JP2005208822A - Authentication device, portable terminal, electronic settlement system, and authentication program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To suppress the complicatedness of an operation, and to secure safety at the time of performing electronic transaction. <P>SOLUTION: A portable terminal 12 sets a security level at the time of authentication on the basis of the action pattern of a user 11, and when carrying out electronic settlement by using the portable terminal 12, the user 11 is requested to perform an operation corresponding to the security level, and the authentication of the user 11 is carried out. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an authentication device, a portable terminal, an electronic payment system, and an authentication program, and is particularly suitable for application to an electronic payment method using a portable terminal.

  As a settlement method in transactions, a credit card issued by a credit card company or a cash card issued by a financial institution is used. Here, in order to ensure the safety when using a credit card or cash card, the user of these cards is allowed to enter a personal identification number, and the personal identification number is checked by checking the personal identification number. Check whether there is a match. For this reason, even if a credit card or cash card is lost or stolen, as long as the personal identification number is kept secret, unauthorized use of these cards can be prevented.

  For example, when a credit card company applies for a credit card issuance from a user, the credit card company confirms the account with the settlement bank of the user. When the account is confirmed, the credit card company issues a credit card issuance procedure and sends customer data to a settlement center that manages the electronic settlement apparatus. Then, when the payment center receives the customer data, it creates a customer database to be used at the time of payment based on the customer data.

  Then, when the credit card user clears it at a store or restaurant, when the credit card is presented to the store clerk, the store clerk notifies the settlement center of the price or fee of the product via the payment terminal. At the same time, it makes a payment and authentication request using a credit card. When there is an authentication request using a credit card, the settlement center authenticates the credit card by comparing customer data described on the credit card with a customer database.

  If the authentication result is normal, the store clerk receives the user's signature in the payment slip and hands the payment slip to the user. In addition, the settlement bank completes the electronic settlement by performing payment processing at the store or restaurant where the settlement request is made, and withdrawing the amount of payment processing from the customer's account.

  On the other hand, in recent years, electronic payment methods that do not use banknotes and money have become a hot topic, and studies and experiments on the introduction of electronic payment systems have been conducted. As an example of this electronic payment system, there is a method using electronic money. In this electronic money, an IC card called a smart card is used as an intermediary means, and face-to-face payments between individuals can be performed like cash.

  That is, the IC card is equipped with a one-chip data memory and a microcomputer. The data memory stores money amount information as electronic money, and the microcomputer stores a program for causing the IC card to function as electronic money. Then, by transferring electronic money via an IC card, it can be widely distributed without going through a bank as in the case of cash.

  Here, in order to prevent unauthorized use of electronic payment using a smart card, there is one in which a lock function is added to the smart card itself. This lock function can be arbitrarily set by the user. In the locked state, the authentication can be performed by requesting the input of the personal identification number every time the smart card is used, regardless of the amount of use.

In recent years, a method of performing electronic payment using a mobile phone such as a mobile phone has been proposed. Here, in order to prevent unauthorized use of electronic payment using a mobile phone, for example, in Patent Document 1, password data is stored in advance in a mobile phone and password data input from an operation input unit is stored. And a method of performing authentication by collating with password data stored in advance in a mobile telephone.
JP 2002-176671 A

  However, in the conventional authentication method at the time of electronic transaction, in order to prevent unauthorized use of electronic payment, it is necessary to perform a signature or enter a personal identification number. In particular, in the electronic payment method using a mobile phone, when it is used for shopping or the like, the frequency of use becomes high, and it is very troublesome for the user to request the input of a password each time. was there.

  Therefore, an object of the present invention is to provide an authentication device, a portable terminal, an electronic payment system, and an authentication program that can ensure safety during electronic transactions while suppressing complication of operation.

  In order to solve the above-described problem, according to an authentication apparatus according to an aspect of the present invention, a behavior pattern acquisition unit that acquires a user's behavior pattern and a security level at the time of authentication are set based on the behavior pattern. Security level setting means.

