JP4250495B2 - Electronic commerce system and method - Google Patents

Description

  The present invention relates to a merchandise sales method, a control system and program thereof, and a medium.

  Consumables for image forming apparatuses such as copiers and printers are manufactured by their respective manufacturers using their own technologies, and patent rights are often obtained for the products themselves and manufacturing methods. In addition, the brand image is generally protected by acquiring trademark rights and design rights and printing them on packages. However, a third party who does not have any legal title for these intellectual property rights may implement the technology, design, or trademark as a business. Such acts constitute infringement of rights, and the right holder will suffer a great deal of damage from these acts.

  In addition, if an infringer sells a counterfeit product as if it is a genuine product, the user may purchase and use it without knowing that it is a counterfeit product, and the user may mistake the quality of the genuine product. . Further, there may be a case where a trouble occurs in the main device by using a forged consumable, and there arises a problem that the reliability of the main device is impaired. Not only consumables but also products such as bags, bags, etc. are manufactured by traditional manufacturers at their own factories or contract factories, and there are similar problems in selling products with trademarks, so-called luxury brand products, etc. Exists.

In order to solve these problems, a method for determining the authenticity of a product has been proposed (for example, see Patent Document 1). This method is a method of attaching a memory tag in which ID information is recorded to a product, and determining that the product is legitimate if the ID information of the memory tag can be accurately read at a store or the like. The product can be handed over to the seller and the buyer. Effective for transactions.
JP 2000-148950 A

  However, when sellers and buyers conduct transactions remotely, such as in electronic commerce, the above-mentioned conventional technology cannot be applied, and if the product does not reach the buyer, the seller wants to sell it as a genuine product. I couldn't confirm. Even if the product arrives at the buyer side, the individual user often does not have a determination device for determining a genuine product, or does not know the determination method itself. Furthermore, the above method cannot prevent a forgery method in which information is read from a memory tag of a product already shipped, copied, and attached to a counterfeit product.

  The present invention is to solve the above-mentioned problems individually or collectively, and an object of the present invention is to enable commercial transactions after proving that a product is a genuine product.

In order to achieve the above object, a system according to the present invention provides:
An electronic commerce system having an authentication server and a sales management server ,
The authentication server is
A database for storing a product serial number corresponding to a product name and an order number assigned when a product represented by the product serial number is ordered;
Determining means for receiving a product serial number from the sales management server and determining whether an order number corresponding to the received product serial number is already stored in the database ;
If it is determined by the determining means that the order number is stored, the sales management server is notified that the order number is not genuine. If the determining means determines that the order number is not stored, the order number And a first notification means for notifying the sales management server that the product is genuine.
Second notification means for notifying a user of determination result information including a determination result and a product name by the determination means;
Have
The sales management server includes:
Means for receiving order information including a product name from a user;
Transmitting means for transmitting the order information and determination information including a product serial number to the authenticity determination server;
If the determination result of the authenticity determination server is a genuine product,
It is characterized by having.

In order to achieve the above object, the method according to the present invention comprises:
A genuine product determination method in an electronic commerce system having an authenticity determination server and a sales management server,
The authenticity determination server having a database that stores a product serial number corresponding to a product name and an order number,
A determination step of determining whether an order number corresponding to the product serial number included in the received determination information is already stored with reference to the database;
If it is determined that the order number is already stored in the determination step, the sales management server is notified that the order number is not genuine, and if it is determined that the order number is not yet stored in the determination step, the order number is A first notification step of registering and notifying the sales management server that the product is genuine.
A second notification step for notifying a user of determination result information including the determination result and the product name in the determination step;
Run
The sales management server includes:
Receiving order information including a product name from a user;
Transmitting the order information and determination information including a product serial number to the authenticity determination server;
If the determination result of the authenticity determination server is a regular product,
It is characterized by performing.

  According to the present invention, it is possible to conduct a commercial transaction after proving that a product is a genuine product.

  Hereinafter, a product sales system according to the present invention will be described in detail with reference to the drawings. In the embodiment, a toner cartridge used in an apparatus such as an electrophotographic printer, a copier, and a facsimile machine will be described as an example of a product. However, the present invention may be applied to other products such as bags, shoes, and watches. Can do.

<First Embodiment>
An electronic commerce system 100 to which the system as the first embodiment of the present invention can be applied will be described with reference to FIG. The electronic commerce system 100 includes a server computer (referred to as an authenticity determination server) 101 for determining authenticity, a server computer (referred to as a sales management server) 102 for managing sales, and a client computer (referred to as a seller client) operated by the seller. ) 111, a client computer (referred to as a user client) 112 operated by an end user, and a client computer (referred to as a manufacturer client) 113 operated by a manufacturer, each of which is connected to a network such as the Internet. The seller client 111 is connected to a determination information input device 121 for inputting authentication information.

