JP2019149120A - System, method, and program of temporarily making authentication unnecessary - Google Patents

Abstract

To provide a system, a method, and a program that can temporarily make authentication unnecessary.SOLUTION: A system of temporarily making authentication unnecessary includes a processor that is configured to receive an instruction requesting to make authentication of an online service unnecessary, make the authentication unnecessary on the basis of the instruction, and cancel making the authentication unnecessary if an event for cancelling making the authentication unnecessary occurs. The execution of the authentication is omitted from execution of making the authentication unnecessary to execution of cancelling making the authentication unnecessary.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an authentication technique.

  Currently, many banks are considering increasing the efficiency of store counter operations. At a conventional window, a bank employee listens to a customer from a customer who visits the store, asks the customer to fill out a required form on the form, and enters the data based on the form. However, depending on the type of procedure desired by the customer, the bank employee does not necessarily have to respond at the counter, and the customer can complete the procedure himself / herself using Internet banking. For example, it is possible to reduce the window work by allowing the customer to carry out the procedure by Internet banking with a tablet or the like installed in the store.

  However, procedures performed in Internet banking may require authentication with a one-time password, and the customer must have a one-time password generator (for example, a smartphone application software or a card-type generator). , Customers can not proceed. For this reason, the bank staff must be able to use a one-time password (for example, let the customer's smartphone download the application software) or respond as usual at the window.

  Therefore, the present invention has been made in view of such a problem, and an object of the present invention is to provide a system, method, and program that can temporarily eliminate authentication using a one-time password or the like. It is to provide.

  In order to achieve such an object, a first aspect of the present invention is an authentication temporary unnecessary system. This system receives an instruction to execute the unnecessary authentication of the online service, performs an unnecessary authentication based on the instruction, and an event for canceling the unnecessary authentication occurs A processor configured to execute the cancellation of the unnecessary authentication, and the execution of the authentication from the time when the authentication is unnecessary until the cancellation of the unnecessary authentication is performed. Is omitted.

  The second aspect of the present invention is a method implemented by the temporary authentication unnecessary system. The method includes a step of receiving an instruction for performing authentication unnecessary for an online service, a step of executing unnecessary authentication based on the instruction, and a step for canceling the unnecessary authentication. When an event occurs, the step of canceling the unnecessary authentication is performed, and the execution of the authentication is performed after the unnecessary authentication is performed until the cancellation of the unnecessary authentication is performed. Omitted.

  The third aspect of the present invention is a temporary authentication unnecessary program. This program is a program that causes a computer to function as the temporary authentication unnecessary system of the first aspect.

  According to the present invention, authentication using a one-time password or the like can be temporarily omitted.

1 is an overall schematic diagram including an authentication temporary unnecessary system according to an embodiment of the present invention. 1 is a functional block diagram of an authentication temporary unnecessary system according to an embodiment of the present invention. It is an example of the unnecessary database concerning one Embodiment of this invention. It is a flowchart which shows an example of the process flow of the unnecessary in the authentication temporary unnecessary system concerning one Embodiment of this invention. It is a flowchart which shows an example of the processing flow of the authentication in the authentication temporary unnecessary system concerning one Embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the present specification, an embodiment is described in which authentication using a one-time password for Internet banking is temporarily unnecessary. However, the present invention is not limited to an arbitrary authentication (for example, a one-time password performed by any online service). The present invention is also applicable to an embodiment that temporarily eliminates the need for passwords, random number tables, passwords, biometric information, etc. In addition, in this specification, only a part of a plurality of authentications is unnecessary (specifically, authentication with a personal identification number at the time of login is not required, and authentication with a one-time password when performing a procedure) However, the present invention is also applicable to an embodiment in which all the authentications among a plurality of authentications are unnecessary.

  FIG. 1 is an overall schematic diagram including a temporary authentication unnecessary system 110 according to an embodiment of the present invention. The schematic diagram shows that the temporary authentication unnecessary system 110, the in-store tablet 121 and the bank tablet 122 in the bank A branch 120, the in-store tablet 131 and the bank tablet 132 in the bank B branch 130, A customer terminal 141 located outside the store 140 is included. Each will be described below.

