JP2009211431A - Information processor, program and information processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processor, a program and an information processing method. <P>SOLUTION: The information processor includes: a processing request acquisition part for acquiring processing request information which includes processing identification information indicating at least prescribed processing and requests the execution of the prescribed processing; a position information acquisition part for acquiring the position information of the information processor; a range information extraction part for extracting range information corresponding to the processing identification information included in the processing request information from processing data including a plurality of the processing identification information at least each of which indicates different prescribed processing and the range information corresponding to a plurality of the processing identification information; a determination part for determining whether or not a position indicated by the position information acquired by the position information acquisition part when the processing request information is acquired is included in a range indicated by the range information; and a processing execution part for executing processing relating to the processing request information when it is determined by the determination part that the position indicated by the position information is included in the range indicated by the range information. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an information processing device, a program, and an information processing method.

  In recent years, with the advance of computer network technology, it has become possible for customers to place orders for goods and services via a network using a PC (Personal Computer) or a mobile phone. In such a commercial transaction on the network, it is not necessary for the customer to go directly to the store, and the customer is not restricted by business hours, so the convenience of the customer is improved.

  Specifically, in a commercial transaction on a network, first, a product / service provider registers a customer ID and a password set by the customer in association with each other. The product / service provider requests the customer to enter a customer ID and password, authenticates the customer based on the entered customer ID and password, and provides the customer with a service when the customer has a legitimate authority. To do.

  In such business transactions on the network, if a malicious third party frauds and uses a customer ID and password due to phishing, etc., the customer will suffer unexpected damage. Is extremely important. For this reason, various techniques relating to customer authentication in commercial transactions on a network have been proposed.

  For example, Patent Document 1 discloses an authentication device that requests location information acquired from a GPS or the like by a mobile phone in addition to a customer ID and a password (hereinafter, login information) when performing a commercial transaction with the mobile phone through a network. Are listed. Specifically, the authentication device recognizes the actual location of the mobile phone from the location information transmitted from the mobile phone, presents the customer with multiple locations including the actual location, and the customer selects the correct location. Provide service only in cases. According to such an authentication device, unauthorized access that is not from a mobile phone from a third party can be prevented.

JP 2007-60172 A

  However, in the conventional authentication device, when not only the customer login information but also the mobile phone itself is fraudulent, it is judged that the third party using the mobile phone has a legitimate authority. There was a problem that access could not be prevented.

  Therefore, the present invention has been made in view of the above problems, and an object of the present invention is a new and improved information processing apparatus and program capable of performing user authentication with higher security. And providing an information processing method.

  An information processing apparatus including at least process identification information indicating a predetermined process, a process request acquisition unit for acquiring process request information for requesting execution of the predetermined process, and position information of the information processing apparatus Acquired by the processing request acquisition unit from position data acquisition unit, processing data including at least a plurality of processing identification information indicating different predetermined processes and range information associated with the plurality of processing identification information A range information extraction unit that extracts range information associated with the process identification information included in the process request information, and a position indicated by the position information acquired by the position information acquisition unit when the process request information is acquired Is determined to be included in the range indicated by the range information extracted by the range information extraction unit, and the position indicated by the position information is the range information If it is determined by the determining unit to be included in the range indicated, the information processing apparatus is provided and a processing execution unit for executing the processing according to the processing request information.

  In this configuration, when the determination unit determines that the information processing device is included in the range indicated by the range information, the process execution unit performs a predetermined process indicated by the process identification information associated with the range information. That is, in order for the process execution unit to perform a predetermined process, the information processing apparatus needs to be positioned within a range indicated by range information set in advance. For this reason, even if a third party illegally obtains the information processing apparatus, it is impossible to cause the process execution unit to perform a predetermined process unless the range information set in advance is leaked. Thus, according to the information processing apparatus, execution of a predetermined process by the process execution unit is restricted according to the position of the information processing apparatus, so that higher security customer authentication can be realized.

  The information processing apparatus includes: an identification information extraction unit that extracts processing identification information associated with range information including a position indicated by the position information acquired by the position information acquisition unit from the processing data; A display control unit that controls display of the processing identification information extracted by the identification information extraction unit.

  The information processing apparatus includes: an identification information extraction unit that extracts processing identification information associated with range information including a position indicated by the position information acquired by the position information acquisition unit from the processing data; A classification unit that classifies the processing identification information extracted by the identification information extraction unit into a predetermined category; and a display control unit that controls display of category information related to the category classified by the classification unit. .

  Further, the information processing apparatus determines, by the determination unit, that a position indicated by the position information acquired by the position information acquisition unit is not included in a range indicated by the range information extracted by the range information extraction unit. In such a case, a notification unit for notifying execution rejection information including the position information to a notification destination set in advance may be provided.

  Time information indicating a time range is further recorded in association with the process identification information, and the determination unit further determines whether or not the current time is included in the time range indicated by the time information, and executes the process When the position indicated by the position information is included in the range indicated by the range information and the current time is included in the time range indicated by the time information, the unit executes the process related to the processing request information May be. In such a configuration, when the determination unit determines that the information processing device is included in the range indicated by the range information and the current time is included in the time range indicated by the time information, the process execution unit is associated with the range information. The predetermined process indicated by the process identification information is performed. Therefore, it is possible to further strengthen the security level related to the execution of the predetermined process.

  In order to solve the above problem, according to another aspect of the present invention, there is provided an information processing apparatus connected to a customer terminal via a network, including at least processing identification information indicating a predetermined process, A predetermined process that is at least different from a processing request acquisition unit that acquires processing request information for requesting execution of predetermined processing from the customer terminal and a position information acquisition unit that acquires positional information of the customer terminal from the customer terminal. The process identification information included in the process request information acquired by the process request acquisition unit from the process data including a plurality of process identification information indicating the arbitrary range information associated with the plurality of process identification information A range information extraction unit that extracts range information associated with the position information indicated by the position information acquired by the position information acquisition unit at the time of acquisition of the processing request information, A determination unit that determines whether the range information extracted by the range information extraction unit is included in the range indicated by the range information; and the determination unit determines that the position indicated by the position information is included in the range indicated by the range information. In such a case, an information processing apparatus is provided that includes a process execution unit that executes a process related to the process request information.

  In such a configuration, when the determination unit determines that the customer terminal is included in the range indicated by the range information, the process execution unit performs a predetermined process indicated by the process identification information associated with the range information. That is, in order for the process execution unit to perform a predetermined process, the customer terminal needs to be positioned within the range indicated by the range information set in advance. For this reason, even if a third party illegally obtains a customer terminal, the processing execution unit cannot perform predetermined processing unless the preset range information is leaked. As described above, according to the information processing apparatus, since the execution of the predetermined process by the process execution unit is restricted according to the position of the customer terminal, customer authentication with higher security can be realized.

  The information processing apparatus includes: an identification information extraction unit that extracts processing identification information associated with range information including a position indicated by the position information acquired by the position information acquisition unit from the processing data; You may provide the transmission part which transmits the said process identification information extracted by the said identification information extraction part to the said customer terminal.

  The information processing apparatus includes: an identification information extraction unit that extracts processing identification information associated with range information including a position indicated by the position information acquired by the position information acquisition unit from the processing data; You may provide the classification | category part which classify | categorizes the said process identification information extracted by the identification information extraction part into a predetermined category, and the transmission part which transmits the category information regarding the category classified by the said classification | category part to the said customer terminal.

