JP2009054189A - Server, terminal device, program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To allow a user to be authenticated without inputting an ID or the like by the user himself or herself. <P>SOLUTION: An IC card 29 holds an ID and a password of a user 19. When the user sets the IC card 21 to a personal computer 21 to start the personal computer 21, the personal computer 21 reads the ID and the password in the IC card 29, and the ID and the password are encrypted by another password or the like inputted by the user 19 and are sent to a sever 7 to perform authentication. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an authentication system.

  In recent years, personal accounts, credit usage details, bills, and the like can be mailed by direct mail or viewed electronically via the Internet.

  In addition, for the check through the personal credit information organization, two authorization switching centers usually called CAFIS and CATNET and a dedicated line intervene in the network between the card company and the personal credit information organization, and an online authorization system using a communication line Is in operation. In particular, along with the recent increase in electronic browsing and electronic commerce, the online authorization system uses this dedicated line each time and credit is implemented, and the number of uses tends to increase as the usage amount increases.

  By the way, for personal account, credit usage details, and bill browsing services, register an ID and password for each financial institution and service center that conducts electronic browsing, and enter the ID and password each time the browsing service is switched. And verifying identity.

In addition, when a personal account, credit usage details, or invoice notification is sent, a franchise support advertisement (such as a flyer) is attached to the direct mail. Another) introduces products and services.
JP 2001-273442 A

  Thus, in a conventional electronic browsing service, etc., when a user is dealing with, for example, two banks and wants to browse the usage details via the Internet or the like, the bank accesses each bank, and enters an ID and password. There was a need to enter. That is, it is necessary to access each different bank and input an ID and a password each time.

  In addition, advertisements enclosed in direct mail and the like are different for each gender, generation, and region, but are not advertisements corresponding to the hobbies and preferences of each user.

The present invention has been made in view of such problems, and its object is to
An object of the present invention is to provide an authentication system in which the user can perform authentication without inputting an ID or the like.

In order to achieve the above-described object, the first invention is a server for accessing a terminal device of a user and a registered financial institution server of any of a plurality of banks, securities companies, and credit companies to perform an aggregation service. A database for storing at least user authentication information; decryption means for decrypting encrypted authentication information received from the terminal device based on a key held in advance; and authentication information for the database Authentication means for authenticating the decrypted authentication information based on the information, and means for transmitting, after user authentication, a user page consisting of usage details and bill information from the plurality of financial institution servers to the terminal device And a server characterized by comprising:
The second invention is a terminal device connected to a server for performing an aggregation service for accessing browsing financial institution servers of a plurality of banks, securities companies, and credit companies and providing browsing information. , Reading means for reading the authentication information in the IC card, encryption means for encrypting the authentication information using another inputted password as a key, and accessing the server to transmit the encrypted authentication information And a display means for displaying a page for the user including usage details and bill information received from the plurality of financial institution servers received from the server.

  The terminal device is a personal computer, a mobile terminal, a mobile phone, an information home appliance, or the like, and the authentication information is information that specifies an individual such as an ID, a password, a personal face photo image, or fingerprint information. The server and terminal device used in this authentication system are also included in the first invention.

In the first invention, the server has a database for storing at least user authentication information, decrypts the encrypted authentication information received from the terminal device based on a key held in advance, and converts the authentication information into the database authentication information. Based on this, the decrypted authentication information is authenticated, and after user authentication, a user page including usage details and bill information from a plurality of financial institution servers is transmitted to the terminal device.
In the second invention, the terminal device reads the authentication information in the IC card, encrypts the authentication information using the input another password as a key, accesses the server, transmits the encrypted authentication information, A user page including information on usage details and invoices from a plurality of financial institution servers received from the server is displayed.

  According to the present invention, authentication can be performed without the user himself / herself entering an ID or the like, and an advertisement according to the user's hobbies and preferences can be performed.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram showing a configuration of an authentication system 1 and an advertisement system 3 according to an embodiment of the present invention.

  As shown in FIG. 1, a server 7, an A bank server 11, a B bank server 13, an X travel company server 15, a Y travel company server 17, a Z travel company server 18, and a personal computer that perform an aggregation service on a network 5 such as the Internet. A computer (personal computer) 21 or the like is connected.

  In addition to the personal computer 21, the user 19 has a mobile phone 23, a PDA 25, an interactive digital television (iDTV) 27, and the like. An IC card 29 is set in the personal computer 21, the mobile phone 23, the PDA 25, and the interactive digital television 27. The base station 31 provides a program to the interactive digital television 27 via an artificial satellite or the like. Further, instead of the interactive digital television 27, other information appliances may be used.

