JP2016006637A - Credit card settlement system and credit card settlement method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a credit card settlement system and a credit card settlement method for protecting security of credit card information.SOLUTION: An online shopping device 21 or an information storage device 31 issues a code to information except a card number of credit card information provided by a credit card owner. The online shopping device 21 maintains the card number and the code. The information storage device 31 stores information except the card number and the code. The online shopping device 21 receives a settlement request by a credit card from the credit card owner, transmits the stored code to the information storage device 31 to request provision of the information except the card number. The online shopping device 21 recovers the credit card information from the information except the card number received form the information storage device 31 and the card number held by himself/herself to perform settlement by the credit card.

Description

  The present invention relates to a credit card settlement system and a credit card settlement method, and more particularly to a technique for protecting the security of credit card information in online shopping using the Internet or the like.

  In recent years, online shopping for purchasing products online using the Internet has become popular. In online shopping, payment by credit card is often used as a payment method.

  Generally, when paying with a credit card in online shopping, a user (credit card owner) starts with a 16-digit card number, card type (VISA, Master, JCB, etc.), card holder, card expiration date, 3 Credit card information such as a digit security code is input to a user terminal such as a PC (Personal Computer). The entered credit card information is transmitted to the online shop server. The online shop server transfers the received credit card information to the credit card company server and makes a credit inquiry. When the credit is confirmed, the payment by the credit card is executed and the user can purchase the product.

  When credit card payment is used in online shopping, credit card information is stored in the online shop database. For this reason, if each shop does not take appropriate information security measures, credit card information may be obtained illegally by a third party, or the shop's server may be infected with a virus and the credit card information leaked to the Internet. There is a risk of doing.

  In order to eliminate such a risk of leakage of credit information, a payment system is known in which a disposable credit card number (one-time card ID) is issued each time and payment is made online using the one-time card ID ( For example, see Patent Document 1).

JP 2008-204248 A

  In a 16-digit credit card number, the first digit represents the Major Industry Identifier (MII), and the first 6 digits represent the Issuer Identifier Number (IIN). Card issuing companies such as banks and card companies set credit card numbers according to such rules. The one-time card ID number must also be set according to such rules. For this reason, the user cannot receive a one-time card ID from a card issuing company that does not support the one-time card ID service, and the use of the one-time card ID is limited.

  In view of the above problems, an object of the present invention is to protect the security of credit card information in online shopping by issuing a code that replaces the credit card information without depending on the card issuing company.

  A system for performing payment by credit card in online shopping according to one aspect of the present invention is installed in a place different from the online shopping device that sells products online, and a part of credit card information The online shopping device receives credit card information from a credit card owner and receives a part of the credit card information and at least a part of the card number. A unique code associated with the first information excluding the first information and a function of transmitting the first information and the code to the information storage device; and deleting the first information and the remaining one of the credit card information Second information including at least the remaining number of the card number and the link A function of holding a password, receiving a request for payment by credit card from the credit card owner, and transmitting the held code to the information storage device to provide the first information corresponding to the code A function of requesting, and a function of executing a payment by a credit card using the first information received from the information storage device and the credit card information restored from the held second information, An information storage device receives and stores the first information received from the online shopping device and a function for storing the first information and the code in association with each other, and a request to provide the first information from the online shopping device. Information corresponding to the code received from the online shopping device from the first information. Extracting, has a function of transmitting information the extracted to the online shopping system.

  In addition, in the payment method using a credit card in online shopping corresponding to the credit card payment system, an online shopping device that sells products online receives credit card information from the credit card owner, and the credit card information A unique code associated with the first information excluding at least a part of the card number is issued, and the first information and the code are transmitted to an information storage device installed at another location And deleting the first information to hold the second information including the remaining number of the card number and at least the remaining number of the card number and the code, and the information storage device Correspondence between the first information and the code received from the online shopping device The online shopping device receives a request for payment by credit card from the credit card owner, transmits the held code to the information storage device, and corresponds to the first code Requesting provision of information, the information storage device receiving the request for provision of the first information from the online shopping device, and receiving from the online shopping device among the stored first information The information corresponding to the code is extracted, the extracted information is transmitted to the online shopping device, and the online shopping device receives the first information received from the information storage device and the second information held therein. Settlement by credit card is executed using the credit card information restored from the information.

  According to such a credit card settlement system and method, among credit card information, at least the card number is not stored in the information storage device, and only a part of the credit card information including the card number is stored in the online shopping device. Even if information leaks from these devices, complete credit card information is not known. Thereby, the security of credit card information in online shopping can be protected. In addition, since there is no rule to be followed in particular for the code issued in association with the first information, the code can be issued without depending on the card issuing company.

  In addition, a system for performing payment by credit card in online shopping according to another aspect of the present invention is installed in a place different from the online shopping device for selling products online, and the credit card information. The online shopping device receives the credit card information from the credit card owner and is a part of the credit card information and at least a part of the card number. A function of transmitting the first information excluding the number to the information storage device, receiving a unique code associated with the first information from the information storage device, deleting the first information and the credit A second part of the remaining card information including at least the remaining number of the card number Information and a function for holding the code, the first information corresponding to the code by receiving a request for payment by credit card from the credit card owner and transmitting the held code to the information storage device And a function for executing a payment by credit card using the credit card information restored from the first information received from the information storage device and the second information held. The information storage device receives the first information from the online shopping device, issues the code, transmits the code to the online shopping device, the first information and the code to each other. A function of storing the data in association with each other, and a request to provide the first information from the online shopping device Receiving and has a function of transmitting and extracting information corresponding to the code received from the online shopping system from among the first information that stores the information the extracted to the online shopping system.

  In addition, in the payment method using a credit card in online shopping corresponding to the credit card payment system, an online shopping device that sells products online receives credit card information from the credit card owner, and the credit card information First information excluding at least a part of the card number is transmitted to an information storage device installed at another location, and the information storage device transmits the first information from the online shopping device. Receiving the information, issuing a unique code associated with the first information, transmitting the code to the online shopping device, storing the first information and the code in association with each other, and the online shopping; When the device receives the code from the information storage device, The first information is deleted, the second information that is the remaining part of the credit card information and includes at least the remaining number of the card number, and the code are retained, and the online shopping device stores the credit card In response to a request for payment by a credit card from the owner, the held code is transmitted to the information storage device to request provision of the first information corresponding to the code, and the information storage device, In response to a request to provide the first information from the online shopping device, the information corresponding to the code received from the online shopping device is extracted from the stored first information, and the extracted Information is transmitted to the online shopping device, and the online shopping device has received from the information storage device Using serial credit card information restored from the first information and the held second information to enforce payment by credit card.

  According to such a credit card settlement system and method, among credit card information, only a part of the credit card information including the card number is stored in the online shopping device. Therefore, even if information leaks from the device, the complete credit card information is stored. Is never known. Thereby, the security of credit card information in online shopping can be protected. In addition, since there is no rule to be followed in particular for the code issued in association with the first information, the code can be issued without depending on the card issuing company.

  A system for performing payment by credit card in online shopping according to one aspect of the present invention includes an online shopping device that sells products online, a credit card management device that manages credit card information, and a credit card from a credit card owner. A code management device that issues a unique code associated with the first information upon receiving provision of first information that is a part of the information and excluding at least a part of the card number; The credit card information when the shopping device pays for the product with a credit card is the remaining part of the code issued from the code management device and the credit card information from the user terminal, and at least the remaining card number 2nd information including the number of And transferring the received code and the second information to the credit card management device to inquire about credit, and executing credit card settlement when the credit is confirmed. The apparatus receives and stores the code and the first information associated with the code from the code management apparatus, and the received from the online shopping apparatus among the stored first information The information corresponding to the code is extracted, and the credit card information restored from the extracted information and the second information received from the online shopping device is compared with the credit card information managed by itself to obtain the result as the online information. This is to notify the shopping device.