  Among these, the sales management server 102 is normally operated by a seller, and performs transaction processing at the time of sales, management of sales history, exchange of determination information with the authenticity determination server 101, and the like. On the other hand, the authentication server 101 is managed by a manufacturer or a third party jointly operated by a plurality of manufacturers.

  The sales management server 102 receives the order information from the user client 112 and transmits the order information to the seller client 111. The merchant client 111 searches for merchandise in stock by the merchant on the basis of the received order information, and inputs determination information regarding the merchandise using the determination information input device 121. Here, the determination information input device 121 inputs the determination information by reading the memory tag embedded in the product. Further, the seller client 111 transmits the input determination information to the authenticity determination server 101 via the Internet. The authenticity determination server 101 determines whether the product is a genuine product based on the received determination information, and transmits the determination information to the seller client 111, the user client 112, the manufacturer client 113, and the sales management server 102. . When the determination information indicating that the product is genuine is transmitted to the sales management server 102, the sales management server 102 performs order processing such as a delivery instruction and payment.

  Although the authenticity determination server 101 and the sales management determination server 102 are illustrated separately here, they do not necessarily have to be physically separate computers, and one computer can execute each function. Also good. On the other hand, although each client is illustrated as one computer, a configuration in which those functions are realized as a plurality of computers as a whole may be employed. Further, the function as the seller client 111 may be incorporated in the determination information input device 121.

  Next, the data structures of the authentication server 101 and the sales management server 102 will be described.

  The authentication server 101 includes an authentication database, a manufacturer database, a seller database, and a customer database. The authentication database includes authentication data and authentication history data. The authenticity determination data is data for determining authenticity, and includes a product name and a product serial number. Further, the authenticity determination history data is data indicating a history of authenticity determination, and includes a product name, a product serial number, an order number, a seller ID, a customer ID, a determination count, and fraud information.

  The manufacturer database stores data necessary for transmission and reception of determination results, such as a manufacturer number, a manufacturer name, a manufacturer IP address, a manufacturer address, and a manufacturer telephone number. The seller database stores data necessary for transmission / reception of determination results, such as a seller number, a seller name, a seller IP address, a seller address, and a seller telephone number. The customer database stores data necessary for transmission / reception of determination results, such as a customer ID, a customer name, a customer IP address, a customer address, and a customer telephone number. The customer database is linked to the customer database of the sales management server, and when customer data is added to the sales management server, the same customer data is added to the customer database of the authentication server.

  On the other hand, the sales management server 102 includes an order information database, a manufacturer database, a seller database, and a customer database. The order information database includes order shipment data and order shipment history data. The data for order shipment is data relating to the product name, price, and inventory quantity. On the other hand, the order shipment history data is data relating to the order number, order date / time, order product, delivery date, price, shipping date / time, arrival date / time, training date / time, and payment method. The manufacturer database stores data necessary for sales management such as a manufacturer number, a manufacturer name, a manufacturer IP address, a manufacturer address, and a manufacturer telephone number. The seller database stores data necessary for sales management such as a seller number, a seller name, a seller IP address, a seller address, and a seller telephone number. The customer database stores data necessary for sales management such as a customer ID, a customer name, a customer IP address, a customer address, and a customer telephone number.

  A configuration in which a plurality of computers realize the functions of the authentication server 101 and the sales management server 102 is also conceivable. For example, in the case where the authentication server 101 is composed of one computer and the sales management server 102 is composed of two computers, the authentication server 101 is connected to the authentication server 101 for data transmission and reception of two computers. It is assumed that data relating to a seller and a customer for determination are accumulated.

  Although the authentication server 101 includes all of the authentication database, manufacturer database, seller database, and customer database, the manufacturer database, seller database, and customer database are not necessarily authenticated. The server 101 does not need to be prepared, and may be provided in a computer on a network accessible by the authentication server 101.

(Computer hardware configuration)
Next, a hardware structure of the computer 200 that can be used as the authentication server 101, the sales management server 102, or each of the clients 111, 112, and 113 will be described with reference to FIG.

  As shown in FIG. 2, the computer 200 includes a CPU (Central Processing Unit) 201, an input device 202, a main storage device 203, an output device 204, an auxiliary storage device 205, a communication device 206, and the like.

  The CPU 201 has a function of sending a command to each device in the computer, controlling the operation thereof, and a function of performing arithmetic processing of digital data. The input device 202 is a device for inputting various data. Examples of the input device 202 include a pointing device such as a keyboard and a mouse, a touch panel, a pressure sensitive pad, a CCD camera, a card reader, a paper tape reader, and a magnetic tape device. For example, the instruction data can be input from the input device 202 such as a mouse while various graphical user interfaces are displayed on the output device 204. The CPU 201 recognizes the input information and proceeds to the next process.

