JP2008046679A - Internet service providing system, portable storage medium and communication terminal - Google Patents

Abstract

Provided is a secure Internet service providing system that can be easily entered even by a small service provider or a small communication terminal provider, and does not have the risk of data falsification or theft.
A communication service provided by a communication terminal vendor 3 includes a service providing server 41 operated by an ISP vendor, a communication interface connected to the Internet 6, an input / output device, a biometric information input device 311, a card reader / writer 312 and the like. A memory for storing a program, an operating system 2111 and information for connecting to the terminal 31 and a card reader / writer 312 provided in the communication terminal 31, accessing the service providing server 41 via the communication terminal 31, and using various services A user 2 configured from the card 21 and permitted to use the service connects the distributed memory card 21 to the communication terminal 31 and uses the service.
[Selection] Figure 1

Description

  The present invention relates to an Internet service providing system with high security and easy entry, and a portable storage medium and a communication terminal applied to the system.

  Communication terminals for connecting to the Internet include personal computers installed in businesses, schools, homes, Internet cafes, etc. (hereinafter referred to as PCs), kiosk terminals installed in public institutions and shops, and home games. There are many types, such as machines, televisions, mobile phones, and in-vehicle information systems for automobiles, which are used in various places.

  On the other hand, as a technology for safely using various services provided via the Internet, password authentication and biometric authentication for confirming that the user is authorized to use the service (hereinafter referred to as a user). Encryption is used to prevent leakage of communication information.

  In order to easily use these technologies, a service utilization program is stored in a portable storage medium, and the portable storage medium is connected to the communication terminal, so that the operating system stored in the communication terminal can be used. A mechanism for starting a service use program stored in a portable storage medium and accessing various servers has been developed.

In Patent Document 1, a service use program and an operating system are stored in a portable storage medium, and the operating system stored in the portable storage medium is activated by connecting the portable storage medium to a communication terminal and turning on the power. However, there is a disclosure about an example of a remote access system that can reduce confidential information remaining in an operated communication terminal by executing a service use program.
JP 2005-235159 A

  Communication terminals currently used are often dedicated terminals installed in dedicated stores. For example, kiosk terminals installed in stations, city halls, convenience stores, etc. are composed of monitors, touch panels, communication interfaces, etc. Installed and operated. For this reason, it is difficult for small-scale service providers and communication terminal providers to enter, and as a result, services that can be provided to users are limited. In addition, a user who uses a plurality of services is inconvenient because different terminals can be used for each service.

  On the other hand, general-purpose communication terminals that are currently used have security problems. For example, there is a risk that a PC in an Internet cafe stores a malicious program such as falsification or theft of data. For this reason, there is a problem that a service requiring high security cannot be safely used by a general-purpose communication terminal.

  Some services that require high security perform personal authentication such as biometric authentication, but when using these services, the user's personal biometric information with a high degree of privacy is provided by the service provider. It is dangerous from the viewpoint of privacy protection to register every time.

  The present invention has been made in view of the above points, and a first object of the present invention is to provide an Internet service providing system that can be easily entered even by a small service provider or a small communication terminal provider. That is.

  A second object of the present invention is to provide a safe Internet service without the risk of data falsification or theft on a communication terminal or the Internet.

  A third object of the present invention is to limit disclosure of biometric authentication information of individual users with a high degree of privacy to as few as possible.

  In order to solve the above-described problems, the present invention provides a service providing server that provides various Internet services, and a communication terminal that can be connected to the Internet, an input / output device, a biometric information input device, a card reader / writer, and the like. A portable storage medium for storing a program, an operating system, and information necessary for connecting to a card reader / writer included in a communication terminal, connecting to the Internet via the communication terminal, accessing a service providing server and receiving various services (Hereinafter referred to as a memory card).

  In the present invention, an Internet service provider (hereinafter referred to as an ISP) operates a service providing server and is entrusted with service provision by a service provider that provides Internet service. The memory card is distributed to users who are allowed to use the service while being stored in the service providing server. The user can use the service by connecting the distributed memory card to a communication terminal provided by a communication terminal supplier.

  In addition, the list of services that the user is permitted to use is stored in advance in a memory card, or obtained from the service providing server when accessing the service providing server. Based on the list of services permitted to be used, a menu of services permitted to be used is displayed on the monitor of the communication terminal, and the user selects a service so that one memory card and one communication terminal can be connected. It is possible to use a plurality of Internet services.

  Furthermore, by adding a unique ID to the communication terminal, the service providing server can identify the terminal using the service by acquiring the unique ID of the accessed communication terminal, and depending on the terminal used Services can be provided.

  According to the present invention, since the operating system is stored in the memory card, there is no need to install the operating system in the communication terminal, the operating system introduction cost, the auxiliary storage device such as a hard disk drive for storing the operating system, etc. Since no cost is required, a communication terminal can be provided at a low price. Further, by storing a plurality of service usage programs corresponding to the types of services in the memory card, it is not necessary to install a dedicated store or a dedicated terminal. For these reasons, it is easy for small-scale communication terminal providers who provide general-purpose communication terminals to enter, and the number of communication terminals that can be used and installation locations increase. Thus, the establishment of a communication terminal environment that can provide services not only improves user convenience, but also facilitates entry for small-scale service providers.

