JP4218297B2 - Authentication and payment methods - Google Patents

Description

[0001]
The present invention performs personal authentication or settlement at the time of purchasing goods or services using a single medium. Authentication and payment methods .
[0002]
[Prior art]
Conventionally, when personal authentication is required, there are various things such as a driver's license, health insurance card, employee ID card, store membership card, and it is necessary to use different media depending on the situation. Further, when using a store built on the World Wide Web, that is, a so-called Web store, the user needs to input a user ID and a password determined for each Web store separately.
[0003]
On the other hand, there are a plurality of media such as credit cards of credit sales companies and cash cards of banks other than cash that can be used for settlement when purchasing goods and services. In addition, point cards, which are added according to the purchase price, the number of visits, etc., and record points having privileges such as use as a part of consideration at the time of purchasing a product or service or exchange with a product, are also widely used.
[0004]
In addition, when using transportation such as buses and trains, or using public telephones, there are other means such as purchasing tickets and commuter passes or using prepaid cards in addition to cash payments. Exists.
[0005]
Also, when using concerts, movie theaters, etc., the method of purchasing designated tickets and presenting them at the time of use is mainly used. There are also many service tickets such as discount tickets that can be used in stores.
[0006]
[Problems to be solved by the invention]
FIG. 42 shows a conventional example of a user's portable medium when using a store. Among the stores 130, there are stores that are connected to the financial host server 150 via the network 5 and can perform payment using a payment card.
[0007]
In order for a user to use a plurality of stores 130, a plurality of cash cards 101, a plurality of credit cards 102, a plurality of members cards 103, a plurality of point cards 104, a plurality of prepaid cards 105, a plurality of tickets and a ticket 106, etc. Therefore, it is necessary to own many authentication media and settlement media and use them differently depending on the store. For this reason, these media must always be carried, or those that are not frequently used must be stored at the user's responsibility. As a result, many media are bulky and difficult to carry around, it takes time to search for the media to use, and there are cases where personal information such as name and phone number is written each time it is used because it is difficult to notice even if it is lost due to its large quantity. There may be inconveniences such as the media you want to use being stored at home and not being available at hand.
[0008]
The purpose of the present invention is to Execute transactions such as payment, withdrawal, point addition, etc. using multiple types of credit cards, member cards, prepaid cards, point cards, etc., and personal authentication for those transactions, using a single unified mobile medium Authentication and payment methods Is to provide.
[0009]
[Means for Solving the Problems]
According to the present invention, a portable medium including a user ID for identifying a user;
A store that generates a store ID for identifying a store and a portable medium access unit for reading or writing information recorded on the portable medium, an information terminal device having a display unit, and an input unit A store having an ID generation unit and a server, the user ID, a user password corresponding to the user ID, and a cash card or a credit card that can be used by the user for authentication, settlement or service reception, An information DB server having card data such as a member's card, a point card, and a store ID, a first network connecting the store and the information terminal device, and a second network connecting the store and the information DB server And an authentication and settlement system having Transmitting user authentication information having a user ID read from the portable medium using a portable medium access unit and a user password entered by the user from the input unit to a store server via the first network, and the user A procedure for transmitting the authentication information and the store ID generated by the store ID generation unit to the information DB server via the second network, and a procedure for authenticating the user on the information DB server based on the user authentication information; The user selects user card data that can be used in the store by the information DB server and transmits the user card data to the information terminal device; the procedure for displaying a part or all of the user card data on the display unit; The user card to be used for authentication, settlement or service reception from the user card data list The user input from the input unit Dodeta, it was decided to perform a settlement process based on the use user card data.
[0010]
According to the present invention, the store is connected to the financial host server that performs settlement via the third network, and the user card data used is transmitted to the financial host server for settlement processing.
[0011]
Further, according to the present invention, the card data is generated or added depending on the purchase amount or the number of times of use of the store when purchasing the product at the bank-type cash card, the credit card company-type credit card, or the store, and the product purchase consideration is reduced. Store point card containing store point information to be subtracted when used as a part or in exchange for product, or generated or added depending on the purchase price or the number of times the card is used at the time of purchase using a credit card or cash card at the store. Financial point card including financial point information to be subtracted when used as part of purchase consideration or in exchange for goods, or driver's license, membership card, employee ID card, business card, etc. to prove user's qualification and affiliation Purchase a member's card including the card in advance and cash at the time of payment Information such as prepaid cards that can be used instead, entrance tickets for movies and concerts, boarding tickets for transportation use, prepaid or postpaid electronic money, or various service tickets such as discount tickets and coupons It was decided to have at least one of them.
[0012]
According to the present invention, the information DB server has the same store ID as the user data file containing the user's personal information including a user ID, a user password, an accessible flag for controlling access to the information DB server, and the like. Store data file that includes store GID indicating that the card data of the store can be used, store ID that issued card data including card number and card name, and card data that can be used at the store, for each user ID , We decided to have a user-specific card data file containing information such as store points, financial points, and affiliated services associated with card data.
[0013]
According to the present invention, the user data file has user fixed data for predetermined fixed items such as a user ID, a user name, and a telephone number, and user extended data for extended items requested to be disclosed for each store. The store data file includes a browsing request flag indicating the browsing request level of the user fixed data, and an extended browsing request flag indicating the expansion item and the browsing request level. The browsing request flag and the extended browsing request flag are There is at least one of the two types of browsing required and browsing unnecessary, and the store information file for each user exists in the information DB server, and the store ID for each user ID and whether or not each store can access the fixed user information. And a viewing permission flag indicating the extension item and whether or not browsing is permitted. It includes a grayed, the viewing permission flag and the extended viewing permission flag is set to have one of two types of at least viewable and not view.
