JP2005310013A - Electronic bank server, electronic bank system, financial processing method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic bank system capable of always securely and surely performing a transaction processing and instantaneously performing the transaction processing when a transaction request is caused. <P>SOLUTION: The electronic bank system is provided with: an electronic bank server 10 which performs the dealing processing; a service providing Web server 50 which transmits dealing request information to the electronic bank server 10; terminals such as a cellular phone 20A and a PC 20B which are communication equipment; providers 40A, 40B of the cellular phone 20A and the PC 20B ; and a network 30 which communicably connects the electronic bank server 10, the cellular phone 20A, the PC 20B, the providers 40A, 40B and the service providing Web server 50. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic bank server, an electronic bank system, a financial processing method, and a program that perform financial transaction processing on a computer network such as the Internet. In particular, the present invention relates to an electronic bank server, an electronic bank system, a financial processing method, and a program that can perform transaction processing at all times safely and reliably, and can perform transaction processing immediately when a transaction request is made. .

  2. Description of the Related Art Conventionally, a computer network (hereinafter simply referred to as “network”) has been constructed in which a plurality of computers are connected by a communication line and the like, and data and programs are stored and exchanged among a plurality of computers and data is shared ing.

  As such a network system, an open network system in which computers can be freely connected in principle if they comply with a predetermined communication protocol, etc., and a network managed by a host computer or the like and connected computers, etc. There is a closed network system in which a terminal device is restricted by a certain security or the like so that an unmanaged computer node is not connected to the network.

  A typical example of the open network system is the Internet. In this Internet, TCP (Transfer Control Protocol) / IP (Internet Protocol) is adopted as a communication protocol. In principle, any computer that complies with this communication protocol can be connected to the network.

  In recent years, a multimedia environment such as WWW (World Wide Web) has been developed against a background of a free network environment such as the Internet. In particular, recently, many so-called Internet businesses (e-businesses) that perform specific services using the Internet have been proposed and operated.

  In addition, transactions of financial information using the Internet are also carried out, and remittance and withdrawal between companies and individuals are performed. .

  For example, Japanese Patent Publication No. 326002 discloses a payment system connected to a computer network. This payment system builds a virtual shopping street on a computer network, enables a user to purchase a desired product online from a store constituting the shopping street, and clears the purchased price. A payment system on a computer network as described above, wherein a virtual bank is provided on the network for a real bank that settles the price of purchased goods, and each virtual bank has a virtual account for each user and each store. When a user purchases a product, the virtual bank transfers virtual funds between the user's virtual account and the virtual course of the store, and automatically transfers for payment This is characterized in that the actual bank is constructed so as to settle the price based on this instruction.

According to this payment system, a virtual bank corresponding to a real bank is constructed on a computer network, a temporary account transfer is performed between the user and the virtual store, and the result is notified to the real bank. By performing the transfer process, the transaction process on the network can be reflected in the actual settlement information of the actual bank.
Japanese Patent Publication No. 326002

  However, according to the settlement system as described above, in a large amount of financial transactions, in order to automate transaction request / processing / transaction result notification, batch processing in the transaction requesting source or requesting destination system is required. Therefore, it took about 4 days from application for transactions such as withdrawal to the execution of account transfer.

  In addition, in the case of transfer processing between a service user (user) and a service provider on the network, each bank system of the service user (user) and the service provider intervenes, and the balance in the middle of the processing When an error such as a shortage occurs, it is difficult to immediately notify or respond, and therefore it is difficult to always provide a financial transaction service on the network continuously for 365 days and 24 hours.

  In addition, in the case of financial transactions on the network, it was necessary to create data for batch processing on the server side of the service provider, and it took time and effort to create and examine a CSV file / Zengin format file.

  Accordingly, an object of the present invention is to provide an electronic bank server, an electronic bank system, and a financial system that can perform transaction processing at all times safely and reliably, and can perform transaction processing immediately when a transaction is requested. A processing method and a program are provided.

  In order to solve the above problems, an electronic bank server according to the present invention is an electronic bank server that performs financial transaction processing on a network, and is unique to the communication control means that is communicably connected to the network, and the service providing server. Address on the network (network address), address storage means for storing financial information of the service providing server in association with each other, transaction processing means for performing transaction processing based on the transaction request information, and information for communicating with the service providing server Encryption processing means for performing encryption and decryption, and the transaction processing means is transmitted from the service providing server after being encrypted, and the network address included in the transaction request information decrypted by the encryption processing means is an address. It is determined whether it is stored in the storage means, and the network address is stored in the address storage unit. If stored in, performs transaction processing based on the transaction information contained in the transaction request information, and wherein the.