  Furthermore, by using the operating system stored in the memory card, the service use program can be operated in an environment separated from the operating system and various programs stored in the communication terminal. Even if a program exists, you can use the service with peace of mind. Further, since an auxiliary storage device such as a hard disk drive is not required in the communication terminal, there is no risk of storing a malicious program in the communication terminal. Therefore, it is possible to use the Internet service safely.

  Furthermore, when the communication terminal is activated, the biometric authentication program stored in the memory card is activated, the biometric authentication information stored in the memory card and the biometric information acquired from the user are authenticated, and the authentication is successful. Since the service can be used, high security can be ensured even if the memory card is lost or stolen.

  On the other hand, for service providers, by entrusting ISPs to provide services, it is not necessary to install their own servers, which makes it easier for small service providers to enter. Further, by using an ISP vendor's server, it is possible to easily provide a high security service using encrypted communication. Further, the ISP provider manages the service use program stored in the memory card, so that the program download function can be installed in the memory card and the program can be distributed and updated. Management burden can be reduced.

  In addition, since ISP providers entrust and operate a plurality of services provided by a plurality of service providers, a plurality of service usage programs can be stored in a single memory card distributed to users. Memory card creation and distribution costs can be reduced. Also, the user does not need to have many memory cards for each service, and can use a plurality of services with one memory card. Also, instead of registering the user's individual biometric information for each service provider, the user's individual biometric information stored in one memory card can be used in common for each service. For this reason, disclosure of personal information of a user with a high degree of privacy can be limited.

  Furthermore, since the service providing server can know the unique ID of the communication terminal used by the user, the service providing server can provide a service only to a specific terminal or a service according to the terminal used. This system can be applied to various services.

  Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings.

  FIG. 1 is a schematic diagram showing an example of the overall configuration of an Internet service providing system in this example.

  The Internet service providing system 1 of this example is installed in an ISP provider 4, and is provided with a service providing server 41 that provides various Internet services 51 by connecting to the Internet 6, and the ISP provider 4 is allowed to use the service. The memory card 21 to be distributed to the user 2 and the communication terminal 31 which is installed by the communication terminal supplier 3 and can use the service by connecting the memory card 21 are configured. The service provider 5 develops an Internet service 51 and entrusts the service provider to the ISP provider.

  The communication terminal 31 includes a communication interface that can be connected to the Internet 6, includes an input / output device such as a monitor and a touch panel, a biometric information input device 311, a card reader / writer 312 and the like, and has a unique ID. A plurality of communication terminals 31 are installed by a plurality of communication terminal vendors 3 and connected to the Internet 6 respectively.

  The memory card 21 is connected to a card reader / writer 312 provided in the communication terminal 31 and operates on the communication terminal 31, and various programs such as a terminal control program, a biometric authentication program, a service use program, and a service selection program Various information such as biometric authentication information, an electronic key, an electronic certificate, and a list of programs permitted to be used are stored.

  Next, details of the configuration of the memory card 21 and the communication terminal 31 will be described with reference to FIG. FIG. 2 is a detailed view of the memory card 21 and the communication terminal 31 in FIG.

  The memory card 21 is a connection circuit for connecting one or more rewritable flash memory chips 211, one or more tamper-resistant IC memory chips 212, and a card reader / writer 312 included in the communication terminal 31. 213.

  The flash memory chip 211 includes an operating system 2111 that operates on the communication terminal 31, a terminal control program 2112 that controls the operation of the communication terminal, biometric authentication information stored in the memory card 21, and a biometric acquired from the user 2. A biometric authentication program 2113 for authenticating with information, a service usage program 2114 for using the Internet service 51, a service selection program 2115, and a list acquisition for acquiring a list of programs that the user 2 is permitted to use Various programs such as a program 2117 and a list 2116 of programs permitted to be used by the user 2 are stored.

  Various programs 2112 to 2115 and 2117 can operate on the operating system 2111.

  The service use program 2114 notifies the information provided by the user 2 from the input device of the communication terminal 31 to the service providing server 41 or displays the information obtained from the service providing server 41 on the monitor 315 of the communication terminal 31. This is a program that realizes that the user 2 uses the Internet service 51.

  The list 2116 of the programs permitted to be used by the user 2 is a program name that the user 2 is permitted to use among the plurality of service utilization programs 2114 stored in the memory card 21 or an identification code for identifying the service. It is a list that stores data such as. The list acquisition program 2117 is a program for acquiring a list 2116 of programs that the user 2 is permitted to use from the service providing server 41 via the Internet 6.