[0014]
Further, according to the present invention, the browsing permission flag and the extended browsing permission flag are displayed on the display unit of the information terminal device, and the setting can be changed for each store by the user inputting from the input unit. The user can set a default value applied at the first use in a store.
[0015]
Further, according to the present invention, the store data file includes a partner store GID indicating a store GID of a store that has a business tie-up using a card and a store ID indicating a store ID of a store that has a business tie-up using a card. It was decided to include at least one of ID.
[0016]
Further, according to the present invention, the store information file for each user has a store ID and a link to the card data used at the store last time for each user ID.
[0017]
According to the present invention, the store information file for each user has a home ID of a Web store constructed on the World Wide Web and a login ID and password used for personal authentication when accessing the home page for each user ID. When the user accesses the home page, the user automatically logs in by automatically transmitting the login ID and the password to the home page.
[0018]
Further, according to the present invention, when a product or service is purchased, the contents are written in a user-specific store information file to make a payment, read out from the user-specific store information file at the time of use, and the user-specific store information according to the use situation. The electronic information is used to update the information in the file.
[0019]
According to the present invention, the product or service writes the card information used for settlement before purchase into the user-specific store information file, reads the card information from the user-specific store information file after use, and stores the card information. We decided to make a payment based on this.
[0020]
According to the present invention, a user accesses a store's Web homepage from an information terminal device, writes service information such as a product discount ticket posted on the Web homepage as electronic information in a store information file for each user, The electronic information is read at the time of use, and the user enjoys a service based on the service information.
[0021]
Further, according to the present invention, part or all of the data in the information DB server is in the store server or portable medium, and the information DB server is not necessarily required.
[0022]
In addition, according to the present invention, a part or all of a portable medium, an information terminal device, a store server, an information DB server, a financial host server, and a network connecting them are distributed computing systems, particularly grid computing. It was decided that it was built using the system.
[0023]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 shows an embodiment of the present invention. A portable medium 10 including a user ID for specifying a user, a portable medium access unit 21, a display unit 22, and an input unit 23 for reading or writing information recorded on the portable medium 10 The information terminal device 20, the store ID generation unit 31 that generates a store ID for identifying the store, the store 30 that includes the server 32, the user ID, the user password corresponding to the user ID, and the user at the store There is an information DB server 40 having card data such as a cash card, a credit card, a member's card, a point card, and a store ID that can be used for authentication or settlement or service enjoyment, and a financial host server 50 that performs settlement. .
[0024]
Further, the store 30 and the information terminal device 20 are connected by the network 1, the store 30 and the information DB server 40 are connected by the network 2, and the store 30 and the financial host server 50 are connected by the network 3.
[0025]
Here, the user authentication information having the user ID read from the portable medium 10 of the user using the portable medium access unit 21 and the user password input by the user from the input unit 23 is transmitted to the server 32 of the store 30 via the network 1. Send. Next, the user authentication information and the store ID generated by the store ID generation unit 31 are transmitted to the information DB server 40 via the network 2. Next, the information DB server 40 performs user authentication based on the user authentication information. Next, the user card data usable by the user at the store 30 is selected by the information DB server 40 and transmitted to the information terminal device 20 via the network 2 and the network 1. Next, part or all of the user card data is displayed on the display unit 22. Next, the user inputs user card data to be used for authentication, payment or service reception from the displayed list of user card data, and the user card data is input to the financial host server 50 via the network 3. Send and process payment.
[0026]
An example of the information DB server 40 is shown in FIG. The information DB server 40 includes a user data file 41, a store data file 42, a user-specific card data file 43, and a user-specific store information file 44.
[0027]
The user data file 41 includes user personal information including a user ID for identifying the user, a user password corresponding to the user ID, an accessible flag for controlling access to the information DB server, and the like.
[0028]
The store data file 42 includes a store ID for specifying a store and a store GID indicating that the same card can be used in the store.
[0029]
The user-specific card data file 43 is attached to each user ID by card name, card number, card name, password, expiration date, store ID that issued the card data that can be used at the store, store points, financial points, and cards. Includes information such as remarks columns where you can write comments to make it easier for users to identify when using cards.
[0030]
An example of the user data file 41 is shown in FIG. 3, an example of the store data file 42 is shown in FIGS. 4 and 5, and an example of the user-specific card data file 43 is shown in FIG.
[0031]
As a result, the user can authenticate at various stores and purchase products and services using only one portable medium.
[0032]
Here, as a card that can be registered in the user-specific card data file 43, a bank-type cash card, a credit card of a credit sales company, or a card that is generated or added depending on the purchase amount or the number of times the store is used when purchasing a product at a store, Generated depending on the purchase price or the number of times the card is used at the time of purchase using a credit card or cash card at the store, including store point information that is subtracted when used as part of product purchase consideration or in exchange for the product. Alternatively, a financial point card containing financial point information that is added and subtracted when used as part of product purchase consideration or in exchange for a product, or a driver's license or membership card or employee to prove user qualification or affiliation Member cards including cards, business cards, etc. Prepaid cards that can be used instead of cash when paying, or tickets for movies and concerts, boarding tickets for transportation, prepaid or postpaid electronic money, discount tickets or coupons Information such as various service tickets can be considered.