  Further, the network processing means for providing the service providing server with a network address registration / deletion image for registering / deleting the network address, the network processing means requesting registration or deletion of the network address from the service providing server. The network address of the service providing server can be registered in the address storage unit or deleted from the address storage unit.

  In addition, a transaction ID storage unit that stores a unique transaction ID assigned to each transaction request information transmitted from the service providing server, and the communication control unit includes a transaction ID included in the transaction request information to be received. When stored in the ID storage means, the reception of the transaction request information can be refused.

  Furthermore, the financial information storage means which memorize | stores the financial information of a service provision server is provided, and a transaction processing means can perform transaction processing based on the financial information and transaction information which are contained in a financial information storage means.

  Further, the transaction processing means can notify the service providing server when the financial information included in the financial information storage means falls outside the range of the account balance registered in advance.

  The network address may be an IP (Internet Protocol) address that is uniquely or dynamically allocated on the network.

  Also, the encryption processing means can correspond to HTTPS encryption, BASE64 encryption, and DES encryption.

  Further, message storage means for storing the result status indicating the processing result can be provided, and the result status can be managed by an individually assigned number.

  In order to solve the above problem, the electronic bank system of the present invention transmits an electronic bank server that performs transaction processing, a terminal that makes a transaction request, and transaction request information to the bank server in response to the transaction request from the terminal. In an electronic bank system including a service providing server and a network that connects the terminal, the electronic bank server, and the service providing server so that they can communicate with each other, the electronic bank server is the above-described electronic bank server.

  Also, the terminal can be a portable communication device or a PC (Personal Computer).

  The network may be the Internet or an intranet.

  Further, the network address may be a plurality of IP addresses, and may be a part of the IP address.

  In addition, the electronic bank server can confirm the information of the terminal user managed by the service providing server at the time of transaction processing.

  Also, the electronic bank server can determine whether or not to perform transaction processing by checking the age of the terminal user.

  In addition, the electronic bank server can include maiden name information in the terminal user information.

  In order to solve the above problems, a financial processing method of the present invention is a financial processing method for performing financial-related transaction processing on a network, and (A) registers a network address of a service providing server in an electronic bank server. (B) Transaction request information is generated by the service providing server in response to a transaction request from the terminal to the service providing server, (C) the transaction request information is transmitted from the service providing server to the electronic bank server, and (D) Service When transaction request information from the providing server is received by the electronic bank server, (E) it is determined whether or not the network address of the service providing server included in the received transaction request information is correct, and (F) the network address is correct Transaction processing is performed.

  Here, in the step (F), the transaction processing can be performed when the network address of the service providing server included in the transaction request information matches all or a part of the registered network address.

  Further, step (C) can encrypt the transaction request information and transmit it to the electronic bank server, and step (D) can decrypt the received transaction request information.

  Step (D) checks the transaction ID included in the received transaction request information, determines whether or not the transaction ID matches the previously received transaction ID, and matches the previously received transaction ID. When doing so, it is preferable not to receive the transaction request information.

  Here, the network can be the Internet or an intranet.

  At this time, the network address may be a unique or dynamically allocated IP address on the network.

  In order to solve the above-mentioned problem, a program according to the first aspect of the present invention is a program for performing a financial-related transaction on a network, and realizes the function of the electronic bank server described above in a computer. It is characterized by that.

  In order to solve the above problem, a program according to the second aspect of the present invention is a program for performing a financial-related transaction on a network, and realizes the function of the electronic bank system described above in a computer. It is characterized by that.

  In order to solve the above-mentioned problem, a program according to the third aspect of the present invention is a program for conducting a financial-related transaction on a network, and executes the processing of the financial processing method described above on a computer. It is characterized by that.

  According to the electronic bank server, electronic bank system, financial processing method, and program of the present invention, transaction processing can be performed safely and reliably at all times, and when a transaction request is made, the transaction processing is performed immediately. be able to.

  Embodiments of an electronic bank server, an electronic bank system, a financial processing method, and a program according to the present invention will be described below with reference to the drawings.