  The main storage device 203 is mainly composed of semiconductor elements and stores and holds input programs and data, and includes an addressable memory space used by the CPU 201 to execute instructions. The data held in the main storage device 203 is read by the CPU 201 into, for example, a register. The main storage device 203 includes a RAM (Random Access Memory), a ROM (Read Only Memory), and the like.

  The output device 204 is a device for outputting a calculation result by the CPU 201, and corresponds to, for example, a CRT, a plasma display, a liquid crystal display, other display devices, a printing device such as a printer, an audio output device, or the like.

  The auxiliary storage device 205 is a device for holding data in a nonvolatile manner to supplement the storage capacity of the main storage device 203. For example, a magnetic disk device, an optical disk device, a semiconductor disk device, a floppy (registered trademark) disk, a CD -Media and drives such as ROM, CD-R, CD-R / W, MO, and DVD fall under this category. The auxiliary storage device 205 is a device for realizing a database function. It also has a function of storing programs in the same manner as the main storage device.

  The communication device 206 is a device for communicating with other computers via a network, and performs data protocol conversion, digital / analog conversion, and the like according to the connected network.

  The above-described devices are connected to each other by an address bus or a data bus, and are used for bidirectional communication of various data.

(Overall process flow when ordering products)
Next, a series of processing at the time of ordering goods in this system will be described in detail with reference to the flowchart of FIG. 3 are stored in the main storage device 203 or the auxiliary storage device 205 provided in the authentication server 101, the sales management server 102, the seller client 111, the user client 112, and the manufacturer client 113. This is realized by the CPU 201 executing processing based on the program code. Further, data transmission / reception between these computers can be performed by, for example, an IP address.

  First, in step S <b> 301, the user client 112 transmits customer user ID and password input information to the sales management server 102. The sales management server 102 determines whether or not the received user ID and password are registered. If registered, the process proceeds to step S302, and the user approval information and the order screen information are transmitted to the user client 112.

  Next, in step S303, the user client 112 transmits the order information (product name, delivery date, quantity) input by the user to the sales management server 102 together with the user ID. In step S304, the sales management server 102 transmits the received order information and GUI screen information shown in FIG. 8 to the seller client 111.

  When the “determine authenticity” button is selected on the screen of FIG. 8, the determination information is read by the determination information input device 121 connected to the seller client 111 in step S305. When reading is started, a screen as shown in FIG. 9 is displayed on the output device 204 of the seller client 111.

  The determination information input device 121 reads the product-specific serial number encrypted by the secret key method. Here, the read serial number is referred to as determination information. Note that the determination information may be image information, for example. The image information here is an image that proves that the product is a genuine product, and is, for example, a micro character embedded in the regular product by a manufacturer. Further, the determination information of the products in stock by the seller may be uploaded to the sales management server 102 in advance before the order is received, and given to the order information in the sales management server 102 according to the order. .

  In step S 306, the determination information read by the seller client 111 is transmitted to the sales management server 102, and the sales management server 102 adds the order information and the seller ID to the determination information and transmits the determination information to the authenticity determination server 101.

  In step S307, the authenticity determination server 101 that has received the order information and the determination information decrypts the encrypted determination information using the secret key, and compares the decryption result with the determination database to determine authenticity. . And based on the result, determination result information (order number, determination result, label data for product attachment) is generated.

  Further, in step S308, the authenticity determination server 101 transmits determination result information to the sales management server 102 that manages the seller ID. If the received determination result information is information related to the determination of “genuine product”, the sales management server 102 performs a product shipment procedure in step S309, and ships the product in step S310. On the other hand, the authenticity determination server 101 transmits determination result information (order number, seller number, product name, determination result, determined product serial number) to the user client 112 in step S311.

(Authenticity judgment processing)
Next, the flow of authentication determination processing performed in the authentication determination server 101 will be described in detail with reference to FIG. FIG. 4 is a flowchart showing the flow of authentication determination processing.

  First, when the authenticity determination server 101 receives the order information and determination information from the seller client 111 in step S401, the process proceeds to step S402, and the order information and the encrypted determination information are stored in the main storage device 203.

  The authenticity determination server 101 includes a secret key for decryption of the determination information and a decryption program. When the determination information is input, decryption is performed in step S403. From the determination information, the order number (PN), product name (PC), sales The person ID (SID), customer ID (CID), and product serial number (PSN) are extracted. Next, in step S404, the authenticity determination server 101 determines whether the product serial number included in the determination information is registered in the authenticity determination database. That is, the registered product serial number that matches the extracted product serial number is searched with reference to the authentication database. If a matching product serial number is found, the process proceeds to step S405, where the order number is verified.

