JP2008117200A - Handover system, campaign server, handover method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a handover system simultaneously materializing handover of a point and user information in one campaign to another campaign, and reduction of leakage risk of personal information. <P>SOLUTION: This handover system has: a plurality of campaign servers 3-1 to 3-n accumulating point number information comprising a point number of the points imparted to a user and use information when using the points; and user terminals 2-1 to 2-m. The campaign servers 3-1 to 3-n store user information comprising the point number information and user identification information, generates a check code according to a download request signal, and transmits handover information comprising the check code and the user information to the user terminals 2-1 to 2-m. The user terminals 2-1 to 2-m store the handover information. The campaign servers 3-1 to 3-n authenticate whether the handover information is regular information or not according to an upload request signal, and stores the user information. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention mainly relates to a user information transfer system, a campaign server, a transfer method, and a program including point information.

Conventionally, points are added to products and services for each purchase and use, and the points acquired by users are registered in the campaign server, so that you can apply for lottery or exchange for prizes according to the number of accumulated points. There are campaigns that will be able to. As a method of participating in this campaign, for example, a terminal such as a mobile phone or a computer terminal can use a lottery number input by a user, point identification information such as a two-dimensional code and a three-dimensional code, together with user information, The method of registering and accumulating points by sending them to a campaign server installed by the organizer of the company and participating in the campaign is widely used. In addition, as a connection method from the terminal to the campaign server, there are a direct input by a user of a URL (Uniform Resource Locator), an input method by reading a two-dimensional code or the like by the terminal, and the like. Moreover, as shown in Patent Document 1, there is a method for simplifying connection to a campaign server or participation in a campaign by providing a dedicated application on the terminal.
JP 2006-107047 A

  By the way, in the method shown above, various campaigns usually have an implementation period, and are implemented by separating periods such as seasons. In this case, the enterprise that is the organizer of the campaign participated in the first campaign, verifying the effectiveness of the implemented campaign, and the repeat rate when repeating the campaign for the same or similar products or services. The probability that the user will further participate in the second campaign similar to the first campaign performed after the first campaign is obtained from statistical information through a plurality of campaigns, and is used for marketing such as analysis for management strategy. There is a need to use it.

  However, in order to meet the above needs, when conducting a full-year campaign consisting of multiple campaigns, it takes a lot of effort and operational costs to collect personal information and manage personal information during the campaign suspension period between campaigns. It takes. Moreover, continuing to hold personal information has a problem that the risk of leakage of personal information increases. For this reason, it was difficult to implement a full year campaign.

  Further, for various campaigns for which the implementation period is determined, when the campaign ends, the unconsumed points out of the points registered in the campaign server become invalid. Therefore, for the user, the non-consumed points that have become invalid are wasted, and the willingness to purchase is reduced. Therefore, there is a problem that a campaign originally performed for the purpose of sales promotion may become an obstacle to sales simultaneously with the end of the campaign.

  Moreover, even if the various campaigns for which the implementation period is determined are campaigns targeting similar products and services, the user needs to register for campaign participation including personal information every time for each campaign. This gives the impression that a user who repeatedly participates in a campaign has a redundant effort required to register information, and there is a problem that the willingness to participate in the campaign may be reduced.

  The present invention has been made to solve the above-mentioned problems in consideration of such circumstances, and its purpose is to transfer points and user information in one campaign to another campaign, and at the same time, It is an object of the present invention to provide a takeover management device, a point takeover method, a point takeover system, and a program that can simultaneously reduce leakage risk.

  In order to solve the above problem, the takeover system of the present invention provides point number information including the number of points given to a user (for example, registered points in the embodiment) and usage information when the points are used. A takeover system comprising a plurality of campaign servers (for example, registration point status information in the embodiment) and terminals (for example, user terminals 2-1 to 2-m in the embodiment), wherein the campaign server Storage means for storing user information including the point number information and user identification information (for example, the user information DB 35 in the embodiment), and a download request signal transmitted from the terminal (for example, takeover information download in the embodiment) Read out the user information from the storage means in response to the request signal) In addition, a falsification prevention check code (for example, a check code in the embodiment) having a correspondence relationship between the user information and a predetermined condition is generated, and transfer information including the falsification prevention check code generated and the user information is transmitted to the terminal. Check code issuing means (for example, the check code issuing unit 411 in the embodiment), the upload request signal transmitted from the terminal (for example, the takeover information upload request signal in the embodiment) and the takeover information according to the takeover information By determining whether or not the tampering prevention check code of information and the user information are in correspondence with the predetermined condition, it is authenticated whether or not the handover information is genuine, and the storage means Data authentication means for storing (for example, the data authentication unit 412 in the embodiment) The terminal transmits a download request signal for requesting transmission of the takeover information to the campaign server (for example, the data DL unit 211 in the embodiment), and receiving means for receiving the takeover information from the campaign server. (For example, the communication unit 20 in the embodiment) and an upload request unit (for example, in the embodiment) that transmits an upload request signal requesting acceptance of the handover information received by the receiving unit to any of the plurality of campaign servers. And a data UL section 212).

  Further, the present invention is characterized in that the terminal includes storage means for storing information.

  Moreover, the present invention is characterized in that the storage means provided in the terminal is a non-contact type IC chip.

