JP2007334521A - Device and method for customer management - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technique capable of improving security in transactions using a network system. <P>SOLUTION: A user identifier assigned to a user or a portable commodity owned by the user is acquired in coordination with a terminal identifier assigned to a terminal machine inputted with the user identifier. A transaction carried out by the user is allowed to be carried out only via the terminal machine indicated by the terminal identifier acquired in coordination with the user identifier of the user. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a technique for improving security when a network system is used to implement various transactions such as a commercial transaction and a transaction of money (or a transaction equivalent to money).

  In recent years, various transactions using a network system have been realized with the spread of network systems and the advancement of encryption technology. For example, purchasing a product using a credit card, electronic money or the like at a commercial transaction site, or acquiring electronic money using a balance in a specific account has been realized (see Patent Document 1).

On the other hand, on the network system, there is a risk that fraudulent acts such as eavesdropping and spoofing are performed. For this reason, in the realization of transactions using a network system, improving security is one issue, and such a technique is actually proposed. For example, there is a technique in which an authentication server is prepared, authentication using a personal identification number or the like is executed in the authentication server, and transactions can be performed in the authenticated terminal device (see Patent Document 2).
JP-A-2005-71081 JP 2006-140543 A

  However, in such a conventional technique, it is possible for another person to easily perform impersonation by obtaining an ID for authentication and a terminal device and a personal identification number. In particular, when a portable product for authentication is not a terminal device but a magnetic card or an IC card, copying can be performed, and further impersonation has been facilitated.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to solve such problems and to provide a technique capable of improving security in transactions using a network system.

  A first aspect of the present invention is a supplier management device that manages transactions when a user performs a transaction via a terminal that can access the transaction server. The supplier management apparatus in the present invention includes an acquisition unit and a permission unit. The terminal may be any device as long as it is an information processing device that can access the transaction server. As specific examples, there are POS (Point Of Sale) terminals, vending machines, personal computers connected to a network, portable terminals, digital home appliances and the like provided in stores. The supplier management device may be configured as a transaction server itself, or may be configured as an information processing device that can be connected to the transaction server via a network. Hereinafter, each means with which a supplier management apparatus is provided is demonstrated.

  The obtaining means associates and obtains a user identifier assigned to the user or a portable item owned by the user and a terminal identifier assigned to the terminal to which the user identifier is input. A user-owned portable product is a recording medium that records a user identifier or an information processing apparatus that includes the recording medium. Specific examples include an object on which a user identifier is printed, various recording media (such as a magnetic recording medium and a semiconductor recording medium) on which the user identifier is recorded, and a portable information processing apparatus (a mobile phone) that stores the user identifier. )and so on. Further, the “terminal” and the “portable item owned by the user” may be the same device. However, in this case, if the user identifier and the terminal identifier are the same, it is necessary to make the contents. For example, as the user identifier, an identifier assigned to the user regardless of the portable item may be used, and as the terminal identifier, an identifier given to the portable item may be used. Further, the storage device in the “terminal” may be treated as “a portable item owned by the user”. For example, as a user identifier, an identifier stored in the storage device and different from a terminal identifier (for example, an identifier assigned for transaction) is used, and as a terminal identifier, an identifier assigned to the terminal is used. (For example, IP address, MAC address, telephone number, device serial number, etc.) may be used. Also, the user identifier input to the terminal may be manually performed by the user using an input device such as a keyboard, or may be performed using wired communication or wireless communication.

  The permission unit permits the transaction performed by the user to be performed only through the terminal indicated by the terminal identifier acquired in association with the user identifier of the user. This permission may be implemented in any way. For example, it may be implemented so as to permit transactions through the corresponding terminal as a result by blocking all transactions through the non-applicable terminal.

  By using the supplier management device configured as described above, even if the third party passes the identity authentication such as the ID and password as before, the third party can perform the transaction. It becomes possible to deter. In other words, since it is not possible to obtain permission from the permission means unless the transaction is made through a terminal to which the terminal identifier acquired by the acquisition means is assigned, impersonation by a third party is suppressed and security is improved. be able to.

  The acquisition means of the supplier management device according to the first aspect of the present invention includes: a user identifier authenticated by the transaction server; and a terminal identifier assigned to the terminal to which the user identifier is input when authentication is performed. It may be configured to acquire in association with each other.