  Further, the information processing apparatus determines, by the determination unit, that a position indicated by the position information acquired by the position information acquisition unit is not included in a range indicated by the range information extracted by the range information extraction unit. In such a case, a notification unit for notifying execution rejection information including the position information to a notification destination set in advance may be provided. In such a configuration, when the customer terminal is obtained by a third party, for example, if the original customer contact information is recorded as a notification destination, the original customer is notified from the notification unit. In this case, the original customer can recognize unauthorized access by a third party at an early stage.

  The process identification information is further associated with time information indicating a time range, and the determination unit further determines whether or not the current time is included in the time range indicated by the time information, and executes the process When the position indicated by the position information is included in the range indicated by the range information and the current time is included in the time range indicated by the time information, the unit executes the process related to the processing request information May be. In such a configuration, when the determination unit determines that the customer terminal is included in the range indicated by the range information and the current time is included in the time range indicated by the time information, the process execution unit is associated with the range information. The predetermined process indicated by the process identification information is performed. Therefore, it is possible to further strengthen the security level related to the execution of the predetermined process.

  In order to solve the above problem, according to another aspect of the present invention, a computer provided in the information processing apparatus includes at least process identification information indicating a predetermined process, and requests execution of the predetermined process. A processing request acquisition unit configured to acquire processing request information; a position information acquisition unit configured to acquire position information of the information processing apparatus; a plurality of pieces of processing identification information indicating at least different predetermined processes; and the plurality of pieces of processing identification information. A position information acquisition unit that extracts range information associated with the processing identification information included in the processing request information acquired by the processing request acquisition unit from processing data including range information associated with The position indicated by the position information acquired by the position information acquisition unit when the processing request information is acquired is indicated by the range information extracted by the range information extraction unit. A determination unit that determines whether or not the position is included in an enclosure; and when the determination unit determines that the position indicated by the position information is included in the range indicated by the range information, the process according to the processing request information is executed A program for functioning as a processing execution unit is provided.

  Such a program can cause the hardware resources of a computer including, for example, a CPU, a ROM, or a RAM to execute the functions of the position information acquisition unit, the position information acquisition unit, the determination unit, and the process execution unit as described above. That is, a computer using the program can function as the above-described position information acquisition unit, position information acquisition unit, determination unit, and process execution unit.

  In order to solve the above problems, according to another aspect of the present invention, a computer provided in an information processing apparatus connected to a customer terminal via a network includes at least process identification information indicating a predetermined process. A processing request acquisition unit that acquires processing request information for requesting execution of the predetermined processing from the customer terminal, and a position information acquisition unit that acquires position information of the customer terminal from the customer terminal. The process included in the process request information acquired by the process request acquisition unit from the process data including a plurality of process identification information indicating the process and arbitrary range information associated with the plurality of process identification information A range information extraction unit that extracts range information associated with identification information, and a position acquired by the position information acquisition unit when the processing request information is acquired A determination unit that determines whether the position indicated by the report is included in the range indicated by the range information extracted by the range information extraction unit; and the position indicated by the position information is included in the range indicated by the range information. When the determination unit determines, a program for causing the program to function as a process execution unit that executes a process related to the process request information is provided.

  Such a program can cause the hardware resources of a computer including, for example, a CPU, a ROM, or a RAM to execute the functions of the position information acquisition unit, the position information acquisition unit, the determination unit, and the process execution unit as described above. That is, a computer using the program can function as the above-described position information acquisition unit, position information acquisition unit, determination unit, and process execution unit.

  In order to solve the above problem, according to another aspect of the present invention, there is provided an information processing method executed in an information processing apparatus, including at least processing identification information indicating a predetermined process, A step of acquiring process request information for requesting execution of the information, a step of acquiring position information of the information processing apparatus, a plurality of process identification information indicating at least different predetermined processes, and the plurality of process identification information Extracting the range information associated with the process identification information included in the process request information from the process data including the associated range information, and the position indicated by the position information is the range information A step of determining whether or not the processing request information is included in the range indicated, and if it is determined that the position indicated by the location information is included in the range indicated by the range information. An information processing method comprising the steps of processing the execution of the is provided.

  In order to solve the above problem, according to another aspect of the present invention, there is provided an information processing apparatus connected to a customer terminal via a network, including at least processing identification information indicating a predetermined process, A plurality of process identifications each indicating a predetermined process at least different from a step of acquiring process request information for requesting execution of a predetermined process from the customer terminal, a step of acquiring position information of the customer terminal from the customer terminal; Extracting range information associated with the process identification information included in the process request information from information and process data including arbitrary range information associated with the plurality of process identification information; Determining whether the position indicated by the position information acquired when acquiring the processing request information is included in the range indicated by the extracted range information; When the position indicated by the information is determined to be within the scope indicated by the range information, the information processing method comprising the steps of: executing processing according to the processing request information is provided.

  As described above, according to the information processing device, the program, and the information processing method according to the present invention, it is possible to realize a commercial transaction with higher security.

  Exemplary embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In addition, in this specification and drawing, about the component which has the substantially same function structure, duplication description is abbreviate | omitted by attaching | subjecting the same code | symbol.

Further, the “best mode for carrying out the invention” will be described according to the following item order.
[1] Overview of financial service providing system [2] Customer terminal configuration [3] Bank server configuration [4] Operation in financial service providing system [5] Summary

[1] Overview of Financial Service Providing System First, a financial service providing system 1 including a bank server 20 according to the present embodiment having a function as an information processing apparatus will be described with reference to FIG.

  FIG. 1 is an explanatory diagram showing the configuration of the financial service providing system 1. As shown in FIG. 1, a financial service providing system 1 as an example of an information processing system includes a customer terminal 10A, a customer terminal 10B, and a bank server 20, and includes a customer terminal 10A, a customer terminal 10B, and a bank The server 20 is connected via the communication network 12.

  The bank server 20 is managed by a bank operator, and a customer of the bank operator can execute various transactions provided by the bank server 20 using the customer terminal 10A, the customer terminal 10B, or the like. Examples of the various transactions include transactions that can be executed in ATM (Automatic Teller Machine) such as deposit balance inquiry, deposit / withdrawal inquiry, account transfer, and transfer. In addition, various transactions include financial product transactions (buying / selling, application, cancellation, etc.) and providing information via website or e-mail (financial products, exchange rates, notification of completion of sales, winning gifts, seminars, etc.) Provided).

  In such transactions via the communication network 12, if a malicious third party frauds and uses a customer ID and password due to phishing, etc., the customer will suffer unexpected damage. Customer authentication is extremely important. Therefore, the bank server 20 according to the present embodiment, which can perform customer authentication with higher security, has been created. The detailed configuration of the bank server 20 according to the present embodiment will be described later in “[3] Configuration of Bank Server”.

  In FIG. 1, a PC (Personal Computer) is shown as the customer terminal 10A and a mobile phone is shown as the customer terminal 10B. However, the customer terminal 10A and the customer terminal 10B are not limited to this example. For example, the customer terminal 10A and the customer terminal 10B are a home video processing device (DVD recorder, video deck, etc.), PHS (Personal Handyphone System), portable music player, portable video processing device, PDA (Personal Digital Assistants). An information processing apparatus such as a home game machine, a portable game machine, or a home appliance may be used.