  Further, the present invention provides a campaign in a takeover system comprising a plurality of campaign servers in which point number information including the number of points given to a user and usage information when the points are used, and a terminal is stored. A storage means for storing user information including the point number information and user identification information; and reading the user information from the storage means in response to a download request signal transmitted from the terminal. A check code issuing means for generating a falsification prevention check code having a correspondence relation between user information and a predetermined condition, and transmitting the generated falsification prevention check code and the takeover information made up of the user information to the terminal; and transmitting from the terminal Of the takeover information according to the upload request signal and the takeover information By determining whether or not the falsification check code and the user information are in correspondence with the predetermined condition, it is authenticated whether or not the handover information is legitimate and stored in the storage means And a data authentication means.

  Also, the present invention provides a takeover system in a takeover system comprising a plurality of campaign servers in which point number information including the number of points given to a user and usage information when using the points is stored, and a terminal. A method in which the campaign server stores user information including the point number information and user identification information in a storage unit; and a step in which the terminal transmits a download request signal to the first campaign server. The first campaign server reads the user information from the storage means in response to the download request signal transmitted from the terminal, and the tampering prevention check code having a correspondence between the read user information and a predetermined condition Generating the tamper-proof check code and the user information A process of transmitting takeover information comprising: to the terminal; a process in which the terminal receives the takeover information from the first campaign server; and an upload request signal including the received takeover information to the second campaign server. Whether the tampering prevention check code of the takeover information and the user information are in a correspondence relationship of the predetermined condition in response to an upload request signal transmitted from the terminal by the second campaign server A process of authenticating whether or not the handover information is legitimate by determining whether or not the handover information is legitimate as a result of authentication, and storing the user information It is characterized by including.

  Further, the present invention provides a campaign in a takeover system comprising a plurality of campaign servers in which point number information including the number of points given to a user and usage information when the points are used, and a terminal is stored. A procedure for storing user information including the point number information and user identification information in a computer of the server, and reading the user information from the storage means in response to a download request signal transmitted from the terminal. A procedure for generating a falsification prevention check code having a correspondence relation between information and a predetermined condition, transmitting the generated falsification prevention check code and the user information to the terminal, and an upload request transmitted from the terminal Prevention of falsification of the takeover information according to a signal and the takeover information A procedure for authenticating whether or not the handover information is legitimate by determining whether or not the check code and the user information are in correspondence with the predetermined condition, and storing in the storage means Let it run.

  According to the present invention, in a takeover system comprising a plurality of campaign servers in which point information consisting of the number of points given to a user and usage information when using the points is stored, and a terminal, The terminal transmits a download request signal to the first campaign server, and the first campaign server uses the point number information and the user identification information from the storage means according to the download request signal transmitted from the terminal. The user information to be read, generate a falsification prevention check code having a correspondence relationship between the read user information and a predetermined condition, and transmit the generated takeover information including the falsification prevention check code and the user information to the terminal, The terminal receives and receives the takeover information from the first campaign server. An upload request signal including the handover information is transmitted to a second campaign server, and the second campaign server responds to the upload request signal transmitted from the terminal and the tampering prevention check code of the handover information and the user It is determined whether or not the handover information is legitimate by determining whether or not the information is in correspondence with the predetermined condition, and as a result of authentication, the handover information is legitimate. When authenticated, the user information is stored. As a result, there is an effect that it is possible to simultaneously reduce the risk of leakage of personal information while handing over points and user information in the first campaign to the second campaign.

  According to the present invention, the terminal includes storage means for storing information. As a result, even if there is a period in which the campaign is not executed before the campaign executed by the first campaign server is finished and the campaign executed by the second campaign server is started, In this case, the take-over information can be stored in the storage means of the terminal, and the point and user information in the first campaign can be taken over in the second campaign.

  According to the present invention, the storage means included in the terminal is a non-contact type IC chip. This makes it possible to use a terminal equipped with an IC chip, such as a mobile phone terminal having a payment function such as electronic money. In addition, the use of an IC chip has the effect of further enhancing security.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing the overall configuration of a user information transfer system registered in a campaign. The user terminals 2-1 to 2-m and the campaign servers 3-1 to 3-n are connected via the network 100. Here, the network 100 is a communication network such as the Internet or a dedicated private communication network.

Here, the following campaign form is demonstrated to an example as an example of the form of the campaign which campaign server 3-1 to 3-n implements. That is, the campaign servers 3-1 to 3-n receive point consumption command signals from the user terminals 2-1 to 2-m. And in each campaign, according to the predetermined consumption condition information, the consumption processing of the registration point number for the application received registration from the user terminals 2-1 to 2-m, that is, the process of subtracting the registration point number. It is a campaign form to be performed.
In this campaign form, the consumption condition information of registered points is exchange condition information for points and lottery rights, in which a lottery right is given to the user for each fixed number of points. The registration point consumption condition information may be an exchange condition in which a premium is given to the user for each predetermined number of points.

In FIG. 1, the user terminals 2-1 to 2-m transmit registration points for applying for various campaigns to campaign servers 3-1 to 3-n corresponding to campaigns based on user operations, The takeover information including the user information is received from the campaign servers 3-1 to 3-n and stored therein. The user terminals 2-1 to 2-m include a communication unit 20, an application unit 21, an input reception unit 22, a display unit 23, and a data storage unit 24.
In addition, the user terminals 2-1 to 2-m may be, for example, computer terminals, mobile phone terminals, mobile phone terminals with an electronic money function, that is, mobile phone terminals having a mobile payment function, etc. Any device can be applied as long as the device includes the communication unit 20, the application unit 21, the input reception unit 22, the display unit 23, and the data storage unit 24.