  In addition, in the credit card settlement method in online shopping corresponding to this credit card settlement system, the code management device is a method in which the code management device removes at least a part of the card number from the credit card owner as a part of the credit card information. A credit card management device that receives the provision of information of 1 and issues a unique code associated with the first information and manages credit card information, the code management device sends the code and the first associated with the code; The code issued from the code management device as credit card information when the user terminal pays the price of the product with a credit card to an online shopping device that sells the product online. The rest of credit card information And transmitting the second information including at least the remaining number of the card number, and the online shopping device transfers the code and the second information received from the user terminal to the credit card management device. The credit card management device extracts information corresponding to the code received from the online shopping device from the stored first information, and extracts the extracted information and the online shopping. The credit card information restored from the second information received from the device is compared with the credit card information managed by itself, and the result is notified to the online shopping device, and the online shopping device provides the credit card management device. Credit card if credit is confirmed by To enforce settlement by de.

  According to such a credit card settlement system and method, at least a card number is not stored in the code management device among credit card information, and only a part of the credit card information including the card number is stored in the online shopping device. Even if information leaks from these devices, complete credit card information is not known. Thereby, the security of credit card information in online shopping can be protected. In addition, since there is no particular rule to be followed for the code issued by the code management device, the code can be issued without depending on the card issuing company.

  In addition, a system for performing payment by credit card in online shopping according to another aspect of the present invention includes an online shopping device that sells products online, manages credit card information, and requests from the credit card owner And a credit card management device that issues a unique code associated with the first information that is a part of the credit card information and at least a part of the card number according to the credit card information. Credit card information when paying for the product with a card includes the code issued from the credit card management device and the remaining part of the credit card information from the user terminal, including at least the remaining number of the card number Receiving second information, and The received code and the second information are transferred to the credit card management device to inquire about the credit, and when the credit is confirmed, the payment by the credit card is executed. Information corresponding to the code received from the online shopping device is extracted from the stored first information, and restored from the extracted information and the second information received from the online shopping device. The credit card information is compared with the credit card information managed by itself, and the result is notified to the online shopping device.

  In addition, in the credit card settlement method in online shopping corresponding to this credit card settlement system, the credit card management device that manages the credit card information is part of the credit card information in response to a request from the credit card owner. A unique code associated with the first information excluding at least a part of the card number is issued, and the user terminal pays the price of the product with a credit card to an online shopping device that sells the product online. As the credit card information, transmitting the code issued from the credit card management device and second information including at least the remaining number of the card number and the remaining part of the credit card information, and the online shopping device But The code received from the user terminal and the second information are transferred to the credit card management device to inquire about credit, and the credit card management device stores the online shopping from the stored first information. Information corresponding to the code received from the device is extracted, and the extracted information and the credit card information restored from the second information received from the online shopping device are collated with the credit card information managed by itself. A result is notified to the online shopping device, and the online shopping device executes settlement by credit card when credit is confirmed by the credit card management device.

  According to such a credit card settlement system and method, among credit card information, only a part of the credit card information including the card number is stored in the online shopping device. Therefore, even if information leaks from the device, the complete credit card information is stored. Is never known. Thereby, the security of credit card information in online shopping can be protected. In addition, since there is no particular rule to be followed for the code issued by the credit card management device, the code can be issued regardless of the card issuing company.

  According to the present invention, it is possible to issue a code that replaces credit card information without depending on the card issuing company, thereby protecting the security of credit card information in online shopping.

1 is a schematic configuration diagram of a credit card settlement system according to a first embodiment of the present invention. It is a figure explaining the unique code | cord | chord linked | related with credit card information and its part. It is a figure which shows the data structure example of the code managed by the information storage apparatus, and the credit card information linked | related with it. It is a flowchart which shows the operation example of the credit card payment system which concerns on the 1st Embodiment of this invention. It is a flowchart which shows another example of operation | movement of the credit card payment system which concerns on the 1st Embodiment of this invention. It is a schematic block diagram of the credit card payment system which concerns on the 2nd Embodiment of this invention. It is a flowchart which shows the operation example of the credit card payment system which concerns on the 2nd Embodiment of this invention. It is a flowchart which shows another operation example of the credit card payment system which concerns on the 2nd Embodiment of this invention. It is a schematic block diagram of the credit card payment system which concerns on the 3rd Embodiment of this invention. It is a figure explaining the code issued by the code management apparatus. It is a figure which shows the data structure example of the code managed by the code management apparatus, and the credit card information linked | related with it. It is a flowchart which shows the operation example of the credit card payment system which concerns on the 3rd Embodiment of this invention. It is a schematic block diagram of the credit card payment system which concerns on the 4th Embodiment of this invention. It is a flowchart which shows the operation example of the credit card payment system which concerns on the 4th Embodiment of this invention. (A) And (b) is a figure which shows the example of some encoding object of the card number in the modification of each embodiment of this invention, (c) is the code | cord managed by an information management apparatus etc. It is a figure which shows the data structure example of the credit card information linked | related with it.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings. In addition, this invention is not limited to the following embodiment.

(First embodiment)
FIG. 1 is a schematic configuration diagram of a credit card settlement system according to the first embodiment of the present invention. The credit card settlement system according to this embodiment includes a user terminal 1, an online shopping device 21, an information storage device 31, and a credit card management device 41. These terminals and devices are connected to the communication network 100.

  The communication network 100 is a dedicated line for the Internet or credit card settlement. A safer dedicated line may be used between the online shopping device 21 and the credit card management device 41 and between the online shopping device 21 and the information storage device 31 instead of the Internet. For convenience of explanation, the Internet and a dedicated line are represented as a communication network 100.

  The user terminal 1 is a terminal operated by a user (credit card owner) who performs online shopping, and includes, for example, a PC 11 and a portable information terminal 12 such as a mobile phone or a smart phone. The PC 11 and the portable information terminal 12 include a CPU (Central Processing Unit) that executes programs and performs calculations, a communication interface that communicates with other information devices via the communication network 100, a storage device that stores programs and data, and a user An input interface for receiving the input, a display device for displaying the processing result, and the like.

  The PC 11 activates a web browser, and the portable information terminal 12 activates a dedicated application to display a list of products provided from the online shopping device 21 on the display device. The user can select a desired product from the product list displayed on the display device of the user terminal 1 and place an order online.

  The online shopping device 21 is disposed in the online shop 2. The online shopping device 21 inquires credit to the credit card management device 41 and the credit card management device 41 when the credit is confirmed by the credit card management device 41. It has a function to execute settlement by card.

  Furthermore, the online shopping device 21 transmits a part of the credit card information provided by the credit card owner to the information storage device 31 and holds the remaining information, and the information storage device 31 stores the credit card information. The credit card information is restored by combining the information received from the information management device 41 and the information held by itself.

  An online shop database 22 is connected to the online shopping apparatus 21 via a LAN (Local Area Network) in the online shop 2. The online shop database 22 stores information on products handled by the online shop 2, order information from the user, payment information, and the like. In addition, the online shop database 22 stores credit card information when the user makes a credit card payment.

  The information storage device 31 is arranged in the information storage company 3. The information storage company 3 is a company that is operated independently of a card issuing company 4 that issues and manages credit cards, which will be described later. The information storage device 31 stores a part of the stored credit card information according to a function of storing a part of the credit card information transmitted from the online shopping device 21 and a request from the online shopping device 21. It has a function of transmitting to the device 21. An information storage company database 32 is connected to the information storage device 31 via a LAN in the information storage company 3. The information storage company database 32 stores a part of such credit card information.