  The temporary authentication unnecessary system 110 is a system that executes unnecessary authentication or cancels unnecessary authentication using a one-time password for Internet banking. The temporary authentication unnecessary system 110 is installed in a system that provides Internet banking or is connected to a system that provides Internet banking. The temporary authentication unnecessary system 110 can transmit / receive data to / from the in-store tablets 121 and 131, the employee tablets 122 and 132, and the customer terminal 141. Details of the temporary authentication unnecessary system 110 will be described with reference to FIG.

  The in-store tablets 121 and 131 are terminals that are used when a customer who has visited the A branch 120 or B branch 130 of a bank uses the Internet banking to complete the procedure by himself / herself. The in-store tablets 121 and 131 are not limited to tablets, and may be arbitrary computers such as personal computers.

  The employee tablets 122 and 132 are terminals that instruct the temporary authentication unnecessary system 110 to execute the unnecessary authentication with the one-time password for Internet banking. For example, a clerk in the lobby of a bank A branch 120 or B branch 130 uses the clerk tablet 122 or 132 to eliminate the need for authentication using the customer's one-time password, and then the customer uses the tablet at the store. You can navigate to 121 or 131. The employee tablets 122 and 132 are not limited to tablets, and may be any computer such as a personal computer.

  The customer terminal 141 is a terminal used when a customer uses Internet banking at a place other than a bank store (outside the store 140). For example, a customer who has left the bank's A branch 120 or B branch 130 can use Internet banking using his customer terminal 141. The customer terminal 141 may be an arbitrary computer such as a personal computer, a smartphone, or a tablet.

  FIG. 2 is a functional block diagram of the temporary authentication unnecessary system 110 according to the embodiment of the present invention. The temporary authentication unnecessary system 110 includes an unnecessary instruction receiving unit 201, an unnecessary executing unit 202, an unnecessary canceling executing unit 203, a determining unit 204, and an unnecessary database 205. The temporary authentication unnecessary system 110 is a computer including a processor and a memory. The temporary authentication unnecessary system 110 also executes a program for operating the unnecessary instruction receiving unit 201, the unnecessary executing unit 202, the unnecessary canceling executing unit 203, and the determining unit 204, or a process for executing processing described later. Including a storage medium storing the program.

  The unnecessary instruction receiving unit 201 can receive instruction data for requesting that unnecessary authentication be executed. The instruction data may include information for identifying authentication that is unnecessary. In the present embodiment, the dispensation instruction receiving unit 201 can receive instruction data for requesting the unnecessary use of the one-time password for Internet banking from the employee tablets 122 and 132. In the present embodiment, the instruction data may include information (for example, a store number and an account number) for specifying a customer account. The unnecessary instruction receiving unit 201 can record the received instruction data in a memory (not shown) so that the unnecessary executing unit 202 can refer to it. The instruction data may be received before logging in to the online service, or may be received during login to the online service.

  The unnecessary execution unit 202 can execute unnecessary authentication. In the present embodiment, the unnecessary execution unit 202 can execute the unnecessary authentication with a one-time password for Internet banking. In the present embodiment, the unnecessary application executing unit 202 stores the customer's account in the unnecessary database 205 based on the information for specifying the customer account included in the instruction data received by the unnecessary instruction receiving unit 201. The data of “one-time password unnecessary status (described later)” of the account can be changed from “(one-time password) required” to “(one-time password) unnecessary”. Further, in the present embodiment, the unnecessary execution unit 202 records the time when the authentication is unnecessary in the “unnecessary execution time (to be described later)” of the customer's account in the unnecessary database 205. it can. It should be noted that the unnecessary authentication may be executed before logging in to the online service, or may be executed while logging in to the online service.

  The unnecessary database 205 is a database for managing the status of unnecessary authentication. In the present embodiment, the unnecessary database 205 manages information on whether or not authentication using an Internet banking one-time password is unnecessary for each account. Details of the unnecessary database 205 will be described with reference to FIG.