  Moreover, in FIG. 1, in order to distinguish each of the customer terminals as an example of the communication apparatus used by the customer, a capital letter is attached after the reference numerals like the customer terminal 10A and the customer terminal 10B. However, when there is no need to particularly distinguish each of the terminals used by the customer, the terminal is simply referred to as the customer terminal 10. In FIG. 1, only the customer terminal 10A and the customer terminal 10B are shown as the customer terminals 10, but in actuality, thousands, hundreds of thousands, or tens of millions of unspecified customer terminals 10 are banks. It is assumed that the server 20 is connected via the communication network 12.

  The communication network 12 shown in FIG. 1 is a wired or wireless transmission path for information transmitted from a device connected to the communication network 12. For example, the communication network 12 may be a public line network such as the Internet, a telephone line network, a satellite communication network, various local area networks (LANs) including the Ethernet (registered trademark), a wide area network (WAN), an IP-VPN ( A leased line network such as Internet Protocol-Virtual Private Network may be included.

  Further, FIG. 1 only shows a bank server 20 managed by a bank as an example of a service provider, and the service provider provides a travel agent that provides accommodation and travel reservation services, and an educational service. It may be an educator, a content distributor providing a content distribution service such as music or video, a security provider providing a security service in preparation for an abnormal situation, an article seller providing an article sales service, and the like.

[2] Configuration of Customer Terminal The financial service providing system 1 including the bank server 20 according to the present embodiment has been schematically described above with reference to FIG. Next, the configuration of the customer terminal 10 included in the financial service providing system 1 will be described with reference to FIGS. 2 and 3.

  FIG. 2 is a functional block diagram showing the configuration of the customer terminal 10 according to the present embodiment. As shown in FIG. 2, the customer terminal 10 includes a communication unit 116, an imaging unit 120, an image file generation unit 124, a position information acquisition unit 128, an operation unit 132, a request unit 136, and a display screen. A generation unit 140 and a display unit 144 are provided.

  The communication unit 116 is a wired or wireless interface with the bank server 20 and functions as a transmission unit and a reception unit that transmit and receive various data to and from the bank server 20. For example, the communication unit 116 transmits a login request, a balance inquiry request, a transfer request, a customer registration request, and the like to the bank server 20.

  Note that the communication unit 116 may have a wireless communication function defined in IEEE (Institute of Electrical and Electronic Engineers) 802.11a, b, g, etc., or MIMO (Multiple Input) defined in IEEE 802.11n. (Multiple Output) communication function may be provided. Further, the communication unit 116 may have a communication function corresponding to WiMAX (Worldwide Interoperability for Microwave Access) planned for IEEE 802.16.

  The imaging unit 120 converts the image of the subject collected by the lens into image information (image data) that is an electrical signal. For example, the imaging unit 120 may be a CMOS image sensor, an LBCAST image sensor, or a CCD (Charge Coupled Device).

  The image file generation unit 124 generates an image file including the image information acquired by the imaging unit 120 and various attribute information. Hereinafter, the image file generated by the image file generation unit 124 will be described in detail with reference to FIG.

  FIG. 3 is an explanatory diagram illustrating an example of an image file generated by the image file generation unit 124. As illustrated in FIG. 3, the image file includes image information, an imaging date and time, an imaging model, and position information.

  FIG. 3 shows an example in which a customer's driving license is imaged as image information by the imaging unit 120. FIG. 3 shows an example in which the imaging date and time of the image information is “2008/02/16 16:34” and the imaging model is “AB65FX”. Furthermore, as shown in FIG. 3, the image file according to the present embodiment includes position information indicating the position where the image information is captured.

  The position information is acquired by the position information acquisition unit 128. For example, the position information acquisition unit 128 may have a GPS (Global Positioning System) function that measures the current position by decoding a navigation message transmitted from an artificial satellite. Further, the position information acquisition unit 128 may estimate the current position based on the intensity of the WiFi radio wave transmitted from the surrounding WiFi (Wireless Fidelity) base station and the base station position. Further, the position information acquisition unit 128 transmits the strength of the WiFi radio wave and the base station identification information of the transmission source to the position estimation server that stores the base station position, and acquires the current position estimated by the position estimation server. Also good.

  Thus, it should be noted that the image file according to the present embodiment includes position information indicating the imaging position of the image information. Note that FIG. 3 shows only a part of the attribute information included in the image file, and the image file may include arbitrary attribute information such as an image information size, an image information format, and an image information ID. Good. Further, the image file generated by the image file generation unit 124 may be an image file compliant with, for example, EXIF (Exchangeable Image File Format) 2.0.

  Here, with reference to FIG. 2, it returns to description of the structure of the customer terminal 10. The operation unit 132 is an interface with a user of the customer terminal 10, that is, a customer. The operation unit 132 generates an operation signal according to a user operation on the operation unit including, for example, a touch panel, a button, a switch, a lever, a dial, a light receiving unit for an infrared signal generated by a remote controller, and the like. The input control circuit is configured to output. A customer who is a user of the customer terminal 10 can input various data and instruct a processing operation to the customer terminal 10 by operating the operation unit 132.

  The request unit 136 requests the bank server 20 to execute various transactions or various processes based on a customer operation on the operation unit 132. For example, when requesting customer registration from the bank server 20, the request unit 136 transmits the image file generated by the image file generation unit 124 from the communication unit 116 to the bank server 20.

  The display screen generation unit 140 generates various display screens based on information received from the bank server 20 by the communication unit 116. As various display screens, for example, the login screen 40 shown in FIG. 8, the menu screen 50 shown in FIG. 9, the setting change screens 60 and 70 shown in FIG. 10 and FIG. An arbitrary screen such as a screen or a yen deposit transaction screen can be given.

  The display unit 144 displays various display screens generated by the display screen generation unit 140. The display unit 144 may be, for example, a CRT (Cathode Ray Tube) display device, a liquid crystal display (LCD) device, or an OLED (Organic Light Emitting Display) device.

[3] Configuration of Bank Server The configuration of the customer terminal 10 according to the present embodiment has been described above with reference to FIGS. 2 and 3. Then, with reference to FIGS. 4-14, the structure of the bank server 20 concerning this embodiment is demonstrated.

  FIG. 4 is a block diagram showing a hardware configuration of the bank server 20. The bank server 20 includes a CPU (Central Processing Unit) 201, a ROM (Read Only Memory) 202, a RAM (Random Access Memory) 203, a host bus 204, a bridge 205, an external bus 206, an interface 207, An input device 208, an output device 210, a storage device (HDD) 211, a drive 212, and a communication device 215 are provided.

  The CPU 201 functions as an arithmetic processing device and a control device, and controls the overall operation in the bank server 20 according to various programs. Further, the CPU 201 may be a microprocessor. The ROM 202 stores programs used by the CPU 201, calculation parameters, and the like. The RAM 203 primarily stores programs used in the execution of the CPU 201, parameters that change as appropriate during the execution, and the like. These are connected to each other by a host bus 204 including a CPU bus.

  The host bus 204 is connected to an external bus 206 such as a PCI (Peripheral Component Interconnect / Interface) bus via a bridge 205. Note that the host bus 204, the bridge 205, and the external bus 206 are not necessarily configured separately, and these functions may be mounted on one bus.

  The input device 208 is input based on input by an administrator of the bank server 20 such as a mouse, a keyboard, a touch panel, a button, a microphone, a switch, and a lever, and input by the administrator of the bank server 20. An input control circuit that generates a signal and outputs the signal to the CPU 201 is configured. The administrator of the bank server 20 can input various data and instruct a processing operation to the bank server 20 by operating the input device 208.