  By using the supplier management apparatus configured as described above, the reliability of the user identifier acquired by the acquisition unit is improved, and it becomes possible to more effectively suppress spoofing by a third party.

  A second aspect of the present invention is a supplier management device that manages transactions when a user performs a transaction via a terminal that can access the transaction server, and includes an acquisition unit and a permission unit. Similar to the first aspect of the present invention, the terminal may be any device as long as it is an information processing device that can access the transaction server. Specific examples thereof are also the same as those in the first aspect. Hereinafter, each means with which the supplier management apparatus in the 2nd aspect of this invention is provided is demonstrated.

  The obtaining means associates and obtains a user identifier assigned to the user or a portable item owned by the user, and all or part of a network path connecting the terminal device to which the user identifier is input and the transaction server. As in the first aspect of the present invention, the portable item owned by the user is a recording medium for recording a user identifier or an information processing apparatus including the recording medium. Specific examples thereof are also the same as those in the first aspect. In addition, the above-mentioned “terminal” and “portable item owned by the user” may be the same device. The storage device in the above “terminal unit” is also referred to as “portable item owned by the user”. The thing which may be handled is the same as that of a 1st aspect. However, since the terminal identifier is not used in the second mode, there is no problem with the terminal identifier. Also, the input of the user identifier to the terminal is the same as in the first aspect. The network path may be expressed in any way. For example, it may be expressed by listing the IDs and addresses of the nodes existing in the network path in the path order or regardless of the path order.

  The permission unit permits the transaction performed by the user to be performed only through the network route acquired in association with the user identifier of the user. This permission may be implemented in any form as in the first aspect.

  By using the supplier management device configured as described above, even if the third party passes the identity authentication such as the ID and password as before, the third party can perform the transaction. It becomes possible to deter. In other words, since it is not possible to obtain permission from the permission means unless the transaction is via the network route acquired by the acquisition means, impersonation by a third party can be suppressed and security can be improved.

  The acquisition means of the supplier management device according to the second aspect of the present invention includes a user identifier authenticated in the transaction server, and a network connecting the transaction server and the terminal to which the user identifier is input when authentication is performed. You may comprise so that all or one part of a path | route may be matched and acquired.

  By using the supplier management apparatus configured as described above, the reliability of the user identifier acquired by the acquisition unit is improved, and it becomes possible to more effectively suppress spoofing by a third party.

  The permission means of the business partner management device according to the first aspect or the second aspect of the present invention, when the user's transaction is completed, regardless of the information acquired in association with the user identifier, a new response is obtained by the acquisition means. It may be configured to allow the user's transaction until the date is acquired.

  The present invention may be specified as a processing method performed by the transaction apparatus according to the first aspect or the second aspect. Further, the information processing apparatus may be specified as a program for causing the information processing apparatus to operate as the transaction apparatus according to the first aspect or the second aspect.

  According to the present invention, impersonation by a third party can be suppressed and security can be improved.

〔System configuration〕
FIG. 1 is a diagram showing a system configuration example of a transaction system 100a using a supplier management device 1a according to the present invention. The transaction system 100a includes a supplier management device 1a, a transaction server 2a, and a plurality of terminals 3a. A plurality of supplier management devices 1a and transaction servers 2a may be included in one transaction system 100a. In transaction system 100a, supplier management device 1a and transaction server 2a are connected to be communicable. Moreover, the transaction server 2a and each terminal 3a are connected by the network N so that communication is possible. The network N may be configured using any type of network system such as the Internet or a dedicated line. Hereinafter, each device included in the transaction system 100a will be described.

<Business partner management device>
FIG. 2 is a diagram illustrating a configuration example of the supplier management device 1a. The supplier management device 1 a is a device that includes a transmission / reception unit 11, an acquisition unit 12, a storage unit 13, and a permission unit 14. The supplier management device 1a is configured using an information processing device. That is, the supplier management device 1a includes a storage device, an arithmetic device, and a communication control device connected via a bus, and operates in accordance with the program by processing the program stored in the storage device in the arithmetic device. Specifically, the supplier management apparatus 1a can be configured as a personal computer, a workstation, or a component connectable to these. Next, each functional unit included in the supplier management device 1a will be described.

