JP2005301896A - Settlement system and settlement server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a settlement system wherein safety is improved when performing online shopping by use of a mobile terminal. <P>SOLUTION: In this settlement system 1, when a store server 30 transfers a telephone number of a cellphone 40 transmitted from the cellphone 40 to a settlement server 10, the settlement server 10 inquires of a credit examination terminal 50 by use of a credit card number corresponding to the telephone number previously stored in a storage part 22. Accordingly, the telephone number only runs to the Internet NW2 interposed between the cellphone 40 and the store server 30, and the credit card number does not run. Accordingly, a situation wherein the credit card number is tapped by an ill-intentioned third party on the Internet NW2 is intentionally avoided to intentionally improve the safety when performing the online shopping. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a payment system and a payment server for use in online shopping using a network such as the Internet.

  In recent years, online shopping on the Internet has been actively performed, and one of the payment methods is credit card settlement. When ordering by this credit card settlement, the orderer transmits his / her credit card number to the shopping site.

Recently, it has become possible to access the Internet even from a mobile phone, so that users can easily enjoy online shopping at any time.
Japanese Patent Laid-Open No. 2001-351034

  However, the above-described conventional settlement system has the following problems. That is, when making a credit card payment, the orderer's credit card number flows over the Internet, which is accessible to unspecified users, and the number is stolen by a malicious third party. Note that Patent Document 1 discloses a payment system for online shopping using a mobile phone. However, since the settlement system described in this document uses an advanced and high-cost technology called a firewall for each store server, its construction is very troublesome and difficult.

  Accordingly, the present invention has been made to solve the above-described problems, and an object thereof is to provide a settlement system and a settlement server that are improved in safety when online shopping is performed using a mobile phone. .

  A payment system according to the present invention includes a store server connected to the Internet and a payment server arranged at a gateway between the Internet and a mobile phone network, and the store server is connected to the Internet via a mobile phone network. A transfer means for receiving a telephone number of the mobile phone transmitted from the mobile phone and transferring first payment information including the telephone number to a payment server when accepting an order from the mobile phone; The server receives the first settlement information transmitted from the storage unit in which the telephone number of the mobile phone and the credit card number of the user of the mobile phone are stored in association with each other, and the transfer means of the store server And the telephone number included in the first settlement information received by the receiving means and stored in the storage unit in association with the telephone number Extracting means for extracting the credit card number, inquiry means for making an inquiry to a credit examination terminal of a predetermined credit company using the credit card number extracted by the extracting means, and the result of the inquiry made by the inquiry means in the store server And transmitting means for transmitting to.

  In this payment system, the telephone number of the mobile phone received when the store server receives an order from the mobile phone is transmitted to the payment server by the transfer means. The settlement server that has received the telephone number by the receiving means extracts the credit card number of the user of the mobile phone of the telephone number from the storage unit by the extracting means, and uses the extracted credit card number to obtain a credit examination terminal by the inquiry means Make an inquiry to And the inquiry result is transmitted to a store server by a transmission means. That is, in this payment system, when the store server transfers the mobile phone number transmitted from the mobile phone to the payment server, the payment server uses the credit card number corresponding to the telephone number to the credit examination terminal. Make an inquiry. Therefore, only a telephone number flows and no credit card number flows on the Internet interposed between the mobile phone and the store server. Therefore, the situation where the credit card number is stolen by a malicious third party on the Internet is significantly avoided, and the safety when shopping online is significantly improved.

  The receiving means of the payment server receives the first payment information and the second payment information including the telephone number of the mobile phone transmitted from the mobile phone, and the payment server receives the first payment information received by the receiving means. A collating unit that collates the telephone number included in the first settlement information with the telephone number included in the second settlement information, and the extracting unit credits the telephone number when the matching unit confirms the match between the two telephone numbers. It is preferable to extract the card number from the storage unit. In this case, the mobile phone user is authenticated by collating the telephone number of the first settlement information with the telephone number of the second settlement information. In addition, the user can stop the payment flow in the payment system by operating his / her mobile phone to stop the transmission of the second payment information. Therefore, even if the user has made an order by mistake, the user can cancel the order.