  The credit card management device 41 is arranged in a card issuing company 4 such as a bank or a card company. The credit card management device 41 has a function of making a credit determination in response to a credit inquiry from the online shopping device 2 and notifying the online shopping device 2 of the result.

  A credit card management device 41 is connected to a card issuing company database 42 via a LAN in the card issuing company 4. The card issuing company database 42 stores credit card information and the like. For this reason, the information stored in the card issuing company internal database 42 is strictly managed so as not to leak outside.

  As described above, in the credit card settlement system according to the present embodiment, the online shopping device 21 does not store all of the credit card information provided by the credit card owner in the online shop database 22, but one of them. Only the information is stored, and the remaining information is stored in the information storage device 31. Then, the online shopping device 21 acquires the information deposited from the information storage device 31 and restores the credit card information as necessary at the time of payment with a credit card.

  In the credit card payment system according to the present embodiment, a unique code associated with information stored in the information storage device 31 is issued. FIG. 2 is a diagram for explaining credit card information and a unique code associated with a part thereof. Generally, the credit card information 101 includes a 16-digit card number 102 and information 103 other than the card number such as a bank name, card type (VISA, Master, JCB, etc.), card holder, expiration date, and 3-digit security code. Composed. Here, at least the information 103 other than the card number is an example of “first information” described in the claims, and at least the card number 102 is an example of “second information”.

  The online shopping device 21 divides the credit card information 101 provided by the credit card owner into a card number 102 and information 103 other than the card number, and the unique information associated with the information 103 other than the card number. Code 103 'is issued. Then, the online shopping device 21 transmits the information 103 other than the card number and the code 103 ′ to the information storage device 31, deletes the information 103 other than the card number, and holds the card number 102 and the code 103 ′. On the other hand, the information storage device 31 stores the information 103 other than the card number received from the online shopping device 21 and the code 103 ′ in association with each other.

  The code 103 ′ can be any combination of letters, numbers, and symbols in addition to numbers, and the number of digits or characters is also arbitrary. Here, FIG. 3 shows a data structure example of the code 103 ′ managed by the information management apparatus 31 and credit card information associated therewith. For example, the code “12456” as the code 103 ′ is not a card number such as a bank name “ABC”, a card type “VISA”, a holder “SATO TARO”, an expiration date “March 2015”, and a security code “344”. Information 103 is associated. Further, for example, an identification number “0244” of the online shop 2 and a serial number “12345” at the shop can be combined as a code “024-12345” as the code 103 ′.

  The information storage device 31 may issue the code 103 '. In this case, the online shopping device 21 divides the credit card information 101 provided by the credit card owner into the card number 102 and the information 103 other than the card number, and the information 103 other than the card number is stored in the information storage device 31. Send. The information storage device 31 receives the information 103 other than the card number from the online shopping device 21 and issues a code 103 ′, transmits the code 103 ′ to the online shopping device 21, and the information 103 other than the card number and the code 103 ′. Are stored in association with each other. The online shopping device 21 receives the code 103 ′ from the information storage device 31, deletes the information 103 other than the card number, and holds the card number 102 and the code 103 ′.

  Next, an operation example of the credit card settlement system according to the present embodiment will be described with reference to FIG. FIG. 4 is a flowchart showing an operation example of the credit card settlement system according to the present embodiment.

  The user (credit card owner) provides his / her credit card information 101 to the online shopping device 21 for shopping online (S10). The user operates the user terminal 1 to connect the user terminal 1 to the online shopping device 21 via the communication network 100 and input necessary items in a predetermined input format displayed on the display device of the user terminal 1. Thus, the credit card information 101 can be provided to the online shopping device 21 online. Alternatively, the user can mail a document in which necessary items are filled in the online shop 2 and provide the credit card information 101 to the online shopping device 21 offline.

  The online shopping device 21 receives the credit card information 101 from the user, issues a unique code 103 ′ associated with the information 103 other than the credit card number, and sends information other than the card number to the information storage device 31. 103 and code 103 'are transmitted (S11). At this time, the online shopping device 21 may encrypt the information 103 other than the card number and the code 103 ′ and transmit them to the information storage device 31.

  When the information storage device 31 receives the information 103 other than the card number and the code 103 ′ from the online shopping device 21, the information storage device 31 returns a receipt notification to the online shopping device 21 and sends the information 103 and the code 103 ′ other than the received card number to each other. Corresponding and storing (S12). The information 103 and the code 103 ′ other than the card number received by the information storage device 31 from the online shopping device 21 are stored in the information storage company database 32. The selective additional function S120a by the information storage device 31 will be described in a later-described modification.

  When receiving the receipt notification from the information storage device 31, the online shopping device 21 deletes the information 103 other than the card number and holds the card number 102 and the code 103 '(S13). The card number 102 and the code 103 ′ are stored in the online shop database 22.

  A user operates the user terminal 1 to connect the user terminal 1 to the online shopping device 2 via the communication network 100 and purchases from the online shopping device 2 from a list of products displayed on the display device of the user terminal 1. Select what you want. Then, when the user presses the payment button displayed on the display device of the user terminal 1, a payment request by credit card is transmitted from the user terminal 1 to the online shopping device 2 via the communication network 100 (S14). .

  When the online shopping device 21 receives a request for payment by credit card, the online shopping device 21 transmits the retained code 103 ′ to the information storage device 31 to request provision of information 103 other than the card number corresponding to the code 103 ′ ( S15). When the information storage device 31 receives the request from the online shopping device 21, the information storage device 31 searches the information storage company database 32 to obtain information (information other than the card number) corresponding to the code 103 ′ received from the online shopping device 21. The extracted information is extracted and transmitted to the online shopping device 21 (S16).

  At this time, the information storage device 31 may confirm whether or not the request for providing the information 103 other than the card number from the online shopping device 21 is valid. For example, the information storage device 31 confirms whether or not the user terminal 1 is connected online to the online shopping device 21 in order to confirm that the credit card owner has requested payment by credit card. In addition, the information storage device 31 confirms that the user has selected a product desired to be purchased in the online shopping device 21. If it is determined that the information provision request from the online shopping device 21 is not valid, the information storage device 31 can reject the request. Thereby, even if a malicious third party operates the online shopping device 21 and tries to withdraw information 103 other than the card number from the information storage device 31, such an illegal act can be prevented.

  The online shopping device 21 restores the credit card information 101 from the information 103 other than the card number received from the information storage device 31 and the held card number 102, and manages the credit card information 101 via the communication network 100. The data is transferred to the device 41 and the credit is inquired (S17).

  Upon receiving a credit inquiry from the online shopping device 2, the credit card management device 41 searches the card issuing company database 42 and stores it in the credit card information 101 received from the online shopping device 2 and the card issuing company database 42. Checking the authenticity of the credit card information 101 received from the online shopping device 2, confirming the authenticity of the credit card information 101 received from the online shopping device 2, and determining whether the credit card information 101 received from the online shopping device 2 can be credited, The determination result is notified to the online shopping device 2 (S18).

  When the online shopping device 2 receives the credit confirmation from the credit card management device 41, the online shopping device 2 executes settlement by credit card (S19). Thereby, the user can purchase goods online.

  The code 103 'used for the credit card settlement may be one-time, that is, disposable, or can be used repeatedly. If the code 103 'is disposable, the code 103' is invalidated or discarded. Invalidation is a measure for disabling the code 103 'while leaving the information of the code 103', and discarding is deleting the code 103 'from the database completely. In the case of invalidation, the same number or character string cannot be used for the newly issued code 103 ′, whereas in the case of discard, the same number or character string can be used for the newly issued code 103 ′.