  The transmission / reception unit 11 transmits and receives data in communication with the transaction server 2a. The transmission / reception unit 11 transmits the permission signal received from the permission unit 14 to the transaction server 2a. Moreover, the transmission / reception part 11 will pass the received data to the acquisition part 12 or the permission part 14, if a user identifier, a terminal identifier, and the transaction end command are received from the transaction server 2a.

  The specific structure of the transmission / reception part 11 can be determined according to a communication form with the transaction server 2a. For example, in the case of wireless communication, the transmission / reception unit 11 can be configured as a network interface for wireless communication. In the case of wired communication, the transmission / reception unit 11 can be configured as a network interface for wired communication. Moreover, when the customer management apparatus 1a is comprised as components connected to the transaction server 2a, the transmission / reception part 11 can be comprised as an interface according to a connection form.

  The acquisition unit 12 checks whether the user identifier received via the transmission / reception unit 11 is already registered in the storage unit 13. If the received user identifier is not yet registered, the acquisition unit 12 writes and registers the combination of the user identifier and terminal identifier received via the transmission / reception unit 11 in the storage unit 13. Then, the acquisition unit 12 passes the received user identifier and terminal identifier to the permission unit 14. On the other hand, if the received user identifier has already been registered, the acquisition unit 12 passes the received user identifier and terminal identifier to the permission unit 14 without performing registration processing.

  In addition, when the acquisition unit 12 receives the user identifier, the terminal identifier, and the transaction end command via the transmission / reception unit 11, the acquisition unit 12 deletes the received combination of the user identifier and the terminal identifier from the storage unit 13. After the transaction has been terminated in this way, the user identifier is associated with the user identifier until a new combination is registered regardless of the combination of the user identifier and terminal identifier registered in the previous transaction. Transactions are permitted in the supplier management device 1a. However, this permission does not mean that the transaction server 2a is permitted. In the transaction server 2a, independent authentication is performed separately. The authentication will be described later. Such an acquisition part 12 is implement | achieved when the program memorize | stored in the memory | storage part not shown is performed by an arithmetic unit.

  The storage unit 13 is configured using a volatile or nonvolatile storage device. The storage unit 13 stores a combination of a user identifier and a terminal identifier acquired by the acquisition unit 12. FIG. 3 is a diagram illustrating an example of a table (customer table 130 a) stored in the storage unit 13. The supplier table 130a has a user identifier, a terminal identifier, and an INDEX in association with each other. This INDEX is information for convenience and is not essential information.

  The user identifier is an identifier assigned to a user who makes a transaction in the transaction system 100a or the portable item 4a owned by the user. The user identifier is stored in the portable product 4a. Details of the user identifier and the portable product 4a will be described later.

  The terminal identifier is an identifier assigned to the terminal 3a. As the terminal identifier, any value such as an IP address, a MAC address, and a serial number of the terminal 3a may be applied as long as a certain terminal 3a can be identified from other terminals 3a. The terminal identifier is stored in the terminal 3a. The terminal 3a will be described later.

  When the permission unit 14 receives the user identifier and the terminal identifier, the permission unit 14 determines whether or not the transaction server 2a may perform a transaction corresponding to the two received identifiers based on the user identifier and the terminal identifier. The permission unit 14 makes the above determination based on whether or not the combination of the user identifier and the terminal identifier received from the acquisition unit 12 is registered in the supplier table 130a of the storage unit 13. The permission unit 14 determines that the transaction may be performed when the combination of the received user identifier and terminal identifier is registered in the customer table 130a. In this case, the permission part 14 produces | generates a permission signal, and transmits a permission signal with respect to the transaction server 2a via the transmission / reception part 11. FIG. Conversely, if the combination of the received user identifier and terminal identifier is not registered in the supplier table 130a, the permission unit 14 determines that the transaction should not be performed. In this case, the permission unit 14 does not transmit a permission signal. At this time, the permission unit 14 may be configured to generate a non-permission signal and transmit the non-permission signal to the transaction server 2a. The permission signal and the non-permission signal include a user identifier and a terminal identifier corresponding to the transaction. The permission part 14 is implement | achieved when the program memorize | stored in the memory | storage part not shown is performed by an arithmetic unit.