  This makes it possible to simplify the operation at the time of authentication in the case of the same transaction form as before, and complicates the operation at the time of authentication in the case of a transaction form different from the past. Can be realized. For this reason, when the person himself / herself conducts the transaction, it is highly likely that the transaction is performed in the same transaction form as before, so that the person can be easily authenticated and the transaction is performed by another person. Since there is a high possibility that the transaction will be conducted in a different transaction form, it is possible to make authentication difficult, and it is possible to ensure safety during electronic transactions while suppressing complications in operation. It becomes possible.

  Moreover, according to the authentication apparatus which concerns on 1 aspect of this invention, the said action pattern contains at least 1 any one of the frequency | count of a transaction, a transaction place, transaction amount, transaction date and time, or a transaction item, It is characterized by the above-mentioned.

  Thereby, it becomes possible to discriminate | determine from the user's action pattern whether the person himself / herself is dealing. For this reason, when a person conducts a transaction, the security level can be set low, and when another person conducts a transaction, the security level can be set high, thereby complicating operations. It becomes possible to ensure safety at the time of electronic trading while suppressing.

  Further, according to the mobile terminal according to one aspect of the present invention, an action pattern acquisition unit that acquires a user's action pattern, a security level setting unit that sets a security level at the time of authentication based on the action pattern, An authentication unit that performs an authentication process based on the security level set by the security level setting unit and a communication unit that transmits an authentication result by the authentication unit via wireless communication are provided.

  This makes it possible to make electronic payments without performing complicated operations such as entering a PIN, and when a mobile device is lost or stolen and passed into another person's hand, It is possible to request a complicated operation such as inputting a password at the time of electronic settlement. For this reason, it becomes possible to ensure the safety at the time of electronic transaction, suppressing complication of operation, and it is possible to achieve both convenience and security even when performing electronic payment using a mobile terminal. .

  Further, according to the mobile terminal of one aspect of the present invention, the behavior pattern is at least one of the number of transactions, the transaction place, the transaction amount, the transaction date and time, the transaction item, the communication establishment area, the communication establishment frequency, or the communication interval. The mobile terminal according to claim 3, comprising one.

  Thereby, it becomes possible to discriminate | determine from the user's action pattern whether the person himself / herself is dealing. In other words, if the number of transactions using the same mobile terminal is large, the person himself is likely to be trading, and if the number of transactions using the same mobile terminal is small, another person will do the transaction. There is a high possibility of being. In addition, if the transaction place or communication establishment area is always determined, it is highly likely that the person himself is doing business, and if the transaction place or communication establishment area suddenly changes, another person may be doing business. Increases nature. Further, when the transaction amount per transaction is low, the possibility that the person himself / herself is trading is high, and when the transaction amount per transaction is high, the possibility that another person is trading is high. In addition, when the transaction date and time is always determined, it is highly likely that the person himself is trading, and when the transaction date and time is suddenly changed, the possibility that another person is trading is high. In addition, when the transaction item is always determined, it is highly likely that the person himself is trading, and when the transaction item is suddenly changed, the possibility that another person is trading is high. In addition, when the frequency of establishment of communication with a specific object is high, the person himself / herself is likely to have a transaction, and when the frequency of establishment of communication with a specific object is low, another person has a transaction. The possibility increases. In addition, when the communication interval is short, the possibility that the person himself is trading is high, and when the communication interval is long, the possibility that another person is trading is high.

  For this reason, when a person conducts a transaction, the security level can be set low, and when another person conducts a transaction, the security level can be set high, thereby complicating operations. It becomes possible to ensure safety at the time of electronic trading while suppressing.

  In addition, according to the mobile terminal of one aspect of the present invention, the notification unit that notifies the user of the security level set by the security level setting unit, and the operation that causes the user to perform an operation corresponding to the security level And a means.

  This makes it possible to recognize what operation the user should perform in response to the change in the security level, and even when the security level is changed on the mobile terminal side, the user is confused about the operation. This can be prevented.