  On the other hand, FIG. 5 is a flowchart showing another operation example of the credit card settlement system according to the present embodiment. This operation example is an operation example when the code 103 'is issued in the information storage device 31, and the above steps S11 and S12 are replaced with steps S110 and S120. Other than that, the operation is the same as in the above operation example, and the description is omitted.

  The online shopping device 21 receives provision of the credit card information 101 from the user, and transmits information 103 other than the credit card number to the information storage device 31 (S110). At this time, the online shopping device 21 may encrypt the information 103 other than the card number and transmit it to the information storage device 31.

  When the information storage device 31 receives the information 103 other than the card number from the online shopping device 21, the information storage device 31 issues a unique code 103 ′ associated with the information 103 other than the received card number information, and the issued code 103 ′ is online shopping. The information 103 other than the received card number and the issued code 103 ′ transmitted to the device 21 are stored in association with each other (S120). The information 103 other than the card number received by the information storage device 31 from the online shopping device 21 and the code 103 ′ issued by the information storage device 31 are stored in the information storage company database 32. The selective additional function S120a by the information storage device 31 will be described in a later-described modification.

  Upon receiving the code 103 'from the information storage device 31, the online shopping device 21 deletes the information 103 other than the card number and retains the card number 102 and the received code 103' (S13). The card number 102 and the code 103 ′ are stored in the online shop database 22. Thereafter, the above steps S14 to S19 are executed.

  As described above, according to the present embodiment, in credit card settlement in online shopping, the credit card information stored in the online shop database 22 is the card number 102 and the code 103 ′, and the information 103 other than the card number is online. It is not stored in the in-shop database 22. Therefore, even if the information stored in the online shop database 22 is leaked, information other than the card number such as the credit card bank name and card type cannot be known from the code 103 ′. Credit card information security is protected. The credit card information stored in the information storage company database 32 is only the information 103 and the code 103 ′ other than the card number, and the card number 102 is not stored in the information storage company database 32. Therefore, even if the information stored in the information storage company database 32 is leaked, the card number 102 cannot be known from the information 103 other than the card number and the code 103 ′, and the credit card information Security is protected. Further, unlike the conventional one-time card ID, the code 103 'can be freely set without following a specific rule. Therefore, the credit card settlement system according to the present embodiment can be applied to all card issuing companies and all types of credit cards without forcing the existing card issuing company to issue a code.

  When the online shopping device 21 makes a credit inquiry to the credit card management device 41, the online shopping device 21 temporarily holds the credit card information 101 in a complete state, but the online shopping device 21 makes a credit inquiry. Upon completion, it is considered that there is no serious problem in the security protection of the credit card information by quickly deleting the restored credit card information 101.

  Alternatively, not the online shopping device 21 but the credit card management device 41 may restore the credit card information 101 from the information 103 other than the card number and the code 103 ′. In this case, the online shopping device 21 receives a request for payment by credit card from the credit card owner, and transmits the held card number 102 to the credit card management device 41. Further, the information storage device 31 receives a request for providing information 103 other than the card number from the online shopping device 21, and stores the information 103 other than the card number corresponding to the code 103 ′ received from the online shopping device 21. It is transmitted to the credit card management device 41 instead of 21. Then, the credit card management device 41 restores the credit card information 101 from the information 103 other than the card number received from the information storage device 31 and the card number 102 received from the online shopping device 21.

(Second Embodiment)
FIG. 6 is a schematic configuration diagram of a credit card settlement system according to the second embodiment of the present invention. The credit card payment system according to this embodiment includes a user terminal 1, an online shopping device 21, and a credit card management device 41. These terminals and devices are connected to the communication network 100. In the present embodiment, the same components as those in the first embodiment are denoted by the same reference numerals as those in the first embodiment, and description thereof is omitted.

  The credit card settlement system according to the present embodiment omits the information storage device 31 in the first embodiment, receives all or part of the credit card information from the online shopping device 21, receives the received information and its The credit card management device 41 has a function of storing unique codes associated with information in association with each other.

  An operation example of the credit card settlement system according to the present embodiment will be described with reference to FIG. FIG. 7 is a flowchart showing an operation example of the credit card settlement system according to the present embodiment.

  The user (credit card owner) provides his / her credit card information 101 to the online shopping device 21 in order to shop online (S20). The user operates the user terminal 1 to connect the user terminal 1 to the online shopping device 21 via the communication network 100 and input necessary items in a predetermined input format displayed on the display device of the user terminal 1. Thus, the credit card information 101 can be provided to the online shopping device 21 online. Alternatively, the user can mail a document in which necessary items are filled in the online shop 2 and provide the credit card information 101 to the online shopping device 21 offline.

  The online shopping device 21 receives the provision of the credit card information 101 from the user, issues a unique code 103 ′ associated with the information 103 other than the credit card number, and sends the credit card management device 41 to the credit card information 101 other than the card number. Information 103 and code 103 'are transmitted (S21). At this time, the online shopping device 21 may encrypt the information 103 other than the card number and the code 103 ′ and transmit them to the information storage device 31.

  When the credit card management device 41 receives the information 103 other than the card number and the code 103 ′ from the online shopping device 21, the credit card management device 41 returns a receipt notification to the online shopping device 21, and receives the information 103 and the code 103 ′ other than the received card number. They are stored in association with each other (S22). Information 103 and code 103 ′ other than the card number received by the credit card management device 41 from the online shopping device 21 are stored in the card issuing company database 42.

  When receiving the receipt notification from the credit card management device 41, the online shopping device 21 deletes the information 103 other than the card number and holds the card number 102 and the code 103 '(S23). The card number 102 and the code 103 ′ are stored in the online shop database 22.

  A user operates the user terminal 1 to connect the user terminal 1 to the online shopping device 2 via the communication network 100 and purchases from the online shopping device 2 from a list of products displayed on the display device of the user terminal 1. Select what you want. Then, when the user presses the payment button displayed on the display device of the user terminal 1, a request for payment by credit card is transmitted from the user terminal 1 to the online shopping device 2 via the communication network 100 (S24). .

  When the online shopping device 21 receives a request for payment with a credit card, the online shopping device 21 transfers the card number 102 and the code 103 ′ held to the credit card management device 41 to the credit card management device 41 via the communication network 100 and credits. (S25).

  The credit card management device 41 searches the card issuing company database 42, extracts information (information other than the card number) corresponding to the code 103 ′ received from the online shopping device 21, and receives it from the online shopping device 21. The credit card information 101 is restored from the information 103 other than the card number 102 and the extracted card number. Then, the credit card management device 41 searches the card issuing company database 42, collates the restored credit card information 101 with the credit card information stored in the card issuing company database 42, and performs online shopping. The authenticity of the card number 102 and code 103 ′ received from 21 is confirmed, it is determined whether or not the restored credit card information 101 is creditable, and the determination result is notified to the online shopping device 2 (S26).

  When the online shopping device 2 receives the credit confirmation from the credit card management device 41, the online shopping device 2 executes settlement by credit card (S27). Thereby, the user can purchase goods online.

  The code 103 'used for the credit card settlement may be one-time, that is, disposable, or can be used repeatedly. If the code 103 'is disposable, the code 103' is invalidated or discarded. Invalidation is a measure for disabling the code 103 'while leaving the information of the code 103', and discarding is deleting the code 103 'from the database completely. In the case of invalidation, the same number or character string cannot be used for the newly issued code 103 ′, whereas in the case of discard, the same number or character string can be used for the newly issued code 103 ′.

