JP2006059030A - Settlement system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a settlement system capable of more appropriately confirming identification and providing service. <P>SOLUTION: This settlement system 1a is provided with: an issue request receiving part 101 for receiving issue request information including a terminal number to specify a portable telephone set 30 to be used by a user who requests the offer of a service and store ID to specify a place where the user receives the offer of the service for receiving issue request information to request the issue of certificate information to be used when the service is offered; an identification information acquiring part 102 for acquiring identification information to specify the user based on the terminal number included in the received issue request information; a certificate information generating part 103 for generating the certificate information based on the acquired identification information and the store ID; and a certificate information transmitting part 104 for transmitting the generated certificate information to the portable telephone set 30 and a settlement server 40 for performing the settlement of the offer of the service. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a payment system.

  Credit cards are used for the purpose of providing credit sales. A user who intends to use a credit card brings a credit card to the store. A store terminal is installed in the store, and information stored in a credit card brought by the user is read. The store terminal transmits the read information to a server of a merchant that performs credit sales. The server of the merchant makes a settlement based on the received information and transmits the result to the store terminal. The store terminal receives this result and provides services to the user. In addition, since such a credit sales aspect does not relate to a known literature invention, there is no prior art document information to be described.

  As described above, in credit sales using a credit card, a user is required to sign a predetermined document when providing a service. This signature proves the validity of being a credit card user. However, in practice, it is difficult to strictly use the signature to confirm the identity, and it has not been possible to appropriately prevent the use of a malicious third party.

  Therefore, an object of the present invention is to provide a settlement system that can provide services by confirming the identity more appropriately.

  The payment system of the present invention includes (1) terminal specifying information for specifying a mobile communication terminal used by a user who requests provision of service, and payment place specifying information for specifying a place where the user receives service. An issuance request receiving means for receiving issuance request information for requesting issuance of electronic certificate information used in providing services; and (2) a user based on terminal identification information included in the received issuance request information. Identity information acquisition means for acquiring identity information to be identified; (3) certificate information generation means for generating certificate information based on the acquired identity information and settlement area identification information; Certificate information transmitting means for transmitting the generated certificate information to a mobile communication terminal and a server for settlement of service provision.

  According to the payment system of the present invention, since the generated certificate information is transmitted to the mobile communication terminal used by the user and the server performing the payment, the certificate information is received from the mobile communication terminal when the user receives provision of services. Passing the certificate enables authentication using the certificate information as a key. Further, since the certificate information includes the terminal identification information and the settlement center identification information, the possibility that the certificate information is used in different fields is effectively reduced.

  In the settlement system of the present invention, (5) certificate information receiving means for receiving certificate information from the mobile communication terminal, (6) confirmation information transmitting means for transmitting the received certificate information to the server, and (7) Confirmation information receiving means for receiving certificate confirmation information transmitted from the server in response to the transmission; and (8) service providing means for providing service to the user in response to reception of the certificate confirmation information. It is also preferable to provide. Since the certificate information received from the mobile communication terminal is sent to the server to request payment, for example, even if the certificate information is forged, it does not match the certificate information held in the server. Can be avoided.

  In the settlement system of the present invention, (9) first certificate information receiving means for receiving certificate information transmitted by the certificate information transmitting means, and (10) receiving certificate information transmitted by the confirmation information transmitting means. The second certificate information receiving means, and (11) the first certificate information receiving means and the second certificate information receiving means check each received certificate information to determine whether they match. A settlement means for determining provision of services to the user if the received certificate information matches, and (12) a settlement transmission means for transmitting the certificate confirmation information to the confirmation information receiving means in response to the determination. It is also preferable to provide. Since the consistency between the certificate information received from the certificate information transmission means without passing through a general user and the certificate information received from the confirmation information transmission means via the user's mobile phone is confirmed, for example, confirmation information Even if the certificate information received from the transmission means is forged, it is possible to avoid the settlement as it is.

  According to the present invention, it is possible to provide services by confirming the identity more appropriately.

  The teachings of the present invention can be readily understood by considering the following detailed description with reference to the accompanying drawings shown for illustration only. Subsequently, embodiments of the present invention will be described with reference to the accompanying drawings. Where possible, the same parts are denoted by the same reference numerals, and redundant description is omitted.