  In the IC memory chip 212, biometric authentication information 2121 used for authenticating the user 2, an electronic certificate 2122 used for performing encrypted communication, a user private key 2123, and a public key 2124 of the service providing server 41 are stored. And encrypted communication such as a URL (Uniform Resource Locator) 2125 of the service providing server 41 and information for ensuring security are stored. For this reason, a memory chip that has a mechanism that cannot be easily analyzed from the outside and has increased confidentiality is used. The electronic certificate 2122 is a certificate indicating that the user 2 is an authorized user of the Internet service 51. For example, a user ID, a password, or the like encrypted with the public key 2124 of the service providing server 41 is used. is there.

  The communication terminal 31 includes a biometric information input device 311 for inputting information for biometric authentication such as a user's fingerprint and vein, a card reader / writer 312 for reading / writing information on a memory card, and a memory card 21 accessed by the card reader / writer 312. A connection circuit 3121 for connecting to the communication terminal, a BIOS (Basic Input Output System) 313 which is a program group for controlling peripheral devices connected to the communication terminal, and a storage device for storing the program, data for executing the program, and the like The memory 314, the display information when performing authentication processing such as biometric authentication, the output device such as the monitor 315 for displaying the information obtained from the service providing server 41, and the user 2 is information such as the user ID and password Input on the touch panel 316 or the like for inputting information necessary for receiving services and services It comprises a device, a CPU (Central Processing Unit) 317 as central processing means for executing processing such as an operating system and various programs, and a communication interface 319 for connecting to the Internet 6.

  The communication terminal 31 has a terminal unique ID 318 for identifying it. This terminal unique ID 318 is used by the service providing server 41 to identify individual communication terminals. As such unique ID, a MAC address (Media Access Control Address) assigned to the communication interface 319 of the communication terminal 31 is used. Etc. In this example, the MAC address may be used as the unique ID 318, or another ID may be allocated to the communication terminal 31 under the management of the service providing server 41. This terminal unique ID 318 is stored in a storage device such as a ROM (Read Only Memory) mounted on the communication terminal 31.

  Next, details of the service providing server 41 will be described with reference to FIG. FIG. 3 is a detailed view of information stored in the service providing server 41 in FIG.

  In this example, the service providing server 41 is connected to the Internet 6 by installing a program, data, or the like for performing a corresponding process on a computer device composed of, for example, a CPU, a memory, and a hard disk drive. The processing is performed using the arithmetic processing function and the storage function that are provided in FIG. 1, but the description thereof is omitted.

  In the storage device 410 such as a hard disk of the service providing server 41 of this example, the secret key 411 of the service providing server 41 used for performing encrypted communication, the public key 412 of the user 2, and the communication terminal 31 are used. A communication encryption key 413 for performing encrypted communication, a service permitted user list 414 that is a list of users permitted to use the service, and a communication terminal that can access the service providing server 41 and use the service Information such as the information list 415 related to the Internet service 51 and the Internet service 51 entrusted by the service provider 5 are stored.

  The service permitted user list 414 is a list for identifying users who are permitted to use the corresponding service. As shown in FIG. 3, a list is formed for each Internet service 51 to be provided, and information such as a user ID 414a and a password 414b is stored. The communication terminal information list 415 is a list of information related to the communication terminal 31 that can connect to the service providing server 41 via the Internet 6 and use the service. In the communication terminal information list 415, as shown in FIG. 3, for example, a terminal unique ID 415a for identifying the communication terminal 31, an installer 415b of the communication terminal, equipment provided in the communication terminal, such as a printer or a cash payment device And the like, the terminal form 415c indicating the presence / absence of the information, the type of input / output device, and the like, the use permission service 415d indicating the type of service available in the communication terminal, and the like are stored. By storing the communication terminal information list 415 in the service providing server 41, the communication terminal 31 can be managed. This list is created in advance when you want to provide a service only to a specific communication terminal, or when you want to change the service depending on the form of the terminal, but when you do not specify a communication terminal that provides the service. Is not necessary.

  Next, an outline of processing when providing the Internet service according to this example will be described. FIG. 4 is a flowchart showing an example of the entire process from the start to the end of service use. First, a communication terminal activation process (step S901) is performed. In the communication terminal activation process, first, the user 2 permitted to use the service connects the distributed memory card 21 to the communication terminal 31. Next, when the user 2 turns on the power of the communication terminal 31, the operating system 2111 stored in the memory card 21 is read and activated. Next, a biometric authentication process (step S902) is performed. The operating system 2111 reads and activates the biometric authentication program 2113 and the terminal control program 2112 stored in the memory card 21, and sets the biometric authentication information 2121 stored in the memory card 21 and the biometric information input device 311 of the communication terminal 31. Authentication using the biometric information acquired from the user 2 via The result of the biometric authentication process is determined (step S903). If the authentication is successful, the service selection program 2115 stored in the memory card 21 is read and the service selection process is started (step S904). In the service selection process, a menu of services permitted to be used is displayed on the monitor of the communication terminal 31 and the service used by the user 2 is selected.