  In step S21, the online shopping device 21 may transmit the credit card information 101 and the code 103 'to the credit card management device 41. In this case, in step S22, the credit card management device 41 may store the credit card information 101 and the code 103 'received from the online shopping device 21 in association with each other.

  On the other hand, FIG. 8 is a flowchart showing another operation example of the credit card settlement system according to the present embodiment. This operation example is an operation example when the code 103 'is issued in the credit card management apparatus 41, and the above steps S21 and S22 are replaced with steps S210 and S220. Other than that, the operation is the same as in the above operation example, and the description is omitted.

  The online shopping apparatus 21 receives provision of the credit card information 101 from the user, and transmits information 103 other than the credit card number to the credit card management apparatus 41 (S210). At this time, the online shopping device 21 may encrypt the information 103 other than the card number and transmit it to the information storage device 31.

  When the credit card management device 41 receives the information 103 other than the card number from the online shopping device 21, the credit card management device 41 issues a unique code 103 ′ associated with the information 103 other than the received card number information, and the issued code 103 ′ is online. The information 103 other than the received card number transmitted to the shopping device 21 and the issued code 103 ′ are stored in association with each other (S220). Information 103 other than the card number received by the credit card management device 41 from the online shopping device 21 and the code 103 ′ issued by the credit card management device 41 are stored in the card issuing company database 42.

  When the online shopping device 21 receives the code 103 'from the credit card management device 41, the online shopping device 21 deletes the information 103 other than the card number and holds the card number 102 and the received code 103' (S23). The card number 102 and the code 103 ′ are stored in the online shop database 22. Thereafter, the above steps S24 to S27 are executed.

  As described above, according to the present embodiment, the security of credit card information in online shopping can be effectively protected as in the effect of the first embodiment, and the card issuing company 4 relies on the information storage company 3. It is possible to issue and manage the code 103 ′ that replaces the credit card information by itself.

(Third embodiment)
FIG. 9 is a schematic configuration diagram of a credit card settlement system according to the third embodiment of the present invention. The credit card settlement system according to this embodiment includes a user terminal 1, an online shopping device 21, a code management device 31, and a credit card management device 41. These terminals and devices are connected to the communication network 100.

  The communication network 100 is a dedicated line for the Internet or credit card settlement. A safer dedicated line may be used between the online shopping device 21 and the credit card management device 41 and between the code management device 31 and the credit card management device 41 instead of the Internet. For convenience of explanation, the Internet and a dedicated line are represented as a communication network 100.

  The user terminal 1 is a terminal operated by a user (credit card owner) who performs online shopping, and includes, for example, a PC 11 and a portable information terminal 12 such as a mobile phone or a smart phone. The PC 11 and the portable information terminal 12 include a CPU (Central Processing Unit) that executes programs and performs calculations, a communication interface that communicates with other information devices via the communication network 100, a storage device that stores programs and data, and a user An input interface for receiving the input, a display device for displaying the processing result, and the like.

  The PC 11 activates a web browser, and the portable information terminal 12 activates a dedicated application to display a list of products provided from the online shopping device 21 on the display device. The user can select a desired product from the product list displayed on the display device of the user terminal 1 and place an order online.

  The online shopping device 21 is disposed in the online shop 2. The online shopping device 21 inquires credit to the credit card management device 41 and the credit card management device 41 when the credit is confirmed by the credit card management device 41. It has a function to execute settlement by card.

  An online shop database 22 is connected to the online shopping apparatus 21 via a LAN (Local Area Network) in the online shop 2. The online shop database 22 stores information on products handled by the online shop 2, order information from the user, payment information, and the like. In addition, the online shop database 22 stores credit card information when the user makes a credit card payment.

  The code management device 31 is arranged in the code management company 3. The code management company 3 is a company that is operated independently of the card issuing company 4 that issues and manages credit cards, which will be described later. The code management device 31 has a function of issuing a code that replaces credit card information to the user and a function of managing such a code.

  The code issued by the code management device 31 will be described with reference to FIG. Generally, the credit card information 101 includes a 16-digit card number 102 and information 103 other than the card number such as a bank name, card type (VISA, Master, JCB, etc.), card holder, expiration date, and 3-digit security code. Composed. Here, at least the information 103 other than the card number is an example of “first information” described in the claims, and at least the card number 102 is an example of “second information”.

  The code management device 31 divides the credit card information 101 into a card number 102 and information 103 other than the card number, and issues a unique code 103 ′ associated with the information to the information 103 other than the card number. The code 103 ′ can be any combination of letters, numbers, and symbols in addition to numbers, and the number of digits or characters is also arbitrary. Further, the code expiration date, the upper limit amount, the number of times of use, and the like can be additionally set as the restriction items 104 of the code 103 ′.

  Returning to FIG. 9, a code management company database 32 is connected to the code management device 31 via a LAN in the code management company 3. The code management company database 32 stores credit card information other than the card number provided by the user, the issued code, and the like.

  FIG. 11 shows a data structure example of a code managed by the code management device 31 and credit card information associated therewith. For example, information 103 other than the card number such as the bank name “ABC”, the card type “VISA”, the holder “SATO TARO”, the expiration date “March 2015”, and the security code “344” is associated with the code “12456”. It is done. Further, the restriction item 104 such as the code expiration date “April 1, 2014”, the upper limit amount “5000 yen”, and the usable number of times “2” is associated with the code “12456”. The code management company database 32 stores such data.

  Returning to FIG. 9, the credit card management device 41 is arranged in a card issuing company 4 such as a bank or a card company. The credit card management device 41 has a function of making a credit determination in response to a credit inquiry from the online shopping device 2 and notifying the online shopping device 2 of the result.

  A credit card management device 41 is connected to a card issuing company database 42 via a LAN in the card issuing company 4. The card issuing company database 42 stores credit card information and the like. For this reason, the information stored in the card issuing company internal database 42 is strictly managed so as not to leak outside.

  Next, an operation example of the credit card settlement system according to the present embodiment will be described with reference to FIGS. 9 and 12. FIG. 12 is a flowchart showing an operation example of the credit card settlement system according to the present embodiment.

  The user (credit card owner) provides the code management device 31 with information 103 other than the card number of his / her credit card in order to have the code 103 'issued to his / her credit card (S11). At this time, the user can also provide the code management apparatus 31 with the restriction 104 regarding the code 103 ′ to be issued. The user operates the user terminal 1 to connect the user terminal 1 to the code management device 31 via the communication network 100 and input necessary items to a predetermined input format displayed on the display device of the user terminal 1. Thus, the information 103 other than the card number and the restrictions 104 can be provided to the code management device 31 online. Alternatively, the user can mail a document in which necessary information is entered to the code management company 3 and provide the information 103 other than the card number and the restriction items 104 to the code management device 31 offline.

  The code management device 31 receives information 103 other than the credit card number from the user and issues a unique code 103 'associated with the information (S12). The issued code 103 ′ is immediately transmitted to the user terminal 1 when online, and notified to the user by mail or mail when offline.

  Further, the code management device 31 transmits the issued code 103 ′, information 103 other than the card number associated with the code 103 ′, and the restriction item 104 regarding the code 103 ′ to the credit card management device 41 via the communication network. (S13). Upon receiving the code 103 ′, the information 103 other than the card number, and the restriction item 104, the credit card management device 41 stores them in the card issuing company database 32.

  A user operates the user terminal 1 to connect the user terminal 1 to the online shopping device 2 via the communication network 100 and purchases from the online shopping device 2 from a list of products displayed on the display device of the user terminal 1. Select what you want. Then, when purchasing the product by credit card settlement, the user manages the credit card information with the card number 102 and code management of his / her credit card in a predetermined input format displayed on the display device of the user terminal 1. The code 103 ′ issued from the device 31 is input. As a result, the card number 102 and the code 103 'are transmitted from the user terminal 1 to the online shopping apparatus 2 via the communication network 100 (S14).