In the user terminals 2-1 to 2-m, the communication unit 20 communicates with the campaign servers 3-1 to 3-n via the network 100. The input receiving unit 22 is connected to an input device such as a keyboard, a mouse, and an operation panel, determines a signal output from the input device that has been operated by the user, and inputs information corresponding to the determined signal. The display unit 23 is connected to, for example, a CRT (Cathode Ray Tube) or a liquid crystal screen, and displays information on the screen according to a screen display command signal input from the application unit 21. The data storage unit 24 is configured to move from the migration source (or takeover source) campaign servers 3-1 to 3-n to the migration destination (or takeover destination) campaign servers 3-1 to 3-n. Stores takeover information. The data storage unit 24 is applicable to any recording medium capable of writing and erasing transfer information, such as a contact type IC chip, a non-contact type IC chip, a memory, a hard disk, and a magnetic recording medium. It is.
Here, the takeover information includes user information and a check code. The check code is information used to determine whether the takeover information has not been tampered with, and details thereof will be described later.

  The application unit 21 is dedicated software for taking over user information, and includes a data DL (download) unit 211, a data UL (upload) unit 212, and a data storage unit 213. The application unit 21 may be provided in advance in the user terminals 2-1 to 2-m, or downloaded from the campaign servers 3-1 to 3-n when migrating user information. The user terminals 2-1 to 2-m may be provided. Further, the application unit 21 is not limited to the campaign servers 3-1 to 3 -n, and downloads from the server device that distributes the application unit 21 by a campaign organizer, reads the application unit 21 recorded on a recording medium, and the like. Any method including the application unit 21 in the user terminals 2-1 to 2-m can be applied by any method.

In the application unit 21, when the takeover information download request signal is input from the input receiving unit 22, the data DL unit 211 takes over via the communication unit 20 to the campaign servers 3-1 to 3 -n that are the transfer source of transfer information. An information download request signal is transmitted. Here, the takeover information download request signal that requests transmission of user information includes a download start signal, user identification information, and destination information of the user terminals 2-1 to 2-m.
When the takeover information upload request signal is input from the input accepting unit 22, the data UL unit 212 sends a takeover information upload request signal to the campaign servers 3-1 to 3 -n to which transfer information is transferred via the communication unit 20. Send. Here, the takeover information upload request signal for requesting acceptance of user information, that is, takeover of user information, includes an upload start signal and takeover information.
The data storage unit 213 writes the takeover information received from the campaign servers 3-1 to 3-n via the communication unit 20 to the data storage unit 24, and also transfers the takeover information to the destination campaign servers 3-1 to 3- When transmitting to n, the takeover information is deleted from the data storage unit 24.

The campaign servers 3-1 to 3-n are server devices provided by organizers in different campaigns, and receive registration points for application and user identification information from the user terminals 2-1 to 2-m. , Accepting participation of a user having user terminals 2-1 to 2-m in a campaign.
The campaign servers 3-1 to 3-n receive point consumption command signals from the user terminals 2-1 to 2-m, and follow the predetermined consumption condition information to the user terminals 2-1 to 2-m. The processing for consuming the number of registered points for the application for which registration has been accepted, that is, the process of subtracting the number of registered points is performed.

In addition to the function of accepting participation in the campaign, the campaign servers 3-1 to 3-n include a user information DB 35, a migration information DB 36, and a takeover management unit 4, as shown in FIG. .
In the campaign servers 3-1 to 3-n, the user information DB 35 stores user information as a table shown in FIG. Here, the user information is user identification information, a password required when the user terminals 2-1 to 2-m access the campaign servers 3-1 to 3-n, and user terminals 2-1 to 2-m. To unused registration point information registered in the campaign servers 3-1 to 3-n, accumulated registration point information, and takeover source server identification information in association with each other.
The user information DB 35 is updated as needed according to the point registration command signal of the registration points for application received from the user terminals 2-1 to 2-m and the point consumption command signal.

Moreover, the registration point status of the registration points for the campaign application is indicated by the unused registration point information, the cumulative registration point information, and the takeover source server identification information included in the user information.
Here, unused registration point information refers to consumption based on the above-described registration point consumption condition information among registration points registered in the campaign servers 3-1 to 3-n from the user terminals 2-1 to 2-m. This is unused registration point number information that has not yet been processed.
The cumulative registration point information is the total number of points registered in the campaign servers 3-1 to 3-n from the user terminals 2-1 to 2-m.
The unused registration points and the accumulated registration point information are the CP (campaign) points that are the number of registered points in the campaign in which the user is currently participating, and the users inherited from the campaign servers 3-1 to 3-n. Consists of inherited CP points which are the number of registered points in the campaigns that participated in the past.

  In addition, the user information may include information on outlier points among the registered points registered in the campaign server 3-1 from the user terminals 2-1 to 2-m. Outlier points are registered points that do not generate rewards such as rewards for preferential treatment or prizes, that is, rewards such as prize acquisition for the user. For example, lottery points that are out of the lottery Registration points exchanged for rights. The information on the lost points is used for the lottery, and is information on the number of lost points when the lottery is lost, information on the number of lost points indicating the number of times the lottery is lost.