  The store server further includes order confirmation means for transmitting an order ID corresponding to the order received from the mobile phone to the mobile phone, and the order ID is included in the first payment information transferred by the transfer means to the payment server. And the receiving means of the payment server receives the first payment information transferred from the store server and the second payment information including the order ID transmitted from the mobile phone that has received the order ID, The means collates both telephone numbers and both order IDs included in the first and second settlement information received by the receiving means, and the extracting means matches both telephone numbers and both order IDs as a result of the collation by the collating means. In this case, it is preferable to extract the credit card number from the storage unit. In this case, by using the telephone number and the order ID for the verification of the first settlement information and the second settlement information, the person authentication is performed more accurately than when only the telephone number is used. Can do.

  Further, the order confirmation unit of the store server transmits the store ID specifying the store server together with the order ID to the mobile phone, and the first settlement information transferred by the transfer unit to the settlement server includes the store ID. The receiving means of the payment server includes the first payment information transferred from the store server, and the second payment information including the order ID and the store ID transmitted from the mobile phone that has received the order ID and the store ID. The collation means collates both telephone numbers, both order IDs, and both store IDs included in the first and second settlement information received by the reception means, and the extraction means obtains the result of the collation by the collation means. When the two telephone numbers, the two order IDs, and the two store IDs match, it is preferable to extract the credit card number from the storage unit. In this case, the telephone number, the order ID, and the store ID are used for collation between the first payment information and the second payment information, so that only the telephone number is used or the telephone number and the order ID are used. Compared to the case, the user authentication can be performed more accurately.

  The settlement server according to the present invention is a settlement server disposed at a gateway between the Internet and a mobile phone network, and includes a telephone number of a mobile phone connected to the Internet via the mobile phone network, and a user of the mobile phone Storage unit in which the credit card number of the mobile phone is stored in association with each other, and the store server connected to the Internet receives the phone number of the mobile phone received from the mobile phone when receiving an order from the mobile phone. Receiving means for receiving, extracting means for extracting a credit card number associated with the telephone number and stored in the storage unit based on the telephone number received by the receiving means, and the credit card number extracted by the extracting means Inquirer who makes an inquiry to the credit examination terminal of a given credit card company using When, characterized by having a transmitting means for transmitting the result of the inquiry by the inquiry means to the store server.

  In this settlement server, the settlement server that has received the telephone number of the mobile phone received from the mobile phone when the store server accepts an order from the mobile phone by the receiving means is the user of the mobile phone of the telephone number by the extracting means. The credit card number is extracted from the storage unit. Next, the credit examination terminal is inquired by the inquiry means using the extracted credit card number. And the inquiry result is transmitted to a store server by a transmission means. That is, in this payment server, when the store server transfers the mobile phone number transmitted from the mobile phone to the payment server, the payment server uses the credit card number corresponding to the telephone number to the credit examination terminal. Make an inquiry. Therefore, only a telephone number flows and no credit card number flows on the Internet interposed between the mobile phone and the store server. Therefore, the situation where the credit card number is stolen by a malicious third party on the Internet is significantly avoided, and the safety when shopping online is significantly improved.

  ADVANTAGE OF THE INVENTION According to this invention, the payment system and payment server by which the improvement of the safety | security at the time of online shopping using a mobile terminal was aimed at are provided.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, embodiments that are considered to be the best for implementing a payment system and a payment server according to the present invention will be described in detail with reference to the accompanying drawings. In addition, the same code | symbol is attached | subjected about the same or equivalent element, and the description is abbreviate | omitted when description overlaps.

  As shown in FIG. 1, the payment system 1 includes a payment server 10 and a store server 30. The settlement server 10 is a mobile phone network NW1 used for voice calls and data transmission / reception of the mobile phone 40 and the Internet NW2. It is an online shop server and is connected to the Internet NW2. In the payment system 1, a user of the mobile phone 40 that can access the Internet NW 2 can access the store server 30 using the mobile phone 40 and order a desired product or service.