  A settlement system according to an embodiment of the present invention will be described with reference to FIG. FIG. 1 is a diagram showing the configuration of the payment system 1a. The payment system 1a includes a certificate issuing server 10, a store terminal 20, a mobile phone 30 (mobile communication terminal), and a payment server 40 (server).

  The certificate issuing server 10 is a server managed by a business operator that operates the mobile communication network 50. The certificate issuing server 10 can perform data communication with the mobile phone 30 via the mobile communication network 50. Information can be transmitted from the certificate issuing server 10 to the settlement server 40 via a dedicated line.

  Information can be transmitted from the mobile phone 30 to the store terminal 20 via short-range wireless communication. The store terminal 20 can send and receive information to and from the payment server 40 via a dedicated line. An RFID (Radio Frequency Identification System) 21 is installed in the store 2 where the store terminal 20 is installed. The RFID 21 stores store ID (settlement place specifying information) as position information of the store 2 and information specifying the store itself. The store ID in the present embodiment is information that specifies the position of the store 2. The mobile phone 30 receives the store ID transmitted from the RFID 21.

  Subsequently, the certificate issuing server 10 will be described. The certificate issuing server 10 is physically a computer (or a computer system) including a storage device such as a CPU, a memory, and a hard disk, a communication interface, and the like.

  The certificate issuing server 10 includes, as functional components, an issue request receiving unit 101 (issue request transmitting unit), an identity information acquiring unit 102 (identity information acquiring unit), and a certificate information generating unit 103 (certificate). An information generation unit), a certificate information transmission unit 104 (certificate information transmission unit), and a user information storage unit 151. Subsequently, each component will be described.

  The issue request receiving unit 101 specifies a terminal number (terminal specifying information) for specifying the mobile phone 30 used by the user who requests the service provision, and the store 2 where the user intends to receive the service provision. This is the part that receives the issue request information that includes the store ID and requests the issuance of electronic certificate information used in providing the service. More specifically, the issue request information is information generated in the mobile phone 30 and is transmitted from the mobile phone 30.

  Upon receiving the issue request information, issue request receiving unit 101 transmits information requesting input of a password to mobile phone 30. In response to this transmission, information prompting the user to input a password is displayed on the mobile phone 30, and the user inputs the password to the mobile phone 30 in response to this display. The password input to the mobile phone 30 is transmitted to the certificate issuing server 10 and received by the issue request receiving unit 101. The issue request receiving unit 101 confirms whether or not the received password is correct based on the information stored in the user information storage unit 151. If the issuance request receiving unit 101 determines that the received password is correct, the issuance request receiving unit 101 outputs issuance request information to the identity acquisition unit 102. On the other hand, if it is determined that the received password is not correct, the issue request receiving unit 101 ends the process.

  Here, the information stored in the user information storage unit 151 will be described with reference to FIG. According to the example shown in FIG. 2, “user ID”, “terminal number”, “password”, and “personality information” are stored in the user information storage unit 151 in association with each other. “User ID” is identification information unique to each user. The “terminal number” is identification information unique to the mobile communication terminal used by each user. The “password” is a password for authenticating the user. The “identity information” is identification information unique to each user, and is information not known to each user.

  Returning to FIG. 1, the personality information acquisition unit 102 is a part that acquires personality information for identifying a user based on the terminal number included in the issue request information received by the issue request reception unit 101. More specifically, the identity information acquisition unit 102 searches the information stored in the user information storage unit 151 based on the terminal number, and acquires the identity information corresponding to the terminal number. The identity information acquisition unit 102 outputs the acquired identity information together with the issue request information to the certificate information generation unit 103. The identity information acquisition unit 102 encrypts the identity information and outputs it.

  The certificate information generation unit 103 is a part that generates certificate information based on the identity information acquired by the identity information acquisition unit 102 and the store ID included in the issue request information. When generating the certificate information, the certificate information generating unit 103 includes date information related to the generation and generates the certificate information. The certificate information generation unit 103 outputs the generated certificate information to the certificate information transmission unit 104.

  The certificate information transmission unit 104 is a part that transmits the certificate information generated by the certificate information generation unit 103 to the mobile phone 30 and the settlement server 40, respectively.

  Subsequently, the store terminal 20 will be described. The store terminal 20 is physically a computer including a storage device such as a CPU, a memory, and a hard disk, a display device such as a display, a communication interface, and the like.