  FIGS. 5A to 5C are tables showing information managed in the authenticity determination database. As shown in FIG. 5A, the authenticity determination database includes a product name (PC), a product serial number (PSN), an order number (PNO), a seller ID (SID), a customer ID (CID), and the number of times of determination (JN ), Unauthorized information (II), etc. are managed for each registered product. When a product is produced or received, product information such as a product name (PC) and a product serial number (PSN) is additionally registered in this table as needed.

  Here, the assumed fraudulent case of the seller is explained. First of all, it is assumed that only counterfeit products are purchased and intentionally sold, or they are mistakenly sold without knowing that they are counterfeit products. In these cases, as described above, the product determined when the product serial number registered in the authenticity determination server cannot be read is regarded as not a genuine product. Next, it is assumed that the seller has both genuine and counterfeit products. For example, suppose a seller has only one genuine product and 10 counterfeit products. If the history of judgment information is not managed, the seller makes judgments using a single genuine product as many times as possible, and disguises the counterfeit product as a genuine product. 10 counterfeit goods can be sold. Therefore, here, once a regular product managed by a serial number is sold (when a determination associated with sales information is made), a process of making the product of that serial number impossible to sell is performed again.

  However, there are cases where the seller wants to make a product judgment other than at the time of sale, for example, at the time of product arrival or at the time of product inventory, so that the product judgment itself is possible. However, in this case, the process shown in FIG. 4 is not performed. The processing in FIG. 4 is performed only when the seller performs sales processing with the purchaser.

  Here, the number of times of determination (JN) indicates the number of times the determination (S404) associated with the order information is performed for each product name (PC) and product serial number (PSN). If the number of determinations (JN) is “0”, it indicates that the determination associated with the order information has never been made for the product. If the number of determinations (JN) is “1”, the determination is related to the order information. Indicates that a determination is being made. Here, the fraud information is a logic in which fraud information is automatically displayed when the determination number (JN) of the same serial number product is 2 or more. If a product is ordered once, it cannot happen again, so even if the number of times of judgment (JN) is “1”, if further judgment is made, there is a possibility that the product is going to be shipped illegally. In this case, the number of determinations (JN) is incremented to “2”, and the illegal information (II) is changed from “none” to “present”.

  However, the increment process is performed only for the determination information associated with the order information. For example, even if the seller performs determination processing for confirmation on a product in stock other than at the time of sale, the increment processing is not performed because it is not associated with sales in this case. The seller can perform the determination process any number of times other than at the time of sale, but can determine only once for the same product at the time of sale.

  In FIG. 5A, the determination associated with the sale is performed once for the product with the product name (PC) “CRG-A” and the product serial number (PSN) “ABC111”. JN) “1” is stored. Further, for this product, the order number (PNO) “aaa111”, the seller ID (SID) “YAMA11”, and the customer ID (CID) “KAWA12” included in the order information transmitted simultaneously with the determination information are stored. Has been. Since no determination associated with sales has been made since the first determination, “none” is stored in the unauthorized information (II). On the other hand, for the product with the product name (PC) “CRG-A” and the product serial number (PSN) “ABC112”, the judgment number (JN) is 0, because the judgment associated with the sales has not yet been made. No information is stored in the number (PNO), seller ID (SID), and customer ID (CID). Naturally, “none” is stored in the illegal information (II).

  In step S405, the authenticity determination database is further referred to, and it is determined whether or not the order number (PN) for the product for which the determination information has been received is plank. If it is blank, the process proceeds to step S406, where the sales information PN, SID, and UID transmitted to the product determination DB are registered, and the determination count JN is incremented.

  For example, in FIG. 5A, assuming that determination information about a product having a product name (PC) “CRG-A” and a product serial number (PSN) “ABC112” has been received, the authentication processing database is obtained through the process of step S406. Transits to the state shown in FIG. That is, the determination number (JN) of the product with the product name (PC) “CRG-A” and the product serial number (PSN) “ABC112” is incremented to “1”, and the order information is stored (FIG. 5B). )

  As described above, when the order information of the product to be determined is not stored in the authenticity determination database, the product is determined to be a genuine product, and the process proceeds to step S407. An authenticity determination OK screen for notifying the presence is generated, and the screen information is transmitted to the seller client 111 in step S408. An example of this screen is shown in FIG.

  Further, the authenticity determination server 101 generates an authenticity determination OK screen for notifying the user that the product to be shipped is a genuine product (authentication determination OK) in step S409, and the screen information is transmitted to the user client 112 in step S410. Send. An example of this screen is shown in FIG.

  The user collates the product information (order number, product name, product serial number) displayed on the screen as shown in FIG. 11 with the product name and product serial number displayed on the product when the product is delivered. By doing so, it can be confirmed that the product is genuine.

  On the other hand, if the product serial number is not found in step S404, the process proceeds to step S411, and screen information is sent to the dealer to that effect, and the screen information is transmitted to the seller client in step S412. Ends. An example of this screen is shown in FIG.