  The output device 210 includes, for example, a display device such as a CRT (Cathode Ray Tube) display device, a liquid crystal display (LCD) device, an OLED (Organic Light Emitting Display) device and a lamp, and an audio output device such as a speaker and headphones. The The output device 210 outputs reproduced content, for example. Specifically, the display device displays various information such as reproduced video data as text or images. On the other hand, the audio output device converts reproduced audio data or the like into audio and outputs it.

  The storage device 211 is a data storage device configured as an example of a storage unit of the bank server 20 according to the present embodiment. The storage device 211 may include a storage medium, a recording device that records data on the storage medium, a reading device that reads data from the storage medium, a deletion device that deletes data recorded on the storage medium, and the like. The storage device 211 is composed of, for example, an HDD (Hard Disk Drive). The storage device 211 drives a hard disk and stores programs executed by the CPU 201 and various data. In addition, for example, a customer table DB described later is recorded in the storage device 211.

  The drive 212 is a storage medium reader / writer, and is built in or externally attached to the bank server 20. The drive 212 reads information recorded on a removable storage medium 24 such as a mounted magnetic disk, optical disk, magneto-optical disk, or semiconductor memory, and outputs it to the RAM 203.

  The communication device 215 is a communication interface configured with, for example, a communication device for connecting to the communication network 12. The communication device 215 may be a wireless LAN (Local Area Network) compatible communication device, a wireless USB compatible communication device, or a wire communication device that performs wired communication. The communication device 215 transmits and receives various data such as a deposit balance, various guidance information, a login screen, and an answer to a question to and from the customer terminal 10 via the communication network 12.

  Although the hardware configuration of the bank server 20 has been described above with reference to FIG. 4, the hardware of the customer terminal 10 can be configured substantially the same as the bank server 20, and thus the description thereof is omitted. To do.

  FIG. 5 is a functional block diagram showing the configuration of the bank server 20 according to the present embodiment. As shown in FIG. 5, the bank server 20 includes a communication unit 216, a customer registration unit 220, a storage unit 224, an information setting unit 228, a login information determination unit 232, a location information determination unit 234, and a time. A customer authentication unit 230 including a determination unit 236, an information processing unit 240, and a notification unit 244 are provided.

  The communication unit 216 is an interface with the customer terminal 10 and has functions as a reception unit and a transmission unit. The communication unit 216 also has a function as a position information acquisition unit that acquires position information of the customer terminal 10 from the customer terminal 10 or a processing request acquisition unit.

  In response to a request from the customer terminal 10, the customer registration unit 220 has a function as a recording unit that records a customer table regarding the user of the customer terminal 10 in the storage unit 224 and performs customer registration. Hereinafter, the configuration of the customer table and the customer registration process by the customer registration unit 220 will be described.

  FIG. 6 is an explanatory diagram showing a configuration example of the customer table DB recorded in the storage unit 224. As shown in FIG. 6, the customer table DB includes a plurality of customer tables, and each customer table further includes a plurality of elements.

  Specifically, the customer table includes elements such as a customer ID, customer information, deposit information, map information, transaction type information, image information, and action history information. The customer ID is identification information for identifying a customer registered in the bank server 20, and the customer ID corresponds to, for example, an account number. The customer information is information about the customer, for example, the customer's name, age, date of birth, address, telephone number, home PC email address, occupation, family structure, annual income, whether or not the customer is a good customer, and a password. May also be included. The password is secret information that the customer is requested to input on the login screen, and may be, for example, a numeric string, a character string, or a combination of numerals and characters.

  The deposit information is information related to the customer's deposit, and may include, for example, information related to the type and balance of the customer's ordinary deposit, fixed deposit, foreign currency deposit, securities, investment trust, insurance product, and the like. The action history information included in the customer table shows the contents of transactions and actions previously performed by the customer. For example, the amount and date and time when the customer made yen deposit, the amount and date and time of transfer from yen deposit to foreign currency deposit, Information such as the average number of transactions and the date and time of login may be included.

  The image information is an image used for verifying the identity of the customer, and corresponds to, for example, a photograph of the customer's face. The map information includes information indicating a partial range on the earth and information indicating a predetermined time range. Further, the transaction type information is processing data including information on execution restrictions for each transaction type. Specific examples of the transaction type information and map information, and a setting method will be described later with reference to FIGS.

  The storage unit 224 in which such a customer table is recorded includes a nonvolatile memory such as an EEPROM (Electrically Erasable Programmable Read-Only Memory) and an EPROM (Erasable Programmable Read Only Memory), a hard disk, and a disk-type magnetic body. Magnetic discs, CD-R (Compact Disc Recordable) / RW (ReWriteable), DVD-R (Digital Versatile Disc Recordable) / RW / + R / + RW / RAM (Randam Access MemoryD (Randam Access MemoryD) Trademark))-Optical discs such as R / BD-RE , It may be a storage medium such as a MO (Magneto Optical) disk.

  Further, in FIG. 6, an example in which there is one customer table corresponding to one customer ID and all the elements are included in the customer table has been described, but the customer table DB is configured as shown in FIG. It is also possible.

  FIG. 7 is an explanatory diagram showing another example of the customer table DB. In the example shown in FIG. 7, each element such as customer information and deposit information is provided as an individual table in association with the customer ID. For example, when the customer information ID is “01”, the customer information of the customer can be specified by the customer ID and the ID “01”.

  Thus, by providing a different table for each element, although the access speed is inferior to the example shown in FIG. 6, it is possible to improve data expandability and save memory capacity.

  When the communication unit 216 receives an image file as a customer registration request, the customer registration unit 220 separates image information and position information included in the image file. And the customer registration part 220 records the isolate | separated image information as image information of a corresponding customer table. Conventionally, in order for the bank server 20 to obtain image information, the user has been requested to copy a driver's license, for example. On the other hand, by making it possible to transmit image information as data as in the present embodiment, it is possible to save copying labor and paper costs. In addition, there is an advantage that image information can be managed by data in the bank server 20. The customer registration unit 220 may record the image file received by the communication unit 216 as image information in the customer table as it is.

  Moreover, the customer registration part 220 records the range information which shows the one part range on the earth as map information of a customer table based on the isolate | separated positional information. For example, the customer registration unit 220 may record, as map information, range information indicating a circle or a rectangle with a radius of 1 km centered on the separated position information. When the map information is recorded by the customer registration unit 220, the customer can log in only within the range indicated by the range information recorded as the map information. As described above, according to the present embodiment, it is possible to easily perform initial login restriction setting from attribute information such as position information and time information at the same time as acquiring image information from an image file.

  Further, the customer registration unit 220 assigns a customer ID to the customer at the time of customer registration, and also sets a password designated for the customer, for example. These set customer ID, password, map information, and the like are notified from the bank server 20 to the customer terminal 10.

  When the customer terminal 10 requests login to the bank server 20, the customer authentication unit 230 causes the display screen generation unit 140 of the customer terminal 10 to generate the login screen 40 shown in FIG. Note that the display screen generation unit 140 may cause the display screen generation unit 140 to generate a screen by transmitting information necessary for generating the screen or instructing the display screen generation unit 140 to generate a screen. .

  FIG. 8 is an explanatory diagram showing an example of the login screen 40. As shown in FIG. 8, the login screen 40 includes an account number input frame 42, a password input frame 44, a login button 46, and a cancel button 48. The account number input frame 42 is an input frame for the customer to input an account number assigned to the customer. The password input frame 44 is an input frame for inputting a password set in advance by the customer. Here, it is assumed that the account number corresponds to the customer ID shown in FIG. 6, and the password is included in the customer information shown in FIG.