  The store terminal 20 includes, as functional components, a settlement information receiving unit 201 (certificate information receiving unit), a settlement information transmitting / receiving unit 202 (confirmation information transmitting unit, confirmation information receiving unit), and a settlement result output unit 203 (service). Providing means). Subsequently, each component will be described.

  The settlement information receiving unit 201 is a part that receives certificate information from the mobile phone 30. More specifically, the payment information receiving unit 201 receives certificate information transmitted in response to the mobile phone 30 requesting the certificate issuing server 10 to issue it. The settlement information receiving unit 201 outputs the received certificate information to the settlement information transmitting / receiving unit 202.

  The settlement information transmitting / receiving unit 202 is a part that transmits the certificate information output from the settlement information receiving unit 201 to the settlement server 40. The payment information transmitting / receiving unit 202 is also a part that receives certificate confirmation information transmitted from the payment server 40 in response to transmission of certificate information. The settlement information transmission / reception unit 202 outputs the received certificate confirmation information to the settlement result output unit 203.

  The settlement result output unit 203 is a part that provides services to the user based on the certificate confirmation information output from the settlement information transmission / reception unit 202. More specifically, for example, when the service is provided by credit sales, when the certificate confirmation information is received, the settlement is completed, and the settlement result output unit 203 indicates that the settlement has been completed. Is displayed.

  Subsequently, the settlement server 40 will be described. The payment server 40 is physically a computer (or computer system) provided with a storage device such as a CPU, memory, and hard disk, a communication interface, and the like.

  The settlement server 40 includes, as functional components, a settlement information transmission / reception unit 401 (second certificate information reception unit, settlement transmission unit), a settlement unit 402 (settlement unit), and a certificate information reception unit 403 (first unit). Certificate information receiving means). Subsequently, each component will be described.

  The payment information transmission / reception unit 401 is a part that receives certificate information transmitted by the payment information transmission / reception unit 202 of the store terminal 20. The settlement information transmission / reception unit 401 outputs the received certificate information to the settlement unit 402. Further, the payment information transmission / reception unit 401 transmits the certificate confirmation information output from the payment unit 402 to the payment information transmission / reception unit 202 of the store terminal 20.

  The settlement unit 402 is a part that performs settlement based on the certificate information output from the settlement information transmitting / receiving unit 401 and the certificate information output from the certificate information receiving unit 403. More specifically, the settlement unit 402 collates certificate information transmitted from different routes and determines whether or not they match. Certificate information output from the payment information transmitting / receiving unit 401 (ie, certificate information transmitted from the mobile phone 30 via the store terminal 20) and certificate information output from the certification information information receiving unit 403 (ie, certification) If the certificate information directly transmitted from the certificate issuing server 10 matches, it is determined that the certificate information transmitted from the store terminal 20 side has not been altered, and the provision of the service to the user is determined. In response to this determination, the settlement unit 402 generates certificate confirmation information and outputs it to the settlement information transmission / reception unit 401.

  The certificate information receiving unit 403 is a part that receives certificate information transmitted by the certificate information transmitting unit 104 of the certificate issuing server 10. The settlement information transmission / reception unit 401 outputs the received certificate information to the settlement unit 402.

  Subsequently, the operation of the settlement system 1a will be described with reference to FIG. FIG. 3 is a sequence diagram for explaining the operation of the settlement system 1a. The user acquires the store ID from the RFID 21 installed in the store 2 using the mobile phone 30 (step S01). Issuance request information including the store ID is transmitted from the mobile phone 30 to the certificate issuance server 10 (step S02).

  The issue request receiving unit 101 receives the issue request information transmitted to the certificate issuing server 10. The issue request receiving unit 101 performs terminal authentication based on the terminal number included in the received issue request information (step S03). Thereafter, the issue request receiving unit 101 transmits information prompting the user to input a password to the mobile phone 30 (step S04). In response to this transmission, the user inputs a password to the mobile phone 30 and transmits it to the certificate issuing server 10 (step S05).

  The issue request receiving unit 101 receives the password transmitted to the certificate issuing server 10. The issue request receiving unit 101 refers to the information stored in the user information storage unit 151 to perform user authentication (step S06). When the user authentication is completed, the issue request receiving unit 101 outputs the issue request information to the identity information acquiring unit 102.

  The identity information acquisition unit 102 acquires the corresponding identity information from the user information storage unit 151 and performs encryption (step S07). The identity information acquisition unit 102 outputs the encrypted identity information to the certificate information generation unit 103 together with the issue request information.