  If the order number (PN) of the ordered product specified by the product serial number has already been registered as a result of the verification of the authentication database and the determination information in step S405, the process proceeds to step S413, and the determination count JN is incremented. Then, the unauthorized information (II) is updated to “present”.

  From the state of FIG. 5B, it is determined that the product of the product name (PC) “CRG-B” and the product serial number (PSN) “XYZ111” is further determined in step S405 and the order information has already been registered. If it understands, the authentication database will change to the state shown, for example in FIG.5 (c). In FIG. 5C, the number of determinations (JN) is incremented from “1” to “2”, and the unauthorized information (II) is updated from “none” to “present”.

  Thereafter, regular product determination NG screen information is created in step S414, and the screen information is transmitted to the seller client 111 in step S415. An example of this screen is shown in FIG. The product itself determined by the seller is a genuine product, but the product with that serial number has already been “determined in association with sales information” in the past (that is, it has already been sold once. Because it is unique, it is impossible for the product with the same serial number to be sold twice.) Therefore, the expression "Serial number is invalid" is used. In step S416, a screen for notifying the manufacturer of unauthorized information is created. In step S417, the screen information is transmitted to the manufacturer client 113, and the processing of the authentication server 101 ends. An example of this screen is shown in FIG.

(Sales management processing)
Next, the flow of sales management processing performed in the sales management server 102 will be described with reference to FIG. FIG. 6 is a flowchart showing the flow of sales management processing.

  In the processing flow shown below, the sales management server 102 receives a product order from the user using the seller's Web site or the like as a front end, and performs the shipping process.

  First, in step S601, reception of a user ID and password from the user client 112 is awaited. When the user ID and password are received, the process proceeds to step S602, where authentication is performed with reference to the user database. If the authentication is NG, the process ends. As a result of authentication, if it is determined that the user is a registered user, the process proceeds to step S603, where a user approval and order acceptance screen is transmitted to the user client 112, and reception of order information is awaited in step S604.

  When the order information is input in the user client 112 and the sales management server 102 receives the order information, the process proceeds to step S605, and the screen information that presents the order information to the seller client 111 and prompts the input of the determination instruction is transmitted. As described above, FIG. 8 is an example of this screen. When the user selects a “determine product” button on this screen and the user inputs determination information using the determination information input device 121, the user client 111 transmits the determination information to the sales management server 102, and The screen shown in FIG. 9 is displayed on the display.

  In step S606, the sales management server 102 waits for reception of the determination information. When the determination information is received, the sales management server 102 proceeds to step S607 and transmits the determination information to the authenticity determination server 101. Next, when the authentication server receives the determination result information, the process proceeds to step S609 to determine whether or not the determination result is “OK”.

  If the determination result is “OK” in step S609, that is, if it is approved that the product is a genuine product, the process proceeds to step S610, and the label data for attaching the product (genuine product determination certificate) is sent to the seller client 111. In step S611, the merchant client 111 is instructed to ship merchandise. This label data is for the seller to print out a genuine product determined label and attach it to the product. An example of the label is shown in FIG.

  The seller packs the product with this label, arranges the truck and delivers it. When the user receives the product, the product serial number is compared with the determination information received from the authenticity determination server 101, and by confirming that the “genuine product determination certificate” is attached to the product, Easy and reliable confirmation of genuine products.

  On the other hand, if the determination result is “NG” in step S609, that is, if the product is not approved as a genuine product, the process proceeds to step S612 to prompt the user whether to continue the order process. Screen information for transmission to the user client 112. An example of the screen displayed on the user client 112 at this time is shown in FIG. Here, the message “Details will be notified separately from the authentication server” refers to FIG. The authentication server is a server operated by a third party other than the seller, and the sales management server is assumed to be a server operated by the seller. Therefore, the information in FIG. 13 becomes official authentication information, and the information in FIG. 16 is a screen for the seller to determine whether or not to continue selling, and includes the minimum necessary information.

  After the screen as shown in FIG. 16 is displayed, the process advances to step S613 to wait for an instruction to continue the order process. When the “Continue” button in FIG. 16 is selected, the information is sent to the sales management server 102. Upon receiving the continuation instruction, the sales management server 102 proceeds to step S614 and instructs the seller client 111 to determine. Is transmitted, and the processes after step S606 are repeated again. In step S613, when an order processing discontinuation instruction is received from the user client 112, in step S615, an order cancellation notice is transmitted to the user client 112 and the merchant client 111, and the processing ends.

(Judgment information input)
Next, a configuration for inputting determination information will be described. FIG. 7 is a block diagram showing the internal configuration of the determination information input device 121 and the internal configuration of the non-contact type memory tag 701 built in the product.