<Transaction server>
FIG. 4 is a diagram illustrating a configuration example of the transaction server 2a. The transaction server 2 a is a device that includes a transmission / reception unit 21, a transmission / reception unit 22, a transaction execution unit 25, an authentication condition storage unit 23, and a transaction information storage unit 24. Transaction server 2a is configured using an information processing device. That is, the transaction server 2a includes a storage device, an arithmetic device, and a communication control device connected via a bus, and operates according to the program by processing the program stored in the storage device in the arithmetic device. Specifically, the transaction server 2a can be configured using a personal computer and a workstation. Next, each functional unit included in the transaction server 2a will be described.

  The transmission / reception unit 21 transmits and receives data in communication with the terminal 3a via the network N. The transmission / reception unit 21 transmits the transaction result and the user identifier received from the transaction execution unit 25 to the terminal 3a designated by the transaction execution unit 25. Moreover, the transmission / reception part 21 will pass the received data to the transaction execution part 25, if a user identifier, a terminal identifier, a transaction request, and a transaction end command are received from the terminal 3a. Further, the transmission / reception unit 21 transmits the error signal received from the transaction execution unit 25 to the terminal 3a instructed by the transaction execution unit 25.

  The specific configuration of the transmitting / receiving unit 21 can be determined according to the communication mode with the terminal 3a. For example, when communication with the terminal 3a is performed through a unique network such as a dedicated line, the transmission / reception unit 21 is configured according to the network. In addition, for example, when communication with the terminal 3a is performed via a network via the Internet, the transmission / reception unit 21 is configured according to a system for connecting the transaction server 2a to the Internet. A specific communication form may be wireless communication or wired communication.

  The transmission / reception unit 22 transmits and receives data in communication with the supplier management device 1a. The transmission / reception unit 22 transmits the user identifier, terminal identifier, and transaction end command received from the transaction execution unit 25 to the supplier management device 1a. Moreover, the transmission / reception part 22 will pass the received data to the transaction execution part 25, if a permission signal is received from the supplier management apparatus 1a.

  The specific configuration of the transmission / reception unit 22 can be determined according to the communication mode with the supplier management device 1a. For example, in the case of wireless communication, the transmission / reception unit 22 can be configured as a network interface for wireless communication. In the case of wired communication, the transmission / reception unit 22 can be configured as a network interface for wired communication. Moreover, when the customer management apparatus 1a is comprised as components connected to the transaction server 2a, the transmission / reception part 22 can be comprised as an interface according to a connection form.

  The authentication condition storage unit 23 is configured using a volatile or nonvolatile storage device. The authentication condition storage unit 23 stores a condition (authentication condition) for performing authentication based on the user identifier. FIG. 5 is a diagram illustrating an example of a table (authentication condition table 230 a) stored in the authentication condition storage unit 23. The authentication condition table 230a has a user identifier, an authentication condition, and an INDEX in association with each other. This INDEX is information for convenience and is not essential information.

  The authentication condition is information used when determining whether or not to authenticate the corresponding user identifier, and information that is necessary in the implementation of the transaction system 100a may be applied as appropriate. For example, it may be a password or a transaction history.

  The transaction information storage unit 24 is configured using a volatile or non-volatile storage device. The transaction information storage unit 24 stores a user identifier and transaction information in association with each other. The transaction information is prepared according to the content of the transaction executed in the transaction system 100a. For example, when the transaction system 100a is a system for performing a transaction relating to points according to shopping, the transaction information includes at least information relating to the points (for example, accumulated points, accumulated points history, etc.). In addition, for example, when the transaction system 100a is a system for performing purchase transactions using electronic money, the transaction information is at least information related to electronic money (for example, an electronic money balance or electronic money prepared for acquiring electronic money). Account balance, etc.).

  FIG. 6 is a diagram illustrating an example of a table (transaction information table 240a) stored in the transaction information storage unit 24. In the case of FIG. 6, the transaction information table 240a is prepared for each user identifier. The transaction information table 240a has information on a user identifier, current account status (which may be an electronic money balance), user personal information, current points, and transaction history. These pieces of information are read and updated by the transaction execution unit 25 described later.