[0033]
Further, the user data file 41 includes user fixed data for predetermined fixed items such as user ID, user name, gender, date of birth, postal code, address, telephone number, FAX number, mail address, and mobile phone number. User extension data for extended items required to be disclosed for each store 30, such as website address, company name, company address, company phone number, company fax number, company mail address, delivery address, delivery name, occupation, job type, etc. The store data file 42 includes a browse request flag that represents the degree of browse request from the store 30 of user-fixed data, and an extended browse request flag that represents an extended item and the browse request level. The request flag has at least one of the two types of browsing mandatory and browsing unnecessary. The by-store information file 44 exists in the information DB server 40, and by user ID, the store ID, a browsing permission flag indicating whether or not each store can browse the user fixed data, and an extended item and an extension indicating whether or not the browsing is possible. A browsing permission flag is included, and the browsing permission flag and the extended browsing permission flag have at least one of two types of browsing enabled and browsing disabled.
[0034]
In the store data file 42, in the browse request flag and the extended browse request flag, in addition to the two types of browsing required and browsing unnecessary, a browsing request state is provided, and only when the user permits the browsing desired item, the personal information is stored. A system that can acquire the system improves the flexibility of the system, and it is even better.
[0035]
An example of the user-specific store information file 44 is shown in FIG.
[0036]
Thus, only by the user registering personal information in the user data file 41, the provision of information corresponding to a fixed item among the personal information requested by the store when the user uses the store presents one portable medium. It becomes possible.
[0037]
In addition, items other than fixed items can be set for each store as extended items. Thereby, the information that the store wants to obtain from the user can be added.
[0038]
In addition, among personal information, items that may be disclosed to stores and items that are not desired to be disclosed can be set for each store by the user, and items that the store wants the user to provide personal information are provided. Items that do not need to be received can be set. Thereby, the user can provide only necessary personal information to the store, and the store can obtain only necessary personal information from the user.
[0039]
Furthermore, by enabling the user to browse the user ID for the store, when the personal information is changed, the store can obtain the latest information by confirming the user's personal information indicated by the user ID of the information DB server. It is done. As in the prior art, it is possible to improve the situation in which personal information must be communicated to the store every time the store is used, every time the user is registered in the store, or whenever the personal information is changed. As a means for the store to know the updated personal information, the information DB server 40 has a mechanism in which the store e-mail address is registered in the store data file 42 in advance and the store is notified by e-mail when the personal information is changed. It is also possible to provide the information in the store information file 44 for each user when the store wants to handle personal information.
[0040]
If the store makes browsing mandatory for personal information items that the user cannot view, whether the user changes the item to be viewable or cancels the purchase of goods or services while leaving the view unavailable , There are options such as the store changing the corresponding item to browsing unnecessary or browsing desired for the user.
[0041]
In addition, when the user sets in advance a default value of the browsing permission flag when using the store for the first time, the setting of the browsing permission flag becomes easy.
[0042]
Some stores have a business tie-up with a credit sales company or a bank to enable payment by credit card or cash card. By registering this business tie-up information in the store data file 42, those card payments can be made at the store.
[0043]
Specifically, a company that is affiliated at the affiliated store level is registered in the affiliated store GID, a company that is affiliated at the individual store level is registered in the affiliated store ID, and the card information registered by the user is registered. It is possible to sort out those that can be used in stores based on these data.
[0044]
It is also useful to record the card information used last time at a certain store in the store information file 44 for each user and display the card as a default so that the user can easily select it when the portable medium is used at the same store next time. is there.
[0045]
Furthermore, store information such as store name, postal code, address, telephone number, FAX number, e-mail address, World Wide Web homepage address corresponding to the store ID and the information necessary for rewriting the store data file 42 are necessary. By registering a password and enabling the user to browse the corresponding store information from the store ID of the card information registered in the user-specific card data file 43, the user can easily access the store. Obtainable.
[0046]
In addition, when the store is a Web store constructed on the World Wide Web, the Web store is registered by registering a homepage address, a login ID, and a password corresponding to the store ID for each user ID in the store information file 44 for each user. It is also possible to automate login during use.
[0047]
A specific example of this patent is shown in FIG. 8 corresponds to a bank ATM (automated teller machine) in which the store 30 and the information terminal device 20 in FIG. 1 are combined, and the financial host server 50 in FIG. 1 corresponds to the bank host server. The flow when drawing out is shown. The procedure will be described below with reference to FIG.
[0048]
A user selects and requests a cash withdrawal from the menu displayed on the display unit to the bank ATM. The bank ATM requests the user to present a portable medium. The user presents and connects the portable medium to the portable medium access unit in the bank ATM. Since the bank ATM requires the user to input the portable medium password, the password is input from the input unit. The user authentication information including the bank ATM ID (corresponding to the store ID), the user ID in the portable medium and the password input from the input unit is transmitted to the information DB server. The information DB server performs user authentication confirmation based on the received user authentication information. If authenticated correctly, the information DB server transmits to the bank ATM card information usable at the store indicated by the store ID, that is, the bank ATM. Based on the information, the bank ATM requests the user to specify a card to be used. When the user designates the card used for the bank ATM, the bank ATM requests to designate the withdrawal amount. When the user inputs the withdrawal amount, the bank ATM transmits the information to the bank host server. The bank host server verifies the validity of the card and the account balance and sends the result to the bank ATM. When it is determined that the withdrawal is possible, the bank ATM withdraws the cash and gives it to the user. Thereafter, the bank ATM updates the previously used card information in the user-specific store information file in the information DB server.