  Next, the service use program 2114 corresponding to the service selected by the user 2 is read and activated, and the activated service use program 2114 reads the electronic key or electronic certificate 2122 stored in the memory card 21, and Is used to access the service providing server 41, perform authentication processing, and perform encrypted communication construction processing for establishing encrypted communication (step S905). Then, an Internet service with high security is used by encrypted communication (step S906). When ending service use, service use end processing is performed (step S907), the communication terminal 31 and the memory card 21 are turned off (step S908), and the process ends. As a result of the determination of the authentication process in step S903, if the authentication is not successful, a power-off process is performed (step S908), and the process ends.

  Next, details of processing for providing an Internet service using encrypted communication in this example will be described with reference to FIGS.

  First, communication terminal activation processing in this example will be described with reference to FIG. FIG. 5 shows processing related to the memory card 21 on the left side, processing related to the communication terminal 31 in the center, and processing related to the service providing server 41 on the right side. The configuration of the drawings is the same in the subsequent drawings.

  First, the user 2 connects the memory card 21 to the card reader / writer 312 provided in the communication terminal 31 provided by the communication terminal provider 3 (step S101). Next, the power of the communication terminal 31 is turned on by the user 2 (step S201). At the same time as the communication terminal 31 is turned on, the memory card 21 connected to the communication terminal 31 is turned on (S102). Here, the power of the memory card 21 may be turned on by the user 2 or may be turned on automatically upon receiving a power-on request from the communication terminal 31. When the communication terminal 31 is powered on, the BIOS 313 of the communication terminal 31 is activated (step S202).

  Next, the activated BIOS 313 reads the operating system 2111 stored in the memory card 21 to the memory 314 of the communication terminal 31, and the CPU 317 of the communication terminal 31 activates the read operating system 2111 (S203). Note that transmission / reception of information between the communication terminal 31 and the memory card 21 is performed via the connection circuit 3121 of the card reader / writer 312 provided in the communication terminal 31 and the connection circuit 213 of the memory card 21. Is omitted. 2 shows a contact-type connection circuit for connection between the memory card 21 and the card reader / writer 312, information may be transmitted and received by wireless communication. In the communication terminal 31, the operating system 2111 and various programs acquired from the memory card 21 are embodied by being read out on the memory 314 of the communication terminal 31 and then executed by the CPU 317. Omitted.

  Next, the activated operating system 2111 reads the terminal control program 2112 stored in the memory card 21 into the memory 314 and activates it (step S204). Thereby, an output device such as the monitor 315 or an input device such as the touch panel 316 can be used.

  Next, biometric authentication processing in this example will be described with reference to FIG.

  First, the activated operating system 2111 reads the biometric authentication program 2113 stored in the memory card 21 into the memory 314 and activates it (step S205). Next, the activated biometric authentication program 2113 reads the biometric authentication information 2121 stored in the memory card 21 into the memory 314 (step S206). Next, the biometric authentication program 2113 prompts the user 2 to input biometric information by displaying a character string on the monitor 315, and the biometric information of the user 2 input from the biometric information input device 311 provided in the communication terminal 31. Is read out to the memory 314 (step S207). Then, biometric authentication is performed by comparing the input biometric information with the biometric authentication information 2121 read out in step S206 (step S208). The biometric authentication process is performed because the matching rate of the information to be compared is a certain ratio or higher. However, the details of the biometric authentication process are omitted here.

  As a result of the biometric authentication process, it is determined whether or not the user is a correct user (step S209). If it is determined that the user is the correct user 2, the biometric information and biometric information 2121 read out to the memory 314 are stored. Erasing for safety (step S211). If the user 2 cannot be determined as a result of the authentication process, the communication terminal 31 and the memory card 21 are turned off and the process ends (step S210). When the power is turned off, the biometric information and biometric authentication information 2121 deployed in the memory 314 are deleted, which is safe.

  Next, the service selection process in this example will be described with reference to FIG.

  First, the operating system 2111 reads the service selection program 2115 stored in the memory card 21 into the memory 314 and starts it (step S212). The activated service selection program 2115 reads the use permission program list 2116 stored in the memory card 21 into the memory 314 or acquires the use permission program list from the service providing server 41 via the Internet 6. (Step S213). The procedure for obtaining the list from the service providing server 41 will be described later with reference to FIG.

  Next, the activated service selection program 2115 refers to the list of use-permitted programs, and displays a service selection screen on the monitor 315 for selecting a service program to be actually used from among the permitted programs. Displayed (S214). A display example of the service selection screen is shown in FIG. Next, the user 2 operates the touch panel 316 or the like to select a service to be used from the options on the service selection screen. The service selection program 2115 acquires the service type selected by the user 2 input from the touch panel 316 (step S215). Next, the service selection program 2115 reads the service use program selected by the user 2 from the service use programs 2114 stored in the memory card 21 into the memory 314 and starts it (step S216).

  Here, the service selection screen will be described with reference to FIG. Options 3213, 3214, 3215, and 3216 on the service selection screen 321 shown in FIG. 12 are names representing services, and each correspond to a service use program. Here, as the character string to be displayed as an option, the program name itself may be displayed, or a character string for displaying an option corresponding to the program may be displayed. When the options cannot be displayed on one screen, the next option can be displayed using the display scroll buttons 3217, 3218 and the like. The user 2 selects a service to be used according to a message 3212 that prompts the user to select a service to be used.