  Upon receiving the transaction request, the user identifier, and the terminal identifier, the transaction execution unit 25 performs an authentication process based on the received user identifier. Specifically, the transaction execution unit 25 performs the following authentication process. First, the transaction execution unit 25 reads an authentication condition corresponding to the received user identifier from the authentication condition storage unit 23. Next, the transaction execution unit 25 determines whether or not to authenticate based on the authentication information included in the received transaction request and the read authentication condition. For example, when the authentication condition / authentication information is a password, the transaction executing unit 25 determines whether the password recorded in the authentication condition storage unit 23 as the authentication condition matches the password included in the transaction request. Judgment based on. For example, when the authentication condition / authentication information is a transaction history, the transaction execution unit 25 matches the transaction history recorded in the authentication condition storage unit 23 as the authentication condition with the transaction history included in the transaction request. Judgment based on whether or not.

  When performing the authentication, the transaction executing unit 25 temporarily stores the user identifier and the transaction request used for authentication and the terminal identifier received together with the user identifier. This temporary storage may be performed in a temporary storage device (not shown) or may be performed in the transaction information storage unit 24. And the transaction execution part 25 transmits the user identifier used for authentication, and the terminal identifier received with this user identifier to the supplier management apparatus 1a via the transmission / reception part 22.

  When the transaction execution unit 25 receives the transaction end command, the user identifier, and the terminal identifier via the transmission / reception unit 21, the transaction execution unit 25 transmits the received three data to the customer management device 1 a via the transmission / reception unit 22.

  When the transaction execution unit 25 receives the permission signal from the business partner management device 1a via the transmission / reception unit 22, the transaction request corresponding to the user identifier and the terminal identifier included in the received permission signal is sent to the temporary storage device described above. Read from. The transaction execution unit 25 performs processing related to the transaction in accordance with the transaction content information included in the read transaction request. At this time, the transaction execution unit 25 reads data from the transaction information storage unit 24 as necessary, and updates the data in the transaction information storage unit 24 as necessary. And the transaction execution part 25 is a terminal corresponding to a corresponding terminal identifier via the transmission / reception part 21 with information (transaction result) required as a result of the transaction performed according to this transaction request | requirement with the corresponding user identifier. To the machine 3a.

  On the other hand, when the permission signal cannot be received from the supplier management device 1a via the transmission / reception unit 22, the transaction execution unit 25 responds with an error signal to inform that the transaction request cannot be satisfied. To the terminal 3a corresponding to the terminal identifier to be transmitted. For example, when the permission signal cannot be received, for example, when a non-permission signal or the like is received from the supplier management device 1a, or when the permission signal cannot be received even after a predetermined time has elapsed since the temporary storage. It is.

  Transaction execution unit 25 is realized by a program stored in a storage unit (not shown) being executed by an arithmetic device.

<Terminal>
FIG. 7 is a diagram illustrating a configuration example of the terminal 3a. The terminal 3 a is a device that includes an input unit 31, a transmission / reception unit 32, a terminal identifier storage unit 33, and a management unit 34. The terminal 3a is configured using an information processing device. That is, the terminal 3a includes a storage device, an arithmetic device, and a communication control device connected via a bus, and operates according to the program by processing the program stored in the storage device in the arithmetic device. Specifically, the terminal 3a can be configured using an information processing apparatus such as a personal computer, a workstation, a POS terminal, or a vending machine. The terminal 3a can also be configured using a portable information processing device such as a mobile phone or a PDA (Personal Digital Assistance). Next, each functional unit included in the terminal 3a will be described.

  The input unit 31 is a functional unit used to input a user identifier and authentication information to the terminal 3a. When the user identifier and authentication information stored in the portable item 4a are input, the input unit 31 is configured according to the technical relationship with the portable item 4a so as to read out the user identifier and the authentication information from the portable item 4a. The In this case, the input unit 31 can be configured using, for example, a non-contact communication device or a wired communication device. When the user identifier printed on the portable product 4a, the user identifier stored by the user, or the like is input, the input unit 31 inputs the user identifier and the authentication information by the user's operation. It is configured as a user interface that can In this case, the input unit 31 can be configured using, for example, a keyboard, a pointing device (mouse, tablet, etc.), a touch panel, a jog dial, a button, a voice input device, and the like. In addition, the user can input commands such as transaction content information and a transaction end command using the input unit 31.

  The input unit 31 may be configured as an input / output unit. For example, based on the transaction result, the input / output unit may be configured to update the stored content of the portable product 4a by non-contact communication or wired communication.