The memory tag 701 includes a memory 701, a logic circuit 703, and an RF (Radio Frequency) circuit 704. A memory 701 is a ROM including a storage area that cannot be rewritten, and stores a product serial number and the like in an encrypted state. Data is written before the point of sale to the user (for example, at the time of product manufacture or at the time of shipment), and data encrypted by a secret key method is recorded. As the encryption method, a case where another method such as a public key private key method is applied is also assumed. The logic circuit 703 reads data from the memory 702 and transmits it to the RF circuit 704 in accordance with the command signal received from the RF circuit 704. An antenna 708 is connected to the RF circuit portion 703, and a demodulation circuit that converts a radio wave received from the antenna 708 into a signal for transmitting to the logic circuit 704, and conversely, a signal received from the logic circuit 703 is used for wireless communication. Includes a modulation circuit that converts to
On the other hand, the determination information input device 121 also includes a logic circuit 706 and a memory 707 for performing data transmission / reception between the RF circuit unit 705 and the seller client 111.

  When the determination information input device 121 receives a memory read command from the seller client 111, the logic circuit 706 receives the command signal, transmits the command signal to the RF circuit 705, and modulates the radio signal for radio communication by the RF circuit 705. Radio waves are transmitted to the memory tag 701 incorporated in the product through the antenna coil 709. The memory tag 701 that has received the radio wave by the antenna 708 demodulates the radio communication radio wave by the RF circuit 704 and transmits it to the logic circuit 703. The logic circuit 703 reads data from the memory 702 in accordance with the received command signal and transmits the read data to the RF circuit 704. The RF circuit 704 modulates the read data into radio waves for wireless communication and transmits the data to the determination information input device 121 through the antenna coil 708. In the determination information input device 121, the radio wave received through the antenna coil 709 is demodulated by the RF circuit 705 and transmitted to the logic circuit 706, and data is transmitted from the logic circuit to the seller client 111.

  As described above, according to the present embodiment, since the seller can definitely sell the genuine product to the orderer, it is possible to obtain the trust of geographically distant users such as E-Commerce. When the user receives the product, the user can easily confirm that the product is a genuine product by comparing the judgment information sent in advance with the product. Manufacturers can quickly obtain information that is suspected of fraud when there is a possibility of fraudulent transactions in the market.

Second Embodiment
Next, a second embodiment of the present invention will be described with reference to FIG. FIG. 17 is a diagram showing a series of processes when ordering merchandise in the present embodiment. This embodiment differs from the first embodiment in that the customer can confirm the product identification symbol (second serial information) separately from the product serial number when receiving the product. Since the processes other than the process related to the product identification symbol are the same as those in the first embodiment, the same processes are denoted by the same reference numerals and the description thereof is omitted.

  After receiving the order information and the determination information from the sales management server 102 in step S306, the authenticity determination server 101 according to the present embodiment retrieves the product specific symbol in addition to the decryption process and the authenticity determination process in step S1707. I do.

  Here, the product specific symbol (PSM) will be described with reference to FIG. The product specific symbol is a symbol corresponding to the serial number of the product serial number as shown in FIG. This product identification symbol is desirably issued using a random number or the like instead of a serial number, and needs to be a symbol that cannot be easily estimated from the product serial number.

  In the example illustrated in FIG. 18, the product identification symbol “axa” is assigned to the product having the product serial number “ABC111”. Further, a product identification symbol “xbc” that cannot be estimated from the relationship of the product serial number is assigned to the product of the product serial number “ABC112”. The product identification symbol does not necessarily need to be a number, a character, or the like, and may be a newly created special mark. A product serial number is assigned at the time of manufacture or shipment of the product, and at this time, a product identification code is also issued and given. A database as shown in FIG. 18 is prepared in the authenticity determination server 101, and data is accumulated with the issuance of the product identification symbol. Furthermore, the product identification symbol is also printed on the actual product. The product serial number is generally printed on the front of the packaging box that is visible to the manufacturer, seller, user, etc., but the product identification code is usually on the back of the box or inside the box, such as a seal or cut. Will print where you cannot see.

  In step S1707 of FIG. 17, after performing the decryption process and the authenticity determination (correctness determination) of the product, if the product is a genuine product, the product serial number is used to retrieve the product identification symbol from the database shown in FIG. . Thereafter, in step S 1712, screen information indicating where the specific symbol is displayed and where the specific symbol is displayed is generated and transmitted to the user client 112. An example of this screen is shown. In FIG. 19, the product specific symbol 1901 is notified to the user as “guidance for the product specific symbol for regular product determination”.

  As described above, in this embodiment, the user can confirm that the product is genuine by confirming not only the product serial number but also the product identification symbol that the seller cannot grasp when receiving the product. It becomes possible. For example, even if a manufacturer of counterfeit products can read a product identification symbol from a memory tag of a sold product, it is virtually impossible to estimate a product identification symbol attached to an unsold product. For this reason, it is possible to more reliably determine a counterfeit product.