  The options 3213, 3214, 3215, and 3216 displayed here are only services corresponding to programs that are permitted to be used as described above. However, the memory card 21 can store not only programs that the user 2 is permitted to use, but also programs that are not permitted to be used. Therefore, since all of the service use programs 2114 that can be provided by the service providing server 41 can be written in all of the memory cards 21 to be distributed, the writing process for storing the service use programs 2114 in the memory cards 21 is made common. can do. As a result, it is possible to prevent leakage of storing the necessary service use program 2114 in the memory card 21. Even if there is a service permitted to be used after the memory card 21 is distributed to the user 2, the service can be used only by updating the list 2116 of the programs permitted to be used.

  Next, the encrypted communication construction process in this example will be described with reference to FIG.

  First, the service use program 2114 activated by the service selection process includes an electronic certificate 2122 stored in the memory card 21, a private key 2123 of the user 2, a public key 2124 of the service providing server 41, and a URL 2125 of the service providing server 41. The data is read into the memory 314 (step S217). Next, the service type selected by the user 2 is encrypted using the public key 2124 of the service providing server 41. The encrypted service type and the electronic certificate 2122 are transmitted with the URL 2125 of the service providing server 41 as the destination (step S218). Here, data transmission / reception between the communication terminal 31 and the service providing server 41 is performed via the communication interface 319 and the Internet 6. The same applies to subsequent data transmission / reception between the communication terminal 31 and the service providing server 41.

  Next, the service providing server 41 decrypts the received electronic certificate 2122 using the server's own private key 411, and acquires authentication information such as a user ID and a password (step S301). Similarly, the encrypted service type is decrypted using the server's own private key 411, and the service type selected by the user 2 is acquired (step S302). The service providing server 41 searches the service-permitted user list 414 corresponding to the service type for whether the user ID and password acquired from the electronic certificate match, and if they match, the service providing server 41 is permitted. By determining that the user is a user, a user authentication process is performed (step S303). As a result of the authentication process, it is determined whether or not the user is permitted to use the service (step S304), and if it is determined that the request is a service usage request from a user permitted to use the service, the service providing server 41 encrypts the communication encryption key 413 used for encrypted communication with the public key 412 of the user 2 and transmits it to the communication terminal 31 (step S306).

  The service utilization program 2114 running on the communication terminal 31 acquires the encrypted communication encryption key 413 from the service providing server 41 and decrypts it using the secret key 2123 of the user 2 (step S219). By using this communication encryption key 413 for subsequent communications, encrypted communication with the service providing server 41 can be performed.

  On the other hand, as a result of the determination of the authentication process in step S304, if it cannot be determined that the request is a service use request from a user permitted to use the service, an authentication abnormality process is performed (step S305). This authentication abnormality processing may be performed by not returning a response from the service providing server 41 to the communication terminal 31, or by returning a certain abnormality response to the monitor 315 of the communication terminal 31 to notify the abnormality. You may display.

  As a result of the authentication process, when it is determined that the user is permitted to use the service, the service use program 2114 running on the communication terminal 31 uses the information input from the user 2 as the encrypted communication. To the service providing server 41, and the information is processed by the service 51 of the service providing server 41, or the service providing program that the service providing server 41 operates on the communication terminal 31 using this encrypted communication. An Internet service using encrypted communication can be realized by transmitting information to 2114 and displaying the information on the monitor 315 of the communication terminal 31.

  Next, the service use end process in this example will be described with reference to FIG.

  When the user 2 selects the service use end by operating the touch panel 316 of the communication terminal 31 or the like, the service use program 2114 acquires a service use end request from the touch panel 316 input by the user 2 ( Step S220). Next, the service use program 2114 notifies the service providing server 41 of the end of use of the service (S221).

  The service providing server 41 that has received the service use end notification from the service use program 2114 of the communication terminal 31 performs service end processing on the server side (step S307). Here, the server-side service end process is a process of storing information such as service usage history in the storage device of the service providing server 41, a process of releasing resources such as a memory allocated for the service providing process, etc. It is.

  In the communication terminal 31, various programs operating in the communication terminal 31 such as the service use program 2114 and the terminal control program 2112 are stopped (step S222). Further, the operating system 2111 is stopped and the communication terminal 31 is turned off (step S223). In addition, a power-off request is transmitted to the memory card 21 to turn off the memory card 21 (step S103). Here, the power supply of the memory card 21 may be automatically turned off upon receiving a power-off request from the communication terminal 31, or may be turned off manually by the user 2.

  After the communication terminal 31 and the memory card 21 are powered off, the user 2 pulls out the memory card 21 from the communication terminal 31 (step S104). Thereby, all the processes are completed.

  Next, details of the list acquisition process of the permitted programs in step S213 of the service selection process will be described with reference to FIG.