  The transmission / reception unit 32 transmits and receives data in communication with the transaction server 2a via the network N. The transmission / reception unit 32 transmits the user identifier, terminal identifier, transaction request, and transaction end command received from the management unit 34 to the transaction server 2a. Moreover, the transmission / reception part 32 will pass the received data to the management part 34, if a transaction result, an error signal, and a user identifier are received from the transaction server 2a.

  The specific structure of the transmission / reception part 32 can be determined according to a communication form with the transaction server 2a. For example, when communication with the transaction server 2a is performed through a unique network such as a dedicated line, the transmission / reception unit 32 is configured according to the network. Further, for example, when communication with the transaction server 2a is performed in a network via the Internet, the transmission / reception unit 32 is configured according to a system for connecting the terminal 3a to the Internet. A specific communication form may be wireless communication or wired communication.

  The terminal identifier storage unit 33 is configured using a volatile or nonvolatile storage device. The terminal identifier storage unit 33 stores a terminal identifier assigned to the terminal 3a. The terminal identifier may be an identifier that is temporarily assigned by the transaction server 2a or may be an identifier that is fixedly assigned, as long as the other terminal 3a can be distinguished from the terminal 3a. good.

  When the user identifier and the authentication information are input via the input unit 31, the management unit 34 reads the terminal identifier of the own device from the terminal identifier storage unit 33. Moreover, the management part 34 produces the transaction request | requirement with respect to the transaction server 2a using the input authentication information. This transaction request includes the content of the transaction desired by the user (transaction content information) in addition to the authentication information. And the management part 34 transmits a user identifier, a terminal identifier, and a transaction request to the transaction server 2a via the transmission / reception part 32.

  When the transaction result and the user identifier are received via the transmission / reception unit 32, the management unit 34 outputs the transaction result. Further, when the error signal and the user identifier are received via the transmission / reception unit 32, the management unit 34 outputs the content of the error. This output can be realized in various ways. For example, the contents of the transaction result may be output by a video output device such as a display, an audio output device such as a speaker, or a print output device such as a printer. Moreover, you may implement | achieve by writing the content of a transaction result on the portable article 4a with the writing apparatus comprised using the technique similar to the input part 31 (recording).

  When the transaction end command is input via the input unit 31, the management unit 34 sends the input transaction end command via the transmission / reception unit 32 together with the user identifier and the terminal identifier related to the transaction that has been executed so far. To the transaction server 2a.

  The management part 34 is implement | achieved when the program memorize | stored in the memory | storage part not shown is executed by the arithmetic unit.

<Portable products>
The portable product 4a is configured using a recording medium for recording a user identifier or an information processing apparatus including the recording medium. Specific examples of the portable product 4a include an object on which a user identifier is printed, various recording media (such as a magnetic recording medium and a semiconductor recording medium) on which the user identifier is recorded, and a portable information processing apparatus (mobile phone) that stores the user identifier. Etc.). For example, the credit card can be a portable product 4a as a magnetic recording medium. Further, for example, a cellular phone containing electronic money data can be a portable product 4a as a portable information processing apparatus in which a user identifier given from an electronic money issuing organization is stored.

[Operation example]
8-12 is a flowchart which shows the operation example of the transaction system 100a by this invention. Hereinafter, an operation example of the transaction system 100a will be described with reference to FIGS.

  First, when a user identifier and authentication information are input to the terminal 3a via the input unit 31 (S01), the management unit 34 reads the terminal identifier from the terminal identifier storage unit 33 (S02). Next, the management unit 34 generates a transaction request including the input authentication information (S03). And the management part 34 transmits a user identifier, a terminal identifier, and a transaction request with respect to the transaction server 2a via the transmission / reception part 32 (S04).

  The transaction execution unit 25 of the transaction server 2a receives the user identifier, the terminal identifier, and the transaction request from the terminal 3a via the transmission / reception unit 21 (S05). Next, the transaction execution unit 25 reads the authentication condition corresponding to the received user identifier from the authentication condition storage unit 23 (S06). Next, the transaction execution unit 25 determines whether or not to authenticate based on the read authentication condition and the authentication information included in the received transaction request (S07). If it is determined that authentication should be performed (S08-YES), the transaction execution unit 25 temporarily stores the user identifier, the terminal identifier, and the transaction request (S09). The case where it is determined not to authenticate (S08-NO) will be described later. And the transaction execution part 25 transmits a user identifier and a terminal identifier to the supplier management apparatus 1a via the transmission / reception part 22 (S10).