  According to the electronic payment system of one aspect of the present invention, a portable terminal that sets a security level at the time of authentication based on a user's behavior pattern, and a payment terminal that receives a payment process requested from the portable terminal; And a settlement server that performs a settlement process based on an authentication result by the portable terminal.

  This makes it possible to change the security level depending on whether the person himself / herself makes an electronic payment or another person makes an electronic payment, and both convenience and security can be achieved even when making an electronic payment using a mobile terminal. Can be achieved.

  According to the electronic payment system of one aspect of the present invention, the portable terminal includes a behavior pattern acquisition unit that acquires a user's behavior pattern, and a security that sets a security level at the time of authentication based on the behavior pattern. A level setting unit; an authentication unit that performs an authentication process based on a security level set by the security level setting unit; and a communication unit that transmits an authentication result by the authentication unit via wireless communication. To do.

  This makes it possible for the mobile terminal itself to authenticate whether or not the person is authentic. When the person conducts a transaction, the security level is lowered, and when the other person conducts a transaction, the security level is raised. As a result, it is possible to ensure safety during electronic payment while suppressing complication of operation.

  The authentication program according to one aspect of the present invention causes a computer to execute a step of acquiring a user's behavior pattern and a step of setting a security level at the time of authentication based on the behavior pattern. And

  As a result, by executing the authentication program, the security level can be changed based on the user's behavior pattern, and both convenience and security can be achieved even when electronic payment is performed using a mobile terminal. be able to.

  Hereinafter, an electronic settlement system according to an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram showing a schematic configuration of an electronic settlement system according to the first embodiment of the present invention.

  1, the electronic payment system includes a mobile terminal 12 that performs authentication processing, a payment terminal 14 that receives a payment process requested from the mobile terminal 12, and a payment server 16 that performs payment processing based on an authentication result by the mobile terminal 12. Is provided. Here, the mobile terminal 12 can set the security level at the time of authentication based on the behavior pattern of the user 11.

  The payment terminal 14 can be installed in a store 13 that sells products or provides services. As the payment terminal 14, for example, a store cash register or a POS (point of sales) terminal is used. it can. As the mobile terminal 12, for example, a mobile phone or an IC card can be used. The payment terminal 14 and the payment server 16 are connected to the communication network 15.

  The communication network 15 can be constructed using a dedicated line or an existing general public line, and various line forms such as a WAN (Wide Area Network) and a LAN (Loca Area Network) can be used. Moreover, the connection method of the portable terminal 12, the payment terminal 14, and the payment server 16 may be wired or wireless. However, from the viewpoint of the reliability of payment information management involving the privacy of the user 11, it is preferable to use a communication network in which security is ensured that only the specific user 11 can access.

  And when the user 11 approaches the payment terminal 14 in order for the user 11 to come to the store 13 and perform the liquidation of goods, communication will be established between the portable terminal 12 and the payment terminal 14. When communication is established between the mobile terminal 12 and the payment terminal 14, user information is requested from the mobile terminal 12.

  Here, when user information is requested, the mobile terminal 12 may set a security level at the time of authentication based on the behavior pattern of the user 11 and request the user 11 to perform an operation corresponding to the security level. it can. And if the portable terminal 12 authenticates according to operation of the user 11, it will transmit the user information regarding the user 11 to the payment terminal 14. FIG. When the payment terminal 14 receives the user information from the portable terminal 12, the payment terminal 14 transmits the user information and the payment information to the payment server 16 via the communication network 15. Then, when the payment server 16 receives the user information and the payment information from the payment terminal 14, the payment server 16 can identify the user 11 and perform a credit process after confirming that the user is a normal trader.