  The online shopping device 2 transfers the card number 102 and the code 103 ′ received from the user terminal 1 to the credit card management device 41 via the communication network 100 and inquires about the credit (S 15). At this time, the card number 102 and the code 103 ′ received from the user terminal 1 by the online shopping device 2 are stored in the online shop database 22.

  When the credit card management device 41 receives a credit inquiry from the online shopping device 2, the credit card management device 41 searches the database 42 in the card issuing company and corresponds to the code 103 ′ received from the online shopping device 2 (information other than the card number). To extract. Then, the credit card management device 41 obtains credit card information including the card number 102 received from the online shopping device 2 and information other than the extracted card number and the credit card information stored in the card issuing company database 42. The authenticity of the card number 102 and the code 103 ′ received from the online shopping device 2 is verified. Furthermore, the credit card management device 41 refers to the restriction item 104 received from the code management device 31 in advance, determines whether or not the credit card number 102 received from the online shopping device 2 can be credited, and displays the determination result. The online shopping device 2 is notified (S16).

  When the online shopping device 2 receives the credit confirmation from the credit card management device 41, the online shopping device 2 executes settlement by credit card (S17). Thereby, the user can purchase goods online.

  The code 103 ′ used for the credit card settlement may be one-time, that is, disposable, and when the restriction item 104 is set, the same code 103 ′ can be used repeatedly within the limited range. The code 103 ′ is invalidated or discarded only when any one of the conditions included in the restriction 104 is not satisfied. Invalidation is a measure for disabling the code 103 'while leaving the information of the code 103', and discarding is deleting the code 103 'from the database completely. In the case of invalidation, the same number or character string cannot be used for the newly issued code 103 ′, whereas in the case of discard, the same number or character string can be used for the newly issued code 103 ′.

  For example, in the example of the code “12456” shown in FIG. 11, when the code 103 ′ is used after April 1, 2014, which is the code expiration date, it is used more than once when it exceeds the upper limit amount. If any of the cases apply, the code 103 'is invalidated or discarded.

  After making the credit determination, the credit card management device 41 notifies the code management device 31 of the used code 103 ′ and logically or physically deletes the code 103 ′ from the card issuing company database 42. (S18). Further, the code management device 31 logically or physically deletes the used code 103 'notified from the credit card management device 41 from the code management company database 32 (S19). The logical deletion of the code 103 ′ is an example of an invalidation measure, and the physical deletion is an example of a discarding measure.

  As described above, according to the present embodiment, in credit card settlement in online shopping, the credit card information stored in the online shop database 22 is the card number 102 and the code 103 ′, and the information 103 other than the card number is online. It is not stored in the in-shop database 22. Therefore, even if the information stored in the online shop database 22 is leaked, information other than the card number such as the credit card bank name and card type cannot be known from the code 103 ′. Credit card information security is protected. Further, the credit card information stored in the code management company internal database 32 is only the information 103 other than the card number and the restrictions 104, and the card number 102 is not stored in the code management internal database 32. Therefore, even if the information stored in the code management company database 32 is leaked, the card number 102 cannot be known from the information 103 other than the card number and the restrictions 104, and the credit card information Security is protected. Further, unlike the conventional one-time card ID, the code 103 'can be freely set without following a specific rule. Therefore, the credit card settlement system according to the present embodiment can be applied to all card issuing companies and all types of credit cards without forcing the existing card issuing company to issue a code.

(Fourth embodiment)
FIG. 13 is a schematic configuration diagram of a credit card settlement system according to the fourth embodiment of the present invention. The credit card payment system according to this embodiment includes a user terminal 1, an online shopping device 21, and a credit card management device 41. These terminals and devices are connected to the communication network 100. In the present embodiment, the same components as those in the third embodiment are denoted by the same reference numerals as those in the third embodiment, and description thereof is omitted.

  The credit card settlement system according to the present embodiment omits the code management device 31 in the third embodiment, and associates with the information 103 other than the credit card number in response to a request from the user (credit card owner). The credit card management device 41 has a function of issuing a unique code 103 ′.

  An operation example of the credit card settlement system according to the present embodiment will be described with reference to FIGS. 13 and 14. FIG. 14 is a flowchart showing an operation example of the credit card settlement system according to the present embodiment.

  The user (credit card owner) requests the credit card management device 41 to issue a code in order to have the code 103 'issued to his / her credit card (S21). At this time, the user can also provide the credit card management apparatus 41 with the restriction 104 regarding the code 103 ′ to be issued. The user operates the user terminal 1 to connect the user terminal 1 to the credit card management apparatus 41 via the communication network 100 and inputs necessary items into a predetermined input format displayed on the display device of the user terminal 1. Thus, the code issuance request and the restriction 104 can be provided to the credit card management device 41 online. Alternatively, the user can mail a document in which necessary information is written in the credit card management device 41 and provide the code issuance request and the restriction item 104 to the credit card management device 41.

  The credit card management device 41 receives a code issuance request from the user and issues a unique code 103 'associated with the information 103 other than the card information (S22). The issued code 103 ′ is immediately transmitted to the user terminal 1 when online, and notified to the user by mail or mail when offline.

  A user operates the user terminal 1 to connect the user terminal 1 to the online shopping device 2 via the communication network 100 and purchases from the online shopping device 2 from a list of products displayed on the display device of the user terminal 1. Select what you want. Then, when purchasing the product by payment with a credit card, the user uses the credit card information 102 and the credit card as the credit card information in a predetermined input format displayed on the display device of the user terminal 1. The code 103 ′ issued from the management apparatus 41 is input. As a result, the card number 102 and the code 103 'are transmitted from the user terminal 1 to the online shopping device 2 via the communication network 100 (S24).

  The online shopping device 2 transfers the card number 102 and the code 103 ′ received from the user terminal 1 to the credit card management device 41 via the communication network 100 and inquires about the credit (S 25). At this time, the card number 102 and the code 103 ′ received from the user terminal 1 by the online shopping device 2 are stored in the online shop database 22.

  When the credit card management device 41 receives a credit inquiry from the online shopping device 2, the credit card management device 41 searches the database 42 in the card issuing company and corresponds to the code 103 ′ received from the online shopping device 2 (information other than the card number). To extract. Then, the credit card management device 41 obtains credit card information including the card number 102 received from the online shopping device 2 and information other than the extracted card number and the credit card information stored in the card issuing company database 42. The authenticity of the card number 102 and the code 103 ′ received from the online shopping device 2 is verified. Further, the credit card management device 41 refers to the restriction 104 provided by the user, determines whether or not the card number 102 received from the online shopping device 2 can be credited, and sends the determination result to the online shopping device 2. Notification is made (S26).

  When the online shopping device 2 receives the credit confirmation from the credit card management device 41, the online shopping device 2 executes settlement by credit card (S27). Thereby, the user can purchase goods online.

  After making the credit determination, the credit card management device 41 logically or physically deletes the used code 103 'from the card issuing company database 42 (S28). The logical deletion of the code 103 ′ is an example of an invalidation measure, and the physical deletion is an example of a discarding measure.

  As described above, according to the present embodiment, the security of credit card information in online shopping can be effectively protected as in the effect of the third embodiment, and the card issuing company 4 relies on the code management company 3. It is possible to issue and manage the code 103 ′ that replaces the credit card information by itself.