  First, the store server 30 constituting the payment system 1 will be described.

  The store server 30 mainly includes an information processing device, a recording device, a communication device, and the like as physical components, and a transfer unit (transfer unit) 32 and an order confirmation unit (order confirmation unit) as functional components. 34.

  The transfer unit 32 is a part that receives an order regarding a product or service provided by the store server 30 from the mobile phone 40 and receives a telephone number of the mobile phone 40 transmitted from the mobile phone 40 when the order is received. . Then, the transfer unit 32 transfers the server payment information (first payment information) including the received telephone number to the payment server 10. In addition to the telephone number, the server settlement information includes an order ID corresponding to the order received from the mobile phone 40 and a shop ID (store ID) that identifies the store server 30 of the server.

  The order confirmation unit 34 is a part that transmits to the mobile phone 40 the order ID corresponding to the order received from the mobile phone 40 and the shop ID that identifies its own store server 30.

  Next, the payment server 10 constituting the payment system 1 will be described.

  The settlement server 10 mainly includes an information processing device, a recording device, a communication device, and the like as physical components, and includes a reception unit (reception unit) 12, a verification unit (verification unit) 14, as functional components. An extraction unit (extraction unit) 16, an inquiry unit (inquiry unit) 18, a transmission unit (transmission unit) 20, and a storage unit 22 are provided. Further, the settlement server 10 is connected to the credit examination terminal 50 of the credit card company via a line L that is secured. The credit examination terminal 50 is a terminal that, when a credit card number is inputted and inquired, confirms credit of the credit card corresponding to the number and outputs the right or wrong of the credit.

  The storage unit 22 stores a database 22a and a database 22b. The database 22a stores data as shown in FIG. That is, the telephone number of each mobile phone 40 connected to the mobile phone network NW1, the credit card number of the user of each mobile phone 40, and the credit card company corresponding to the credit card number are stored in association with each other. Has been. Data as shown in FIG. 2B is stored in the database 22b. That is, the store ID (store ID) for identifying each store server 30, the store name of the store server 30, and the credit card types that can be handled by each store server 30 are stored in association with each other. .

  The receiving unit 12 is a part that receives the above-described server settlement information transmitted from the transfer unit 32 of the store server 30. The receiving unit 12 is a part that receives user payment information (second payment information) transmitted from the mobile phone 40. This user settlement information includes the telephone number of the mobile phone 40 and the shop ID and order ID sent from the order confirmation unit 34 of the store server 30 to the mobile phone 40.

  The collation unit 14 is a unit that collates the server settlement information received by the reception unit 12 and the user settlement information. Specifically, the collation unit 14 includes the telephone number included in the server payment information, the telephone number included in the user payment information, the shop ID included in the server payment information, the shop ID included in the user payment information, and the server payment information. The order ID included and the order ID included in the user settlement information are collated.

  The extraction unit 16 is associated with the telephone number included in the server settlement information when the collation unit 14 matches the telephone number, the order ID, and the order ID of the server settlement information and the user settlement information. This is a part for extracting a credit card number stored in the database 22a of the storage unit 22.

  The inquiry unit 18 is a part that uses the credit card number extracted by the extraction unit 16 to inquire the credit examination terminal 50 of the credit card company corresponding to the credit card number. When this inquiry is made, the credit screening terminal 50 sends the credit of the credit card number to the inquiry unit 18. When checking the validity of a credit card by this inquiry, an examination request for an upper limit (payment limit) may be made as appropriate.

  The transmission unit 20 is a part that transmits the result of the inquiry by the inquiry unit 18 to the store server 30.

  Next, a procedure for online shopping by the user of the mobile phone 40 in the payment system 1 will be described with reference to the sequence diagram of FIG.