[0049]
The flow shown in FIG. 8 will be described as actions for each object with reference to FIGS. First, FIG. 9 shows user actions. The user selects a cash withdrawal button for the bank ATM. Next, the portable medium is connected to the portable medium access unit of the bank ATM. Next, the password of the portable medium is input from the input unit of the bank ATM. Next, a list of cards that can be used is displayed on the display unit of the bank ATM, and one of them is selected. Next, enter the withdrawal amount and get cash.
[0050]
FIG. 10 shows the behavior of the bank ATM. The bank ATM instructs the user to connect the portable medium to the portable medium access unit. Next, the user is instructed to input the password of the portable medium. Next, the bank ATM ID (corresponding to the store ID), the user ID in the portable medium, and the password entered by the user from the input unit are transmitted to the information DB server. Next, the card information that can be used is acquired from the information DB server, and the user is instructed to select the card to be used. Next, the user is instructed to input the withdrawal amount. Next, the card number and personal identification number of the card designated by the user and the withdrawal amount recorded in the user-specific card data file of the information DB server are transmitted to the bank host server. Here, if the withdrawal is OK, the withdrawal process is performed. If the withdrawal is impossible, the withdrawal rejection is displayed, and the process is interrupted.
[0051]
FIG. 11 shows the behavior of the information DB server. The information DB server obtains the bank ATM ID (corresponding to the store ID), the user ID in the portable medium and the password entered by the user from the input unit from the bank ATM, and substitutes it into the variable A. Next, it is checked whether or not the accessible flag of the user data file is ON. If it is not ON, an access refusal is notified to the bank ATM. If the accessible flag is ON, it is checked whether the store ID received from the bank ATM is registered in the store data file. If not registered, the bank ATM is notified that the store ID is not registered. If registered, user authentication is performed (details will be described later). If the authentication is not OK, the bank ATM is notified of the authentication failure. If the authentication is OK, usable card information is acquired (details will be described later). Next, the acquired usable card information is transmitted to the bank ATM. Finally, the previous use card information of the corresponding store in the store information file for each user is updated.
[0052]
Details of the user authentication of FIG. 11 are shown in FIG. It is checked whether or not the user ID of the variable A assigned in FIG. 11 has been registered in the user data file. If not registered, authentication failure is returned. If registered, it is checked whether there is data in the user data file that matches the user ID and password of variable A. If not, authentication failure is returned. If there is a match, authentication success is returned.
[0053]
Details of the usable card information acquisition in FIG. 11 are shown in FIG. A variable C holding card information is initialized. Next, one piece of card information corresponding to the user ID is acquired from the card data file for each user, and is substituted into the variable B (13A). Next, it is checked whether the store ID of the variable B matches the store ID of the variable A in FIG. 11 or the affiliated store ID of the variable A (13D). If they match, the card information of variable B is stored in variable C (13B), and it is checked whether there is card information (13C). If they do not match in 13D, it is checked whether the store GID corresponding to the store ID of the variable B matches the store GID or the affiliated store GID corresponding to the store ID of the variable A. If they match, the process of 13B is performed. If they do not match, the process of 13C is performed. If Yes at 13C, the process returns to 13A, and if No, the card information C is returned.
[0054]
FIG. 14 shows the behavior of the bank host server. The card information received from the bank ATM is checked to see if it is valid. If it is valid, check whether there is a balance for the withdrawal amount in the account. If not, notify the shortage of balance. If the balance is in the account, the withdrawal process is performed.
[0055]
Next, an example of display contents on the display unit corresponding to the aforementioned withdrawal operation from the bank ATM will be described with reference to FIGS.
[0056]
FIG. 15 is an initial screen displayed on the display unit of the bank ATM. Here, it is assumed that the input unit is a touch panel of the display unit. The user presses a drawer button to request a withdrawal process. Since the screen is as shown in FIG. 16, the portable medium is connected to the portable medium access unit. The screen will change to Fig. 17. Enter the password for the portable media and press the confirmation button. The screen changes to FIG. 18, and card information that can be used at the bank ATM used by the user is displayed. In this example, the card name and remarks column are displayed. If any card is selected here, the screen changes to FIG. 19, so the withdrawal amount is input and the confirmation button is pressed. The screen changes to FIG. 20, and cash is withdrawn. The screen of FIG. 20 returns to FIG. 15 after a few seconds.
[0057]
Note that there is a personal information browsing permission flag change button in FIG. 15, which is for the user to set whether or not each item of personal information can be browsed to a store (in this case, a bank ATM). When the personal information browsing permission flag change button is pressed, the screen is as shown in FIG. 16, and the portable medium is connected to the portable medium access unit. The screen will change to Fig. 17. Enter the password for the portable media and press the confirmation button. The screen changes to FIG. 18, and card information that can be used at the bank ATM used by the user is displayed. Here, as in the previous example, the card name and remarks column are displayed. When any card is selected here, the screen is as shown in FIG. Here, an example is shown in which the user changes the flag of the C bank CC branch. The user can change the viewing permission flag for the changeable flag on this screen. FIG. 21 is a flag for the fixed item personal information, and FIG. 22 is a flag for the extension item personal information. Items that the store determines that browsing is unnecessary are not displayed in this example. When the OK button is pressed after changing the flag, FIG. 20 is displayed, and after a few seconds, the process returns to FIG.
[0058]
The above is the detailed description when withdrawing cash from the bank ATM using the portable medium and the description of the personal information browsing permission flag changing method. In the following, various examples using a portable medium will be briefly described using only the flowchart shown in FIG. The method for changing the personal information browsing permission flag is the same as that described above, and will not be described below.