  A login button 46 included in the login screen 40 is a button for transmitting the contents input in the account number input frame 42 and the password input frame 44 to the bank server 20. The cancel button is a button for canceling login to the bank server 20.

  When an account number and password are input by the customer via the login screen 40, the login information determination unit 232 performs customer authentication based on the input account number and password. Specifically, a customer table including the input account number, that is, the customer ID, is extracted from the customer table DB stored in the storage unit 224, and the password included in the customer table matches the input password. Determine whether or not.

  Note that the password input is only described as a means of customer authentication, and customer authentication requires the customer to input a fingerprint, and whether the input fingerprint matches or is similar to the fingerprint included in the customer table DB. It may be a fingerprint authentication method that performs authentication based on whether or not. Alternatively, the customer authentication is a medium authentication method that requests the customer to operate the proximity of the IC card, and performs authentication based on whether or not the approached IC card matches the IC card information included in the customer table DB. Also good. In addition, the customer authentication may be a voice authentication method using a customer's voice, a retina authentication method based on a customer's retina pattern, a face authentication method based on a customer's face shape, or the like.

  Further, the position information determination unit 234 requests the customer terminal 10 to transmit position information. Then, the position information determination unit 234 extracts range information included in the map information associated with the transaction type “login” in the transaction type information. Further, the position information determination unit 234 determines whether or not the position indicated by the position information of the customer terminal 10 is included in the extracted range information. That is, the position information determination unit 234 functions as a range information extraction unit and a determination unit.

  When the login information determination unit 232 verifies the validity of the customer ID and password, and the position information determination unit 234 determines that the position of the customer terminal 10 is included in the range indicated by the range information, the information processing unit (processing The execution unit 240 allows the customer terminal 10 to log in. That is, the information processing unit 240 causes the display screen generation unit 140 of the customer terminal 10 to generate the menu screen 50 shown in FIG.

  FIG. 9 is an explanatory diagram showing an example of the menu screen 50. As shown in FIG. 9, the menu screen 50 includes transaction items such as a balance inquiry item 52, a detail inquiry item 53, a yen deposit transaction item 54, a transfer item 55, and a setting change item 56, and a logout button 58.

  The balance inquiry item 52 is an item selected when a customer desires a balance inquiry. When the balance inquiry item 52 is selected, the information processing unit 240 displays a balance inquiry screen indicating the customer's deposit balance in accordance with the determination results by the position information determination unit 234 and the time determination unit 236. 140 is generated.

  The detail inquiry item 53 is an item selected when a customer desires a detail inquiry. When the detail inquiry item 53 is selected, the information processing unit 240 displays a detail inquiry screen showing the customer's detail inquiry according to the determination results by the position information determination unit 234 and the time determination unit 236, as a display screen generation unit of the customer terminal 10. 140 is generated.

  The yen deposit transaction item 54 is an item selected when a customer desires a yen deposit transaction. When the yen deposit transaction item 54 is selected, the information processing unit 240 displays a yen deposit transaction screen for performing a yen deposit transaction on the customer terminal 10 according to the determination results by the position information determination unit 234 and the time determination unit 236. The display screen generation unit 140 generates the screen.

  The setting change item 56 is an item selected when a customer desires to set or change map information or transaction type information. When the setting change item 56 is selected, the information processing unit 240 displays a map information or transaction type information setting screen on the display screen generating unit of the customer terminal 10 according to the determination results by the position information determining unit 234 and the time determining unit 236. 140 is generated. A specific example of the map information setting screen will be described later with reference to FIGS. 10 and 11.

  The logout button 58 is selected when the customer desires to log out from the bank server 20. When the logout button 58 is selected, the information processing unit 240 may block the connection with the customer terminal 10.

  FIG. 10 is an explanatory diagram showing an example of the map information setting screen 60. As shown in FIG. 10, the map information setting screen 60 includes a cursor 61, a range designation display 62, a date and time designation display 64, and a scale change display 66.

  For example, the customer moves the cursor 61 on the map information setting screen 60 via the operation unit 132 and selects a position near Tokyo. Next, the customer designates the width of the range centered on the selected position on the range designation display 62 via the operation unit 132. For example, the customer can designate a range having a radius of 10 km centered on the selected position by selecting 10 km. Note that the shape of the range is not limited to a circle, and may be a rectangle, for example. In this case, by selecting 30 km, the customer can designate a square range with one side being 30 km centered on the selected position.

  The range designated in this way is indicated by a circular area marked with P1 in FIG. Further, in FIG. 10, P2 is given to the range around Himeji designated in the same manner, and P3 is given to the range around Toyama. Here, as the wide range is designated, the radius of the circular area displayed at the designated point may be increased.

  Subsequently, the customer designates a time range on the date / time designation display 64 via the operation unit 132. For example, the customer can designate a time range by inputting a start time (for example, 8:30) and an end time (for example, 18:00) on the date / time designation display 64. Thus, the range information indicating the range designated on the map information setting screen 60 and the time information are recorded in the customer table of the storage unit 224 by the information setting unit 228.

  In addition, when enlargement is selected in the scale change display 66 of the map information setting screen 60, the information processing unit 240 displays the map information setting screen (enlargement) 70 shown in FIG. To generate.

  FIG. 11 is an explanatory diagram showing an example of a map information setting screen (enlargement) 70. As shown in FIG. 11, the map information setting screen (enlarged) 70 includes a cursor 71, a range designation display 72, a date and time designation display 74, and a scale change display 76. On the map information setting screen (enlarged) 70, as in the map information setting screen 60, a point is designated by the cursor 71, the range is designated in the range designation display 72, and the time is designated in the date / time designation display 74. A range can be specified. In the scale change display 76, it is possible to instruct the enlargement and reduction of the map.

  As described above, for example, when the customer designates the vicinity of Tokyo and then selects enlargement in the scale change display 66, an enlarged view of the vicinity of Tokyo is generated. Accordingly, it is possible to specify a range according to the customer's needs. In the map information setting screen (enlarged) 70 shown in FIG. 11, the area that can be selected in the range designation display 72 is narrower than the range designation display 62 shown in FIG. For this reason, the customer can designate a finer range such as P4, P5 and P6 on the map information setting screen (enlargement) 70.

  FIG. 12 is an explanatory diagram showing an example of map information specified via the map information setting screen 60 or 70 shown in FIG. 10 or FIG. As shown in FIG. 12, each of the map information 1 to 3 includes a designated position and a designated range corresponding to the range information, and a designated date and time (corresponding to time information). Specifically, the map information A is associated with range information indicating a range with a radius of 5 km centered on latitude and longitude A, and a designated date and time of 0:00 to 24:00 every day. In particular, when time information is not designated, the information setting unit 228 may set a designated date and time of 0:00 to 24:00 every day as described above. Moreover, although the example which can set up to three map information is shown in this embodiment, the number of map information which can be set may be arbitrary numbers.

  Further, as shown in the transaction type information shown in FIG. 13, the customer can enter each transaction type (processing identification information) such as a balance inquiry, a detailed inquiry, a yen deposit transaction (for example, a Yen periodic application), a transfer, and a setting change. By associating the map information, it is possible to specify a range and date / time when each transaction can be executed.