  FIG. 1 is a diagram showing an embodiment of an electronic bank system according to the present invention. This electronic bank system includes an electronic bank server 10 that performs transaction processing, a service providing Web server 50 that transmits transaction request information to the electronic bank server 10, a mobile phone 20A that is a communication device, a personal computer (PC) 20B, and the like. A terminal (hereinafter also simply referred to as “terminal 20A, 20B”), providers 40A, 40B of the mobile phone 20A and PC 20B, an electronic bank server 10, a mobile phone 20A, a PC 20B, providers 40A, 40B, and a service providing Web server 50. And a network 30 that is communicably connected.

  Here, the network 30 can be constructed using the Internet or an intranet. In this case, the network address can be a part of one or more IP (Internet Protocol) addresses or IP addresses.

  Further, the electronic bank server 10 confirms the user information of the terminals 20A and 20B managed by the service providing Web server 50 at the time of transaction processing. At this time, the electronic bank server confirms the age of the users of the terminals 20A and 20B and determines whether or not to perform transaction processing. In addition, the electronic bank server can include maiden name information in the terminal user information.

  The terminals 20A and 20B make a transaction request such as transfer or settlement to the service providing Web server 50, and the service providing Web server 50 transmits transaction request information to the electronic bank server 10 in response to the transaction request. Here, the transaction request information includes “ID (store number + account number), password, IP address (network address)” for authentication of the user (service providing Web server 50). Further, the merchant ID assigned by the electronic bank server 10 (customer number of the service providing Web server 50), the transaction ID assigned for each transaction request information, the remittance destination account information, the remittance amount, the remittance source account information, the login password, Remittance name etc. can be included.

  Further, the electronic bank server 10 can delete the registered network address in response to a request from the service providing Web server 50, and can further delete the actual network of the currently connected service providing Web server 50. When the address is the same as the registered network address, the registered network address can be deleted in response to a request from the service providing Web server 50.

  FIG. 2 is a diagram showing an example of the configuration of the electronic bank server 10 shown in FIG. In FIG. 2, the electronic bank server 10 is connected to a network 30 and provides a communication control unit 11 that controls communication and a network address registration / deletion image for registering / deleting a network address to the service providing Web server 50. A Web processing unit 12 that performs processing, an address DB 14 that stores an address on the network unique to the service providing Web server 50 (network address) and financial information (account information, etc.) of the service providing Web server 50, and a transaction request Transaction processing unit 15 that performs transaction processing based on information, financial information DB 16 that stores financial information (account information, etc.) and passwords of users of service providing Web server 50 and terminals 20A and 20B, and service providing Web server 50 Encryption and decryption of information communicated with And a transaction ID DB 17 for storing a unique transaction ID assigned to each transaction request information transmitted from the service providing Web server 50, and a message DB 18 for storing a result status indicating a processing result. I have.

  Here, the transaction processing unit 15 determines whether or not the network address included in the transaction request information encrypted and transmitted from the service providing Web server 50 and decrypted by the encryption processing unit 13 is stored in the address DB 14. If it is determined and the network address is stored in the address DB 14, the transaction processing is performed based on the transaction information included in the transaction request information.

  Further, the Web processing unit 12 registers or deletes the network address of the service providing Web server 50 in the address DB 14 or deletes it from the address DB 14 in response to a network address registration or deletion request from the service providing Web server 50.

  In addition, when the transaction ID included in the transaction request information to be received is stored in the transaction ID DB 17, the communication control unit 11 rejects the reception of the transaction request information and is not stored in the transaction ID DB 17. If the transaction ID is a transaction ID, the transaction request information is received and the transaction ID is stored in the transaction ID DB 17.

  The encryption processing unit 13 corresponds to HTTPS encryption, BASE64 encryption, and DES encryption, and decrypts received transaction request information and encrypts information to be transmitted.

  The transaction processing unit 15 performs transaction processing based on the financial information included in the financial information DB 16 based on the received and decrypted transaction request information.

  Further, when the financial information included in the financial information DB 16 is out of the range of the account balance registered in advance, the transaction processing unit 15 has, for example, the account balance of the service providing Web server 50 becomes a predetermined amount or less. In this case, the service providing Web server 50 is notified.

  Furthermore, the result status indicating the processing result such as communication or transaction stored in the message DB 18 is managed by an individually assigned number. That is, the process result is passed by number from each process, and when notifying the user, a message corresponding to that number (for example, “normal end” if the result number is “00”, and result number “01”). Then send “No account”.

