the point management side in order to match the member ID included in the issued authentication code with the member ID input at a terminal of a store or the like. In addition, the authentication code management mechanism can be simplified.
[0189]
According to the embodiment of the present invention, the common point site can secure security in the point exchange by using the authentication code issued by itself.
[0190]
According to the embodiment of the present invention, an affiliated company terminal such as a store terminal includes a means for acquiring data from a mobile terminal, so that an authentication code can be captured.
[0191]
According to the embodiment of the present invention, the store terminal can obtain the authentication code from the mobile terminal by using the two-dimensional barcode display function of the mobile terminal.
[0192]
According to the embodiment of the present invention, the store terminal can acquire the authentication code from the mobile terminal by using the short-range communication function such as the infrared communication function of the mobile terminal.
[0193]
According to the embodiment of the present invention, security can be enhanced by giving an expiration date to an authentication code.
[0194]
Further, according to the embodiment of the present invention, security can be enhanced by incorporating time information and identification information into the authentication code itself.
[0195]
According to the embodiment of the present invention, points managed by the card itself or points managed by the business site can be updated.
[0196]
Further, according to the embodiment of the present invention, the store terminal converts the authentication code issued by the common point site into a member key and displays it once. By sending the code, security can be increased.
[0197]
【The invention's effect】
ADVANTAGE OF THE INVENTION According to the point management system of this invention, in the system which manages a point, the security at the time of moving a common point between the partner company terminal which handles a business point and the common point management organization can be improved.
[Brief description of the drawings]
FIG. 1 is a schematic diagram for explaining a first mode of personal authentication using an authentication code of the present invention.
FIG. 2 is a schematic diagram illustrating a second mode of personal authentication using the authentication code of the present invention.
FIG. 3 is a schematic diagram illustrating a third mode of personal authentication using the authentication code of the present invention.
FIG. 4 is a schematic diagram for explaining a configuration example of a point management system for managing business points on a card according to the present invention.
FIG. 5 is a schematic diagram for explaining another configuration example of the point management system of the present invention for managing business points on a card.
FIG. 6 is a flowchart illustrating an example of an authentication process performed by a common point site according to the present invention.
FIG. 7 is a diagram for explaining a processing example of a point conversion request and a prize exchange request performed by the affiliated business operator of the present invention.
FIG. 8 is a block diagram illustrating a point conversion process according to the present invention.
FIG. 9 is a state diagram illustrating a point conversion process according to the present invention.
FIG. 10 is a diagram showing a processing procedure in the affiliated business operator terminal of the present invention.
FIG. 11 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 12 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 13 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 14 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 15 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 16 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 17 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 18 is a block diagram illustrating a prize conversion process according to the present invention.
FIG. 19 is a state diagram illustrating a prize conversion process according to the present invention.
FIG. 20 is a diagram showing a processing procedure in the affiliated business operator terminal of the present invention.
FIG. 21 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 22 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 23 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 24 is an example of a display screen on the affiliated company terminal of the present invention.
FIG. 25 is an example of a display screen on the affiliated business operator terminal of the present invention.
FIG. 26 is a diagram for explaining a processing example of a point conversion request and a prize exchange request performed by the affiliated business operator of the present invention.
FIG. 27 is a block diagram illustrating a point conversion process according to the present invention.
FIG. 28 is a state diagram illustrating a point conversion process according to the present invention.
FIG. 29 is a block diagram illustrating a prize conversion process according to the present invention.
FIG. 30 is a state diagram for explaining premium conversion processing of the present invention.
FIG. 31 is a schematic diagram for explaining a fourth mode of personal authentication using the authentication code of the present invention.
FIG. 32 is a schematic diagram for explaining a fifth mode of the personal authentication using the authentication code of the present invention.
FIG. 33 is a schematic diagram for explaining a sixth mode of the personal authentication using the authentication code of the present invention.
FIG. 34 is a schematic diagram for explaining a configuration example of a point management system for managing business points on a card according to the present invention.
FIG. 35 is a schematic diagram for explaining another configuration example of the point management system of the present invention for managing business points on a card.
FIG. 36 is a flowchart illustrating an example of an authentication process performed by a common point site according to the present invention.
[Explanation of symbols]
1 point management system
2 common point sites
2a Transmission / reception means
2b Common point management means
2c Authentication code issuing means
2d authentication code conversion means
2e collation means
2f Time limit management means
2g Time information forming means
2h time information storage means
2i Time information acquisition means
2j Authentication code storage means
2k storage means
3 Affiliated business operator terminals
3a Transmission means
3b Point conversion means
3c Card rewriting means
3d two-dimensional barcode reading means
3e IrDA terminal
4,4A, 4B mobile terminal
4a Transmission / reception means
4b Two-dimensional barcode conversion means
4c display means
4d Authentication code acquisition means
4e Infrared signal generating means
5 cards

Claims (9)

In a point management system that converts points issued by a plurality of point issuing organizations into common points managed and operated by a common point management organization, the common point management organization includes:
A function of issuing an authentication code including a user ID for identifying a user,
A function of taking in the authentication code and the user ID entered at the partner carrier terminal from the partner carrier terminal, and comparing the user ID included in the authentication code with the user ID entered at the partner carrier terminal With
A point management system for performing an authentication process based on the collation of the user ID, and using the authentication result as a condition for permitting or rejecting movement of a common point between an affiliated business operator terminal and a common point management organization. . The affiliated business operator terminal,
First input means for inputting an authentication code from the common point management institution via a mobile terminal;
2. The point management system according to claim 1, further comprising: a second input unit for inputting a user ID from a user. The authentication code includes expiration date information,
The point management system according to claim 1, wherein the common point management institution determines validity of the authentication code based on expiration date information included in the authentication code. 2. The common point management institution according to claim 1, wherein the time from when the authentication code is issued to when the authentication code is captured is measured, and the validity of the authentication code is determined based on the measured time. Or the point management system according to 2. The common point management organization issues an authentication code including time information to the mobile terminal,
The method according to claim 1, wherein the time information fetched from the affiliated business operator terminal via the mobile terminal is compared with the issued time information, and the validity of the authentication code is determined based on the comparison result. 3. The point management system according to 1 or 2. The authentication code includes identification information set by a user,
The common point management institution compares the identification information included in the authentication code captured from the partner operator terminal via the mobile terminal with the identification information input at the partner operator terminal,
The point management system according to claim 1, wherein the validity of the authentication code is determined based on the collation result. The affiliated business operator terminal subtracts points issued by each point issuing institution corresponding to the common points moved to the common point management institution from the points recorded on the card issued by each point issuing institution, and The point management system according to any one of claims 1 to 6, further comprising means for updating the points of the card. The affiliated business operator terminal subtracts the points issued by each point issuing institution corresponding to the common points moved to the common point management institution from the points recorded on the card issued by each point issuing institution, and deducts the points. The point management system according to any one of claims 1 to 6, further comprising means for updating points managed by the point issuing organization by sending the points to the point issuing organization. The partner operator terminal has a function of converting points issued by each point issuing organization into common points managed by a common point management organization,
9. The point management system according to claim 1, wherein a common point obtained by converting the input points is moved to a common point management organization.

Images