  When the user 2 obtains the list 2116 of programs permitted to be used from the service providing server 41, the operating system 2111 reads the list acquisition program 2117 stored in the memory card 21 into the memory 314 and starts it. The activated list acquisition program 2117 first reads the electronic certificate 2122 stored in the memory card 21, the private key 2123 of the user 2, the public key 2124 of the service providing server 41, and the URL 2125 of the service providing server 41 into the memory 314. (Step S231). Next, the read electronic certificate 2122 is transmitted with the URL 2125 of the service providing server 41 as a destination, and the user 2 is requested to obtain a list of programs permitted to be used (step S232).

  Next, the service providing server 41 decrypts the received electronic certificate 2122 using the server's own private key 411, and acquires authentication information such as a user ID and a password (step S331). Next, the service providing server 41 searches the usage-permitted user list 414 for each service to find whether there is a user ID and password that are obtained from the electronic certificate 2122. It is determined that the service is allowed to be used. Based on this result, services permitted to be used are extracted and listed, thereby creating a list of services that the user 2 is permitted to use (step S332). This list may be created when a list acquisition request is received from the communication terminal 31, or may be created for each user who uses the service in advance.

  Next, the service providing server 41 prepares a list of programs corresponding to the service in advance, and refers to this to convert the list of services permitted to be used into the list of service utilization programs permitted to be used. Conversion is performed (step S333). If the service name and the service use program name are the same, this conversion processing is not necessary. Next, the service providing server 41 encrypts the list of service use programs permitted to be used with the public key 412 of the user 2 and transmits the encrypted list to the communication terminal 31 (step S334).

  The list acquisition program 2117 running on the communication terminal 31 acquires the encrypted list and decrypts it using the secret key 2123 of the user 2, thereby allowing the service usage program permitted to be used. A list can be obtained (step S233). In addition, by storing the list obtained here in the flash memory chip 211 of the memory card 21, the list stored in the memory card 21 may be used from the next time. Furthermore, in the service providing server 41, when a service that the user 2 is permitted to use is added or changed, information indicating that the list has been updated is added to the list, and a list acquisition request is issued from the communication terminal 31. If the list is updated, the presence / absence of the list update is determined, and the list is transmitted only when the list is updated. In other cases, the list may be processed using the list stored in the memory card 21.

  Next, communication terminal identification processing in this example will be described with reference to FIG. In this example, when it is desired to provide a service only to a specific communication terminal, the terminal information list 415 is created in the service providing server 41 in advance. Here, a process for specifying a communication terminal that provides a service will be described.

  First, the service selection program 2115 or the service use program 2114 running on the communication terminal 31 reads the terminal unique ID 318 of the communication terminal 31, the public key 2124 of the service providing server 41, and the URL 2125 of the service providing server 41 into the memory 314. (Step S241). Next, the terminal unique ID 318 is encrypted with the public key 2124 of the service providing server 41, and transmitted with the URL 2125 of the service providing server 41 as the destination (step S242).

  The service providing server 41 acquires the terminal unique ID 318 by decrypting the encrypted terminal unique ID 318 received from the communication terminal 31 using the server's own private key 411 (S341). Next, the service providing server 41 searches the terminal information list 415 prepared in advance for the one that matches the acquired terminal unique ID 318, thereby using the communication terminal requesting the use of the service or the service. It is possible to identify the communication terminal that is performing (step S342).

  Thus, by specifying the communication terminal, it is possible to provide a service corresponding to the terminal installer by referring to the “terminal installer” item 415b corresponding to the terminal unique ID 318 in the terminal information list 415. it can. Similarly, by referring to the “terminal configuration” item 415c and the “usage-permitted service” item 415d, it is possible to provide a service according to the terminal configuration or to limit the terminals that provide the service. .

  For example, the bank balance inquiry can be used anywhere as long as it is a communication terminal equipped with a display device such as a monitor, but the deposit can be refunded only with a communication terminal equipped with a cash payment device. Even for such limited services, it is possible to know whether or not the communication terminal 31 used by the user 2 is a communication terminal equipped with a cash payment device by the above method. The deposit refund service can be provided only by a communication terminal equipped with the.

  As described above, although the form of the communication terminal using the service is different, each terminal can be recognized by managing information related to the terminal, so that the range of services that can be applied is expanded. As a result, various services can be used with one memory card 21 and convenience is improved.

  FIG. 13 is a flowchart for showing the overall processing flow of the Internet service providing system 1 including the user 2, the communication terminal company 3, the ISP company 4, and the service provider 5 in this example. Hereinafter, the Internet service providing system 1 will be described with reference to FIG.

  First, the communication terminal company 3 installs and operates the communication terminal 31 in various places (step S501). The ISP 4 operates the service providing server 41 (step S601). The service provider 5 creates the Internet service 51 (step S701), and entrusts the ISP provider 4 to provide the service 51 (step S702).

  The ISP vendor 4 stores a plurality of services 51 entrusted by the plurality of service providers 5 in the service providing server 41 (step S602). As a result, the service provider 5 entrusted with service provision does not need a service provision server. Further, the ISP provider 4 can improve the use efficiency of the server by collectively operating the plurality of services 51 entrusted by the plurality of service providers 5.