  FIG. 3 is a flowchart showing a financial processing method using the electronic bank system of the present invention. 1 to 3, first, in response to an account opening request from the service providing Web server 50 to the electronic bank server 10, an account of the service providing Web server 50 is opened in the electronic bank server 10 (step 301-b, Step 301-a).

  At this time, registration of the IP address (network address) of the service providing Web server 50, specification of an encryption tool, setting of double transaction prevention by transaction ID, notification setting at the time of a predetermined balance (balance management setting), age of the counterparty Restrictions can be set.

  Next, in response to the transaction request from the terminals 20A and 20B (step 302-b), the service providing Web server 50 creates transaction request information and performs encryption (step 303-b). Then, the encrypted transaction request information is transmitted to the electronic bank server 10 (step 304-b).

  The transaction request information is received by the communication control unit 11 of the electronic bank server 10 (step 302-a). Here, when an error occurs during communication, the transaction request information is retransmitted by the communication retry function.

  The encryption processing unit 13 decrypts the transaction request information with a predetermined encryption tool (step 303-a). Then, it is confirmed whether or not the IP address (network address) of the service providing Web server 50 included in the transaction request information matches all or a part of the IP address (network address) registered in the address DB 14 ( Step 304-a). If the addresses do not match, error processing is performed (step 309-a).

  If the IP address (network address) check is OK (step 304-a), the transaction ID is checked (step 305-a). If the transaction ID is already stored in the transaction ID DB 17, the received transaction request information has already been received, so that the reception of the transaction request information is rejected and error processing is performed (step 309-a).

  If the transaction ID is checked (step 305-a), the transaction ID is registered in the transaction ID DB 17 (step 306-a).

  Next, account processing is performed based on the transaction request information (step 307-a). At this time, in the customer information of the financial information DB, in addition to the name after marriage (divorce), the maiden name before marriage (divorce) may be registered. Thereby, the trouble by the change of the name holder by marriage (divorce) etc. can be avoided. It is also possible to determine the upper limit of the amount that can be processed at one time. These pieces of information may be held in either the electronic bank server 10 or the service providing Web server 50, and during account processing, customer information is exchanged between the electronic bank server 10 and the service providing Web server 50 in real time. It is recommended to exchange.

  When transaction processing such as account transfer and remittance is normally completed, result information indicating normal completion is created (step 308-a). On the other hand, if an error occurs in step 304-a, step 305-a, step 308a, etc., an error message to that effect is created as result information (step 309-a).

  The result information is encrypted by the encryption processing unit 13 and transmitted from the electronic bank server 10 to the service providing Web server 50 (step 311-a).

  The service providing Web server 50 receives and decodes the result information (steps 306-b and 307-b), and transmits the result information to the terminals 20A and 20B on the user side for notification (step 308-b).

  In the electronic bank server, electronic bank system, and financial processing method of the present invention described above, the message DB 18 can be provided in the service providing Web server 50. In this case, the electronic bank server 10 only needs to notify the corresponding number as a result code.

  The electronic bank server, the electronic bank system, and the financial processing method of the present invention have been described above. However, the above-described electronic bank server, electronic bank system, and settlement method can be implemented as a program that can be realized and executed by a computer or the like.

It is a figure which shows an example of the electronic bank system of this invention. It is a figure which shows an example of the electronic bank server of this invention. It is a flowchart which shows an example of the financial processing method of this invention.

Explanation of symbols

10 Electronic Bank Server 11 Communication Control Unit 12 Web Processing Unit 13 Cryptographic Processing Unit 14 Address DB
15 Transaction Processing Unit 16 Financial Information DB
17 Transaction IDDB
18 Message DB
20A terminal (mobile phone)
20B terminal (PC)
30 Network 40A, 40B Provider 50 Service providing Web server

Claims (26)

