JP3917128B2 - Information processing method, information processing system, program, and recording medium - Google Patents

Description

  The present invention relates to an information processing method, an information processing system, a program, and a recording medium.

  For example, in transactions (services) such as CD / ATM transactions, voice response systems, IC card shopping, etc. that use a PIN, etc., the transaction is generally stopped when a certain number of input errors occur for the PIN. Yes (see, for example, Patent Document 1).

Japanese Patent Laid-Open No. 11-8702 (pages 4-5, FIGS. 1-4)

  Then, after that, for example, a guidance “Please contact the card company” flows and ends there. Therefore, the trouble of a card member (for example, a credit card member) who has forgotten the personal identification number is complicated.

  In addition, depending on the convenience of the transaction, the transaction stop information is automatically canceled after a certain period of time, and the transaction can be performed again. This may be abused and the PIN number may be illegally acquired. In this case, the actual card member is not aware of unauthorized use, and there is a risk that repeated attempts to obtain unauthorized use will be made.

  Accordingly, an object of the present invention is to provide convenience for a user (such as a card member) who has forgotten authentication information in a service that uses authentication information (such as a password).

  In addition, when there is a risk of unauthorized use by others, notification is made to the original user.

In order to achieve the above object, an information processing method according to the present invention comprises authentication information storage means for storing authentication information of each user, mail address storage means for storing the mail address of each user, and each user. an information processing method processed by the information processing system and a service disapproval information storage means for storing service disapproval information on whether admission service to the information processing system, the user identification information Receiving the authentication information from the terminal , and the information processing system, wherein the received authentication information is stored in the authentication information storage means and the user authentication information identified by the received identification information; and performing authentication by determining whether matching, if it fails in the authentication, the information processing system, the mail address Scan stored in the storage means, to the user email address identified by the received identification information, and transmitting the mail to notify the contents related to the failure, the failure in the authentication, The information processing system comprises a step of rewriting the service approval / disapproval information in the service approval / disapproval information storage means so as not to approve a service for a user identified by the received identification information , and transmitting the mail Transmitting the e-mail when the authentication has failed for the first predetermined number of times, and the step of rewriting rewrites the service approval / rejection information when the authentication has failed for the second predetermined number of times, The predetermined number of times is less than the second predetermined number of times .

  Here, the step of transmitting the mail may be configured to transmit the mail when the authentication has failed a predetermined number of times twice or more.

Another information processing method according to the present invention includes authentication information storage means for storing authentication information of each user, mail address storage means for storing the mail address of each user, and authentication failure for each user. Information comprising: notification information storage means for storing notification information related to whether or not to notify the contents related to the service; and service approval / disapproval information storage means for storing service approval / disapproval information related to whether or not to allow service to each user an information processing method thus be processed in the processing system, the information processing system, comprising: receiving identification information of the user, and the authentication information from the terminal, the information processing system, authentication information which is received; wherein stored in the authentication information storage unit, the authentication by determining whether matches the authentication information of the user identified by the received identification information Cormorants and step, if it fails in the authentication, the information processing system, the notification information of the notification information storage unit, a step of rewriting to make a notification to the user identified by the received identification information When the authentication fails, the information processing system rewrites the service approval / disapproval information in the service approval / disapproval information storage means so as not to approve the service to the user identified by the received identification information; And the step of rewriting the notification information rewrites the notification information when the authentication fails for a first predetermined number of times, and the step of rewriting the service acceptance / rejection information occurs when the authentication fails for a second predetermined number of times. In addition, the service acceptance / rejection information is rewritten, and the first predetermined number of times is less than the second predetermined number of times. And butterflies.

  Here, the rewriting step may rewrite the notification information when the authentication fails two or more times.

  Here, the identification information of the user may be identification information of the user's card.

  The program according to the present invention is a program for causing the information processing system to execute the information processing method.

  The recording medium which concerns on this invention is a recording medium which recorded the program for making the said information processing system perform the said information processing method.