[0059]
FIG. 23 is a flow when purchasing a product at a store. The financial host server 50 in FIG. 1 corresponds to a credit sales company host server. It is assumed that the information terminal device 20 is in a store. The user requests the store to purchase a product. Since the store requests the user to present the portable medium, the user presents the portable medium. The store asks the user to enter the password for the portable medium, so enter the password. The store transmits user authentication information including the store ID and the user ID in the portable medium and the entered password to the information DB server. The information DB server performs user authentication confirmation based on the received user authentication information. If authenticated correctly, the information DB server transmits card information usable at the store to the store. At this time, for alliance services that can enjoy services such as discounts on product purchase prices simply by presenting to the store at the time of settlement, all the services registered by user ID in the card data file for each user are sent to the store, It may be displayed on the display unit. Here, it is assumed that the point card of the store and the credit card of the credit sales company correspond. Based on the information, the store requests the user to specify store points to be used, so the points to be used are specified. Since the store requires the user to specify a payment card, the card to be used is specified. Since the store requires the user to specify the payment method, the payment method is input. The store transmits this information to the credit sales company host server. The credit sales company host server checks the card validity and the credit balance and performs settlement, and sends the result to the store. When it is determined that the card can be used, the store gives the product to the user. Thereafter, the store updates the store points of the user-specific card data file in the information DB server and the previous use card information of the user-specific store information file.
[0060]
FIG. 24 is a flow when purchasing an electronic ticket at a store. Here, the electronic ticket means that a ticket necessary for entering a movie theater or a concert venue is recorded on a portable medium as electronic information. The financial host server 50 in FIG. 1 corresponds to a credit sales company host server. It is assumed that the information terminal device 20 is in a store. The user requests the store to purchase a ticket. Since the store requests the user to present the portable medium, the user presents the portable medium. The store asks the user to enter the password for the portable medium, so enter the password. The store transmits user authentication information including the store ID and the user ID in the portable medium and the entered password to the information DB server. The information DB server performs user authentication confirmation based on the received user authentication information. If authenticated correctly, the information DB server transmits card information usable at the store to the store. Based on the information, the store requests the user to specify store points to be used, so the points to be used are specified. Since the store requires the user to specify a payment card, the card to be used is specified. Since the store requires the user to specify the payment method, the payment method is input. The store transmits this information to the credit sales company host server. The credit sales company host server checks the card validity and the credit balance and performs settlement, and sends the result to the store. When it is determined that the card can be used, the store writes the ticket information on the portable medium. Thereafter, the store updates the store points of the user-specific card data file in the information DB server and the previous use card information of the user-specific store information file.
[0061]
FIG. 25 is a flow when using an electronic ticket in a store. Here, it is assumed that a user authentication check is performed. The user requests to enter the store. Since the store requests the user to present the portable medium, the user presents the portable medium. The store asks the user to enter the password for the portable medium, so enter the password. The store transmits user authentication information including the store ID and the user ID in the portable medium and the entered password to the information DB server. The information DB server performs user authentication confirmation based on the received user authentication information. If authenticated correctly, the information DB server transmits user information to the store. After authentication, the store confirms the ticket information written in the portable medium and updates the information in the portable medium. If the ticket information is correct, the store permits the user to enter the store, and the user enters the store.
[0062]
FIG. 26 shows a flow when using an electronic ticket in a store, as in FIG. 25, but assumes a case where a user authentication check is not performed. The user requests to enter the store. Since the store requests the user to present the portable medium, the user presents the portable medium. The store confirms the ticket information written in the portable medium and updates the information in the portable medium. If the ticket information is correct, the store permits the user to enter the store, and the user enters the store.
[0063]
FIG. 27 is a flow for registering a ticket when using a transportation facility such as a train at a station window. The store 30 and the information terminal device 20 in FIG. 1 correspond to the station window, and the financial host server 50 corresponds to the credit sales company host server. Ticket registration here refers to obtaining permission to use a train to be registered like a commuter pass. However, unlike a commuter pass, the user must register the actual travel expenses in advance at a later date. The system is assumed to be debited from a credit card. The user requests a ticket registration from the station window. Since the station counter requests the user to present the portable medium, the user presents the portable medium. The station window asks the user to enter the password for the portable medium, so enter the password. The station counter transmits user authentication information including the station counter ID (store ID) and the user ID in the portable medium and the input password to the information DB server. The information DB server performs user authentication confirmation based on the received user authentication information. If authenticated correctly, the information DB server sends card information usable at the station window to the station window. Based on this information, the station counter requests the user to specify the card to be used for payment, so the card to be used is specified. Since the station window requires the user to specify the payment method, the payment method is input. The station window sends this information to the credit sales company host server. The credit sales company host server checks the validity of the card and a certain amount of credit balance determined at the station counter, and sends the result to the station counter. When it is determined that the card can be used, the station window writes the ticket registration information on the authentication medium.
[0064]
FIG. 28 is a flow when using a transportation system such as a train registered in advance. The store and information terminal device 20 in FIG. 1 correspond to the station ticket gates, and the financial host server 50 corresponds to the credit sales company host server. The user requests boarding at the station ticket gate. Since the station ticket gate requires the user to present a portable medium, the user presents the portable medium. The station ticket gate confirms the ticket information in the portable medium, and if the ticket information is correct, it writes in the portable medium that the user has entered the station ticket gate. The user rides through the station ticket gate.
[0065]
When the user arrives at the stop station, the user requests a stop at the station ticket gate. Since the station ticket gate requires the user to present a portable medium, the user presents the portable medium. The station ticket gate confirms the ticket information in the portable medium, and if the ticket information is correct, the fact that the user has exited the station ticket gate is written in the portable medium. The user passes the station ticket gate and gets off. Thereafter, the station ticket gate requests the credit card company host server of the payment card registered in advance by the user to confirm the validity of the card and the credit balance for paying the transportation cost and to pay the transportation cost. The credit sales company receives these requests and sends the confirmation result to the station ticket gate.