  The server 7 has a database 9 and the server 7 performs an aggregation service. With the aggregation service, for example, when the user 19 accesses the server 7 using the personal computer 21 and browses his / her own page, the usage details of the A bank and the usage details of the B silver are displayed on the page at once. It is a service.

  That is, the user 19 conventionally accesses the A bank server 11, inputs the ID and password, browses the usage details of the A bank, accesses the B bank server, inputs the ID and password, I was browsing the usage details.

  According to the aggregation service, the user 19 can view the usage details of Bank A and the usage details of Bank B simply by accessing the server 7.

  The management company of the server 7 has contracts with the banks A and B, and information such as usage details of the users of the banks A and B is provided to the server 7 and held in the database 9.

  FIG. 2 is a diagram showing data held in the IC card 29. The IC card 29 has ID 51, password 53, name 55, address 57, age 59, telephone number 61, mail address 63, hobby preference 65, face photo data 67, fingerprint data 69, purchase history 71, payment history 73, point history. 75, access history 77, clipping history 79, and the like are stored. The IC card 29 may hold advertisements 81-1, 81-2, 81-3, and the like.

  ID 51, password 53, name 55, address 57, age 59, telephone number 61, mail address 63, hobby preference 65, face photo data 67, fingerprint data 69 are the ID, password, and password of the user 19 who owns this IC card 29. Name, address, age, telephone number, e-mail address, hobbies, face photo data, and fingerprint data.

  ID 51, password 53, name 55, address 57, age 59, telephone number 61, mail address 63, hobby preference 65, face photo data 67, fingerprint data 69, and the like are stored when the user 19 subscribes to the aggregation service. Register in the server 7 and the IC card 29.

  Among such data, the public level can be ranked. For example, name 55, address 57, age 59, telephone number 61, mail address 63, and hobby preference 65 are set to level α, and name 55, address 57, and age 59 are set to level β.

  When the server 7 side and A bank and B bank make a contract, the data of the level α is provided from the server 7 to the A bank server 11 to the A bank, but only the data of the level β is transmitted from the server 7 to the B bank. Provide to the bank server 11.

  In this way, the user 19 can set the security level of the personal information by setting the disclosure level for the data held in the IC card 29.

  The purchase history 71 is a purchase history when online shopping or the like is performed using the network 5 or the like, or a product is purchased at an actual store or the like. Specifically, the purchase date, the store where the product was purchased, the product, the price, etc. It consists of data.

The payment history 73 is information on unpaid etc. of the user 19.
The point history 75 is a history of points given when a product is purchased through the network 5 or the like, or when a product is purchased at an actual store or the like.

  The access history 77 is a history when the user 19 accesses various sites on the network using the personal computer 21 or the like. Specifically, it consists of information such as the URL of the accessed site, the access time, and the access time.

  The clipping history 79 is a history when the user 19 performs clipping at various sites on the network using the personal computer 21 or the like, and holds a URL or the like.

  FIG. 3 is a diagram showing the concept of clipping, and shows a screen 201 of the personal computer 21 when the user 19 is accessing the network 5 using the personal computer 21.

  When the user 19 accesses a site whose URL is “www.1234.jp” and clicks a button (not shown) for instructing clipping, the page 203 is clipped.

Similarly, when the user 19 accesses a site whose URL is “www.5678.jp” and clicks a button (not shown) for instructing clipping, the page 205 is clipped.
When the user 19 accesses a site whose URL is “www.9001.com” and clicks a button (not shown) for instructing clipping, the page 207 is clipped.

  FIG. 4 is a diagram showing a specific configuration of the clipping history 79. For example, in the case of FIG. 3, three pages are clipped, and three URLs 303-1, 303-2, and 303-3 are held corresponding to the file name 301. URLs 303-1, 303-2, and 303-3 constitute one file.

  URL 303-1 is a URL corresponding to page 203 displayed on screen 201 shown in FIG. 3.

  The URL 303-2 is a URL corresponding to the page 205 displayed on the screen 201 shown in FIG.

  URL 303-3 is a URL corresponding to page 207 displayed on screen 201 shown in FIG.

  When the user performs clipping on another day, URLs 307-1, 307-2, 307-3,... Are held with different file names 305.

  FIG. 5 is a diagram showing data held in the database 9. The database 9 includes ID 51, password 53, name 55, address 57, age 59, telephone number 61, mail address 63, hobby preference 65, face photo data 67, fingerprint data 69, purchase history 71, payment history 73, point history. 75, an access history 77, a clipping history 79, an advertisement (company X) 81-1, an advertisement (company Y) 81-2, and the like, and data similar to the data stored in the IC card 29 are stored.

  Since the storage capacity of the IC card 29 is small, only a relatively new one of the purchase history 71, payment history 73, point history 75, access history 77, and clipping history 79 may be stored in the IC card 29. The database 9 holds all purchase history 71, payment history 73, point history 75, access history 77, and clipping history 79.