The information processing system according to the present invention includes an authentication information storage unit that stores authentication information of each user, a mail address storage unit that stores a mail address of each user, and whether or not a service is permitted for each user. Service acceptance / rejection information storage means for storing service acceptance / rejection information, means for inputting user identification information and authentication information, and the input authentication information stored in the authentication information storage means Means for authenticating by determining whether or not the user authentication information identified by the identified identification information matches, and the input stored in the mail address storage means if the authentication fails to the user of the e-mail address identified by identification information, means for transmitting a mail for notifying the contents related to the failure, fails the authentication If the service approval or disapproval information of the service disapproval information storage means, and means for rewriting to disallow service to the user identified by the inputted identification information, means for transmitting the mail, When the authentication fails for the first predetermined number of times, the mail is transmitted and the rewriting means rewrites the service approval / disapproval information when the authentication fails for the second predetermined number of times, and the first predetermined number of times Is less than the second predetermined number of times .
Here, the means for transmitting the mail may transmit the mail when the authentication has failed a predetermined number of times twice or more.

Another information processing system according to the present invention includes authentication information storage means for storing authentication information of each user, mail address storage means for storing the mail address of each user, and authentication failure for each user. Notification information storage means for storing notification information regarding whether or not to notify the contents related to the service, service approval / disapproval information storage means for storing service approval / disapproval information regarding whether or not to allow service to each user, and user Identification information and means for inputting authentication information, and whether the input authentication information matches the authentication information of the user identified by the input identification information stored in the authentication information storage means Means for performing authentication by judging whether or not, and when the authentication fails, the notification information stored in the notification information storage means is identified by the input identification information. Recognized means for rewriting to a notification, if it fails in the authentication, the service approval or disapproval information of the service disapproval information storing means, the service for the user identified by the input identification information to and means for rewriting as no means for rewriting the notification information, when the first predetermined number of failed in the authentication, rewriting the notification information, means for rewriting the service disapproval information, the second to the authentication When the predetermined number of times fails, the service acceptance / rejection information is rewritten, and the first predetermined number of times is smaller than the second predetermined number of times .
Here, the rewriting means may rewrite the notification information when the authentication fails twice or more times.
Here, the identification information of the user may be identification information of the user's card.
it can.

  ADVANTAGE OF THE INVENTION According to this invention, in the service using authentication information, the convenience of the user who has forgotten authentication information can be aimed at.

  In addition, when there is a risk of unauthorized use by others, it is possible to notify the original user.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In this embodiment, a user (card member) inputs authentication information (here, a personal identification number) and receives identification (authentication), and then an online service provided by a card company (various types of web services) Inquiries, application transactions, etc.) will be explained as an example. However, the present invention can also be applied to other services that use authentication information, such as CD / ATM transactions, voice response systems, and IC card shopping. More specifically, the present invention can also be applied to various types of inquiries such as borrowing with CD / ATM, balance inquiry, various inquiries with voice response system, application transactions, etc., IC cards.

  FIG. 1 is a diagram illustrating a configuration example of a communication system according to an embodiment of the present invention. The communication system shown in FIG. 1 includes an information processing system 10 and terminals 91 to 93. Each system or terminal can communicate with another system or terminal via the network 1. The network 1 may include the Internet, a public network, a mobile phone network, and the like.

  The user can use the terminals 91 to 93 to connect to the information processing system 10 of the card company, enter a personal identification number and receive identity confirmation, and then receive an online service.

  As the terminals 91 to 93, in addition to a fixed terminal (for example, a combination of a fixed telephone and a personal computer), a form of a mobile terminal (for example, a mobile phone, a PHS, and a combination of these and a portable computer) can be used. It can also be taken. In the case of a portable terminal, it is connected to the network 1 via a base station or the like.

  FIG. 2 is a diagram illustrating a configuration example of the information processing system 10 in the present embodiment. The information processing system 10 illustrated in FIG. 2 includes a control unit 12, a storage unit 14, an interface unit 18, an input unit 20, a display unit 22, and a printing unit 24. The information processing system 10 can be configured by a personal computer, a workstation, or the like.

  The control unit 12 can take the form of a CPU (Central Processing Unit) or the like, and performs various controls of the information processing system 10. The storage unit 14 includes a RAM, a ROM, a hard disk, a floppy (registered trademark) disk, an optical disk, and the like, and stores various programs, various data, and the like. The input unit 20 includes a keyboard, a mouse, and the like. The display unit 22 is used for displaying various data. The printing unit 24 prints various data.