  The certificate information generation unit 103 generates certificate information based on the identity information and the store ID included in the issue request information (step S08). The certificate information generation unit 103 outputs the generated certificate information to the certificate information transmission unit 104.

  The certificate information transmission unit 104 transmits the certificate information to the mobile phone 30 (step S09). The certificate information transmitting unit 104 also transmits the certificate information to the settlement server 40 (Step S10).

  The mobile phone 30 transmits the received certificate information to the store terminal 20 (step S11). The transmitted certificate information is received by the payment information receiving unit 201 of the store terminal 20 and output to the payment information transmitting / receiving unit 202. The settlement information transmitting / receiving unit 202 transmits the certificate information to the settlement server 40 and asks for settlement (step S12).

  In the payment server 40, the certificate information transmitted from the certificate issuing server 10 is received by the certificate information receiving unit 403, and the certificate information transmitted from the store terminal 20 is received by the payment information transmitting / receiving unit 401. The received certificate information is output to the settlement unit 402. The settlement unit 402 performs authentication (settlement) by collating the certificate information output from both sides (step S13).

  If the certificate information output from both agrees, the settlement unit 402 performs settlement and generates certificate confirmation information as information for permitting provision of services to the user (step S14). The settlement unit 402 outputs the generated certificate confirmation information to the settlement information transmission / reception unit 401.

  The settlement information transmitting / receiving unit 401 transmits the certificate confirmation information to the store terminal 20 (step S15). The transmitted certificate confirmation information is received by the payment information transmitting / receiving unit 202 of the store terminal 20 and output to the payment result output unit 203. The settlement result output unit 203 displays the certificate confirmation information and performs usage processing (step S16).

  The effect of this embodiment is demonstrated. Since the certificate information generated by the certificate issuing server 10 is transmitted to the mobile phone 30 used by the user and the payment server 40 that performs payment, the certificate information is received from the mobile phone 30 at the store 2 where the user is provided with the service. Is transferred to the store terminal 20 of the store 2 to enable authentication using the certificate information as a key. Further, since the certificate information includes the terminal number and the store ID, the possibility that the certificate information is used in different places (for example, different stores) is effectively reduced.

It is a figure for demonstrating the payment system of this embodiment. It is a figure which shows the example of the information stored in the user information storage part of FIG. It is a figure for demonstrating operation | movement of the payment system of this embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1a ... Payment system, 2 ... Store, 10 ... Certificate issuing server, 20 ... Store terminal, 21 ... REID, 30 ... Mobile phone, 40 ... Payment server, 50 ... Mobile communication network, 101 ... Issuance request receiving unit, 102 ... personality information acquisition unit, 103 ... certificate information generation unit, 104 ... certificate information transmission unit , 151 ... user information storage unit, 201 ... settlement information reception unit, 202 ... settlement information transmission / reception unit, 203 ... settlement result output unit , 401... Payment information transmission / reception unit, 402... Payment unit, 403.

Claims (3)

It includes terminal specifying information for specifying a mobile communication terminal used by a user who requests the provision of a service, and settlement area specifying information for specifying a place where the user receives the service, and is used in the provision of the service An issuance request receiving means for receiving issuance request information for requesting issuance of electronic certificate information;
Personality information acquisition means for acquiring personality information for identifying the user based on the terminal identification information included in the received issue request information;
Certificate information generating means for generating the certificate information based on the acquired identity information and the settlement center specifying information;
Certificate information transmitting means for transmitting the generated certificate information to the mobile communication terminal and a server that performs settlement for providing the service, respectively.
A payment system comprising: Certificate information receiving means for receiving the certificate information from the mobile communication terminal;
Confirmation information transmitting means for transmitting the received certificate information to the server;
Confirmation information receiving means for receiving certificate confirmation information transmitted from the server in response to the transmission;
A service providing means for providing a service to the user in response to receiving the certificate confirmation information;
The payment system according to claim 1, comprising: First certificate information receiving means for receiving certificate information transmitted by the certificate information transmitting means;
Second certificate information receiving means for receiving certificate information transmitted by the confirmation information transmitting means;
The first certificate information receiving unit and the second certificate information receiving unit collate the received certificate information to determine whether they match, and the received certificate information matches. A settlement means for determining provision of services to the user;
Settlement transmission means for transmitting the certificate confirmation information to the confirmation information receiving means in response to the determination;
The payment system according to claim 2, comprising:

Images