  The advertisements 81-1, 81-2, and 81-3 are advertisements that are displayed on the screen when the user 19 accesses the server 7. These advertisements 81-1, 81-2, and 81-3 are personal advertisements that take into account the user's 19 hobbies and preferences according to the user's 19 access history 77, clipping history 79, and the like. For example, as the advertisement 81-1, information such as the URL of the page displaying the advertisement is held.

  That is, when a different user accesses the server 7, the advertisement displayed on the screen differs depending on the user.

  The database 9 holds various data in addition to the data shown in FIG. For example, as described above, the usage details of Bank A and the usage details of Bank B are also stored in the database 9.

  Next, a procedure when the user 19 receives the aggregation service will be described. The user 19 applies for an aggregation contract to a company that manages a server that performs an aggregation service. For example, the user 19 has an account in A bank and B bank, and the server 7 applies for a service in which the accounts of the A bank and the B bank can be viewed at a time.

  At this time, the management company of the server 7 may perform a credit check of the user 19 and reject the contract depending on the result of the credit check.

  For example, bank A account details may be viewed, but bank B account details may not be viewed. In this way, the contract is rejected for the bank B, but the rejected contents are also held in the IC card 29.

  Also, personal information is disclosed from the management company of the server 7 to the bank A with a disclosure level of level α, and personal information is disclosed from the management company of the server 7 to the bank B with a disclosure level of level β. Such a contract is concluded between the management company and the bank.

  An IC card 29 is issued from the management company of the server 7. Various information as shown in FIG. 2 is written in the IC card 29.

Next, operations of the authentication system 1 and the advertisement system 3 will be described.
6 and 7 are flowcharts showing processing of the personal computer 21 and the server 7.

  The user 19 starts up the personal computer 21, inserts the IC card 29 (step 601), and accesses the server 7 (step 602). The personal computer 21 reads the ID 51 and password 53 held in the IC card 29, encrypts them using another password input by the user 19 as a key, and sends it to the server 7.

  The server 7 decrypts the received ID 51 and password 53 with a key held by the server 7 and authenticates the ID 51 and password 53 (step 604).

  If the authentication is correctly performed, the server 7 sends a personal screen for the user 19 (step 605), and the personal computer 21 displays the personal screen 101 (step 606).

  FIG. 8 shows a personal screen 101 on which the usage details 111 of bank A, usage details 121 of bank B, usage details 131 of C credit company, and usage details 141 of D securities company are displayed. . A personal advertisement for the user 19 is displayed on the advertisement display unit 151 of the screen 101. That is, a button 153 for accessing the X travel agency, a button 155 for accessing the Y travel agency, and the like are displayed.

  The advertisement displayed on the advertisement display unit 151 is generated based on the access history and clipping history of the user 19 accessing various sites via the network 5 or the like. Therefore, different advertisements for each user are displayed on the advertisement display unit 151.

In this way, the user 19 can access the server 7 and view the usage details of the banks A, B, etc. with only one password input. No need to enter password.
At the time of authentication, instead of the ID 51 and password 53, face photo data 67, fingerprint data 69, etc. for specifying the user may be used.

  Next, the user 19 requests browsing from the personal computer 21 (step 607). This browsing request is billed, for example, by clicking a button 153 displayed on the advertisement display unit 151, and linked to the X travel company server 15 so that the page of the X travel company can be viewed. In addition, the user 19 may input a URL in a field (not shown) for inputting a URL or the like on the screen 101 to access a predetermined site and request browsing. In some cases, a bookmark or the like is displayed, a predetermined site is selected from the bookmark, and browsing is requested.

  When the personal computer 21 is accessed by, for example, the X travel agency 15, the server 7 confirms the arrival (step 608), and performs browsing analysis and clipping analysis (step 609).

  In the case of browsing analysis, the URL, access time, access time, X travel company page contents, etc. of the X travel company server 15 when the personal computer 21 is accessed to the X travel company server 15 are stored in the database 9 as an access history 77. The access history 77 is sent to the personal computer 21, and the personal computer 21 writes the information to the IC card 29.

  In the case of the clipping analysis, when the user 19 accesses the X travel agency server 15, opens a predetermined page, and clips the page, the URL of the page is recorded in the database 9 as the clipping history 79. The URL of this page is sent to the personal computer 21, and the personal computer 21 writes it as a clipping history 79 in the IC card 29.

  The processing from step 607 to step 609 is repeated until the user 19 gives an end instruction (step 610).

  Therefore, when the user 19 accesses each site on the network 5 or performs clipping, the access history and clipping history are recorded in the database 9 and the IC card 29.