  As a result, when the current behavior pattern of the user 11 is similar to the past behavior pattern, the operation at the time of authentication can be simplified, and the current behavior pattern of the user 11 is past. When it is different from the behavior pattern, it is possible to complicate the operation at the time of authentication. For this reason, when the person himself / herself conducts the transaction, it is highly possible that the current behavior pattern is similar to the past behavior pattern, so that it is possible to easily authenticate the person himself / herself. When performing, it is highly possible that the current behavior pattern is different from the past behavior pattern, so that it is possible to make authentication of the user 11 difficult. It becomes possible to ensure the sex.

  FIG. 2 is a block diagram showing a schematic configuration of the mobile terminal 12 of FIG.

  In FIG. 2, a portable terminal 12 includes a transmission / reception unit 22 that transmits and receives data via a base station, a display 23 that displays various operation screens, an input interface 24 that receives operations by a user 11, and a payment terminal 14. A Bluetooth communication unit 25 that performs short-range wireless communication between the devices, a storage area 26 that stores programs and data, a speaker 27, a microphone 28, and a CPU 21 that performs overall control for operating these functions in cooperation with each other are provided. It has been. The CPU 21 is connected to the transmission / reception unit 22, the display 23, the input interface 24, the Bluetooth communication unit 25, the storage area 26, the speaker 27, and the microphone 28 via a system bus.

  Here, in the storage area 26, a control program 26a for causing the CPU 21 to perform security level control, image display control, communication control, data processing, and the like, personal data 26b relating to 11 users, and a store 13 used by the user 11. Store information about the store 26c and the like can be stored. For example, a liquid crystal display device or an organic EL display device can be used as the display 23. As the input interface 25, for example, an operation button, a cursor key, or the like can be used. Further, a short-range wireless communication method such as IrDA or Zigbee may be used instead of the Bluetooth communication unit 25.

  When communication is established between the mobile terminal 12 and the payment terminal 14 via the Bluetooth communication unit 25 and user information is requested from the mobile terminal 12, authentication is performed based on the behavior pattern of the user 11. Security level can be set. And the portable terminal 12 can authenticate the user 11 by requesting the user 11 for an operation corresponding to the security level.

  This makes it possible to make an electronic payment without performing a complicated operation such as entering a personal identification number, and when the portable terminal 12 is lost or stolen and passed into another person's hand. It is possible to request a complicated operation such as input of a password at the time of electronic settlement. For this reason, it becomes possible to ensure the safety at the time of electronic transaction, suppressing complication of operation, and it is possible to achieve both convenience and security even when performing electronic payment using the mobile terminal 12. it can.

  Here, when determining the behavior pattern of the user 11, the mobile terminal 12 can refer to the store information 26c stored in the storage area 26, for example.

  FIG. 3 is a diagram showing an example of the contents of the store information 26c in FIG.

  In FIG. 3, the store information 26c includes, for example, the member store number for electronic payment service, the Bluetooth address of the Bluetooth device mounted on the payment terminal 14, the number of transactions for each store 13, and the final number for each store 13. Transaction date and time can be recorded.

  Here, by recording the member store number or the Bluetooth address as the store information 26c, the mobile terminal 12 can determine whether or not the store 11 has been visited by the user 11 in the past. For this reason, in the case of the store 13 where the user 11 has visited the store in the past, the mobile terminal 12 lowers the security level, and in the case of the store 13 where the user 11 has not visited the store in the past, The security level can be increased. As a result, when the possibility that the user 11 is the person is high, it is possible to simplify the operation at the time of authentication and improve the convenience of electronic payment, and the user 11 may be another person. When the property is high, the operation at the time of authentication can be complicated and the security of electronic payment can be improved.

  Further, by recording the transaction count as the store information 26c, the security level can be changed according to the transaction count.

  FIG. 4 is a flowchart showing a first embodiment of the security level setting method of the mobile terminal 12 of FIG.

  In FIG. 4, the store 13 is specified by establishing communication between the portable terminal 12 and the payment terminal 14 via the Bluetooth communication part 25 (step S11). Then, the number of transactions and the transaction amount at the specified store 13 are determined (steps S12 to S15), and the security level can be changed according to the number of transactions and the transaction amount at the store 13 (steps S16 to S20). . Here, by increasing the security level as the transaction amount increases and decreasing the security level as the number of transactions decreases, the security of electronic payment is improved while suppressing the complexity of authentication operations. It becomes possible to make it.