  FIG. 3 is an example of the unnecessary database 205 according to an embodiment of the present invention. The unnecessary database 205 stores data such as “account information”, “account name”, “one-time password unnecessary status”, “unnecessary execution time”, “execution store”, and “executor” for each account.

  “Account information” is information for specifying an account, and is, for example, a store number, a type, an account number, or the like. “Account name” is the account name of the account. “One-time password unnecessary status” indicates whether or not the one-time password authentication for Internet banking is unnecessary for the account. For example, in the case of “unnecessary”, authentication by a one-time password is not necessary, and in the case of “necessary”, authentication by a one-time password is not unnecessary. For example, “one-time password is not required” for the first procedure, but “one-time password is not required” for the second procedure is “necessary”. Can also be managed. The “unnecessary execution time” is a time when the unnecessary execution unit 202 executes the unnecessary authentication. “Executive store” is information for specifying a store in which the employee tablets 122 and 132 to which instruction data for requesting that authentication is unnecessary is installed is, for example, a store number. The “executor” is information for identifying a clerk who has made authentication unnecessary, and is, for example, a name and a clerk ID. Information of “execution store” and “executor” may be transmitted from the employee tablets 122 and 132 to the temporary authentication unnecessary system 110.

  In FIG. 3, management is performed for each account, but may be performed for each Internet banking contract (that is, for each customer). In this embodiment, the instruction data that is required to perform authentication unnecessary may include information for identifying a customer (for example, an Internet banking subscriber number). For example, if a customer owns multiple accounts and these multiple accounts are linked to a single subscriber number for Internet banking, it is possible to collectively manage the necessity of authentication for multiple accounts. .

  Returning to FIG. The unnecessary release cancellation execution unit 203 can cancel the unnecessary authentication. In the present embodiment, the unnecessary cancellation canceling unit 203 can cancel the unnecessary authentication by the Internet banking one-time password. In the present embodiment, when the unneeded cancellation executing unit 203 determines that an event for canceling unnecessary has occurred, the data of “one-time password unnecessary status” of the customer's account in the unnecessary database 205 is “( It is possible to change from “one-time password) unnecessary” to “(one-time password) required”. Hereinafter, an example of an event for canceling unnecessary will be described.

<Necessary cancellation event 1>
The event for canceling the unnecessary is, for example, that a predetermined time elapses from the time when the unnecessary is executed. The unnecessary release cancellation execution unit 203 includes a time recorded in the “unnecessary execution time” in the unnecessary database 205, a time recorded in “unnecessary time (not shown)” in the unnecessary database 205, When the “unnecessary time” elapses from the time when the unnecessary processing is executed, the unnecessary processing can be canceled. The “unnecessary time” can be an arbitrary time (for example, 00 minutes, until closing, etc.). Further, the same “unnecessary time” may be set for all accounts (or customers), or the “unnecessary time” for each account (or customer) may be set. In addition, the “unnecessary time” may be set before the execution of the unnecessary is instructed, or is set when the execution of the unnecessary is instructed (for example, the bank staff sets the unnecessary time). You may make it designate an unnecessary time when making it execute.

<Necessary cancellation event 2>
An event for canceling unnecessary is, for example, that a customer logs out from Internet banking. Unnecessary cancellation execution unit 203 obtains information on the status of login and logout of Internet banking from a system that provides Internet banking, and starts after the time recorded in “unnecessary execution time” in unnecessary database 205. When logout is performed, the unnecessary can be canceled.

  Further, logout may be forcibly performed as follows. A camera mounted on or connected to the in-store tablet 121 or 131 captures a space on the display side of the in-store tablet 121 or 131 and acquires a moving image. Then, when the store tablet 121, 131 or the temporary authentication unnecessary system 110 no longer detects a human (that is, a customer using Internet banking) in the moving image acquired by the camera, the store tablet 121, In 131, the system providing Internet banking is instructed to forcibly log out from the currently logged-in Internet banking. In this way, even if the customer forgets to log out, the customer is forced to log out by leaving the storefront tablets 121 and 131, and the unnecessary application is released.