FIG. 2 is an example of information stored in the user information DB 35 in the campaign server 3-2. In the user information DB 35 of the campaign server 3-2 shown in FIG. 2, the user terminal 2- that has already participated in the campaign of the campaign server 3-1, and the user terminal 2- 2 is stored.
Here, the user information corresponding to the user terminal 2-1, that is, the user information whose user identification information is 2-1, includes the inherited CP point information transferred from the campaign server 3-1, the takeover source server identification information, Includes transfer information consisting of On the other hand, the user information corresponding to the user terminal 2-2, that is, the user information whose user identification information is 2-2 does not have the takeover information composed of the inherited CP point information and the takeover source server identification information.

Next, a method for migrating user information will be described.
When migrating user information, the user information in which the registration point status is rewritten by the following procedure is migrated to the takeover destination campaign servers 3-1 to 3-n. That is, in the unused registration point information, the total of the unused registration points of the user information before the transfer is rewritten as a new exchanged CP point, and the new participating CP point is rewritten as 0. Similarly, in the cumulative registration point information, the total of the cumulative registration points of the user information before migration is rewritten as a new exchanged CP point, and the new participating CP point is rewritten as 0.
Here, the total of unused registration points is calculated by the following calculation formula, that is, (total of unused registration points) = (participating CP points) + (inherited CP points). In addition, the total of accumulated registration points is calculated by the following calculation formula, that is, (total of accumulated registration points) = (CP points being participated) + (inherited CP points).

Hereinafter, as a specific example, the case of transferring user information corresponding to the user terminal 2-1 from the campaign server 3-2 to the campaign server 3-n will be described with reference to FIGS. 2 and 3. To do.
FIG. 2 is a table stored in the user information DB 35 of the campaign server 3-2 that is the takeover source. Among the user information corresponding to the user terminal 2-1, the total number of unused registration points is expressed as (participating CP points). ) + (Takeover CP points) = 10 points + 5 points = 15 points. Similarly, the total of accumulated registration points is (total of accumulated registration points) = 15 points + 50 points = 65 points.

  Therefore, when the user information of the user terminal 2-1 is transferred from the campaign server 3-2 to the campaign server 3-n, as shown in the data example of the user information DB 35 in the campaign server 3-n in FIG. Since the total of the unused registration points and the total of the accumulated registration points are respectively transmitted to the campaign server 3-n, the takeover CP points of the unused registration point information in the takeover information, and the takeover CP points of the cumulative registration point information become. Also, the takeover source server identification information becomes the server identification information of the campaign server 3-2.

  In the migration information DB 36 of the campaign servers 3-1 to 3-n, server identification information, address information of the campaign servers 3-1 to 3-n, a point ratio, and migration fee information are associated in advance. Are stored as a table shown in FIG. By attaching this point ratio, there is an effect that when the user information is transferred, the registration point information can be weighted and transferred according to the destination campaign.

  For example, when the relationship between the point ratios a and b in FIG. 4 is a <b, the user information is transferred from the campaign server 3-2 rather than the user information transferred from the campaign server 3-1. It is possible to set so that the point transfer rate increases. For example, when the number of registered points of 10 points registered in the campaign is transferred, the case where the transfer source server is the campaign server 3-1 and the case of the campaign server 3-2 will be specifically described. Here, in FIG. 4, when the migration source campaign server is the campaign server 3-1, the point ratio a = 0.8, and when the migration source campaign server is the campaign server 3-2, the point ratio b = 1. It is assumed that 0 (a <b). Here, when the migration source is the campaign server 3-1, the calculation of the points after migration is performed by the following formula: (number of registered points) × (point ratio a) = 10 points × 0.8 = 8 points Is done by.

Further, when the migration source is the campaign server 3-2, the calculation of the points after the migration is performed by the following formula: (number of registered points) × (point ratio b) = 10 points × 1.0 = 10 points. Done.

  In this way, in the takeover destination campaign servers 3-1 to 3 -n, the point ratio can be changed for each of the transfer source campaign servers 3-1 to 3 -n. -1-3-n offers preferential treatment for the number of points to be transferred at the time of the transfer of user information from users who have participated in campaigns closer to the timing of the campaign, and similar products Is advantageous in that the takeover destination campaign servers 3-1 to 3 -n can be provided with preferential means such as preferential treatment of the number of points to be transferred for takeover from the target campaign. In addition, there is an effect that it is possible to set different point ratios for migration of user information from campaigns by different companies and migration of user information from campaigns within the same company.

  For example, when a plurality of campaigns targeting the same product are executed using the server devices in the order of campaign server 3-1, campaign server 3-2, campaign server 3-3,. As an example, preferential conditions that vary depending on the time of the event will be described. At this time, in the migration of user information to which the campaign server 3-3 takes over, the campaign executed in the campaign server 3-2 is closer to the campaign than the campaign server 3-1. Therefore, in the migration information DB 36 shown in the table of FIG. 4, by setting the relationship between the point ratios a and b to a <b, the number of migration points from the campaign close to the campaign server 3-3 is preferentially treated. It becomes possible. For this reason, there is an effect that the user can be motivated to continuously participate in the next campaign.

  Further, by providing the item column of the transfer fee shown in FIG. 4, it is possible to set a different transfer fee for each transfer source campaign server. The number of registered points calculated by subtracting the transfer fee from the number of registered points in the user information is set as the number of registered points after transfer, that is, the exchanged CP points.