(Modification 1)
In the first and second embodiments described above, an example in which the restriction item 104 (refer to FIGS. 10 and 11 in particular) provided by the user described in the third and fourth embodiments is added has been described. However, as in the third and fourth embodiments, an example in which the restriction item 104 is added can be similarly implemented. For example, in the first and second embodiments, instead of the code 103 ′ shown in FIG. 3, a code 103 ′ that is coded including the contents of the restriction items 104 as shown in FIG. 11 is used. be able to.

  In this case, in the first embodiment, in the operation example shown in FIG. 4, when the information management device 31 receives the information 103 other than the card number and the code 103 ′ from the online shopping device 21, and further the restriction item 104. (Corresponding to the operation of S11), while returning the receipt notification to the online shopping device 21, the information 103 other than the card number, the code 103 ′, and the restriction item 104 are transmitted to the credit card management device 41 (S120a). It is good to make it. In the operation example shown in FIG. 5, when the information management device 31 receives the information 103 other than the card number from the online shopping device 21 and further the restriction item 104, the information management device 31 issues a code 103 ′ to issue the online shopping device 21. On the other hand, the information 103 other than the card number, the code 103 ′, and the restriction item 104 may be transmitted to the credit card management apparatus 41 (S120a). In this manner, in the first embodiment, when the credit card management apparatus 41 determines the credit, the credit card management device 41 refers to the restriction 104 received in advance as in the third and fourth embodiments. It is possible to determine whether or not it is possible and notify the online shopping device 21 of the determination result. The other operations in this modification are not particularly described repeatedly, but can be appropriately modified as in the third and fourth embodiments.

  In the case of the second embodiment, in the operation example shown in FIGS. 7 and 8, the user terminal 1 provides the restriction item 104 to the online shopping device 21 in addition to the credit card information (operation of S20). ), The online shopping device 21 transmits information 103 other than the card number, the code 103 ′, and the restriction item 104 to the credit card management device 41 (corresponding to the operations of S21 and S210). In this way, in the second embodiment, when the credit card management apparatus 41 determines the credit, the credit card management device 41 refers to the restriction item 104 received in advance as in the third and fourth embodiments. It is possible to determine whether or not it is possible and notify the online shopping device 21 of the determination result. The other operations in this modification are not particularly described repeatedly, but can be appropriately modified as in the third and fourth embodiments.

(Modification 2)
In the above first to fourth embodiments (including the first modification), as shown in FIGS. 2 and 10, the credit card information 101 is divided into the card number 102 and the information 103 other than the card number, Furthermore, depending on the case, it has been described that the above-described effect can be realized by adding the restriction item 104 and carrying out as described in the above-described embodiment.

  However, the separation of the credit card information 101 is not limited to the above-described embodiment. As a modification, the card number 102 is also included in the information to be encoded, including a part of the card number 102, The rest can be information to be encoded. In other words, the present invention can be implemented by dividing the credit card information 101 into a number portion that is a coded portion of the card number 102 and information 103 other than the remaining number portion and the card number.

  Specifically, as shown in FIG. 15A, for example, when the card number is “4980012345567890”, the portion of “12345567890”, which is the last 10 digits, is the portion to be encoded. On the other hand, the first 6-digit “498000”, which is a portion that is not particularly problematic even if it is made public, may be a portion not to be coded.

  Further, as shown in FIG. 15B, for example, when the card number is “4980012345567890”, “123456” which is the first 6 digits of the “12345567890” which is the back 10 digits. While the portion is a portion to be coded, the remaining 4-digit portion “7890” and the portion of the first 6 digits “498000” that is not a problem even if it is disclosed to the public are coded. It may be a part that does not.

  FIG. 15C shows an example of the data structure of the code managed by the code management device 31 or the information management device 31 and the credit card information associated therewith in the case of FIG. For example, information 103 and a card other than the card number such as a code “12456”, a bank name “ABC”, a card type “VISA”, a holder “SATO TARO”, an expiration date “March 2015”, and a security code “344”. A part of the number “12345567890” is associated. Further, the restriction item 104 such as the code expiration date “April 1, 2014”, the upper limit amount “5000 yen”, and the usable number of times “2” is associated with the code “12456”.

  In this modification, the information 103 other than the card number and a part of the card number are examples of “first information” described in the claims, and the remaining number of the card number 102 is “ This is an example of “second information”.

  In this way, the credit card number can be divided into a portion that may be disclosed and a portion that may not be disclosed, for example, and the security protection of credit card information in online shopping can be flexibly protected according to the transaction situation, etc. Become.

  In addition, although embodiment of this invention was described, this invention is not restricted to the structure of said embodiment, A various deformation | transformation is possible. For example, a code may be issued for credit card partial information excluding the card number and other information (for example, expiration date) from the credit card information.

  Further, the configuration and processing shown in the above embodiment using FIGS. 1 to 15 are only one embodiment of the present invention, and are not intended to limit the present invention to the configuration and processing.

1 User terminal 21 Online shopping device 31 Information storage device or code management device 41 Credit card management device 101 Credit card information 102 Card number (second information)
103 Information other than card number (first information)
103 'Code 104 Restrictions

Claims (22)