<Necessary cancellation event 3>
An event for canceling unnecessary is, for example, receiving instruction data for requesting cancellation of unnecessary. Unnecessary cancellation executing unit 203 can execute the cancellation of unnecessary when receiving instruction data requesting to cancel the unnecessary authentication by Internet banking one-time password from employee tablets 122 and 132. . For example, when a bank employee confirms that the customer has completed the procedure using Internet banking, the bank employee uses tablets 122 and 132 to cancel the unnecessary authentication of the customer using the one-time password. Can be made.

  Returning to FIG. The determination unit 204 can determine whether or not authentication is unnecessary. In this embodiment, the determination unit 204 can determine whether or not authentication is unnecessary when a system that provides Internet banking performs authentication. In this embodiment, when there is an inquiry from a system that provides Internet banking, the determination unit 204 refers to the “one-time password unnecessary status” in the unnecessary database 205 to determine whether authentication is unnecessary. Can be notified to a system that provides Internet banking.

  More specifically, the determination unit 204 can receive an inquiry about the status of unnecessary authentication from a system that provides an online service. Further, the determination unit 204 can determine whether or not the authenticated authentication can be made unnecessary. Further, the determination unit 204 can determine whether or not the authentication determined to be unnecessary can be unnecessary. Also, the determination unit 204 can notify the system that provides the online service that authentication is no longer necessary.

  In an embodiment of the present invention, it is possible to limit terminals that do not require authentication to some terminals. Hereinafter, an example of a terminal that does not require authentication is described.

<Authentication unnecessary terminal 1>
A terminal that is allowed to be authenticated is, for example, a terminal having predetermined identification information. The identification information is arbitrary information for identifying the terminal, for example, SIM card identification information (IMEI). The determination unit 204 can determine that a terminal having predetermined identification information is a terminal that does not require authentication. For example, the determination unit 204 acquires the identification information of the in-store tablets 121 and 131 from the in-store tablets 121 and 131. Also, the determination unit 204 refers to “execution store” in the unnecessary database 205 and identifies a store that has made authentication unnecessary. And the determination part 204 refers to the database (not shown) which manages the identification information of the in-store tablets 121 and 131 installed in each store, and the in-store tablets 121 and 131 execute unnecessary authentication. If it is determined that the terminal is installed in the store (executive store), it is possible to permit the unnecessary authentication of the in-store tablets 121 and 131. As described above, only the in-store tablet installed in the store (execution store) that has made authentication unnecessary can perform the procedure by Internet banking without authentication by the one-time password. In other words, the customer terminal 141 that does not have the predetermined identification information cannot perform the procedure by Internet banking unless authentication by the one-time password is performed.

<Authentication unnecessary terminal 2>
For example, a terminal that is not required to be authenticated is a terminal in a predetermined location. The determination unit 204 can determine that a terminal located at a predetermined location is a terminal that is allowed to require no authentication. For example, the determination unit 204 acquires information on the current positions of the in-store tablets 121 and 131 using GPS (Global Positioning System) or the like. Also, the determination unit 204 refers to “execution store” in the unnecessary database 205 and identifies a store that has made authentication unnecessary. Then, the determination unit 204 refers to a database (not shown) for managing information for specifying the location of each store (for example, longitude / latitude information), and the store tablets 121 and 131 are authenticated. If it is determined that it is located in the store (executive store) that has made unnecessary, it is possible to permit the authentication of the in-store tablets 121 and 131 to be unnecessary. As described above, only the in-store tablet located in the store (execution store) that has made authentication unnecessary can perform the procedure by Internet banking without authentication by the one-time password. In other words, a customer terminal 141 that is not in a predetermined location cannot perform the procedure by Internet banking unless authentication by a one-time password is performed.

  In one embodiment of the present invention, the identity of the customer can be verified before the authentication is unnecessary. Hereinafter, an example of identity verification will be described.