In the campaign servers 3-1 to 3-n, the takeover management unit 4 realizes the takeover of the user information by transmitting and receiving the user information in the migration of the user information. The takeover management unit 4 includes a communication unit 40 and a data management unit 41.
The communication unit 40 communicates with the user terminals 2-1 to 2-m. The data management unit 41 includes a check code issuance unit 411 and a data authentication unit 412. The data management unit 41 issues a check code when user information is transmitted, and a user can use the check code when receiving user information. It is determined whether the information is legitimate information.

When the check code issuing unit 411 receives the takeover information download request signal from the user terminals 2-1 to 2-m via the communication unit 40, the check code issuing unit 411 reads the corresponding user information from the user information DB 35 and corresponds to the read user information. Generate check code. The check code issuing unit 411 transmits takeover information including the generated check code and user information to the user terminals 2-1 to 2-m via the communication unit 40.
When the data authentication unit 412 receives the takeover information upload request signal from the user terminals 2-1 to 2-m via the communication unit 40, whether or not the user information of the takeover information and the check code have a predetermined correspondence relationship. And authenticating whether the user information is legitimate.

The predetermined correspondence is, for example, information in which the check code is encrypted with the user information, and when the check code is decrypted, it matches the user information, or the check code encrypts the hash value of the user information. The correspondence relationship between the check code and the user information, such as a correspondence relationship in which the hash value of the user information coincides with the calculated value when the check code is decrypted in the takeover destination campaign servers 3-1 to 3-n. Any correspondence relationship that can be determined is applicable.
For example, when a check code is generated by encrypting user information, a check code generation method and a data authentication method performed by the check code issuing unit 411 and the data authentication unit 412 are performed according to the following procedure. The check code issuing unit 411 reads the user information from the user information DB 35 using the user identification information of the received takeover information download request signal as a search key, encrypts the read user information using the encryption key, and encrypts the encrypted information. A check code is generated by using user information as a check code. When performing data authentication. The data authentication unit 412 decrypts the encrypted user information that is a check code included in the received takeover information. The decrypted check code, that is, whether the user information encrypted in the takeover source campaign server is compared with the plain text user information included in the takeover information, and whether or not falsification has been performed is determined by whether or not they match. And authenticity of the takeover information.

According to the check code generation method and authentication method using the encryption key described above, a check code is generated as long as the encryption key is not obtained even if plain text user information included in the takeover information is falsified. It is not possible. Thereby, when the user information is falsified, the data authentication unit 412 determines that the user information has been falsified because the original user information obtained by decoding the check code does not match the falsified user information. It becomes possible.
Here, the encryption key may be an encryption key based on a common key encryption method in which all the succession management units 4 of the campaign servers 3-1 to 3-n share the same encryption key, or the campaign servers 3-1 to 3- The encryption key may be a secret key of a public key encryption method that is different for each n.

In the case of different public key cryptosystems for each of the campaign servers 3-1 to 3 -n, the takeover management unit 4 preliminarily stores server identification information for identifying the campaign servers 3-1 to 3 -n and corresponding public encryption keys. Are stored in the memory in association with each other.
The secret key is different for each of the campaign servers 3-1 to 3-n, and the campaign servers 3-1 to 3-n store a unique secret key and are stored in the other campaign servers 3-1 to 3-n. The private key is never stored. The check code is generated by the user information being encrypted with the secret key by the check code issuing unit 411. When performing data authentication, the data authentication unit 412 reads the public encryption key from the memory based on the takeover server identification information included in the user information of the received takeover information, decrypts the encrypted user information that is a check code, The validity of the transfer information is authenticated.

  Here, by generating the check code using the public key cryptosystem, the check code can be generated only with the private key that exists only in the takeover source campaign server. Therefore, a different private key is obtained for each campaign server. Otherwise, the check code cannot be generated, and the encryption key acquisition path for generating the check code is narrower than in the shared key cryptosystem. Therefore, there is an effect of further enhancing the tampering prevention effect than the common key cryptosystem.

  In the above-described embodiment, the check code is described as a check code that can determine whether or not the user information included in the takeover information has been tampered with. In the servers 3-1 to 3-n, identification information for each takeover information may be used and information for detecting whether the information is regular information generated in the campaign servers 3-1 to 3-n may be used. .

Next, an operation example of the takeover system in the configuration of FIG. 1 will be described using the flowchart of FIG. In the first embodiment, the campaign server 3-2 holds user information corresponding to the user terminal 2-1 that has been taken over from the campaign server 3-1, and the user information of the user terminal 2-1 is stored. An explanation will be given by taking as an example a case of shifting to the campaign server 3-n.
Further, in this operation example, the first process until the transfer information is transferred from the takeover source campaign server 3-2 to the user terminal 2-1, and the takeover information stored in the user terminal 2-1, is the transfer destination. The second process until the transition to the campaign server 3-n.

<First step>
In the user terminal 2-1, when the input reception unit 22 determines a download start request signal for takeover information in response to a user input operation, the input reception unit 22 activates the application unit 21 and outputs a download start request signal to the application unit 21 ( Step S1).
When the download start request signal is input in the application unit 21, the data DL unit 211 receives the destination information of the user terminal 2-1, the user identification information, and the takeover source server identification information that is the transfer source of the user information. A screen display command signal for requesting input from the user is output to the display unit 23. The input reception unit 22 outputs to the data DL unit 211 the destination information of the user terminal 2-1, the user identification information, and the takeover source server identification information that becomes the migration source of the user information determined by receiving the user's input operation. To do. The data DL unit 211 sends a takeover information download request signal composed of the inputted download start request signal, user identification information, and destination information of the user terminal 2-1 to the campaign server 3 corresponding to the inputted takeover source server identification information. -2 via the communication unit 20 (step S2).