  When receiving the user identifier and the terminal identifier via the transmission / reception unit 11 (S11), the acquisition unit 12 of the supplier management device 1a determines whether or not the received user identifier is registered in the storage unit 13 (S12). ). When the received user identifier is already registered (S13-YES), the permission unit 14 determines whether or not the combination of the user identifier and the terminal identifier is registered in the storage unit 13 (S15).

  On the other hand, when the received user identifier is not yet registered (S13-NO), the acquisition unit 12 registers the combination of the user identifier and the terminal identifier in the storage unit 13 (S14). And the permission part 14 performs the process of S15.

  In the process of S15, when the combination of the user identifier and the terminal identifier is registered in the storage unit 13 (S16-YES), the permission unit 14 generates a permission signal (S17). On the other hand, in the process of S15, when the combination of the user identifier and the terminal identifier is not registered in the storage unit 13 (S16-NO), the permission unit 14 generates a non-permission signal (S18). And the permission part 14 transmits the signal produced | generated in S17 or S18 with respect to the transaction server 2a via the transmission / reception part 11 (S19).

  When the transaction execution unit 25 of the transaction server 2a receives a signal from the supplier management device 1a via the transmission / reception unit 22 (S20), the transaction execution unit 25 performs processing according to the content of this signal. When the received signal is a permission signal (S21-YES), the transaction execution unit 25 reads a user identifier and a terminal identifier from the received permission signal (S22). Next, the transaction execution unit 25 reads a transaction request corresponding to the user identifier (S23). Next, the transaction execution unit 25 executes transaction processing according to the transaction content information included in the read transaction request (S24). And the transaction execution part 25 transmits a transaction result and a user identifier via the transmission / reception part 21 with respect to the terminal device 3a corresponding to a terminal identifier (S25).

  When receiving the transaction result and the user identifier via the transmission / reception unit 32 (S26), the management unit 34 of the terminal 3a outputs the transaction result (S27). When the transaction is continued (S28-YES), the processes after S01 are repeated. The case where the transaction is continued is specifically a case where new transaction content information is input by the user, or a case where a transaction end command is not input.

  On the other hand, when the transaction is not continued (S28-NO), for example, when a transaction end command is input, the management unit 34 sends the transaction end command, the user identifier, and the terminal identifier to the transaction server 2a via the transmission / reception unit 32. (S29). When the transaction execution unit 25 of the transaction server 2a receives the transaction end command, the user identifier, and the terminal identifier via the transmission / reception unit 21 (S30), the transaction management unit 25 manages the received three pieces of data via the transmission / reception unit 22. The data is transmitted to the device 1a (S31). When receiving the transaction end command, the user identifier, and the terminal identifier via the transmission / reception unit 11 (S32), the acquisition unit 12 of the supplier management device 1a stores the combination of the received user identifier and terminal identifier in the storage unit 13 (S33).

  When authentication is not performed in the process of S08 (S08-NO), and when the signal received in the process of S21 is not a permission signal (S21-NO), the transaction execution unit 25 passes through the transmission / reception unit 21. The user identifier and the error signal are transmitted to the terminal 3a corresponding to the terminal identifier (S34). When receiving the user identifier and the error signal via the transmission / reception unit 32 (S35), the management unit 34 of the terminal 3a outputs an error based on the two data (S36).

[Action / Effect]
According to the transaction system 100a including the supplier management device 1a according to the present invention, while a transaction based on a certain user identifier is being performed (for example, until a transaction end command is input), this user identifier, A terminal identifier corresponding to the terminal 3a on which the transaction is performed is recorded in the storage unit 13 in association with the terminal identifier. Transactions using the same user identifier cannot be performed unless the terminal 3a corresponding to the combination recorded in the storage unit 13 is used. For this reason, security can be improved.