  FIG. 13 is an explanatory diagram showing an example of transaction type information. In the example illustrated in FIG. 13, the position authentication flag “ON” and the map information “1 to 3” are set in the transaction type “login”. Accordingly, the validity of the login information is verified by the login information determination unit 232, and the position information determination unit 234 and the time determination unit 236 are satisfied if the position information and the current time of the customer terminal 10 satisfy any one of the map information 1 to 3. The customer is permitted to log in when judged by. Specifically, when there is map information indicating the range including the position of the customer terminal 10 and the specified date and time including the current time, the position information determination unit 234 and the time determination unit 236 determine that the condition is satisfied.

  On the other hand, in the example shown in FIG. 13, the position authentication flag “OFF” is set in the transaction type “balance inquiry”, and no map information is set. Therefore, when the bank server 20 requests a balance inquiry from the customer, the bank server 20 allows the customer to make a balance inquiry regardless of the position of the customer terminal 10 and the current time.

  Here, in order for the customer to request a balance inquiry, it is assumed that the customer is logged in. Further, since the map information “1-3” is set for the transaction type “login”, it is considered that the map information “1-3” is substantially set for the transaction type “balance inquiry”. You can also. However, since the customer terminal 10 is moved after being logged in after satisfying the conditions of the map information “1 to 3” and the condition of the map information “1 to 3” is not satisfied, the balance inquiry is allowed. There is a significance of setting the position authentication flag “OFF” of the type “balance inquiry”.

  Further, only the position authentication flag “ON” and the map information “1” are set in the transaction type “transfer”. That is, the transfer is permitted only when the customer terminal 10 exists within a radius of 5 km centered on latitude and longitude A. As a result, the security of the transaction type “transfer” can be enhanced compared to other transaction types “transfer” and “balance inquiry”.

  In this way, with regard to processing involving the movement of money between accounts, the map information that can be set from the processing that does not involve the movement of money because the customer may suffer a great deal of damage if done illegally by a third party. May be restricted. For example, the information setting unit 228 may limit the processing involving money movement so that only one or two pieces of map information can be set, or can set only map information indicating a predetermined area. . With this configuration, it is possible to suppress unauthorized access by a third party as much as possible while ensuring customer convenience.

  In addition, the customer registration part 220 produces | generates the map information 1 which shows the range containing the positional information isolate | separated from the image file at the time of customer registration, and registers it into a customer table. Further, the customer registration unit 220 may set the position authentication flags of all the transaction types to “ON” and set the map information 1 for each transaction type. With this configuration, a customer using the customer terminal 10 can log in near the position where the image information included in the image file is captured. A customer who uses the customer terminal 10 can change the map information and the transaction type information by selecting the setting change item 56 shown in FIG. 9 after logging in.

  As described above, the information processing unit 240 executes the transaction requested by the customer according to the determination results by the position information determination unit 234 and the time determination unit 236. Therefore, the information processing unit 240 may not execute the transaction requested by the customer depending on the current position and the current time of the customer terminal 10. However, if the customer cannot grasp whether or not the transaction can be executed until the transaction is actually requested, a wasteful request by the customer may occur. Therefore, the bank server 20 may cause the display unit 144 of the customer terminal 10 to display a transaction that can be currently executed on the menu screen 80, as shown in FIG.

  FIG. 14 is an explanatory diagram showing an example of the menu screen 80. As shown in FIG. 14, the menu screen 80 includes an icon in addition to transaction items such as a balance inquiry item 82, a detail inquiry item 83, a yen deposit transaction item 84, a transfer item 85, and a setting change item 86, and a logout button 88. 90 and 92 are included.

  As shown in FIG. 14, the yen deposit transaction item 84, the transfer item 85, and the setting change item 86 are displayed separately from other transaction items. With this display, the customer can grasp that the yen deposit transaction, the transfer, and the setting change cannot be executed at present. Furthermore, a square icon 90 is displayed when balance inquiry is possible, and a hexagonal icon 92 is displayed when details can be introduced. Therefore, the customer can grasp the currently possible transaction types by referring to these icons 90 and 92.

  In order to realize such display, for example, the customer terminal 10 transmits the current position to the bank server 20 periodically or irregularly after login. Then, the position information determination unit 234 of the bank server 20 determines whether or not the received position information satisfies the conditions of the map information set for each transaction type in the transaction type information. Further, the time determination unit 236 of the bank server 20 determines whether or not the current time satisfies the condition of the map information set for each transaction type in the transaction type information. Then, the transaction type determined to satisfy the condition by the position information determination unit 234 and the time determination unit 236 is extracted. That is, the position information determination unit 234 and the time determination unit 236 have a function as an identification information extraction unit that extracts process identification information indicating a transaction type.

  Further, the communication unit 216 of the bank server 20 transmits information indicating the transaction type in which the map information determined to satisfy the condition by both the position information determination unit 234 and the time determination unit 236 is transmitted to the customer terminal 10. . Then, the display screen generation unit 140 of the customer terminal 10 generates an item indicating a transaction that can be currently traded on the menu screen 80 based on the information indicating the transaction type received from the bank server 20, or the icon 90 and 92 can be generated. That is, the display screen generation unit 140 of the customer terminal 10 functions as a display control unit.

  On the other hand, as described above, when all the IDs indicating the types of transactions that can be currently executed are transmitted from the bank server 20 to the customer terminal 10, the processing at the customer terminal 10 may become complicated. Therefore, the bank server 20 does not necessarily have to transmit all of the IDs indicating the currently executable transaction types to the customer terminal 10. For example, when there is at least one transaction type that can be currently executed, the bank server 20 may transmit information indicating that fact, and the customer terminal 10 may display one icon indicating the bank based on the information. . Further, when there are a predetermined number of transaction types that can be processed at present, or when there is only one transaction type whose position authentication flag is ON, the bank server 20 may transmit information indicating that fact.

  As a specific implementation method, an identifier indicating a category may be added to the upper bits of an ID indicating a transaction type. For example, when the ID indicating login is “001” and the identifier “1” indicates a category of bank service, it is expressed as “1001”. The bank server 20 has a function as a classification unit that classifies the processing identification information extracted by the position information determination unit 234 and the time determination unit 236 based on the first identifier. Furthermore, the bank server 20 transmits to the customer terminal 10 that the category corresponding to the identifier “1” is available if the transaction type starting with the identifier “1” is greater than or equal to a predetermined number, and the customer terminal 10 identifies the identifier “1”. ”Is displayed as an icon generically indicating the bank services corresponding to“ ”. For example, the identifier “1” may be set as a bank service, and the identifier “2” may be set as a ticket reservation service. In the bank service, the identifier “1” may be set as a yen deposit transaction-related service, the identifier “2” may be set as a foreign currency transaction-related service, and the like.

  Further, the bank server 20 according to the present embodiment includes a notification unit 244. The notification unit 244 notifies the customer contact information registered in the customer table according to the determination results by the position information determination unit 234 and the time determination unit 236. For example, when a certain transaction is requested by the bank server 20 and the position information determination unit 234 and the time determination unit 236 determine that the transaction cannot be executed at present, the notification unit 244 displays the e-mail address registered in the customer table. Send mail as a destination. Here, the mail transmitted from the notification unit 244 may include location information transmitted from the customer terminal 10, time information, and the like.

  More specifically, the above e-mail indicates that “Yen trading deposits requested by customers on February 24, 2008 are not currently available” or “February 24, 2008 19:34”. Shinagawa-ku The customer requested a yen transaction deposit. " Therefore, if a third party without legitimate authority requests a transaction that is false with the customer, the customer can recognize illegal access at an early stage. As a result, it becomes possible for the customer to prevent unexpected damage in advance, for example, by requesting the bank server 20 to completely stop the transaction.