In the campaign server 3-2, when the communication unit 40 of the data management unit 41 receives the takeover information download request signal from the user terminal 2-1, it outputs the received takeover information download request signal to the check code issuing unit 411 (step S3).
The check code issuing unit 411 reads the user information of the user terminal 2-1 from the user information DB 35 using the user identification information of the input takeover information download request signal as a search key (step S4).
The check code issuing unit 411 generates a check code having a correspondence relationship between the user information and the predetermined condition described above from the read user information (step S5). The check code issuing unit 411 transmits the takeover information including the generated check code and the read user information to the user terminal 2-1 based on the destination information of the takeover information download request signal, and the user information DB 35 receives the user terminal 2. The user information corresponding to -1 is deleted (step S6).

In the user terminal 2-1, when the communication unit 20 receives the takeover information, the communication unit 20 outputs the received takeover information to the data storage unit 213 (step S7).
When receiving the takeover information, the data storage unit 213 writes the received takeover information in the data storage unit 24 (step S8).
The above steps S1 to S8 are the first process in which the user terminals 2-1 to 2-m download the takeover information from the takeover source campaign server and store it in the data storage unit 24. Note that the user terminals 2-1 to 2-m continue to store the takeover information stored in the first process in the data storage unit 24 until an upload start request signal is input.

  In step S6, the campaign server 3-2 deletes the user information of the user terminal 2-1 from the user information DB 35 as soon as the transfer information is transmitted. However, in the user terminal 2-1, the data storage unit 213 Stores the takeover information in the data storage unit 24 and notifies the campaign server 3-2 that the takeover information has been normally stored, and the campaign server 3-2 has confirmed that the takeover information has been normally stored. After the notification, the user information corresponding to the user terminal 2-1 may be deleted from the user information DB 35.

<Second process>
Next, an operation example of the process of transferring the takeover information stored in the user terminal 2-1 to the transfer destination, that is, the transfer destination campaign server 3-n will be described with reference to the flowchart of FIG.
In the user terminal 2-1, when the input receiving unit 22 receives an input operation of the user and detects an upload start request signal for takeover information, the input receiving unit 22 activates the application unit 21 and outputs an upload start request signal to the application unit 21 ( Step S11).

  In the application unit 21, when the input upload start request signal is input, the data UL unit 212 inputs the destination information of the user terminal 2-1 and the server identification information of the takeover destination as the transfer destination of the user information. Is output to the display unit 23. The input receiving unit 22 outputs to the data UL unit 212 the destination information of the user terminal 2-1 determined by receiving the user's input operation and the server identification information of the takeover destination as the transfer destination of the user information. Further, the data UL unit 212 reads the takeover information from the data storage unit 24 (step S12). The data UL unit 212 sends a takeover information upload request signal composed of the inputted upload start request signal, the destination information of the user terminal 2-1 and the read takeover information to the campaign corresponding to the inputted server identification information of the takeover destination. It transmits to the server 3-n via the communication unit 20 (step S13).

In the campaign server 3-n, when the communication unit 40 of the data management unit 41 receives the takeover information upload request signal from the user terminal 2-1, it outputs the received takeover information upload request signal to the data authentication unit 412 (step S14). ).
The data authentication unit 412 determines whether the input check code of the takeover information upload request signal and the user identification information have the predetermined correspondence described above, so that the received takeover information has been tampered with. It is determined whether or not there is any. (Step S15). If it is determined that the received handover information has not been tampered with, it is assumed that it has been authenticated that it is legitimate handover information. On the other hand, when it is determined that the received takeover information has been tampered with, it is assumed that the authentic takeover information could not be authenticated.

If the data authentication unit 412 determines that the check code of the input takeover information upload request signal and the user identification information have the above-described predetermined correspondence as a result of the authentication, the user information takeover source server The point ratio and the transfer fee information are read from the transfer information DB 36 using the identification information as a search key. Next, the data authentication unit 412 calculates a point obtained by multiplying the read point ratio by the unused registration point and the cumulative registration point as a new unused registration point and a cumulative registration point. The data authentication unit 412 replaces unused registration points and cumulative registration points of the user information of the takeover information with the calculated registration points and outlier points to obtain rate-converted user information.
The data authentication unit 412 extracts unused registration points from the rate-converted user information, and calculates, as new unused registration points, registration points obtained by subtracting points for the transfer fee from the extracted unused registration points. The data authentication unit 412 replaces the unused registration point information of the rate-converted user information with the calculated unused registration point information to obtain fee-subtracted user information, and writes the fee-subtracted user information in the user information DB 35 (step S16). ).

The data authentication unit 412 transmits a notification of the authentication result to the user terminal 2-1 based on the destination information of the takeover information upload request signal via the communication unit 40 (step S17).
When the data authentication unit 412 determines that the check code of the input takeover information upload request signal and the user identification information are not in the above-described predetermined correspondence as a result of the authentication, the user information write in step S16 The authentication result notification is transmitted to the user terminal 2-1, which is the operation of step S17.