  First, the user accesses the site of the store server 30 from the mobile phone 40 via the mobile phone network NW1 and the Internet NW2, and orders a desired product or service (S10). At the time of this order, the telephone number of the mobile phone 40 is sent to the store server 30. As a method of sending a telephone number, there are a method of sending by user's initiative by a predetermined operation, a method of sending automatically without making the user aware of it, and the like.

  When an order is placed by the mobile phone 40, the order confirmation unit 34 of the store server 30 transmits an order ID corresponding to the order and a shop ID that identifies the own store server 30 to the mobile phone 40 (S12). Further, when an order is placed by the mobile phone 40, the transfer unit 32 of the store server 30 causes the order ID corresponding to the order, the telephone number received from the mobile phone 40, and the shop ID that identifies its own store server 30. Server settlement information including the above is transmitted to the settlement server 10 (S14).

  On the other hand, the mobile phone 40 that has received the order ID and the shop ID from the store server 30 transmits user payment information including these information and its own telephone number to the payment server 10 (S16). At this time, the user may operate his / her mobile phone 40 to stop transmission of user settlement information. Thereby, the user can cancel this payment flow in the payment system 1, and can cancel the order even if the user has made an order by mistake.

  When the receiving unit 12 of the settlement server 10 receives the server settlement information from the store server 30 and the user settlement information from the mobile phone 40, the collation unit 14 collates the server settlement information and the user settlement information (S18). When the telephone number, the order ID, and the order ID of the server settlement information and the user settlement information all match, the extraction unit 16 stores them in the database 22a of the storage unit 22 in association with the telephone number included in the server settlement information. The credit card number is extracted (S20), and an inquiry using the credit card number is performed by the inquiry unit 18 (S22). When the credit screening terminal 50 sends the credit card number credit to the inquiry unit 18, the transmission unit 20 transmits the credit result to the store server 30 (S24).

  Then, the store server 30 transmits an order completion report to the user's mobile phone 40 based on the credit result (S26).

  As described in detail above, in the payment system 1, the telephone number of the mobile phone 40 received when the store server 30 receives an order from the mobile phone 40 is transmitted to the payment server 10 by the transfer unit 32. Upon receiving the telephone number by the receiving unit 12, the settlement server 10 extracts the credit card number of the user of the mobile phone 40 of the telephone number from the storage unit 22 by the extracting unit 16 and makes an inquiry using the extracted credit card number. The unit 18 makes an inquiry to the credit examination terminal 50. Then, the transmission unit 20 transmits the inquiry result to the store server 30.

  That is, in the payment system 1, when the store server 30 transfers the telephone number of the mobile phone 40 transmitted from the mobile phone 40 to the payment server 10, the payment server 10 is stored in the storage unit 22 in advance. The credit examination terminal 50 is inquired using the credit card number corresponding to the telephone number. Therefore, only a telephone number flows and no credit card number flows through the Internet NW2 interposed between the mobile phone 40 and the store server 30. Therefore, the situation where the credit card number is stolen by a malicious third party on the Internet NW2 is significantly avoided, and the safety at the time of online shopping is significantly improved.

  The payment system 1 is easily constructed by providing one of the payment servers 10 described above in the gateway GW between the cellular phone network NW1 that is a high security network and the Internet NW2 that is a low security network. Therefore, it can be constructed extremely easily compared to the settlement system described in Patent Document 1.

  Furthermore, in this payment system 1, the collation unit 14 of the payment server 10 includes information (phone number, order ID, store ID) included in the server payment information and information (phone number, order ID, store ID) included in the user payment information. ID) is verified to authenticate the user of the mobile phone 40. The collation in the collation unit 14 may be performed using only the telephone numbers included in the user settlement information and the server settlement information. In this case, the amount of data used for the collation is reduced, so that the collation is completed in a short time. can do. However, when using the phone number and order ID for verification, more accurate personal authentication can be performed. When using the phone number, order ID and store ID for verification, more accurate personal authentication can be performed. Can be done.