(Third embodiment)
A third embodiment of the present invention will be described with reference to FIGS. The present embodiment is different from the first embodiment in that the determination information includes a determination device ID and a determination time. Since the processes other than the process related to the determination device ID and the determination time are the same as those in the first embodiment, the same processes are denoted by the same reference numerals and the description thereof is omitted.

  The determination device ID is a serially assigned number for each determination information input device, and is given to the determination information input device before the seller makes the first determination in the sales system. For example, the determination device ID may be stored in advance in the nonvolatile memory 707 incorporated in the determination information input device 121, transmitted to the authentication server 101, and registered in the authentication server 101. In addition, for example, the seller requests the authentication server 101 to register the determination information input device 121 that the seller wants to use, and the determination device ID issued by the authentication server 101 is determined via the seller client 111. You may memorize | store in the non-volatile memory 707 of 121. FIG.

  On the other hand, the determination time is the time when the determination information input device 121 inputs the determination information attached to the product from the determination target product. However, the present invention is not limited to this, and the time when information is transmitted from the determination information input device 121 to the authenticity determination server 101 may be used.

  FIG. 20 is a diagram showing a series of processes when ordering merchandise in the present embodiment.

  Upon receiving the order information from the sales management server 102 in step S304, the seller client 111 reads the product serial number and the determination device ID in step S2005, and adds determination time to generate determination information. Next, in step S2006, determination information including the determination device ID and the determination time is transmitted to the authenticity determination server 101 together with the order information.

  If the authenticity determination server 101 decrypts the code in step S307 and determines the authenticity, the process proceeds to step S2008, and the determination result information including the determination device ID and the determination time is transmitted to the sales management server 102. In step S2011, determination result information including the determination device ID and the determination time is transmitted to the user client 112.

  FIG. 21 is a flowchart showing a flow of processing performed by the authentication server 101 according to the present embodiment. Upon receiving the order information and the determination information in step S401, the authenticity determination server 101 proceeds to step S2102 and reads the determination information including the determination device ID and the determination time. The other processes are the same as those in the flowchart shown in FIG. However, the screen information transmitted in step S408, step S410, step S412, step S415, and step S417 also includes the determination device ID and the determination time. Examples of these screens are shown in FIGS.

  FIG. 22 is a diagram showing the contents of the authentication determination database managed by the authentication determination server 101. The contents of the authenticity determination database are substantially the same as those shown in FIG. 5 in the first embodiment, but also include the determination device ID and the determination time.

  As a result, when unauthorized information is found, it is possible to perform a search using the determination device ID or to sort in the order of determination time. FIG. 22B is a diagram illustrating a result of searching for a product having the determination device ID “222222” with respect to FIG.

  It is also possible to specify a determiner when a fraud determination occurs and to function as evidence of fraud determination.

  As described above, in the present embodiment, by including the determination device ID and the determination time in the determination information, it is determined whether or not the unauthorized process is performed when the process considered to be unauthorized is performed. It is possible to make more detailed determinations such as Here, fraud processing refers to selling fraudulent products. In this system, when a product is sold, the product cannot be sold unless it is determined for the product to be sold. Therefore, the determiner (the person who operates the determination information input device) = the seller. In addition, by registering the determination device itself as an ID, if it is known which determination device is used for fraud, an unauthorized person can be determined from the administrator of the device. Regarding the determination time, for example, if a fraudulent determination is made continuously in the same period, the manufacturer determines that it is highly likely that the determination was made intentionally. It becomes possible to do. If done deliberately, it can be used to crack down at an early stage, such as by notifying authorities such as the police.

(Other embodiments)
Although the embodiments of the present invention have been described in detail above, the present invention may be applied to a system constituted by a plurality of devices or may be applied to an apparatus constituted by one device.

  In the present invention, a software program that realizes the functions of the above-described embodiments is directly or remotely supplied to a system or apparatus, and the computer of the system or apparatus reads and executes the supplied program code. Including the case where it is also achieved by. In that case, as long as it has the function of a program, the form does not need to be a program.

  Accordingly, since the functions of the present invention are implemented by computer, the program code installed in the computer also implements the present invention. That is, the claims of the present invention include the computer program itself for realizing the functional processing of the present invention.

  In this case, the program may be in any form as long as it has a program function, such as an object code, a program executed by an interpreter, or script data supplied to the OS.

  As a recording medium for supplying the program, for example, floppy (registered trademark) disk, hard disk, optical disk, magneto-optical disk, MO, CD-ROM, CD-R, CD-RW, magnetic tape, nonvolatile memory card ROM, DVD (DVD-ROM, DVD-R) and the like.