  The user 2 applies to the ISP dealer 4 to use the service 51 (step S401). When applying for the use of the service 51, necessary information such as biometric authentication information 2121 of the user 2 and credit card information is provided to the ISP vendor 4 as information to be stored in the memory card 21.

  Next, the ISP dealer 4 creates the memory card 21 to be distributed to the user 2 who has applied for the use of the service 51 (step S603). The memory card 21 stores various programs such as an operating system 2111 that operates on the communication terminal 31 and various information such as biometric authentication information 2121 of the user 2. When the memory card 21 is created, the ISP dealer 4 distributes the memory card 21 to the user 2 (step S604). The memory card 21 may be created and distributed not by the ISP vendor 4 but by a specialized vendor.

  Using the distributed memory card 21, the user 2 uses the Internet service 51 using an arbitrary communication terminal 31 installed at an arbitrary location (step S402). A method of using a service using the memory card 21 and the communication terminal 31 is as described with reference to FIGS.

  FIG. 14 shows an example of a charge collection relationship among the user 2, the communication terminal vendor 3, the ISP vendor 4, and the service provider 5 in this example. Hereinafter, the communication terminal providing service will be described with reference to FIG.

  First, fee collection for use of the communication terminal 31 will be described. The communication terminal provider 3 connects the communication terminals 31 installed in various places to the Internet 6 and lends them to the user 2 who uses the service (step S511). The user 2 pays the usage fee of the communication terminal 31 to the communication terminal vendor 3 according to the usage time and the number of usages of the communication terminal 31 (step S411).

  Next, the collection of fees for using the Internet service will be described. First, the service provider 5 entrusts the ISP provider 4 with provision of the service 51 and pays a commission fee (step S711). The ISP vendor 4 provides the service 51 entrusted to the user 2 (step S611). The user 2 pays a usage fee according to the type of service used, usage time, number of times, etc. to the ISP vendor 4 (step S412). The ISP vendor 4 pays the service usage fee collected from the user 2 to the service provider 5 (step S612).

  The feature of this service is that the ISP terminal 4 and the service provider 5 and the communication terminal provider 31 that provides the service for providing the communication terminal can enter without depending on the type of the service 51 or the use of the service itself. For this reason, a small communication terminal company can also enter. In addition, since the use of users who use various services can be expected, the operation rate of the terminal is higher than that of a communication terminal whose use is limited to a specific service. Of course, since the communication terminal 31 does not include an operating system, various programs, an auxiliary storage device such as a hard disk drive, etc., the introduction cost and the maintenance cost are also low, which facilitates the entry of a small-scale communication terminal company.

It is a block diagram which shows the example of whole structure by one embodiment of this invention. It is explanatory drawing which shows the structural example of the memory card by one embodiment of this invention, and a communication terminal. It is explanatory drawing which shows the example of the information stored in the service provision server by one embodiment of this invention. It is a flowchart which shows the example of the whole process by one embodiment of this invention. It is a flowchart which shows the communication terminal starting process example by one embodiment of this invention. It is a flowchart which shows the biometrics authentication process example by one embodiment of this invention. It is a flowchart which shows the example of a service selection process by one embodiment of this invention. It is a flowchart which shows the example of an encryption communication establishment process by one embodiment of this invention. It is a flowchart which shows the example of a service utilization end process by one embodiment of this invention. It is a flowchart which shows the example of a service utilization program list acquisition process by one embodiment of this invention. It is a flowchart which shows the example of a communication terminal specific process by one embodiment of this invention. It is explanatory drawing which shows the example of a service selection screen display by one embodiment of this invention. It is a flowchart which shows the process example of the internet service provision system by one embodiment of this invention. It is explanatory drawing which shows the example of the charge collection relationship by one embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Internet service provision system, 2 ... User, 3 ... Communication terminal provider, 4 ... ISP trader, 5 ... Service provider, 6 ... Internet, 21 ... Memory card, 31 ... Communication terminal, 41 ... Service provision server, 51 ... Internet service 211 ... Flash memory chip 212 ... IC memory chip 213 ... Connection circuit 2111 ... Operating system 2112 ... Terminal control program 2113 ... Biometric authentication program 2114 ... Service utilization program 2115 ... Service selection program 2116 ... Use-permitted program list, 2121 ... Biometric authentication information, 2122 ... Electronic certificate, 2123 ... User private key, 2124 ... User public key, 2125 ... Server URL, 311 ... Biometric information input device, 312 ... Card reader Darita, 313 ... BIOS, 314 ... memory, 315 ... monitor, 316 ... touch panel, 317 ... CPU, 318 ... terminal unique ID, 319 ... communication interface, 3121 ... connection circuit, 321 ... service selection screen, 410 ... storage device, 411 ... server private key, 412 ... user public key, 413 ... communication encryption key, 414 ... service permitted user list, 415 ... terminal information list

Claims (9)