[0066]
Next, an example of a maintenance method for the data of the portable medium owned by the user and the information DB server accessed thereby will be described using a screen display.
[0067]
The user activates the portable medium information update application of the information terminal device. Since the display is as shown in FIG. 29, the portable medium is connected to the portable medium access unit. Since it is displayed as shown in FIG. 30, a password is input from an input unit such as a keyboard and the OK button is pressed. If the authentication is confirmed, several menus are displayed as shown in FIG.
[0068]
When user data display / update is selected in FIG. 31, the screen is displayed as shown in FIG. Here, the fixed items and their contents of the user data file are displayed. The user can update the information about the changeable part of the screen by inputting the change content from the input unit. In the example of FIG. 32, the user ID, name, gender, date of birth, postal code, and address cannot be changed, but it is not necessary to be captured by this during actual operation. However, if this information can be freely updated by the user, it may be possible to impersonate another person, so this example cannot be changed. For changing these items, it is better to take a highly reliable means, for example, by requesting a municipality such as a municipality.
[0069]
When the extension item button in FIG. 32 is pressed, the display is as shown in FIG. Here, the extended items of the user data file and their contents are displayed. Since this item is generated by a request from a store, it basically differs for each user. The user can update the information about the changeable part of the screen by inputting the change content from the input unit.
[0070]
When the card data display / update is selected in FIG. 31, it is displayed as shown in FIG. Here, items and contents of the card data file for each user are displayed. The user can update the information about the changeable part of the screen by inputting the change content from the input unit. In the example of FIG. 34, only the remarks column can be changed, but this is basically because other items cannot be changed by the user. It is not necessary to be caught by this during actual operation. However, if this information can be freely updated by the user, there is a possibility that the card can be camouflaged. For changing these items, it is better to take highly reliable means such as requesting each bank or credit sales company.
[0071]
If store browsing permission flag display / update is selected in FIG. 31, it will be displayed as shown in FIG. Here, the fixed items and the contents of the store information file for each user are displayed. The user can update the information about the changeable part of the screen by inputting the change content from the input unit. On this screen, the user can select whether or not browsing is possible for each store, and can set a default value applied when the store is used for the first time.
[0072]
When the extension item button in FIG. 35 is pressed, the display is as shown in FIG. Here, the extension items and contents of the store information file for each user are displayed. The user can update the information about the changeable part of the screen by inputting the change content from the input unit. On this screen, the user can set whether or not browsing is possible for each store.
[0073]
If Web store display / update is selected in FIG. 31, it is displayed as shown in FIG. Here, the items and contents of the Web store authentication information in the store information file for each user are displayed. The user can update the information about the changeable part of the screen by inputting the change content from the input unit. On this screen, the user can automatically log in to the Web store by setting a login ID and password for each Web store.
[0074]
Various patterns other than the one shown in FIG. FIG. 38 shows an example. The difference from FIG. 1 is that the information terminal device 20, the store 30, the information DB server 40, and the financial host server 50 are all connected by the same network 4. By using the Internet as this network 4, a system can be constructed at a lower cost than a network using a dedicated line.
[0075]
FIG. 39 is also an example of the configuration of the entire system. The difference from FIG. 38 is that a plurality of information DB servers 40 are installed and connected by grid computing 60. Grid computing is described in the document “The Anatomic of the Grid: Enabled Scalable Virtual Organizations” (http://www.globus.org/research/papers/anatomy.pdf). Yes, a logical and dynamic organization called Virtual Organization (hereinafter referred to as virtual organization), dynamic sharing of computing power, storage, network, etc. existing in the virtual organization, robustness against intrusion from outside the virtual organization The security is a feature. Thereby, it is possible to perform load distribution while making the information DB server 40 look like one high-performance computer to the information terminal device 20, the store 30, and the financial host server 50.
[0076]
FIG. 40 is a system using the grid computing method as in FIG. 39, but the difference from FIG. 39 is not only the information DB server 40 but also the portable medium 10, the information terminal device 20, the store 30, the financial host server. 50 and the network 4 are also included in the grid computing 60. As a result, a virtual organization can be formed by matching the store 30, the information DB server 40, the financial host server 50, and the like in accordance with the tie-up form, and security and data sharing possessed by grid computing can be realized. Thereby, the portable medium 10 and the information terminal device 20 can be operated more flexibly, such as dynamically adding to the corresponding virtual organization in the grid computing 60 only when access is necessary.
[0077]
As mentioned above, various examples have been given, but there are many applicable fields other than those described above. For example, the electronic ticket described with reference to FIGS. 24 to 26 can be regarded as prepaid electronic money. In addition, the ticket described with reference to FIGS. 27 and 28 can be regarded as postpaid electronic money. Furthermore, this ticket can be regarded as a service ticket such as a discount ticket that can be used in the store. In this case, access to the store's Web homepage in advance, download the service ticket posted there to the portable medium 10 or the information DB server 40, and enjoy the service by taking out the service ticket information when using the store 30 it can. Furthermore, a service that uses the boarding ticket of FIGS. 27 and 28 like a conventional commuter pass is naturally conceivable.
[0078]
As the portable medium 10, various media such as a magnetic card, a memory card, a PC card, a contact IC card, a non-contact IC card, a mobile phone, a wristwatch, and an accessory can be considered. It is also possible to embed a semiconductor chip in the body, so-called a biochip.