A system for making payment by credit card in online shopping,
An online shopping device that sells products online,
An information storage device installed in a place different from the online shopping device and storing a part of credit card information,
The online shopping device receives a credit card information from a credit card owner, and a unique code associated with the first information which is a part of the credit card information and excluding at least a part of the card number A function of transmitting the first information and the code to the information storage device, deleting the first information and being a remaining part of the credit card information, at least the remaining number of the card number The second information including the function to hold the code, the credit card owner receives a payment request by the credit card, and sends the held code to the information storage device to correspond to the code Function for requesting provision of the first information, and the first information received from the information storage device and before holding Has a function to enforce payment by credit card with a credit card information restored from the second information,
The information storage device stores the first information and the code received from the online shopping device in association with each other, and receives the request for the provision of the first information from the online shopping device. A credit card having a function of extracting information corresponding to the code received from the online shopping device from the first information being transmitted, and transmitting the extracted information to the online shopping device Payment system. A system for making payment by credit card in online shopping,
An online shopping device that sells products online,
An information storage device installed in a place different from the online shopping device and storing a part of credit card information,
The online shopping device receives provision of credit card information from a credit card owner, and sends first information that is a part of the credit card information and at least a part of the card number to the information storage device. A function of transmitting, receiving a unique code associated with the first information from the information storage device, deleting the first information and being a remaining part of the credit card information, at least of the card number The second information including the remaining number and the function for holding the code, receiving a request for payment by a credit card from the credit card owner, and transmitting the held code to the information storage device to send the code A function for requesting provision of the first information corresponding to the information, and the first information received from the information storage device Has a function to enforce payment by credit card by using the credit card information restored from the second information are,
The information storage device receives the first information from the online shopping device, issues the code, transmits the code to the online shopping device, and associates the first information and the code with each other A function to store the information, and information corresponding to the code received from the online shopping device among the stored first information in response to a request for provision of the first information from the online shopping device. A credit card settlement system having a function of extracting and transmitting the extracted information to the online shopping device. The said online shopping apparatus further has a function which restore | restores the said credit card information from the said 1st information received from the said information storage apparatus, and the said 2nd information hold | maintained. Item 3. A credit card settlement system according to item 2. A credit card management device for managing credit card information;
The online shopping device further has a function of receiving a request for payment by a credit card from the credit card owner and transmitting the held second information to the credit card management device,
The information storage device receives a request for providing the first information from the online shopping device, and stores information corresponding to the code received from the online shopping device among the stored first information. A function of extracting and transmitting the extracted information to the credit card management device instead of the online shopping device;
The credit card management device has a function of restoring the credit card information from the first information received from the information storage device and the second information received from the online shopping device. The credit card settlement system according to claim 1 or claim 2. 5. The information storage device according to claim 1, further comprising a function of confirming whether or not the request for provision of the first information from the online shopping device is valid. The credit card payment system described in 1. A payment method by credit card in online shopping,
An online shopping device that sells products online receives credit card information from a credit card owner, and the first information is a part of the credit card information and excluding at least a part of the card number. Issue an associated unique code, send the first information and the code to an information storage device installed at another location, delete the first information, and the remaining part of the credit card information And holding at least second information including the remaining number of the card number and the code,
The information storage device stores the first information and the code received from the online shopping device in association with each other;
The online shopping device receives a request for payment by credit card from the credit card owner, and transmits the held code to the information storage device to provide the first information corresponding to the code. Request,
The information storage device receives a request for provision of the first information from the online shopping device, and stores information corresponding to the code received from the online shopping device among the stored first information. Extract, send the extracted information to the online shopping device,
The online shopping device executes a credit card settlement using the credit card information restored from the first information received from the information storage device and the retained second information. Credit card payment method. A payment method by credit card in online shopping,
An online shopping device that sells products online receives credit card information from a credit card owner, and receives first information that is a part of the credit card information and at least a part of the card number. , Send it to an information storage device installed in another location,
The information storage device receives the first information from the online shopping device, issues a unique code associated with the first information, transmits the code to the online shopping device, and transmits the first information to the online shopping device. Storing information and the code in association with each other;
The online shopping device receives the code from the information storage device, deletes the first information, and includes at least a remaining number of the card number as a remaining part of the credit card information. Information and the code,
The online shopping device receives a request for payment by credit card from the credit card owner, and transmits the held code to the information storage device to provide the first information corresponding to the code. Request,
The information storage device receives a request for provision of the first information from the online shopping device, and stores information corresponding to the code received from the online shopping device among the stored first information. Extract, send the extracted information to the online shopping device,
The online shopping device executes a credit card settlement using the credit card information restored from the first information received from the information storage device and the retained second information. Credit card payment method. 8. The online shopping device restores the credit card information from the first information received from the information storage device and the held second information. Credit card payment method. The online shopping device receives a request for payment by credit card from the credit card owner, and transmits the held second information to a credit card management device that manages credit card information,
The information storage device receives a request for provision of the first information from the online shopping device, and stores information corresponding to the code received from the online shopping device among the stored first information. Extract, and send the extracted information to the credit card management device instead of the online shopping device,
The credit card management device restores the credit card information from the first information received from the information storage device and the second information received from the online shopping device. Item 8. A credit card settlement method according to Item 7. The credit according to any one of claims 6 to 9, wherein the information storage device confirms whether or not the request for provision of the first information from the online shopping device is valid. Card payment method.
A system for making payment by credit card in online shopping,
An online shopping device that sells products online,
A credit card management device for managing credit card information;
A code management device for receiving a first information which is a part of credit card information and excluding at least a part of a card number from a credit card owner and issues a unique code associated with the first information And comprising
As the credit card information when the online shopping device pays for the product with a credit card, the code issued from the code management device from the user terminal and the remaining part of the credit card information and at least the card number The second information including the remaining number is received, the received code and the second information are transferred to the credit card management device, the credit is inquired, and the credit card is confirmed when the credit is confirmed. Execute the settlement,
The credit card management device receives and stores the code and the first information associated therewith from the code management device, and the online shopping device out of the stored first information The information corresponding to the code received from is extracted, and the extracted information and the credit card information restored from the second information received from the online shopping device are collated with the credit card information managed by itself A credit card settlement system for notifying the result to the online shopping device. The credit card management device notifies the code management device of the code used for payment by credit card and deletes the code;
12. The credit card settlement system according to claim 11, wherein the code management device deletes the code notified from the credit card management device and the first information associated therewith. The code management device is configured such that at least one of the number of times of use, the amount of money that can be used, and the expiration date is set as a restriction item in the code
The credit card settlement system according to claim 11 or 12, wherein the credit card management device performs a credit determination based on the restriction set in the code. A system for making payment by credit card in online shopping,
An online shopping device that sells products online,
A unique code that manages credit card information and is associated with the first information that is a part of the credit card information except at least a part of the card number in response to a request from the credit card owner. A credit card management device,
As the credit card information when the online shopping device pays for the product with a credit card, at least the card issued from the user card and the remaining part of the credit card information and the code issued from the credit card management device The second information including the remaining number of the number is received, the received code and the second information are transferred to the credit card management device, the credit is inquired, and the credit is confirmed when the credit is confirmed. To execute payment by card,
The credit card management device extracts information corresponding to the code received from the online shopping device from the stored first information, and the extracted information and the first information received from the online shopping device. 2. A credit card settlement system, wherein the credit card information restored from the information of 2 and the credit card information managed by itself are collated and the result is notified to the online shopping device. 15. The credit card settlement system according to claim 14, wherein the credit card management device deletes a code used for settlement by credit card. In the credit card management device, at least one of the number of times of use, the amount of money that can be used, and the expiration date is set as a restriction item in the code,
16. The credit card settlement system according to claim 14 or 15, wherein the credit card management device performs a credit determination based on the restriction set in the code. A payment method by credit card in online shopping,
The code management device receives a unique code associated with the first information upon receiving provision of the first information which is a part of the credit card information from the credit card owner and excluding at least a part of the card number. Issue,
A credit card management device that manages credit card information receives and stores the code and the first information associated therewith from the code management device;
As the credit card information when the user terminal pays the price of the product with a credit card to the online shopping device that sells the product online, the code issued from the code management device and the remaining part of the credit card information Second information including at least the remaining number of the card number is transmitted,
The online shopping device transfers the code and the second information received from the user terminal to the credit card management device to inquire about credit;
The credit card management device extracts information corresponding to the code received from the online shopping device from the stored first information, and the extracted information and the first information received from the online shopping device. The credit card information restored from the information of 2 and the credit card information managed by itself are collated to notify the online shopping device of the result,
The credit card settlement method, wherein the online shopping device executes settlement by credit card when credit is confirmed by the credit card management device. The credit card management device notifies the code management device of the code used for payment by credit card and deletes the code,
18. The credit card settlement method according to claim 17, wherein the code management device deletes the code notified from the credit card management device and the first information associated therewith. The code management device is configured such that at least one of the number of times of use, the amount of money that can be used, and the expiration date is set as a restriction item in the code
The credit card settlement method according to claim 17 or 18, wherein the credit card management device performs a credit determination based on the restriction set in the code. A payment method by credit card in online shopping,
A unique credit card management device that manages credit card information is associated with first information that is part of credit card information and at least part of the card number in response to a request from the credit card owner Issue a code,
The code issued from the credit card management device and the remaining part of the credit card information as credit card information when the user terminal pays the price of the product with a credit card to an online shopping device that sells the product online And transmitting at least second information including the remaining number of the card number,
The online shopping device transfers the code and the second information received from the user terminal to the credit card management device to inquire about credit;
The credit card management device extracts information corresponding to the code received from the online shopping device from the stored first information, and the extracted information and the first information received from the online shopping device. The credit card information restored from the information of 2 and the credit card information managed by itself are collated to notify the online shopping device of the result,
The credit card settlement method, wherein the online shopping device executes settlement by credit card when credit is confirmed by the credit card management device. 21. The credit card settlement method according to claim 20, wherein the credit card management device deletes a code used for a credit card settlement. The credit card management device sets at least one of the number of times of use, the amount of money that can be used, and an expiration date as a restriction item in the code,
The credit card settlement method according to claim 20 or 21, wherein the credit card management device makes a credit determination based on the restriction set in the code.