A service providing server for providing Internet services;
A communication terminal connected to the service providing server via a network;
An operating system that operates on the communication terminal; a terminal control program for controlling the communication terminal; and a service use program for using an Internet service provided by the service providing server; A portable storage medium that can be connected to a card reader / writer
A list of programs permitted to be used among the Internet service use programs is stored in the portable storage medium;
By connecting and starting the portable storage medium to the communication terminal, an operating system and a terminal control program stored in the portable storage medium operate in a central processing unit of the communication terminal, and the portable storage medium An Internet service providing system capable of starting only an Internet service use program permitted to be used by referring to a list of Internet service use programs permitted to be used stored in the Internet. The Internet service providing system according to claim 1,
A list acquisition program for acquiring a list of Internet service programs permitted to be used from the service providing server is stored in the portable storage medium,
When using the Internet service, by starting the list acquisition program, the Internet service use program list is acquired from the service providing server, stored in the portable storage medium, and used by referring to the list. An Internet service providing system that can start only authorized Internet service usage programs. The Internet service providing system according to claim 1 or 2,
The communication terminal comprises a biological information input means,
Storing a biometric authentication program, biometric authentication information regarding a user of an Internet service that owns the portable storage medium, an electronic key, and an electronic certificate in the portable storage medium;
When the communication terminal is activated, the biometric authentication program stored in the portable storage medium is activated, and the user's biometric information input from the biometric information input unit of the communication terminal and the portable storage medium are stored. An Internet service providing system that performs authentication processing based on biometric authentication information and can use the service when authentication is successful. The Internet service providing system according to claim 3, wherein
The communication terminal comprises a biological information input means,
Storing a biometric authentication program, biometric authentication information regarding a user of an Internet service that owns the portable storage medium, an electronic key, and an electronic certificate in the portable storage medium;
When the communication terminal is activated, the biometric authentication program stored in the portable storage medium is activated, and the user's biometric information input from the biometric information input unit of the communication terminal and the portable storage medium are stored. Perform the authentication process based on the biometric authentication information, and if the authentication is successful, start the Internet service usage program,
The activated Internet service utilization program reads the electronic key and electronic certificate stored in the portable storage medium, transmits the electronic certificate encrypted with the electronic key to the service providing server,
The service providing server performs an authentication process based on the transmitted electronic certificate, and establishes encrypted communication with the communication terminal when the authentication is successful, thereby allowing the authorized user to use the service. On the other hand, an Internet service providing system characterized by providing an Internet service. The Internet service providing system according to claim 1 or 2,
A unique ID for identifying the terminal is stored in the read-only storage means provided in the communication terminal,
Storing in the storage means of the service providing server the unique IDs of a plurality of communication terminals connectable to the service providing server and information on the communication terminals;
When using the Internet service, by transmitting a terminal unique ID from the communication terminal to the service providing server, the communication terminal accessed by the service providing server is identified, and based on information regarding the identified communication terminal An Internet service providing system characterized in that the contents of the service can be changed. The Internet service providing system according to claim 1 or 2,
One or more internet service providers outsource the provision of one or more internet services to an internet service provider;
An Internet service provider operates a service providing server for providing a consigned service to the user, distributes the portable storage medium for using the provided service to the user,
An Internet service providing system characterized in that a user of a service can use the service by connecting the distributed portable storage medium to the communication terminal. A connection means for connecting to a card reader / writer included in the communication terminal;
With two or more storage areas,
One or more of the storage areas are rewritable storage areas,
One or more of the storage areas are storage areas with tamper resistance,
In the rewritable storage area, an operating system operating on the communication terminal, a communication terminal control program for controlling the communication terminal, a biometric authentication program, one or more Internet service utilization programs, and the Internet service Stores a list of programs that are allowed to be used,
The biometric authentication information about the user, the electronic key, and the electronic certificate are stored in the tamper-resistant storage area,
By connecting to the card reader / writer of the communication terminal and starting up, the operating system and the terminal control program stored in the storage area operate in the central processing means of the communication terminal, and the use stored in the storage area is used. A portable storage medium capable of using an Internet service by referring to a list of permitted Internet service use programs. The portable storage medium according to claim 7,
In the rewritable storage area, a list acquisition program for acquiring a list of permitted Internet service programs from a service providing server is stored,
When using the Internet service, by starting the list acquisition program, the Internet service use program list is acquired from the service providing server, stored in the rewritable storage area, and used by referring to the list A portable storage medium that can use only Internet service usage programs that are permitted to use Internet services. Communication interface means for connecting to the Internet;
Input / output means;
Biometric information input means;
Card reader / writer means comprising connection means for connecting to a portable storage medium;
A central processing means for executing an operating system and application programs;
Storage means for storing information necessary to execute a program or process;
In a communication terminal equipped with a peripheral device control program for controlling a peripheral device, which is stored in a read-only storage means,
Connect the portable storage medium to the card reader / writer means, start the peripheral device control program by turning on the power,
The communication terminal, wherein the activated peripheral device control program reads the operating system and application program stored in the portable storage medium to the storage means, and activates the program read by the central processing means.

Images