In the user terminal 2-1, when the communication unit 20 receives the authentication result, the communication unit 20 outputs the received authentication result to the data UL unit 212.
When the data UL unit 212 receives the authentication result, if the authentication result is a notification indicating that the user information has been taken over in the campaign server 3-n, the data UL unit 212 stores the data in the data storage unit 213. A take-off information deletion request signal in the storage unit 24 is output.
When the authentication result is a notification that the authentication has not been performed in the campaign server 3-n, the data UL unit 212 may not be able to transmit normally when transmitting the transfer information, so the transfer information upload request signal A screen display command signal for allowing the user to select whether to re-transmit or terminate the process is output to the display unit 23. When the input receiving unit 22 determines that the retransmission of the takeover information upload request signal is selected by the user, the input receiving unit 22 performs the processing operation from step S12 (step S18).

In addition, the check code issuing unit 411 may perform the total processing of the unused registration points and the total processing of the cumulative registration points of the user information in step S5 of the first process, or data authentication in step S16 of the second process. The unit 412 may be configured to write user information.
As described above, by performing the processes of the first process and the second process, the user information of the campaign server 3-2 can be transferred to the campaign server 3-n. Thereby, conventionally, the user has been required to register the user information for each campaign. However, according to the configuration of the present embodiment, the user terminals 2-1 to 2-1 Since it is possible to hold the download information individually downloaded in 2-m and transfer the user information to another campaign, the organizer who hosts the campaign can acquire the user information across a plurality of campaigns. There is an effect that becomes possible after reducing the risk of leakage of personal information.

  In the above embodiment, the campaign information DB 16 of the takeover management server 1 stores a campaign category to which user information can be transferred, a point ratio, and a transfer fee in association with each category. As described above, for each of the campaign servers 3-1 to 3-n, a campaign server to which user information can be transferred, a point ratio, and a transfer fee can be stored in association with each other. In this case, since it is possible to set a point ratio and a transfer fee for each campaign, even if the unit price per point for application points varies from campaign to campaign, the point ratio will be By multiplying by, there is an effect that the user information can be transferred to the campaign servers 3-1 to 3-n by converting into points according to the amount of goods and services purchased by the user. It is also possible to increase or decrease the fee when the campaign organizer shifts to a different campaign.

  In addition, according to the configuration of the above-described embodiment, when the user information is transferred to another campaign and transferred, the organizer of the first campaign that is the transfer source and the organizer of the second campaign that is the transfer destination. Different organizers or the same organizer can be applied. In addition, the first campaign that is the migration source is the user information in the campaign servers 3-1 to 3-n on which the first campaign is executed even if the campaign is completed or the campaign is being performed. Can be taken over.

In addition, in the present embodiment, since it is possible to take over user information, which has been conventionally counted for each campaign, in the present embodiment, user information can be taken over, the first campaign and the second campaign are the same sponsor. It is also easy to acquire the repeat degree of customers who are continuously participating in the campaign.
The repeat degree is information in which, for example, the campaign identification information and the total number of registered points registered in the campaign are associated with the user information, for example, as a table shown in FIG. This can be realized by holding campaign participation history information in association with each other.

  Further, in the above-described embodiment, it has been described that when the user information is transferred, the registration points and the off-points are weighted, and the points deducted from the fee are transferred. However, the user information transmitted from the first campaign server is described. May be transferred to the second campaign server as it is.

Conventionally, registration points registered for each campaign and used for lottery rights and exchange for prizes must be accumulated for each campaign, and lottery rights and prizes must be exchanged. Therefore, the remaining registration points and registration points that are less than the predetermined number of registration points for exchanging lottery rights and prizes were wasted when the campaign ended, but according to the configuration of this embodiment, Since these points can be taken over and the points are not wasted, there is an effect of reducing a decrease in the user's desire to purchase.
This also has the effect of saving the user from having to register the user information for the new campaign by taking over the user information, reducing the user's resistance to new campaign participation, Since it is not wasted, it has the effect of increasing the participation rate in the campaign.

  In the present embodiment, the takeover management unit 4 has been described as a configuration provided in the campaign servers 3-1 to 3 -n, but is an independent device separately from the campaign servers 3-1 to 3 -n. Also good. In this case, the device of the takeover management unit 4 is connected to the network 100 and communicates with the campaign servers 3-1 to 3-n and the user terminals 2-1 to 2-m.

  In the above-described embodiment, the server identification information of the takeover destination campaign servers 3-1 to 3-n is input by the user in the user terminals 2-1 to 2-m. May include the server identification information of the takeover destination campaign servers 3-1 to 3-n. In this case, takeover destination campaign servers 3-1 to 3 -n that take over the user information are determined, and the takeover destination campaign servers 3-1 to 3 -n are the takeover destination campaign servers 3-1 to 3-. n is a configuration in which server identification information is stored.

Further, the campaign server 3-1 to 3-n can accept the takeover information download request only during the campaign period implemented by the campaign server 3-1 to 3-n. It may be configured to accept a certain period of time, and can be arbitrarily set by the organizers of the campaign servers 3-1 to 3 -n, and the user information is deleted after the period during which the set transfer information download request can be accepted. This has the effect of eliminating the need to keep managing personal information.
In addition, notifications urging user information to be taken over from the campaign servers 3-1 to 3-n may be sent to the user terminals 2-1 to 2-m.