An electronic bank server that processes financial transactions on a network,
A communication control means for communicably connecting to a network;
An address storage means for storing an address on the network unique to the service providing server (network address) and financial information of the service providing server,
Transaction processing means for performing transaction processing based on the transaction request information;
Encryption processing means for encrypting and decrypting information communicating with the service providing server;
With
The transaction processing means determines whether or not a network address included in the transaction request information that is encrypted and transmitted from the service providing server and decrypted by the encryption processing means is stored in the address storage means, When the network address is stored in the address storage means, a transaction process is performed based on the transaction information included in the transaction request information.
An electronic bank server characterized by that. Furthermore, network processing means for providing a network address registration / deletion image for registering / deleting a network address to the service providing server,
The network processing means registers or deletes the network address of the service providing server in the address storage means or deletes it from the address storage means in response to a registration or deletion request of the network address from the service providing server.
The electronic bank server according to claim 1. Furthermore, a transaction ID storage means for storing a unique transaction ID assigned to each transaction request information transmitted from the service providing server,
When the transaction ID included in the transaction request information to be received is stored in the transaction ID storage unit, the communication control unit rejects reception of the transaction request information.
The electronic bank server according to claim 1 or 2, characterized in that And further comprising financial information storage means for storing financial information of the service providing server,
The transaction processing means performs transaction processing based on the financial information included in the financial information storage means and the transaction information.
The electronic bank server according to any one of claims 1 to 3, wherein The transaction processing means notifies the service providing server when the financial information included in the financial information storage means falls outside the range of the account balance registered in advance.
The electronic bank server according to claim 4. 6. The electronic bank server according to claim 1, wherein the network address is a unique or dynamically allocated IP (Internet Protocol) address on the network. 7. The electronic bank server according to claim 1, wherein the cryptographic processing means corresponds to HTTPS encryption, BASE64 encryption, and DES encryption. In addition, message storage means for storing a result status indicating the processing result,
The result status is managed by an individually assigned number,
The electronic bank server according to any one of claims 1 to 7, characterized in that An electronic bank server for transaction processing;
A terminal making a transaction request;
A service providing server that transmits transaction request information to the bank server in response to a transaction request from the terminal;
A network connecting the terminal, the electronic bank server, and the service providing server in a communicable manner;
In an electronic bank system comprising:
The electronic bank server is the electronic bank server according to any one of claims 1 to 7.
An electronic banking system characterized by that. The electronic bank system according to claim 9, wherein the terminal is a portable communication device. The electronic bank system according to claim 9, wherein the terminal is a PC (Personal Computer). The electronic bank system according to claim 9, wherein the network is the Internet or an intranet. The electronic bank system according to any one of claims 9 to 12, wherein the network address is a plurality of IP addresses. 14. The electronic bank system according to claim 9, wherein the network address is a part of an IP address. 15. The electronic bank system according to claim 9, wherein the electronic bank server confirms information of the terminal user managed by the service providing server at the time of transaction processing. The electronic bank system according to any one of claims 9 to 15, wherein the electronic bank server determines whether to perform transaction processing by checking the age of the terminal user. 17. The electronic bank system according to claim 9, wherein the electronic bank server includes maiden name information in the terminal user information. A financial processing method for processing financial transactions on a network,
(A) Register the network address of the service providing server in the electronic bank server,
(B) In response to a transaction request from the terminal to the service providing server, generate transaction request information on the service providing server,
(C) transmitting the transaction request information from the service providing server to the electronic bank server;
(D) The transaction request information from the service providing server is received by the electronic bank server,
(E) determining whether the network address of the service providing server included in the received transaction request information is correct;
(F) Transaction processing when the network address is correct,
The financial processing method characterized by the above-mentioned. The step (F) performs a transaction process when the network address of the service providing server included in the transaction request information matches all or a part of the registered network address.
The financial processing method according to claim 18. In the step (C), the transaction request information is encrypted and then transmitted to the electronic bank server,
The step (D) decrypts the received transaction request information.
20. The financial processing method according to claim 18 or 19, wherein: The step (D) checks the transaction ID included in the received transaction request information, determines whether or not the transaction ID matches the previously received transaction ID, and matches the previously received transaction ID. 21. The financial processing method according to claim 18, wherein the transaction request information is not received. The financial processing method according to claim 18, wherein the network is the Internet or an intranet. 23. The financial processing method according to claim 18, wherein the network address is a unique or dynamically allocated IP address on the network. A program for conducting financial transactions on a network,
A program for causing a computer to realize the function of the electronic bank server according to any one of claims 1 to 8. A program for conducting financial transactions on a network,
A program for causing a computer to realize the functions of the electronic bank system according to any one of claims 9 to 17. A program for conducting financial transactions on a network,
24. A program for causing a computer to execute the processing of the financial processing method according to claim 18.

Images