[4] Operation in Financial Service Providing System The configuration of the bank server 20 according to the present embodiment has been described above with reference to FIGS. Next, an information processing method executed in the financial service providing system 1 according to the present embodiment will be described with reference to FIG.

  FIG. 15 is a sequence diagram showing the flow of the information processing method executed in the financial service providing system 1 according to the present embodiment. As shown in FIG. 15, first, the customer selects a certain transaction type (transaction content) using the customer terminal 10 on the menu screen (S304). Subsequently, the communication unit 116 of the customer terminal 10 transmits the transaction type selected by the customer to the bank server 20 (S308).

  Thereafter, the bank server 20 extracts a corresponding customer table from the storage unit 224 based on the customer ID, for example, and determines whether the customer is a good customer from the customer information included in the customer table (S310). . Alternatively, the bank server 20 may determine whether or not the customer's superiority exceeds a predetermined level. If the bank server 20 determines that the customer is not a good customer, the bank server 20 starts executing the transaction requested by the customer (S311). On the other hand, if the bank server 20 determines that the customer is a good customer, the bank server 20 selects authentication conditions applied to the transaction type from the transaction type information (S312). Here, the authentication condition corresponds to map information.

  Then, it is determined whether or not the current time is within the range of the designated date and time included in the map information (S316). When it is determined that the current time is outside the range of the specified date and time included in the map information, the bank server 20 transmits an error display to the customer terminal 10 and rejects execution of the transaction (S320). On the other hand, when it is determined that the current time is within the range of the specified date and time included in the map information, the position information determination unit 234 requests the customer terminal 10 to transmit the position information (S324). When the location information acquisition unit 128 of the customer terminal 10 is requested to transmit the location information from the bank server 20, the location information acquisition unit 128 acquires the location information (S328). And the request | requirement part 136 transmits the position information acquired by the position information acquisition part 128 to the bank server 20 via the communication part 116 (S330).

  Thereafter, based on the position information transmitted from the customer terminal 10, the position information determination unit 234 determines whether or not the position of the customer terminal 10 is within the specified range included in the map information selected in S312 (S332). ). When it is determined that the position of the customer terminal 10 is outside the designated range included in the map information selected in S312, the bank server 20 transmits an error display to the customer terminal 10 and rejects the execution of the transaction (S320). ). On the other hand, when it is determined that the position of the customer terminal 10 is within the specified range included in the map information selected in S312, the information processing unit 240 starts executing the transaction requested by the customer (S336).

[5] Summary As described above, according to the present embodiment, in order for the information processing unit 240 to execute a transaction requested by a customer, the customer terminal 10 is positioned within a preset range. Need to be. For this reason, even if a third party obtains the customer terminal 10 illegally, the information processing unit 240 cannot be made to perform a desired transaction if the preset range is not leaked. As a result, according to the bank server 20, since the execution of the transaction by the information processing unit 240 is restricted according to the position of the customer terminal 10, customer authentication with higher security can be realized.

  In addition, although preferred embodiment of this invention was described referring an accompanying drawing, it cannot be overemphasized that this invention is not limited to the example which concerns. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

  For example, in the above embodiment, the example in which the customer of the bank server 20 is protected by the function of the customer authentication unit 230 has been described, but the present invention is not limited to such an example. For example, the bank server 20 may protect only the customers whose information indicating that they are good customers in the customer table based on the function of the customer authentication unit 230. The customer excellence can be determined based on the following criteria, for example, from the deposit information and behavior history information in the customer table.

  For example, a customer whose current yen deposit balance or foreign currency deposit balance exceeds a predetermined amount may be determined as a good customer. Further, when the customer's foreign currency balance at a predetermined time is used as a reference, a customer who has left foreign currency for many years can be regarded as excellent. Moreover, you may judge as a good customer also when the balances, such as a foreign currency and an investment trust, maintain more than predetermined amount in a predetermined period. On the other hand, a foreign currency such as US dollars may be sold on the day before the judgment date of superiority, and the foreign currency balance may happen to be small on the judgment date, and the customer may not be judged as a good customer. For this reason, judging the customer's superiority based on the action history information is more effective than judging the superiority based on the foreign currency balance at a predetermined time. For example, if the number of transactions such as purchase and sale of foreign currency in a predetermined period is greater than or equal to a predetermined number, it may be determined as a good customer.

  In addition, market conditions are also used to determine customer excellence. For example, if it is determined that the given currency is moving in a strong yen compared with a given period in the past (for example, an average comparison at the same time during the given period), this is a disadvantageous situation for foreign currency purchases. A customer who purchases a foreign currency of a predetermined amount or below, or has made a foreign currency transaction more than a predetermined number of times may be determined as a good customer. As a result, it is possible to give preferential treatment to customers who have made transactions during the period of yen appreciation even if they have made transactions for the same amount and number of times.

  In the above-described embodiment, an example in which the bank server 20 and the customer terminal 10 are separated (an example in which the customer terminal 10 is provided outside the bank server 20) has been described, but the present invention is not limited to such an example. For example, a device having the configuration of the customer terminal 10 shown in FIG. 2 and the configuration of the bank server 20 shown in FIG. 5 (a device substantially the same as the device in which the customer terminal 10 is provided inside the bank server 20) ) Is also provided. Such an apparatus corresponds to, for example, an ATM (Automated Teller Machine) disposed in a store. In this case, the position information of the device may be recorded in advance in such a device. Then, the position information may be input to the position information determination unit 234, and the position information determination unit 234 may determine whether or not the position information is included in a predetermined range. In this case, the position information determination unit 234 includes a function as an input unit.

  In the above embodiment, the bank service has been described as an example of the service via the communication network 12, but the present invention is not limited to such an example. For example, the present invention can be applied to a portable device provided with position information acquisition means such as a GPS antenna. That is, in this portable device, processing such as login can be performed only in the set predetermined position range and time. Similarly, an accessible position range and time can be set for each processing type. For example, in a mobile phone, a password is required when the power is turned off once, but the mobile phone acquires not only the password but also the location information when the mobile phone inputs the password. Good. Then, the mobile phone determines whether the acquired position information is within a preset position range and time range, and only allows login when it is within the preset position range and time range. Also good.

  Further, each step in the processing of the financial service providing system 1 of the present specification does not necessarily have to be processed in time series in the order described as a sequence diagram. For example, each step in the processing of the financial service providing system 1 may include processing executed in parallel or individually (for example, parallel processing or processing by an object).

  In addition, it is possible to create a computer program for causing hardware such as the CPU 201, the ROM 202, and the RAM 203 built in the bank server 20 to perform the same functions as the components of the bank server 20 described above. A storage medium storing the computer program is also provided. Moreover, a series of processing can also be realized by hardware by configuring each functional block shown in the functional block diagram of FIG. 5 with hardware.

It is explanatory drawing which showed the structure of the financial service provision system. It is the functional block diagram which showed the structure of the customer terminal concerning this embodiment. It is explanatory drawing which showed an example of the image file produced | generated by the image file production | generation part. It is the block diagram which showed the hardware constitutions of the bank server. It is the functional block diagram which showed the structure of the bank server concerning this embodiment. It is explanatory drawing which showed the structural example of customer table DB currently recorded on the memory | storage part. It is explanatory drawing which showed the other example of customer table DB. It is explanatory drawing which showed an example of the login screen. It is explanatory drawing which showed an example of the menu screen. It is explanatory drawing which showed an example of the setting screen of map information. It is explanatory drawing which showed an example of the setting screen (enlargement) of map information. It is explanatory drawing which showed an example of the designated map information. It is explanatory drawing which showed an example of transaction classification information. It is explanatory drawing which showed an example of the menu screen. It is the sequence diagram which showed the flow of the information processing method performed in the financial service provision system concerning this embodiment.