  The control unit 12 has a function as a WWW (World Wide Web) server, a control program such as an OS (Operating System) stored in the storage unit 14, a program for performing various information processing such as service provision and identity verification. Processing is performed based on a program or the like for realizing. These programs can be recorded on a recording medium such as a floppy (registered trademark) disk, a CD-ROM, or an optical disk, and read into a main storage device, a hard disk, or the like before being executed.

  The information processing system 10 can communicate with a terminal via the interface unit 18 and a network.

  On the other hand, the user can communicate with the information processing system 10 by connecting to the information processing system 10 with a predetermined network address or the like using a terminal. The user can perform communication based on HTTP (Hyper Text Transfer Protocol) with the information processing system 10 having a function as a WWW server via a terminal in which a browser program is installed. The card member can browse and input various data on the web page provided by the information processing system 10.

FIG. 3 is a diagram illustrating an example of functional blocks of a main part of the information processing system 10 in the present embodiment. The information processing unit 34 performs various types of information processing and exchanges with a terminal (user) via the interface unit 32. In addition, the information processing unit 34 performs processing by accessing each database.
The personal identification number database 52 stores (manages) the personal identification number of each user.

  FIG. 4 is a diagram showing an example of a password stored in the password database 52. In the example of FIG. 4, for each user identification information (here, identification information (card number) of the user's card), the user's password is stored.

  Returning to FIG. 3, the authentication information database 54 stores various types of authentication information other than the password for each user.

  FIG. 5 is a diagram illustrating an example of information stored in the authentication information database 54. In the example of FIG. 5, various types of authentication information are stored for each card number. As the authentication information, for example, the date of birth of the user, a telephone number, and the like can be considered.

  Returning to FIG. 3, the mail address database 56 stores the (electronic) mail address of each user.

  FIG. 6 is a diagram illustrating an example of information stored in the mail address database 56. In the example of FIG. 6, a mail address is stored for each card number.

  Returning to FIG. 3, the first notification information database 58 stores first notification information for each user.

  FIG. 7 is a diagram illustrating an example of information stored in the first notification information database 58. In the example of FIG. 7, the first notification information is stored for each card number. The first notification information indicates whether the card member is notified by telephone regarding the failure of identity verification by the personal identification number (1) or not (0). The initial value of the first notification information is “0” and normally remains “0”. When a card member fails to identify himself / herself with a personal identification number a predetermined number of times, the card member is set to “1”.

  In the present embodiment, the first notification information is managed for each user. However, the (entire) first notification information may be managed in the form of a list of users who perform notification.

  Returning to FIG. 3, the second notification information database 60 stores second notification information for each user.

  FIG. 8 is a diagram illustrating an example of information stored in the second notification information database 60. In the example of FIG. 8, the second notification information is stored for each card number. The second notification information indicates whether the card member is notified of the personal identification number by mail (1) or not (0). The second notification information has an initial value of “0” and normally remains “0”. If the card member performs the password reference procedure and succeeds in authentication, the card member is set to “1”.

  In the present embodiment, the second notification information is managed for each user. However, the (entire) second notification information may be managed in the form of a list of users to be notified.

  Returning to FIG. 3, the service approval / disapproval information database 62 stores service approval / disapproval information for each user.

  FIG. 9 is a diagram illustrating an example of information stored in the service approval / disapproval information database 62. In the example of FIG. 9, service approval / disapproval information is stored for each card number. The service approval / disapproval information indicates whether (1) or not (0) the service (provision) is permitted for the card member. The service approval / disapproval information has an initial value “1” and normally remains “1”. When a card member fails to identify himself / herself with a personal identification number a predetermined number of times, the card member is set to “0”.

  In this embodiment, service approval / disapproval information is managed for each user. However, (overall) service approval / disapproval information may be managed in the form of a list of users who do not approve services.

FIG. 10 is a diagram illustrating an example of a processing flow when the identity verification fails.
The user uses the terminal to connect to the information processing system 10 and receives service (step S10).

  FIG. 11 is a diagram illustrating an example of an initial screen transmitted from the information processing system 10 (the information processing unit 34) to the user terminal. When the user connects using the terminal, the information processing system 10 transmits the screen illustrated in FIG. 11 to the terminal. The screen is displayed on the terminal.

  When the user selects “service use” with a mouse or the like and clicks “OK”, the information processing system 10 performs a process for providing the service.