  For example, when conducting transactions over a predetermined amount, set the security level to the highest level, and exceed the usage limit amount at least once, or if you make multiple purchases close to the usage limit amount, the next security level is set. Can be high.

  Moreover, what kind of product the user 11 has purchased in the past may be recorded as the store information 26c. When purchasing a product that the user 11 has purchased in the past this time, the security level is lowered, and when purchasing a product that the user 11 has not purchased in the past for the first time, You may make it raise a security level.

  Further, by recording the last transaction date and time as the store information 26c together with the number of transactions, it is possible to determine the passage of time since the last transaction, and the security level can be changed based on the passage of time since the last transaction. Become. Here, when the person conducts a transaction using his / her mobile terminal 12, the frequency of transactions at the same store 13 using the mobile terminal 12 increases, and a third party uses the mobile terminal 12 of another person. When making a transaction, the frequency of transactions at the same store 13 using the mobile terminal 12 is reduced.

  For this reason, when the person performs a transaction using his / her mobile terminal 12, the time elapsed from the final transaction is shortened, and when a third party performs a transaction using another person's mobile terminal 12, the time from the final transaction The course becomes longer. Therefore, it is possible to achieve both convenience and security by lowering the security level when the time elapsed from the final transaction is short, and by increasing the security level when the time elapsed from the final transaction is long. it can.

  FIG. 5 is a diagram showing a second embodiment of the security level setting method of the mobile terminal 12 of FIG.

  In FIG. 5, it is assumed that the Bluetooth address of the Bluetooth device mounted on the object used by the mobile terminal 12 is registered. Here, as a thing which oneself utilizes, a private vehicle etc. can be mentioned, for example. And the portable terminal 12 can communicate with the Bluetooth apparatus mounted in the vehicle, while the user 11 is in the vehicle. And the portable terminal 12 can discriminate | determine the elapsed time from the last communication with the Bluetooth apparatus mounted in the vehicle, and can change a security level based on the elapsed time from the last communication.

  Here, when the person himself / herself goes to the store 13 with his / her car, since communication is established between the mobile terminal 12 and the car, when the settlement is performed at the store 13, from the final communication of the mobile terminal 12 The elapsed time can be shortened. On the other hand, when another person goes to the store 13 with his / her car, communication is not established between the mobile terminal 12 and the car. The elapsed time can be lengthened. Therefore, when the payment is made at the store 13, the security level is lowered when the time elapsed from the final communication of the mobile terminal 12 is short, and the security level is lowered when the time elapsed from the final communication of the mobile terminal 12 is long. By increasing the level, both convenience and security can be achieved.

  FIG. 6 is a diagram showing a third embodiment of the security level setting method of the mobile terminal 12 of FIG.

  In FIG. 6, it is assumed that the mobile terminal 12 has a voice recognition function. Here, it is assumed that own voice information is registered in advance in the voice recognition function. When the user 11 makes a call via the mobile terminal 12, the voice recognition function can determine whether the call is by the person or by another person. And the portable terminal 12 can discriminate | determine the elapsed time from the last call made by the person himself, and can change a security level based on the elapsed time from the last call.

  Here, when the user 11 carries his / her mobile terminal 12, the user 11 can make a call using his / her mobile terminal 12. The elapsed time from the last call of the portable terminal 12 can be shortened. On the other hand, when the user 11 carries the portable terminal 12 of another person, even when another person makes a call using the portable terminal 12, it is different from the voice registered in the portable terminal 12. When payment is made at the store 13, the elapsed time from the last call of the mobile terminal 12 can be lengthened. Accordingly, when payment is made at the store 13, if the time elapsed from the final call of the mobile terminal 12 is short, the security level is lowered, and if the time elapsed from the final call of the mobile terminal 12 is long, the security level is decreased. By increasing the level, both convenience and security can be achieved.