[0079]
As the information terminal device 20, a portable information terminal such as a mobile phone and a PDA, a personal computer, a card reader / writer, a memory access device, and the like can be considered.
[0080]
In addition, by writing the owner's face photo, name, address, etc. on the surface of the portable medium 10, it may be possible to use it for applications that can be authenticated simply by presenting the medium.
[0081]
The portable medium access device 21, the display unit 22, and the input unit 23 are not necessarily in the single information terminal device 20. Various forms can be considered together with the portable medium 10. For example, the form medium 10, the portable medium access device 21, the display unit 22, and the input unit 23 may all be integrated into one device. Further, the display unit 22 and the input unit 23 may be included in the server 31 in the store 30.
[0082]
In addition to regular stores, the store 30 is a bank ATM, a credit sales company CD (cash dispenser), a station window, a station ticket gate, an automatic ticket vending machine, a public telephone, a Web store built on the World Wide Web, and automatic sales. It can also be used for places that require authentication upon entry, such as machines, companies, facilities, and hospitals.
[0083]
Issuance of the portable medium 10 and issuance of a user ID in the portable medium, issuance of a store ID generated by the store ID generation unit 31, initial data registration and operation in the information DB server 40, etc. may be performed by a public institution, It may be done by a private company.
[0084]
A part or all of the network 1, the network 2, the network 3, and the network 4 may be configured by the Internet, or may be configured by a dedicated line. These networks may be wired or wireless. In the case of wireless, radio waves or infrared rays may be used. The network connection may be a constant connection or a method of connection only when necessary.
[0085]
It is also possible to check the age of the user at the time of authentication or settlement using the date of birth information of the user data file 41. Similarly, a mechanism for checking using data in the information DB server 40 when the purchase or service provider has some restrictions is also useful.
[0086]
In the information DB server 40, which user ID and store ID performed what kind of processing is recorded as a log file together with the date and time, and part or all of the information is disclosed to the user and the store as needed. This is useful for confirming what kind of authentication and settlement processing has been performed, and for checking unauthorized use of the portable medium 10 and store ID. Further, based on this log file, the unauthorized access to the portable medium 10 can be prevented by turning off the accessible flag of the user data file 41 when the same user makes a mistake in inputting the password a certain number of times within a certain time. Can do. In this case, in order to have the accessible flag turned on again, it is preferable to use a method such as requesting a reliable organization. In addition, the accessible flag is held in both the information DB server 40 and the portable medium 10 so that the accessible flag of both is checked when the portable medium 10 is used, and when one is OFF, the other is also rewritten OFF. Unauthorized use of the portable medium 10 for applications that do not access the information DB server 40 can be prevented.
[0087]
Further, the user data file, the store data file, the user-specific card data file, and the user-specific store information file are not necessarily recorded only in the information DB server 40. A form in which data is recorded in a distributed or overlapping manner in the portable medium 10, the information terminal device 20, the store 30, or the like is also conceivable. For example, as shown in FIG. 41, the case where the information of the four files is stored in the portable medium 10 is also conceivable. In particular, a mode in which the portable medium 10 has a user data file, a user-specific card data file, and a user-specific store information file and the store 30 has a store data file of the store can be easily considered. In short, various methods are conceivable for the storage location of various files, and there are no particular restrictions on where to store which files.
[0088]
A part or all of the data stored in the portable medium 10, the information terminal device 20, the store 30, the information DB server 40, and the financial host server 50, and the data in the network connecting them are encrypted. It is effective in terms of security. In this case, the encryption method can apply various mechanisms that are currently available. Therefore, it is possible to apply encryption that can be used in actual operation of this patent and is recognized as being more secure. Is possible.
[0089]
In addition to the authentication method described in this patent, combining other authentication methods is also effective in terms of enhancing security. In addition to electronic authentication, other authentication methods may use biometric features such as fingerprints, voiceprints, irises, vein patterns, etc., or by a self-written name like a conventional signature A handwriting pattern may be combined.
[0090]
In the embodiment of this patent, the user ID recorded in the form medium 10, the user password input by the user from the keyboard, and the store ID generated by the store ID generation unit are transmitted to the information DB server 40 to send the user and store Although an example of authentication is given, it is not always necessary to authenticate both with these data. In order to increase the reliability of the store ID, some store-specific information may be listed in the information DB server 40 and used for store authentication, or the store ID generation unit 31 may be configured with hardware having an individual ID, and store 30 A method of connecting to and using the server 32 may be used.
[0091]
Further, the user ID and the user password are recorded in the portable medium 10, and the server 32 of the store 30 determines whether or not the user password matches with the user password input from the input unit 23, so that the information DB server 40 is not used. It is possible to build a mechanism for authenticating
[0092]
As a method of displaying on the display unit 22 in the information terminal device 20, if the method of displaying on the World Wide Web browser is used, it can be created so as to correspond to various OSs (Operating Systems), and the user can individually This is useful because it does not require you to install an application. In particular, the system is constructed so that it can be displayed on a mobile phone that can be connected to the Internet, and the mobile medium 10 and the information terminal access device 20 are configured as a mobile phone, and are connected to the mobile phone and the store 30 or the information DB server 40. If network measures are taken, it is useful for users to easily browse and change information both indoors and outdoors, and for authentication and payment at stores.
[0093]
【The invention's effect】
ADVANTAGE OF THE INVENTION According to this invention, the multipurpose portable medium which can be used for authentication and payment with one medium, and its system can be provided.