  Here, the service specifically refers to various inquiries, application transactions, and the like. At that time, the information processing system 10 requests the user to input a card number and a personal identification number in order to confirm the identity (step S20).

  FIG. 12 is a diagram illustrating an example of a screen requesting input of a card number and a personal identification number, which is transmitted from the information processing system 10 to a user terminal. This screen is transmitted to the terminal, and this screen is displayed on the terminal.

  A user inputs a card number and a password using a keyboard, a mouse, or the like. When “OK” is clicked with a mouse, the input information is transmitted from the terminal to the information processing system 10.

The information processing system 10 (information processing unit 34) accesses the personal identification number database 52 and checks whether the received personal identification number is correct, that is, whether the received card number corresponds to the personal identification number.
If the password is not correct, it requests the input of the password again.

  If the input of the correct password has failed a predetermined number of times (step S30), the service (transaction) for that card (the card identified by the input card number) is stopped (step S40). The information processing system 10 (information processing unit 34) accesses the service approval / disapproval information database 62, and sets the service approval / disapproval information for the card (card number) to “0”. Also, the first notification information database 58 is accessed, and the first notification information for the card (card number) is set to “1”.

  Then, the information processing system 10 enters a password reference procedure (step S50).

  FIG. 13 is a diagram illustrating an example of a screen that the information processing system 10 transmits to the user's terminal when the correct password has been input a predetermined number of times (three times in this example). This screen is transmitted to the terminal, and this screen is displayed on the terminal.

  In the personal identification number inquiry procedure, identification is performed again using authentication information other than the personal identification number. In the example of FIG. 13, input of the date of birth is requested as authentication information.

  A user inputs authentication information using a keyboard, a mouse, or the like. When “OK” is clicked with the mouse, the input authentication information is transmitted from the terminal to the information processing system 10.

The information processing system 10 (information processing unit 34) accesses the authentication information database 54 and determines whether or not the received authentication information is correct, that is, whether or not the card number received earlier corresponds to the authentication information received this time. Investigate.
If they do not correspond, the password reference procedure will fail.

  On the other hand, if both correspond, the password reference procedure is successful and it is decided to mail the password to the user's home. The information processing system 10 (the information processing unit 34) accesses the second notification information database 60 and sets the second notification information for the card (card number) to “1”. For example, an employee of the card company periodically checks the second notification information in the second notification information database 60 via the display unit 22 or the printing unit 24, and gives a card member who is “1” to The personal identification number can be mailed (step S60).

  FIG. 14 is a diagram illustrating an example of a screen that the information processing system 10 transmits to the user's terminal when the password reference procedure is successful. This screen is transmitted to the terminal, and this screen is displayed on the terminal.

  In this way, for example, a user who has forgotten the password and failed to input the password can perform a password reference procedure on the spot, which is convenient.

  In the present embodiment, the personal identification number is notified by mail. However, an employee of the card company may be notified by calling the home of the user (card member). In addition, the information processing system 10 can access the mail address database 56 to notify the user of the personal identification number by electronic mail.

  The information processing system 10 can access the service approval / rejection information database 62 when the password reference procedure is successful, and rewrite the service approval / rejection information so that the service for the user is approved.

  When the password reference procedure as described above is not performed, the information processing system 10 notifies the card member identified by the input card number of the contents related to the failure of identity verification (step S70). ). Notification may be performed by e-mail, telephone, or both. Specifically, the contents of the notification may be, for example, that the service (transaction) has been stopped or guidance for a password reference procedure.

  When notifying by e-mail, the information processing system 10 accesses the e-mail address database 56, acquires the e-mail address of the card member, and sends the e-mail to the address for notification.

  FIG. 15 is a diagram illustrating an example of the content of an email transmitted from the information processing system 10 to a card member terminal.

  When making a notification by telephone, for example, an employee of the card company periodically checks the first notification information in the first notification information database 58 via the display unit 22 or the printing unit 24, and sets the value to “1”. The card member may be notified by telephone.

  If the card member who has received such notification has entered the personal identification number and failed to verify the identity, the card member may connect to the information processing system 10 and perform the personal identification number inquiry procedure (step S80). ). The password reference procedure can be performed, for example, by selecting “Query PIN” on the screen of FIG. After entering the card number, authentication information is input as shown in FIG.