  FIG. 7 is a diagram showing a fourth embodiment of the security level setting method for the mobile terminal 12 of FIG.

  In FIG. 7, it is assumed that the Bluetooth address of the Bluetooth device mounted on the item used by the mobile terminal 12 is registered. Here, examples of the items used by the user include home appliances and personal computers at home, and a watch worn by the user. Then, the mobile terminal 12 can establish communication with the Bluetooth device mounted on an object around the user 11. Then, the mobile terminal 12 determines whether or not communication has been established with a Bluetooth device mounted on an object around the user 11, and changes the security level based on the presence or absence of communication establishment or the frequency of communication establishment. Can do.

  Here, when the user 11 carries his / her mobile terminal 12, communication can be established between the mobile terminal 12 and an object around the user 11. On the other hand, when the user 11 carries the portable terminal 12 of another person, communication is not established between the portable terminal 12 of the other person and an object around him / her. Therefore, when communication is established with the mobile terminal 12, the security level is lowered, and when communication is not established with the mobile terminal 12, the security level is increased to improve convenience and security. Can be achieved. Alternatively, the security level is lowered when the frequency of communication establishment with the mobile terminal 12 is high, and the security level is raised when the frequency of communication establishment with the mobile terminal 12 is low. It may be.

  As a method for setting the security level of the mobile terminal 12, for example, the remaining battery capacity of the mobile terminal 12 is determined, and when the remaining battery capacity of the mobile terminal 12 is low, the security level is set to the maximum. Also good.

  In addition, the working hours and schedules of the user 11 are registered in the mobile terminal 12, and the owner of the mobile terminal 12 is on duty or traveling abroad, so cannot go to the store 13 during that time. In this case, the security level in that time zone may be set to the highest.

  FIG. 8 is a sequence diagram showing the operation of the electronic settlement system of FIG.

  In FIG. 8, when the user 11 comes to the store 13 and approaches the payment terminal 14 in order to clear the merchandise, a Bluetooth connection is established between the mobile terminal 12 and the payment terminal 14 via the Bluetooth communication unit 25. Performed (K1). When a Bluetooth connection is made between the mobile terminal 12 and the payment terminal 14, the payment terminal 14 requests user information from the mobile terminal 12 and transmits transaction information such as the price and type of the product to the mobile terminal 12. (K2).

  Then, when user information is requested from the payment terminal 14, the mobile terminal 12 sets a security level at the time of authentication based on the behavior pattern of the user 11, and requests the user 11 for an operation corresponding to the security level. To do. For example, the mobile terminal 12 can request the user 11 to input a password or confirm the payment with the mobile terminal 12 according to the security level. The password at the time of authentication is not necessarily the same as the password for electronic payment, and can be simplified or complicated depending on the security level.

  FIG. 9 is a diagram showing an authentication method of the mobile terminal 12 of FIG.

  In FIG. 9, for example, it is assumed that the security level can be set in five stages. When the security level is set to 5, the mobile terminal 12 can request the user 11 to input an 8-digit password. Further, when the security level is set to 4, the mobile terminal 12 can request the user 11 to input a 4-digit password. Further, when the security level is set to 3, the mobile terminal 12 can request the user 11 to input personal data such as age and date of birth. Further, when the security level is set to 2, the mobile terminal 12 can request the user 11 to input with a specific one button. In addition, when the security level is set to 1, the mobile terminal 12 displays only the confirmation to confirm that the payment is made on the mobile terminal 12 on the display 23, and does not require any input such as a password and performs authentication. It can be carried out.

  FIG. 10 is a diagram showing a screen display example at the time of authentication of the mobile terminal 12 of FIG.

  In FIG. 10, for example, when the security level is set to 4, the mobile terminal 12 can display a message for causing the user 11 to input a 4-digit password on the display 23. Thereby, it is possible to recognize what operation the user 11 should perform in response to the change of the security level, and even when the security level is changed on the mobile terminal 12 side, the user 11 It is possible to prevent being confused by the operation.