It is the block block diagram which showed the payment system which concerns on embodiment of this invention. It is the figure which showed the database of the storage part of the payment server shown in FIG. It is the sequence diagram which showed the procedure in which the user of a mobile telephone performs online shopping in the payment system of FIG.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Payment system, 10 ... Payment server, 12 ... Reception part, 14 ... Verification part, 16 ... Extraction part, 18 ... Inquiry part, 20 ... Transmission part, 22 ... Storage part, 30 ... Store server, 32 ... Transfer part, 34 ... Order confirmation part, 40 ... Mobile phone, 50 ... Credit examination terminal, GW ... Gateway, NW1 ... Mobile phone network, NW2 ... Internet.

Claims (5)

A store server connected to the Internet;
A payment server disposed at a gateway between the Internet and a mobile phone network;
When the store server receives an order from a mobile phone connected to the Internet via the mobile phone network, the store server receives the phone number of the mobile phone transmitted from the mobile phone and includes the phone number Transfer means for transferring the payment information of 1 to the payment server;
The payment server
A storage unit in which a telephone number of the mobile phone and a credit card number of a user of the mobile phone are stored in association with each other;
Receiving means for receiving the first settlement information transmitted from the transfer means of the store server;
Extracting means for extracting the credit card number stored in the storage unit in association with the telephone number based on the telephone number included in the first settlement information received by the receiving means;
Inquiry means for making an inquiry to a credit examination terminal of a predetermined credit company using the credit card number extracted by the extracting means,
A settlement system comprising: a transmission unit configured to transmit a result of the inquiry by the inquiry unit to the store server. The receiving means of the payment server receives the first payment information and second payment information including a telephone number of the mobile phone transmitted from the mobile phone;
The settlement server further comprises a collating unit that collates the telephone number included in the first settlement information received by the receiving unit with the telephone number included in the second settlement information,
The payment system according to claim 1, wherein the extracting unit extracts the credit card number from the storage unit when the matching unit confirms the match between the two telephone numbers. The store server further includes an order confirmation unit that transmits an order ID corresponding to the order received from the mobile phone to the mobile phone, and the first payment information that the transfer unit transfers to the payment server includes The order ID is included,
The receiving means of the payment server includes the first payment information transferred from the store server and the second payment information including the order ID transmitted from the mobile phone that has received the order ID. Receive
The collation means collates both the telephone numbers and both the order IDs included in the first and second settlement information received by the reception means,
The payment system according to claim 2, wherein the extraction unit extracts the credit card number from the storage unit when the two telephone numbers and the two order IDs match as a result of the verification by the verification unit. The order confirmation unit of the store server transmits a store ID specifying its own store server together with the order ID to the mobile phone, and the transfer unit transfers the first settlement information to the settlement server. Contains the store ID,
The receiving means of the payment server includes the first payment information transferred from the store server, the order ID and the store ID transmitted from the mobile phone that has received the order ID and the store ID. Receiving the second settlement information;
The collation means collates both the phone numbers, both the order IDs, and both the store IDs included in the first and second settlement information received by the receiving means,
The said extraction means extracts the said credit card number from the said storage part, when the said both telephone numbers, both said order ID, and both said store ID correspond as a result of the collation by the said collation means. Payment system. A payment server located at a gateway between the Internet and a mobile phone network,
A storage unit in which a telephone number of a mobile phone connected to the Internet via the mobile phone network and a credit card number of a user of the mobile phone are stored in association with each other;
Receiving means for receiving from the store server the telephone number of the mobile phone received from the mobile phone when the store server connected to the Internet accepts an order from the mobile phone;
Extracting means for extracting the credit card number associated with the telephone number and stored in the storage unit based on the telephone number received by the receiving means;
Inquiry means for making an inquiry to a credit examination terminal of a predetermined credit card company using the credit card number extracted by the extracting means,
A settlement server comprising: a transmission unit configured to transmit a result of the inquiry by the inquiry unit to the store server.

Images