Explanation of symbols

10, 10A, 10B Customer terminal 20 Bank server 116, 216 Communication unit 120 Imaging unit 124 Image file generation unit 128 Location information acquisition unit 140 Display screen generation unit 220 Customer registration unit 224 Storage unit 228 Information setting unit 232 Login information determination unit 234 Position information determination unit 236 Time determination unit 240 Information processing unit 244 Notification unit

Claims (14)

An information processing apparatus,
A process request acquisition unit that includes process identification information indicating at least a predetermined process and acquires process request information for requesting execution of the predetermined process;
A position information acquisition unit that acquires position information of the information processing apparatus;
The process request information acquired by the process request acquisition unit from the process data including a plurality of process identification information indicating at least different predetermined processes and range information associated with the plurality of process identification information. A range information extraction unit that extracts range information associated with the process identification information included;
A determination unit that determines whether or not a position indicated by the position information acquired by the position information acquisition unit when the processing request information is acquired is included in a range indicated by the range information extracted by the range information extraction unit; ;
A process execution unit that executes a process related to the process request information when the determination unit determines that the position indicated by the position information is included in the range indicated by the range information;
An information processing apparatus comprising: An identification information extracting unit that extracts processing identification information associated with range information including the position indicated by the position information acquired by the position information acquiring unit from the processing data;
A display control unit that controls display of the processing identification information extracted by the identification information extraction unit;
The information processing apparatus according to claim 1, comprising: An identification information extracting unit that extracts processing identification information associated with range information including the position indicated by the position information acquired by the position information acquiring unit from the processing data;
A classification unit for classifying the processing identification information extracted by the identification information extraction unit into a predetermined category;
A display control unit that controls display of category information related to the categories classified by the classification unit;
The information processing apparatus according to claim 1, comprising: When the determination unit determines that the position indicated by the position information acquired by the position information acquisition unit is not included in the range indicated by the range information extracted by the range information extraction unit, the position information is set in advance. A notification unit for notifying execution notification information including the position information to the notification destination;
The information processing apparatus according to claim 2, further comprising: The process identification information is further associated with time information indicating a time range,
The determination unit further determines whether or not the current time is included in a time range indicated by the time information;
When it is determined that the position indicated by the position information is included in the range indicated by the range information and the current time is included in the time range indicated by the time information, the process execution unit relates to the process request information. The information processing apparatus according to claim 1, wherein the process is executed. An information processing apparatus connected to a customer terminal via a network:
A processing request acquisition unit including processing identification information indicating at least a predetermined process and acquiring processing request information for requesting execution of the predetermined process from the customer terminal;
A location information acquisition unit that acquires location information of the customer terminal from the customer terminal;
The process request information acquired by the process request acquisition unit from process data including a plurality of process identification information indicating at least different predetermined processes and arbitrary range information associated with the plurality of process identification information. A range information extraction unit for extracting range information associated with the process identification information included in
A determination unit that determines whether or not a position indicated by the position information acquired by the position information acquisition unit when the processing request information is acquired is included in a range indicated by the range information extracted by the range information extraction unit; ;
A process execution unit that executes a process related to the process request information when the determination unit determines that the position indicated by the position information is included in the range indicated by the range information;
An information processing apparatus comprising: An identification information extracting unit that extracts processing identification information associated with range information including the position indicated by the position information acquired by the position information acquiring unit from the processing data;
A transmission unit that transmits the processing identification information extracted by the identification information extraction unit to the customer terminal;
The information processing apparatus according to claim 6, comprising: An identification information extracting unit that extracts processing identification information associated with range information including the position indicated by the position information acquired by the position information acquiring unit from the processing data;
A classification unit for classifying the processing identification information extracted by the identification information extraction unit into a predetermined category;
A transmission unit that transmits category information related to the category classified by the classification unit to the customer terminal;
The information processing apparatus according to claim 6, comprising: When the determination unit determines that the position indicated by the position information acquired by the position information acquisition unit is not included in the range indicated by the range information extracted by the range information extraction unit, the position information is set in advance. A notification unit for notifying execution notification information including the position information to the notification destination;
The information processing apparatus according to claim 7 or 8, comprising: The process identification information is further associated with time information indicating a time range,
The determination unit further determines whether or not the current time is included in a time range indicated by the time information;
When it is determined that the position indicated by the position information is included in the range indicated by the range information and the current time is included in the time range indicated by the time information, the process execution unit relates to the process request information. The information processing apparatus according to claim 6, which executes processing. A computer provided in the information processing apparatus
A process request acquisition unit that includes process identification information indicating at least a predetermined process and acquires process request information for requesting execution of the predetermined process;
A position information acquisition unit that acquires position information of the information processing apparatus;
The process request information acquired by the process request acquisition unit from the process data including a plurality of process identification information indicating at least different predetermined processes and range information associated with the plurality of process identification information. A range information extraction unit that extracts range information associated with the process identification information included;
A determination unit that determines whether or not a position indicated by the position information acquired by the position information acquisition unit when the processing request information is acquired is included in a range indicated by the range information extracted by the range information extraction unit; ;
A process execution unit that executes a process related to the process request information when the determination unit determines that the position indicated by the position information is included in the range indicated by the range information;
Program to function as A computer provided in an information processing apparatus connected to a customer terminal via a network,
A processing request acquisition unit including processing identification information indicating at least a predetermined process and acquiring processing request information for requesting execution of the predetermined process from the customer terminal;
A location information acquisition unit that acquires location information of the customer terminal from the customer terminal;
The process request information acquired by the process request acquisition unit from process data including a plurality of process identification information indicating at least different predetermined processes and arbitrary range information associated with the plurality of process identification information. A range information extraction unit for extracting range information associated with the process identification information included in
A determination unit that determines whether or not a position indicated by the position information acquired by the position information acquisition unit when the processing request information is acquired is included in a range indicated by the range information extracted by the range information extraction unit; ;
A process execution unit that executes a process related to the process request information when the determination unit determines that the position indicated by the position information is included in the range indicated by the range information;
Program to function as An information processing method executed in an information processing apparatus includes:
Obtaining process request information that includes at least process identification information indicating a predetermined process and requests execution of the predetermined process;
Obtaining position information of the information processing apparatus;
Corresponding to processing identification information included in the processing request information from processing data including a plurality of processing identification information indicating at least different predetermined processes and range information associated with the plurality of processing identification information Extracting extracted range information;
Determining whether a position indicated by the position information is included in a range indicated by the range information;
When it is determined that the position indicated by the position information is included in the range indicated by the range information;
Including an information processing method. An information processing apparatus connected to a customer terminal via a network:
Obtaining process request information that includes at least process identification information indicating a predetermined process and that requests execution of the predetermined process from the customer terminal;
Obtaining location information of the customer terminal from the customer terminal;
Corresponding to the processing identification information included in the processing request information from processing data including a plurality of processing identification information indicating at least different predetermined processes and arbitrary range information associated with the plurality of processing identification information Extracting the attached range information;
Determining whether the position indicated by the position information acquired when acquiring the processing request information is included in the range indicated by the extracted range information;
When it is determined that the position indicated by the position information is included in the range indicated by the range information;
Including an information processing method.

Images