  On the other hand, if the card member who received the notification does not remember that the input of the password has failed, there is a possibility that there is a person who is trying to use the member's card illegally. Therefore, for example, the card member contacts the card company and performs a procedure for preventing misuse (step S90).

  In this way, when there is a risk of unauthorized use by others, notification can be made to the original user (card member) in a push type. This prevents unauthorized use.

  In this embodiment, a mode is described in which a user connects to the information processing system 10 using a terminal and inputs and outputs information. For example, the present invention is applied to a CD / ATM transaction or the like. In this case, the information processing system 10 in the form of CD / ATM is installed in a place where the user can easily use the information processing system 10 via the input unit 20, the display unit 22, the printing unit 24, and the like. It is conceivable to directly input / output information to / from. In that case, a card insertion / reading device or the like is provided in the input unit 20 so that the card number can be automatically read from the card, or a voice processing unit is provided in the information processing system 10 so that voice response can be performed. Can be considered.

  In the present embodiment, the notification (step S70 in FIG. 10) is performed when the personal identification number inquiry procedure is not performed. However, the notification may be always performed.

  If the service is stopped (step S40 in FIG. 10) when the password is entered n times, and the notification (step S70 in FIG. 10) is performed when the password is entered m times. n and m do not necessarily match. For example, by making n larger than m, such as n 5 times and m 3 times, it is possible to counter illegal users who know that n is 5 times.

  Note that n and m can be set as desired either once or twice or more.

  In this embodiment, the service is stopped (step S40 in FIG. 10) when the input of the personal identification number has failed a predetermined number of times. However, the service can be stopped. In this case, the process directly proceeds to the password reference procedure (step S50 in FIG. 10) and notification (step S70 in FIG. 10).

  It is also possible to guide and guide the user to the password reference procedure (step S50 in FIG. 10) before the service stop (step S40 in FIG. 10).

It is a figure which shows the structural example of the communication system in embodiment of this invention. It is a figure which shows the structural example of the information processing system in embodiment of this invention. It is a figure which shows the example of the functional block of the principal part of the information processing system in embodiment of this invention. It is a figure which shows the example of the information which a PIN code database memorize | stores. It is a figure which shows the example of the information which an authentication information database memorize | stores. It is a figure which shows the example of the information which a mail address database memorize | stores. It is a figure which shows the example of the information which a 1st notification information database memorize | stores. It is a figure which shows the example of the information which a 2nd notification information database memorize | stores. It is a figure which shows the example of the information which a service approval / disapproval information database memorize | stores. It is a figure which shows the example of the flow of a process when identity verification fails. It is a figure which shows the example of the initial screen which an information processing system (information processing part) transmits with respect to a user's terminal. It is a figure which shows the example of the screen which requests | requires the input of a card number and a PIN code which an information processing system transmits with respect to a user's terminal. It is a figure which shows the example of the screen which an information processing system transmits with respect to a user's terminal, when input of a correct PIN code fails a predetermined number of times. It is a figure which shows the example of the screen which an information processing system transmits with respect to a user's terminal, when a PIN code inquiry procedure is successful. It is a figure which shows the example of the content of the mail which an information processing system transmits with respect to a card member's terminal.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Network 10 Information processing system 12 Control part 14 Memory | storage part 18, 32 Interface part 20 Input part 22 Display part 24 Printing part 34 Information processing part 52 PIN code database 54 Authentication information database 56 Mail address database 58 1st notification information database 60 1st 2 Notification Information Database 62 Service Approval Information Database 91-93 Terminal

Claims (12)