  As another program supply method, a client computer browser is used to connect to an Internet homepage, and the computer program of the present invention itself or a compressed file including an automatic installation function is downloaded from the homepage to a recording medium such as a hard disk. Can also be supplied. It can also be realized by dividing the program code constituting the program of the present invention into a plurality of files and downloading each file from a different homepage. That is, a WWW server that allows a plurality of users to download a program file for realizing the functional processing of the present invention on a computer is also included in the claims of the present invention.

  In addition, the program of the present invention is encrypted, stored in a storage medium such as a CD-ROM, distributed to users, and key information for decryption is downloaded from a homepage via the Internet to users who have cleared predetermined conditions. It is also possible to execute the encrypted program by using the key information and install the program on a computer.

  In addition to the functions of the above-described embodiments being realized by the computer executing the read program, the OS running on the computer based on the instruction of the program is a part of the actual processing. Alternatively, the functions of the above-described embodiment can be realized by performing all of them and performing the processing.

  Furthermore, after the program read from the recording medium is written in a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion board or The CPU or the like provided in the function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing.

  Furthermore, not only each of the first to third embodiments described above, but also a combination of these embodiments freely is included in the scope of the present invention.

1 is an overall configuration diagram of a sales system according to the present invention. It is a block diagram which shows schematic structure of the computer which comprises a sales system. It is a sequence diagram which shows the flow of the information at the time of the goods sale which concerns on 1st Embodiment. It is a flowchart which shows the process of the authenticity determination server which concerns on 1st Embodiment. It is a specific example of the storage state of the database in the authentication server according to the first embodiment. It is a flowchart which shows the process of the sales management server which concerns on 1st Embodiment. It is a conceptual diagram which shows the specific example of an authenticity determination apparatus. It is a figure which shows an example of the screen at the time of the order which concerns on 1st Embodiment. It is a figure which shows an example of the screen at the time of the order which concerns on 1st Embodiment. It is a figure which shows an example of the screen at the time of the order which concerns on 1st Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 1st Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 1st Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 1st Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 1st Embodiment. It is a figure which shows an example of the label data for goods attachment sent to the seller client which concerns on 1st Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 1st Embodiment. It is a sequence diagram which shows the flow of the information at the time of goods sale which concerns on 2nd Embodiment. It is a figure which shows an example of the relationship between the product serial information which concerns on 2nd Embodiment, and a product specific symbol. It is a figure which shows an example of the goods specific symbol notification screen which concerns on 2nd Embodiment. It is a sequence diagram which shows the flow of the information at the time of goods sale which concerns on 3rd Embodiment. It is a flowchart which shows the process of the regular goods determination server which concerns on 3rd Embodiment. It is a figure which shows the content of the database in the regular product determination server which concerns on 3rd Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 3rd Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 3rd Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 3rd Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 3rd Embodiment. It is a figure which shows an example of the screen of the goods determination result which concerns on 3rd Embodiment.

Claims (4)

An electronic commerce system having an authentication server and a sales management server ,
The authentication server is
A database for storing a product serial number corresponding to a product name and an order number assigned when a product represented by the product serial number is ordered;
Determining means for receiving a product serial number from the sales management server and determining whether an order number corresponding to the received product serial number is already stored in the database ;
When it is determined that the order number is stored by the determination unit, the sales management server is notified that the order number is not genuine. When the determination unit determines that the order number is not stored, the order number is First notification means for registering and notifying the sales management server that the product is a genuine product;
Second notification means for notifying a user of determination result information including a determination result and a product name by the determination means;
Have
The sales management server includes:
Means for receiving order information including a product name from a user;
Transmitting means for transmitting the order information and determination information including a product serial number to the authenticity determination server;
If the determination result of the authenticity determination server is a genuine product,
An electronic commerce system comprising: The sales management server includes:
When it is determined that the authenticity determination server is not a genuine product, it is notified whether or not the order receiving process is to be continued. The electronic commerce system according to claim 1, further comprising means for canceling the transaction. A genuine product determination method in an electronic commerce system having an authenticity determination server and a sales management server,
The authenticity determination server having a database that stores a product serial number corresponding to a product name and an order number,
A determination step of determining whether an order number corresponding to the product serial number included in the received determination information is already stored with reference to the database;
If it is determined that the order number is already stored in the determination step, the sales management server is notified that the order number is not genuine, and if it is determined that the order number is not yet stored in the determination step, the order number is A first notification step of registering and notifying the sales management server that the product is genuine.
A second notification step for notifying a user of determination result information including the determination result and the product name in the determination step;
Run
The sales management server includes:
Receiving order information including a product name from a user;
Transmitting the order information and determination information including a product serial number to the authenticity determination server;
If the determination result of the authenticity determination server is a regular product,
A method for determining a genuine product, characterized in that The sales management server includes:
When it is determined that the authenticity determination server is not a genuine product, it is notified whether or not the order receiving process is to be continued. The method for determining a genuine product according to claim 3, wherein:

Images