<Identification 1>
The bank clerk can visually check the customer's official materials (eg, driver's license, passport, personal number card, etc.) to confirm that the customer is a true Internet banking user.

<Identification 2>
Arbitrary devices match the customer's biometric information registered in advance (for example, face, iris, fingerprint, vein, voice, etc.) with the biometric information of the customer who visited the store, so that the customer can truly use Internet banking. Can be confirmed. For example, if the <identity verification 2> match is successful, an arbitrary device can transmit instruction data for requesting that the authentication is unnecessary to the temporary authentication unnecessary system 110.

<Acceptance determination>
In one embodiment of the present invention, the following determination may be made in order for a bank clerk to determine whether a customer may be directed to an Internet banking procedure. In response to the inquiry from the employee tablets 122 and 132, the temporary authentication unnecessary system 110 can determine whether or not the procedure desired by the customer can be performed by Internet banking. Further, the temporary authentication unnecessary system 110 can determine whether or not the one-time password authentication is required in the procedure desired by the customer in response to the inquiry from the employee tablets 122 and 132. Further, the temporary authentication unnecessary system 110 determines whether the one-time password authentication of the procedure desired by the customer can be made unnecessary in response to the inquiry from the employee tablets 122 and 132. be able to.

<Anti-fraud>
In one embodiment of the present invention, the following processing can be performed in order to prevent unauthorized authentication from being executed illegally. The temporary authentication unnecessary system 110 can be configured not to receive the instruction data for requesting that the authentication be unnecessary or not execute the authentication unnecessary outside the business hours of each store. In addition, the system that provides Internet banking can prevent authentication from being omitted outside the business hours of each store. Further, the temporary authentication unnecessary system 110 can periodically notify a predetermined terminal of the history of the unnecessary authentication (ie, history data in the unnecessary database 205). Further, when a future time is recorded in the “unnecessary execution time” of the unnecessary database 205, the data may be deleted.

FIG. 4 is a flowchart showing an example of a processing flow for making unnecessary in the temporary authentication unnecessary system 110 according to the embodiment of the present invention.
In step 401 (S401), the temporary authentication unnecessary system 110 receives instruction data for requesting execution of authentication unnecessary from a terminal for instructing execution of authentication unnecessary. Prior to S401, at least one of <reception acceptance determination> and <identity confirmation> described above may be performed.
In step 402 (S402), the temporary authentication unnecessary system 110 executes the unnecessary authentication specified in S401.
In step 403 (S403), the temporary authentication unnecessary system 110 determines that an event for canceling the unnecessary authentication executed in S402 has occurred.
In step 404 (S404), the temporary authentication unnecessary system 110 executes the cancellation of the unnecessary authentication executed in S402 in response to the occurrence of the event for canceling the unnecessary authentication in S403.
The following authentication process of FIG. 5 is performed between S402 and S403 of FIG.

  FIG. 5 is a flowchart showing an example of an authentication processing flow in the temporary authentication unnecessary system 110 according to the embodiment of the present invention.

  In step 501 (S501), the temporary authentication unnecessary system 110 receives an inquiry about the status of unnecessary authentication from the system providing the online service. For example, the temporary authentication unnecessary system 110, from a system that provides Internet banking, information for identifying a customer account and information for identifying a procedure desired by the customer (for example, address change or transfer). And receive.

  In step 502 (S502), the temporary authentication unnecessary system 110 determines whether the authentication received in S501 can be unnecessary. For example, the temporary authentication unnecessary system 110 refers to a database (not shown) that manages whether or not authentication is necessary for performing each procedure of Internet banking, and performs a procedure desired by a customer. It is determined whether necessary authentication can be made unnecessary. If unnecessary (for example, procedures for various notifications such as address changes) proceeds to step 503, and if unnecessary (for example, a procedure involving funds transfer such as transfer), the process proceeds to step 506. In step 506 (S506), the system that provides the online service performs authentication.