  In the above-described embodiment, the registration point is given to the product or service. However, the registration point is a registration given to the user on the spot by a dedicated point granting machine installed in the store. It may be a point. The dedicated point giving machine has a function of transmitting registration points of the user terminals 2-1 to 2-m or writing registration points in the storage devices of the terminals 2-1 to 2-m.

Further, a program for realizing each step shown in FIG. 5 is recorded on a computer-readable recording medium, and the terminals 2-1 to 2-m and campaign servers 3-1 to 3-n shown in FIG. The programs for realizing the functions are recorded on a computer-readable recording medium, and the programs recorded on the recording medium are read into the computer system and executed, whereby the campaign servers 3-1 to 3-n hold the program. Processing to take over user information to be performed may be performed.
Here, the above-described “computer system” may include an OS and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” means a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a CD-ROM, a hard disk built in a computer system, etc. This is a storage device.

Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

It is a block diagram which shows the takeover system in one Embodiment of this invention. It is an example of the table of user information which user information DB35 in the embodiment memorizes. It is an example of the table of user information which user information DB35 in the embodiment memorizes. It is an example of the table which migration information DB36 in the embodiment memorizes. It is the flowchart which showed the operation example of the taking over system in the embodiment. It is another example of the table of user information which user information DB35 memorizes.

Explanation of symbols

2-1 to 2-m User terminal 20 Communication unit 21 Application unit 211 Data DL unit 212 Data UL unit 213 Data storage unit 22 Input reception unit 23 Display unit 24 Data storage unit 3-1 to 3-n Campaign server 4 Takeover management Unit 40 communication unit 41 data management unit 411 check code issuing unit 412 data authentication unit 35 user information DB
36 Migration information DB
100 network

Claims (6)

A takeover system comprising a plurality of campaign servers in which point number information consisting of the number of points given to a user and usage information when the points are used, and a terminal,
The campaign server
Storage means for storing user information including the point number information and user identification information;
The user information is read from the storage means in response to a download request signal transmitted from the terminal, a tampering prevention check code having a correspondence relationship between the read user information and a predetermined condition is generated, and the tampering generated in the terminal Check code issuing means for transmitting takeover information comprising a prevention check code and the user information;
By determining whether or not the falsification prevention check code of the handover information and the user information are in a correspondence relationship of the predetermined condition according to the upload request signal transmitted from the terminal and the handover information, Data authentication means for authenticating whether the takeover information is legitimate and storing it in the storage means;
The terminal
Download request means for transmitting a download request signal for requesting transmission of the takeover information to a campaign server;
Receiving means for receiving the takeover information from the campaign server;
An takeover system, comprising: an upload request means for sending an upload request signal requesting acceptance of the takeover information received by the receiving means to any of the plurality of campaign servers. The terminal
The takeover system according to claim 1, further comprising storage means for storing information. The storage means included in the terminal includes:
It is a non-contact IC chip. The takeover system according to claim 2. A campaign server in a takeover system comprising a plurality of campaign servers for storing point number information consisting of the number of points given to a user and usage information when using the points, and a terminal,
Storage means for storing user information including the point number information and user identification information;
The user information is read from the storage means in response to a download request signal transmitted from the terminal, a tampering prevention check code having a correspondence relationship between the read user information and a predetermined condition is generated, and the tampering generated in the terminal Check code issuing means for transmitting takeover information comprising a prevention check code and the user information;
By determining whether or not the falsification prevention check code of the handover information and the user information are in a correspondence relationship of the predetermined condition according to the upload request signal transmitted from the terminal and the handover information, A campaign server comprising: data authentication means for authenticating whether or not the takeover information is genuine and storing the information in the storage means. A takeover method in a takeover system comprising a plurality of campaign servers in which point information consisting of the number of points given to a user and use information when using the points is stored, and a terminal,
A process in which the campaign server stores user information consisting of the point number information and user identification information in a storage means;
The terminal transmitting a download request signal to the first campaign server;
The first campaign server reads user information from the storage unit in response to the download request signal transmitted from the terminal;
A process of generating a falsification prevention check code having a correspondence relationship between the read user information and a predetermined condition; a process of transmitting the generated falsification prevention check code and the user information to the terminal;
A process in which the terminal receives the takeover information from the first campaign server, a process of transmitting an upload request signal including the received takeover information to a second campaign server;
The second campaign server determines whether the tampering prevention check code of the handover information and the user information are in a correspondence relationship of the predetermined condition in response to an upload request signal transmitted from the terminal. The process of authenticating whether or not the takeover information is authentic,
And a step of storing the user information when it is authenticated that the takeover information is authentic as a result of the authentication. In the computer of the campaign server in the takeover system comprising a plurality of campaign servers in which the number of points information consisting of the number of points given to the user and the usage information when using the points is stored, and a terminal,
Storing user information consisting of the point number information and user identification information;
The user information is read from the storage means in response to a download request signal transmitted from the terminal, a tampering prevention check code having a correspondence relationship between the read user information and a predetermined condition is generated, and the tampering generated in the terminal A procedure for transmitting takeover information comprising a prevention check code and the user information;
By determining whether or not the falsification prevention check code of the handover information and the user information are in a correspondence relationship of the predetermined condition according to the upload request signal transmitted from the terminal and the handover information, A program for authenticating whether or not the handover information is legitimate and for storing in the storage means.

Images