  Using the access history 77 and the clipping history 79, the server 7 analyzes what hobbies and preferences the user has and creates personalized advertisements.

  Specifically, if it is found that the user 19 frequently accesses travel agencies and browses many pages of hot springs, URLs of Z travel companies that feature hot springs are extracted and advertisements are extracted. The URL of the Z travel company is recorded as 81-3, and when the user 19 accesses the server 7 again, the button of the Z travel company is displayed on the advertisement display unit 151 of the screen 101.

  In addition, the content of the hot spring trip provided by this Z travel agency is printed as an advertisement. The printed advertisement is enclosed when a bank or credit company usage statement is mailed to the user 19 as a direct mail.

Thus, according to this Embodiment, the advertisement customized personally according to each user's hobby, a taste, etc. can be provided to each user.
Then, the advertisements 81-1, 81-2, and 81-3 are sent to the personal computer 21 via the network 5 and written to the IC card 29.

  Further, when the user 19 sets the IC card 29 in the mobile phone 23 or the PDA 25 and the user 19 accesses the server 7, a personalized advertisement is displayed on the screen. Also in this case, personally customized advertisements are generated on the server side based on the access history 77 and the clipping history 79 and displayed on the mobile phone 23 and the PDA 25.

  Also, when the user 19 sets the IC card 29 on the interactive digital television 27 and turns on the interactive digital television 27, personally customized advertisements are displayed on the screens of both the digital televisions 27.

  FIG. 9 is a diagram illustrating a screen 300 of the interactive digital television 27. The screen 300 includes a video display unit 301, an advertisement display unit 303, and the like.

  On the video display unit 301, video sent from the base station 31 is displayed. The advertisement display unit 303 displays a button 313 for accessing the X travel agency, a button 315 for accessing the Y travel agency, and the like.

  That is, buttons indicating the URLs of the advertisements 81-1, 81-2, and 81-3 recorded on the IC card 29 are displayed on the advertisement display unit 303.

  As described above, according to the present embodiment, since the access history and the clipping history including the advertisement browsing history are recorded in the IC card 29, each media terminal even if the IC card is set in a different type of media terminal. Will display personalized advertisements.

The figure which shows schematic structure of the authentication system 1 and the advertisement system 3 which concern on embodiment of this invention. The figure which shows the data hold | maintained at IC card 29 Illustration of clipping Diagram showing clipping history data Diagram showing data held in database 9 Flow chart showing processing of personal computer 21 and server 7 Flow chart showing processing of personal computer 21 and server 7 The figure which shows the screen 101 of the personal computer 21 The figure which shows the screen 300 of the interactive digital television 27

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Authentication system 3 ... Advertising system 5 ... Network 7 ... Server 9 ... Database 11 ... Bank A server 13 ... Bank B server 15 ... X travel agency server 17・ ・ ・ Y travel agency server 18 ・ ・ ・ Z travel agency server 19 ・ ・ ・ User 21 ・ ・ ・ Personal computer 23 ・ ・ ・ Mobile phone 25 ・ ・ ・ PDA
27 ... Interactive digital TV 29 ... IC card 31 ... Base station

Claims (10)

A server for accessing the terminal device of a user and a plurality of registered bank, securities company, or credit company financial institution server and performing an aggregation service,
A database that stores at least user authentication information;
Decryption means for decrypting the encrypted authentication information received from the terminal device based on a key held in advance;
An authenticating means for authenticating the decrypted authentication information based on the authentication information of the database;
After user authentication, means for transmitting to the terminal device a user page consisting of usage details from a plurality of financial institution servers and bill information;
The server characterized by comprising. The server according to claim 1, wherein the authentication information is information specifying an ID, a password, and an individual. 2. The server according to claim 1, wherein the information for identifying the individual is a personal face photo image and fingerprint information. A server for performing an aggregation service for accessing browsing financial institution servers of a plurality of registered banks, securities companies, and credit companies and providing browsing information; and a terminal device connected to the server.
Reading means for reading the authentication information in the IC card;
Encryption means for encrypting the authentication information using another input password as a key;
Means for accessing the server and transmitting encrypted authentication information;
Display means for displaying a page for a user comprising usage details from a plurality of the financial institution servers received from the server and billing information;
The terminal device characterized by comprising. The terminal device according to claim 4, wherein the authentication information is information specifying an ID, a password, and an individual. The terminal device according to claim 4, wherein the information for identifying the individual is a personal face photo image or fingerprint information. A program causing a computer to function as the server according to claim 1. The program which makes a computer function as a terminal device of Claim 4. A recording medium storing a program that causes a computer to function as the server according to claim 1. A recording medium on which a program for causing a computer to function as the terminal device according to claim 4 is recorded.

Images