  And if the portable terminal 12 authenticates according to operation of the user 11 (step S1), it will transmit a user ID and a password to the payment terminal 14 (K3). When the payment terminal 14 receives the user ID and password from the portable terminal 12, the payment terminal 14 transmits the payment information together with the user ID and password to the payment server 16 via the communication network 15 (K4). Then, when the payment server 16 receives the payment information from the payment terminal 14 together with the user ID and the password, the payment server 16 specifies the user 11 and performs credit processing after confirming that the user is a normal trader (step S2).

  Then, when it is confirmed that the payment server 16 is a normal trader, the payment server 16 sends a payment approval notification to the payment terminal 14 (K5). When the payment terminal 14 receives the payment approval notification from the payment server 16, the payment terminal 14 performs a payment completion process (step S3), and performs a payment approval notification to the mobile terminal 12 (K6). And the portable terminal 12 will perform a payment completion process, if the approval notification of payment is received from the payment terminal 14 (step S4).

1 is a diagram showing a schematic configuration of an electronic settlement system according to a first embodiment of the present invention. The block diagram which shows schematic structure of the portable terminal 12 of FIG. The figure which shows an example of the content of the shop information 26c of FIG. The flowchart which shows the 1st Example of the setting method of a security level. The figure which shows the 2nd Example of the setting method of a security level. The figure which shows the 3rd Example of the setting method of a security level. The figure which shows the 4th Example of the setting method of a security level. The sequence diagram which shows operation | movement of the electronic payment system of FIG. The figure which shows the authentication method of the portable terminal 12 of FIG. The figure which shows the example of a screen display at the time of authentication of the portable terminal 12 of FIG.

Explanation of symbols

  11 users, 12 mobile terminals, 13 stores, 14 payment terminals, 15 communication networks, 16 payment servers, 21 CPUs, 22 transmission / reception units, 23 displays, 24 input interfaces, 25 Bluetooth communication units, 26 storage areas, 26a control programs, 26b Personal data, 26c Store information, 27 Speaker, 28 Microphone

Claims (8)

An action pattern acquisition means for acquiring a user's action pattern;
An authentication apparatus comprising: security level setting means for setting a security level at the time of authentication based on the behavior pattern.   The authentication apparatus according to claim 1, wherein the behavior pattern includes at least one of a number of transactions, a transaction location, a transaction amount, a transaction date and time, or a transaction item. An action pattern acquisition means for acquiring a user's action pattern;
Security level setting means for setting a security level at the time of authentication based on the behavior pattern;
Authentication means for performing authentication processing based on the security level set by the security level setting means;
A portable terminal comprising: a communication unit that transmits an authentication result of the authentication unit via wireless communication.   4. The mobile phone according to claim 3, wherein the behavior pattern includes at least one of a number of transactions, a transaction location, a transaction amount, a transaction date and time, a transaction item, a communication establishment area, a communication establishment frequency, or a communication interval. Terminal. Notification means for notifying the user of the security level set by the security level setting means;
The mobile terminal according to claim 3, further comprising operation means for causing a user to perform an operation corresponding to the security level. A mobile device that sets the security level for authentication based on user behavior patterns,
A payment terminal that accepts the payment process requested from the mobile terminal;
An electronic payment system comprising: a payment server that performs payment processing based on an authentication result by the portable terminal. The portable terminal is
An action pattern acquisition means for acquiring a user's action pattern;
Security level setting means for setting a security level at the time of authentication based on the behavior pattern;
Authentication means for performing authentication processing based on the security level set by the security level setting means;
The electronic settlement system according to claim 6, further comprising a communication unit that transmits an authentication result by the authentication unit via wireless communication. Obtaining a user behavior pattern;
An authentication program causing a computer to execute a step of setting a security level at the time of authentication based on the behavior pattern.

Images