[Modification]
The storage unit 13 may be configured to store the supplier table 130b. FIG. 13 is a diagram illustrating a specific example of a modified example of the supplier table (customer table 130b). In the supplier table 130b, all or part of the route in the network N connecting the terminal 3a and the transaction server 2a is registered in association with the user identifier. In this case, while a transaction related to a certain user identifier is performed, the network N needs to be processed using a certain network route. This route remains constant while the transaction is in progress (after authentication, until the end of transaction order is accepted), but if a new transaction is subsequently made, a different route may be set. good. With this configuration, a transaction using the same user identifier cannot be performed unless a route corresponding to the combination recorded in the supplier table 130b of the storage unit 13 is used. For this reason, it is possible to improve security as in the case where the supplier table 130a is applied.

  Also, other identifiers may be substituted for the terminal identifier. For example, the URL of the commercial site where the transaction is performed, the identifier of the commercial site, the identifier of the virtual store in the commercial site, the address of the server of the commercial site, the identifier of the server of the commercial site, and the like can be used.

It is a figure which shows the system configuration example of the transaction system containing the customer management apparatus which concerns on this invention. It is a figure which shows the example of a functional block of a supplier management apparatus. It is a figure which shows the specific example of a supplier table. It is a figure which shows the functional block example of a transaction server. It is a figure which shows the specific example of an authentication condition table. It is a figure which shows the specific example of a transaction information table. It is a figure which shows the example of a functional block of a terminal. It is a flowchart which shows the operation example of a transaction system. It is a flowchart which shows the operation example of a transaction system. It is a flowchart which shows the operation example of a transaction system. It is a flowchart which shows the operation example of a transaction system. It is a flowchart which shows the operation example of a transaction system. It is a figure which shows the specific example of a supplier table.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1a Supplier management apparatus 11 Transmission / reception part 12 Acquisition part 13 Storage part 130a Supplier table 130b Supplier table (modification)
DESCRIPTION OF SYMBOLS 14 Permission part 2a Transaction server 21 Transmission / reception part 22 Transmission / reception part 23 Authentication condition memory | storage part 230a Authentication condition table 24 Transaction information storage part 240a Transaction information table 25 Transaction execution part 3a Terminal 31 Input part 32 Transmission / reception part 33 Terminal identifier memory | storage part 34 Management Part

Claims (7)

A supplier management device that manages transactions when a user conducts transactions via a terminal that can access a transaction server,
An acquisition means for acquiring a user identifier assigned to the user or a portable item owned by the user and a terminal identifier assigned to the terminal to which the user identifier is input;
Permission means for allowing the user to perform the transaction only through the terminal indicated by the terminal identifier acquired in association with the user identifier of the user;
A supplier management device comprising:   2. The acquisition unit according to claim 1, wherein the acquisition unit acquires the user identifier authenticated in the transaction server in association with the terminal identifier assigned to the terminal to which the user identifier is input when the authentication is performed. The supplier management device described. A supplier management device that manages transactions when a user conducts transactions via a terminal that can access a transaction server,
Acquisition means for associating and acquiring a user identifier assigned to the user or a portable item owned by the user and all or part of a network path connecting the terminal to which the user identifier is input and the transaction server When,
Permission means for allowing the transaction performed by the user to be performed only through the network path acquired in association with the user identifier of the user;
A supplier management device provided.   The acquisition means corresponds to the user identifier authenticated in the transaction server and all or part of the network path connecting the transaction server and the terminal to which the user identifier is input when the authentication is performed. 4. The supplier management device according to claim 3, wherein the supplier management device acquires the information.   When the user's transaction ends, the permission unit permits the user's transaction until a new association is acquired by the acquisition unit, regardless of the information acquired in association with the user identifier. The supplier management device according to claim 1. A supplier management method when a user conducts a transaction via a terminal accessible to a transaction server,
The information processing apparatus accessible to the transaction server obtains the user identifier assigned to the user or a portable item owned by the user in association with the terminal identifier assigned to the terminal to which the user identifier is input. And steps to
Allowing the information processing apparatus to perform the transaction performed by the user only through the terminal indicated by the terminal identifier acquired in association with the user identifier of the user;
Business partner management method. A supplier management method when a user conducts a transaction via a terminal accessible to a transaction server,
An information processing apparatus that can access the transaction server includes a user identifier assigned to the user or a portable item owned by the user, and a whole network path that connects the terminal to which the user identifier is input and the transaction server. Or a step of associating and acquiring a part;
Allowing the information processing apparatus to perform a transaction performed by the user only via a network path acquired in association with the user identifier of the user;
Business partner management method.