[Brief description of the drawings]
FIG. 1 is an embodiment of the present invention.
2 is an example of a file configuration in the information DB server in FIG. 1. FIG.
FIG. 3 is an example of a user data file in FIG. 2;
4 is an example of a store data file in FIG.
5 is an example of a store data file in FIG. 2. FIG.
6 is an example of a user-specific card data file in FIG. 2; FIG.
7 is an example of a store information file for each user in FIG.
FIG. 8 is an example of a flow chart when a bank ATM is withdrawn in the present invention.
FIG. 9 is an example of a user flow diagram in FIG. 8;
FIG. 10 is an example of a flow diagram of the bank ATM in FIG.
FIG. 11 is an example of a flowchart of the information DB server in FIG.
12 is an example of a flow chart of user authentication in FIG.
13 is an example of a flow chart for obtaining used card information in FIG. 11;
14 is an example of a flowchart of the bank host server in FIG. 8. FIG.
FIG. 15 is an example of a screen display when a bank ATM is withdrawn in the present invention.
FIG. 16 is an example of a screen display when a bank ATM is withdrawn in the present invention.
FIG. 17 is an example of a screen display when a bank ATM is withdrawn in the present invention.
FIG. 18 is an example of a screen display when a bank ATM is withdrawn in the present invention.
FIG. 19 is an example of a screen display when a bank ATM is withdrawn in the present invention.
FIG. 20 is an example of a screen display when a bank ATM is withdrawn in the present invention.
FIG. 21 is an example of a screen display when a viewing permission flag is changed for a bank ATM in the present invention.
FIG. 22 is an example of a screen display when a viewing permission flag is changed for a bank ATM in the present invention.
FIG. 23 is an example of a flowchart for purchasing a product in the present invention.
FIG. 24 is an example of a flowchart when purchasing an electronic ticket in the present invention.
FIG. 25 is an example of a flowchart when using an electronic ticket in the present invention.
FIG. 26 is an example of a flowchart when using an electronic ticket in the present invention.
FIG. 27 is an example of a flowchart for the initial procedure before boarding in the present invention.
FIG. 28 is an example of a flowchart when using a train in the present invention.
FIG. 29 is an example of a screen display when updating portable medium information in the present invention.
FIG. 30 is an example of a screen display when updating portable medium information in the present invention.
FIG. 31 is an example of a screen display when updating portable medium information in the present invention.
32 is an example of a screen display during user data display / change in FIG. 31;
FIG. 33 is an example of a screen display at the time of user data display / change in FIG. 31;
34 is an example of a screen display at the time of card data display / change in FIG. 31. FIG.
FIG. 35 is an example of a screen display at the time of displaying / changing a store browsing permission flag in FIG. 31;
FIG. 36 is an example of a screen display at the time of displaying / changing a store browsing permission flag in FIG. 31;
FIG. 37 is an example of a screen display at the time of Web store display / change in FIG. 31;
FIG. 38 shows another embodiment of the present invention.
FIG. 39 is another embodiment of the present invention.
FIG. 40 is another embodiment of the present invention.
FIG. 41 is an example of a file configuration in the portable medium in FIG. 1;
FIG. 42 is an example of conventional authentication and settlement.
[Explanation of symbols]
1 ... Network
2 ... Network
3 ... Network
4 ... Network
5 ... Network
10 ... Portable media
11 ... User data file
12 ... Store data file
13 ... User-specific card data file
13A-13D ... Step
14 ... Store information file by user
20 Information terminal device
21 ... Portable media access unit
22 ... Display section
23 ... Input section
30 ... Store
31 ... Store ID generator
32 ... Server
40 ... Information DB server
41 ... User data file
42 ... Store data file
43 ... User-specific card data file
44 ... Store information file by user
50 ... Financial host server
60 ... Grid computing
101 ... Cash card
102 ... Credit card
103 ... Members card
104 ... Point card
105 ... Prepaid card
106 ... Tickets and tickets
130 ... Store
150: Financial host server.

Claims (2)

A portable medium including a user ID for identifying the user;
An information terminal device having a portable medium access unit for reading or writing information recorded in the portable medium, a display unit, and an input unit;
A store having a store ID generating unit that generates a store ID for specifying a store, and a server;
The user ID and the user password corresponding to the user ID are managed, and further registered as a cash card, credit card, member card or point card that the user can use for authentication, settlement or service reception at the store. information DB server for managing the user-specific card data files each card in the card data, and the shop ID corresponding to the respective card and recorded in correspondence with the user ID,
A first network connecting the store and the information terminal device;
A second network connecting the store and the information DB server;
Authentication and settlement method in a system having
A procedure for transmitting user authentication information having a user ID read from the portable medium of the user by using the portable medium access unit and a user password input by the user from the input unit to the store server via the first network; ,
A procedure for transmitting the user authentication information and the store ID generated by the store ID generation unit to the information DB server via the second network;
A procedure for performing authentication of the user on the information DB server based on the user authentication information;
The information DB server searches the card data file for each user with a user ID included in the user authentication information, selects a card that can be used by the user corresponding to the user ID at the store, and stores each card data. To send the information to the information terminal device,
A procedure for displaying a list of the selected cards on a display unit;
To have the procedure designation information is input from the input unit, performs the settlement processing based on the card data of the designated use cards that specify the use card used for such authentication or payment or service receiving from the list of cards displayed Authentication and settlement methods characterized by The store is connected via a third network to a financial host server for settlement,
2. The authentication and settlement method according to claim 1, wherein the user card data is transmitted to the financial host server for settlement processing.

Images