Authentication information storing means for storing each user's authentication information, mail address storing means for storing each user's mail address, and service for storing service approval / disapproval information regarding whether or not each user is allowed to use the service an information processing method processed by the information processing system and a disapproval information storage means,
The information processing system receives user identification information and authentication information from a terminal ;
The information processing system, the received authentication information is stored in said authentication information storing unit, the authentication by determining whether matches the authentication information of the user identified by the received identification information Steps to perform,
When the authentication fails, the information processing system notifies the user's email address identified by the received identification information stored in the email address storage means of the content related to the failure. and sending an email,
When the authentication fails, the information processing system rewrites the service approval / disapproval information in the service approval / disapproval information storage means so as not to approve the service to the user identified by the received identification information ; Prepared ,
The step of sending the email includes sending the email when the authentication fails for the first predetermined number of times,
The rewriting step rewrites the service approval / disapproval information when the authentication fails a second predetermined number of times,
The information processing method characterized in that the first predetermined number of times is smaller than the second predetermined number of times . The information processing method according to claim 1 , wherein in the step of transmitting the mail, the mail is transmitted when the authentication has failed a predetermined number of times twice or more. Authentication information storage means for storing each user's authentication information, mail address storage means for storing each user's mail address, and whether to notify each user of the contents related to the authentication failure a notification information storage means for storing notification information, an information processing method to be handled by the information processing system and a service disapproval information storage means for storing service disapproval information on whether admission service for each user There,
The information processing system receives user identification information and authentication information from a terminal ;
The information processing system, the received authentication information is stored in said authentication information storing unit, the authentication by determining whether matches the authentication information of the user identified by the received identification information Steps to perform,
When the authentication fails, the information processing system rewrites the notification information in the notification information storage means so as to notify the user identified by the received identification information ;
When the authentication fails, the information processing system rewrites the service approval / disapproval information in the service approval / disapproval information storage means so as not to approve the service to the user identified by the received identification information ; Prepared ,
The step of rewriting the notification information rewrites the notification information when the authentication fails for the first predetermined number of times,
The step of rewriting the service acceptance / rejection information rewrites the service acceptance / rejection information when the authentication fails a second predetermined number of times,
The information processing method characterized in that the first predetermined number of times is smaller than the second predetermined number of times . The information processing method according to claim 3 , wherein the rewriting step rewrites the notification information when the authentication has failed a predetermined number of times twice or more. An information processing method according to any one of claims 1 to 4, identification information of the user, the information processing method is characterized in that the identification information of the user of the card. The program for making the said information processing system perform the information processing method in any one of Claims 1 thru | or 5 . A computer-readable recording medium a program for implementing the information processing method according to the information processing system to any one of claims 1 to 5. An information processing system,
Authentication information storage means for storing authentication information of each user;
Mail address storage means for storing the mail address of each user;
Service approval / disapproval information storage means for storing service approval / disapproval information regarding whether or not to permit service for each user;
Means for inputting user identification information and authentication information;
Means for authenticating by determining whether or not the input authentication information matches the authentication information of the user identified by the input identification information stored in the authentication information storage means;
When the authentication fails, an email notifying the contents related to the failure is transmitted to the email address of the user identified by the input identification information stored in the email address storage means. Means ,
Means for rewriting the service approval / disapproval information of the service approval / disapproval information storage means so as not to approve the service for the user identified by the input identification information when the authentication fails ,
The means for transmitting the mail transmits the mail when the authentication fails for the first predetermined number of times,
The rewriting means rewrites the service approval / rejection information when the authentication fails for a second predetermined number of times,
The information processing system characterized in that the first predetermined number of times is less than the second predetermined number of times . 9. The information processing system according to claim 8, wherein the means for transmitting the mail transmits the mail when the authentication has failed a predetermined number of times twice or more. An information processing system,
Authentication information storage means for storing authentication information of each user;
Mail address storage means for storing the mail address of each user;
A notification information storage means for storing notification information regarding whether or not to notify each user of contents related to authentication failure;
Service approval / disapproval information storage means for storing service approval / disapproval information regarding whether or not to permit service for each user;
Means for inputting user identification information and authentication information;
Means for authenticating by determining whether or not the input authentication information matches the authentication information of the user identified by the input identification information stored in the authentication information storage means;
Means for rewriting the notification information in the notification information storage means so as to notify the user identified by the input identification information when the authentication fails ;
Means for rewriting the service approval / disapproval information of the service approval / disapproval information storage means so as not to approve the service for the user identified by the input identification information when the authentication fails ,
The means for rewriting the notification information rewrites the notification information when the authentication fails for the first predetermined number of times,
The means for rewriting the service acceptance / rejection information rewrites the service acceptance / rejection information when the authentication fails a second predetermined number of times,
The information processing system characterized in that the first predetermined number of times is less than the second predetermined number of times . The information processing system according to claim 10, wherein the rewriting unit rewrites the notification information when the authentication has failed a predetermined number of times more than once. 12. The information processing system according to claim 8, wherein the user identification information is identification information of a user card.

Images