  In step 503 (S503), the temporary authentication unnecessary system 110 determines whether the authentication determined to be unnecessary in S502 is unnecessary. For example, the temporary authentication unnecessary system 110 refers to the unnecessary database 205 and determines whether or not the authentication received in S501 is unnecessary. If it is unnecessary, the process proceeds to step 504. If it is not unnecessary, the process proceeds to step 507. In step 507 (S507), the system that provides the online service performs authentication.

  In step 504 (S504), the temporary authentication unnecessary system 110 determines whether the terminal used by the customer is an authentication unnecessary terminal. For example, the temporary authentication unnecessary system 110 determines whether or not the terminal used by the customer is a terminal that can permit the unnecessary authentication by the method described in <Authentication unnecessary terminal> above. Can do. If the terminal is not an authentication unnecessary terminal, the process proceeds to step 505. If the terminal is not an authentication unnecessary terminal, the process proceeds to step 508. In step 508 (S508), the system that provides the online service performs authentication. Note that S504 may be omitted.

  In step 505 (S505), the temporary authentication unnecessary system 110 notifies the system that provides the online service of the result determined in S504. That is, the temporary authentication unnecessary system 110 notifies the system that provides the online service that the authentication is unnecessary. Therefore, the system that provides the online service can omit the authentication. For example, a system that provides Internet banking can perform the procedure without authentication using a one-time password.

  It should be noted that the embodiments described in the present specification (for example, <unnecessary cancellation event> <authentication unnecessary terminal> <identification> etc.) can be arbitrarily combined.

  As described above, according to the present invention, it is possible to temporarily eliminate authentication that is originally required for an online service. Further, in the present invention, terminals that do not require online service authentication temporarily can be limited to some terminals.

  The embodiment of the present invention has been described so far. However, the above embodiment is merely an example, and the present invention is not limited to the above-described embodiment, and may be implemented in various forms within the scope of the technical idea. Needless to say, it is good.

  In addition, the scope of the present invention is not limited to the illustrated and described exemplary embodiments, and includes all embodiments that provide the same effects as those intended by the present invention. Further, the scope of the invention is not limited to the combinations of features of the invention defined by the claims, but may be defined by any desired combination of particular features among all the disclosed features. .

110 Authentication Temporary Unnecessary System 120 Branch A 121 Tablet for Store 122 Tablet for Staff 130 Branch B 131 Tablet for Store 132 Tablet for Staff 140 Out-of-Store 141 Customer Terminal 201 Unnecessary Instruction Receiving Unit 202 Unnecessary Execution Unit 203 Unnecessary Cancellation Execution Unit 204 Determination unit 205 Unnecessary database

Claims (8)

Receive instructions to perform de-authentication of online services,
Based on the instruction, the authentication is made unnecessary,
A processor configured to cancel the unnecessary authentication when an event for canceling the unnecessary authentication occurs;
The authentication temporary disuse system is characterized in that the execution of the authentication is omitted from the time when the authentication is unnecessary until the cancellation of the authentication unnecessary.   2. The temporary authentication unnecessary system according to claim 1, wherein the event for canceling the unnecessary authentication is a logout from the online service.   3. The temporary authentication unnecessary system according to claim 2, wherein the logout is forcibly performed based on a position of a person using the online service.   The event for canceling the unnecessary authentication is an elapse of a predetermined time from the time when the unnecessary authentication is performed, or the system requests to cancel the unnecessary The system for temporarily disabling authentication according to claim 1, wherein the system is temporarily received.   5. The temporary authentication unnecessary system according to any one of claims 1 to 4, wherein the unnecessary authentication is allowed only for a predetermined terminal.   6. The temporary authentication unnecessary system according to claim 5, wherein the predetermined terminal is a terminal having predetermined identification information or a terminal existing at a predetermined position. A method implemented by the temporary authentication unnecessary system,
Receiving an instruction to perform de-authentication of the online service;
Executing unnecessary authentication based on the instruction;
When the event for canceling the unnecessary authentication occurs, the step of canceling the unnecessary authentication is included.
The method is characterized in that the execution of the authentication is omitted after the authentication is made unnecessary until the authentication is made unnecessary.   A program for causing a computer to execute the method according to claim 7.

Images