JP4387534B2 - Mail order system - Google Patents

Description

[0001]
[Technical field to which the invention belongs]
[0002]
The present invention relates to a mail-order sales system in which a store device of a store that sells products, a customer device that issues a purchase request for a product, and a financial institution device that holds customer financial information are connected to a communication network.
[Prior art]
[0003]
The payment method when a purchaser purchases a product at an Internet store on the Internet is as follows: (1) The purchaser enters information such as a credit card number in the form formed on the Internet store's WWW page. how to be transmitted to the store computer, (2) SET method using (Secure Electronic Transaction) protocol, (3) CAFIS (Credit and Finance Information System) method using it is already known.
[Problems to be solved by the invention]
[0004]
However, in the above method (1), even if a connection is made between the purchaser's computer and the store computer using an authentication service called SSL (Secure Sockets Layer), the store side is malicious. If there is, there is a possibility that information on the purchaser's credit card may be leaked, and there is a concern about safety.
[0005]
In the above method (2), dedicated software is required, and the installation of the dedicated software is not only troublesome for the user, but also the storage area of the storage device such as a hard disk in the computer is the dedicated software. There was a problem of being used for wear.
[0006]
In the method (3), if the store side is malicious, information on the purchaser's credit card may be leaked. In addition, dedicated software is required for the store computer.
[0007]
SUMMARY OF THE INVENTION An object of the present invention is to provide a mail order system capable of paying safely between devices of a purchaser and a store connected to a communication line network.
[Means for Solving the Problems]
[0008]
A mail order system according to the present invention includes a store apparatus of a store that sells products, a customer apparatus that has a Web (web) browser and instructs the purchase of goods, a financial institution apparatus that holds customer financial information, and an apparatus The customer apparatus receives the source data of the first Web page for purchasing the product transmitted from the store apparatus and displays the first Web page on the Web browser. In response to the input operation, the store device is instructed to the store device via the first Web page, and the store device transmits purchase data including the product amount to the financial institution device in accordance with the instruction from the customer device, and the customer device is financially instructs the access destination changes to the engine system, the customer apparatus performs the access to financial institutions apparatus in accordance with a command of the access destination change, financial institutions device receives the purchase data and顧Upon receiving the access from the device, and send the source data of the first 2Web page for credit card data input to the customer device, the customer device displaying a first 2Web page to the Web browser receives the source data of the 2Web page In response to the input operation, the credit card data is transmitted to the financial institution device via the second Web page. Upon receiving the credit card data , the financial institution device receives the credit card data and the financial information. Is determined to be in the customer , the determination result is notified to the store apparatus, and the store apparatus performs product sales according to the determination result that it is capable of paying the product price .
[0009]
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 shows a mail order system according to the present invention. This mail order system includes a store apparatus 1, a financial institution apparatus 2, a customer apparatus 3, and a delivery company apparatus 4. Each of the store apparatus 1, the financial institution apparatus 2, the customer apparatus 3, and the delivery company apparatus 4 is provided. The communication is possible via the Internet network 5. The store apparatus 1 is installed in the store, and the financial institution apparatus 2 is installed in the facility of the financial institution. Financial institutions are banks and credit card companies. The customer apparatus 3 need not always be connected to the Internet line network 5, but can be connected to the Internet line network 5 via the public telephone line network 6 and the provider apparatus 7 as shown in FIG. The delivery company apparatus 4 is installed in the delivery company facility.
[0010]
The store apparatus 1 includes a WWW server 11 and a mail server 12. Each of the WWW server 11 and the mail server 12 is connected to the Internet network 5 via a firewall 13. In addition, the store apparatus 1 includes a storage device 14 that forms a database that can be read and written from the WWW server 11 and the mail server 12.
[0011]
The financial institution apparatus 2 also includes a WWW server 21 and a mail server 22. Each of the WWW server 21 and the mail server 22 is connected to the Internet network 5 through a firewall 23. In addition, the financial institution apparatus 2 includes a storage device 24 that forms a database that can be read and written from the WWW server 21 and the mail server 22.
[0012]
The delivery company apparatus 4 is also provided with a WWW server 41 and a mail server 42. Each of the WWW server 41 and the mail server 42 is connected to the Internet network 5 via a firewall 43. Further, the delivery company apparatus 4 is provided with a storage device 44 that forms a database that can be read and written from the WWW server 41 and the mail server 42, respectively.
[0013]
In each of the store apparatus 1, the financial institution apparatus 2, and the delivery company apparatus 4, a router (not shown) is provided between the firewalls 13, 23, and 43 and the Internet network 5.
[0014]
The customer apparatus 3 is a so-called personal computer, and is connectable to the public telephone line network 6 by a modem or TA (terminal adapter) not shown. Further, the customer apparatus 3 includes a WWW browser as application software. When the WWW browser is activated, a desired URL (Uniform Resource Locator) on the Internet is accessed in accordance with the purchaser's operation, and an HTML file is obtained therefrom. Source data including can be captured and displayed as a Web page on a display via a WWW browser video.
[0015]
In the communication system having such a configuration, TCP / IP is used as a communication protocol, and IP addresses are assigned to the WWW servers 11 and 21, the mail servers 12 and 22, and the firewalls 13 and 23, respectively.
[0016]
Next, the operation of the communication system will be described with reference to the sequence diagram of FIG.
[0017]
The purchaser operates the customer apparatus 3 to display a WWW browser image on the display screen, and the customer apparatus 3 accesses a URL corresponding to the Web page (homepage) of the WWW server 11 in the store apparatus 1 (step S1). This access is performed from the customer apparatus 3 through the public telephone line network 6, the provider apparatus 7, the Internet line network 5, and the firewall 13 of the store apparatus 1.
[0018]
The WWW server 11 transmits the source data of the accessed URL to the customer apparatus 3 (step S2). Source data is supplied from the WWW server 11 to the customer apparatus 3 via the firewall 13 of the store apparatus 1, the Internet line network 5, the provider apparatus 7, and the public telephone line network 6.
[0019]
The customer device 3 receives the source data sent from the WWW server 11 and displays a Web page on the display screen (step S3).
[0020]
These steps S1 to S3 are repeated according to the access operation to the URL corresponding to the purchaser's new page.
[0021]
When the purchaser selects a product displayed on the Web page with a key or a mouse pointer, product data indicating the selected product is transmitted from the customer apparatus 3 to the WWW server 11 (step S4). When receiving the product data, the WWW server 11 transmits source data corresponding to the financial institution selection Web page to the customer apparatus 3 (step S5).
[0022]
The customer apparatus 3 receives the source data corresponding to the financial institution selection Web page sent from the WWW server 11 and displays the Web page on the display screen (step S6). When the purchaser selects any one of a plurality of financial institutions displayed on the Web page with a key or a mouse pointer, financial institution data indicating the selected financial institution is transmitted from the customer apparatus 3 to the WWW server 11. (Step S7). Here, the selected financial institution is a financial institution equipped with the financial institution apparatus 2.
[0023]
When the WWW server 11 receives the financial institution data, the WWW server 11 transmits purchase data including an amount corresponding to the selected product, a serial number, a store name, and a digital signature of the store to the WWW server 21 in the financial institution apparatus 2 of the selected financial institution ( Step S8). Further, the customer apparatus 3 is instructed to change the predetermined URL of the WWW server 21 in the financial institution apparatus 2 to a page (step S9). A script language such as Perl is used for these data transmission and change commands. Purchase data is supplied from the WWW server 11 to the WWW server 21 in the financial institution apparatus 2 through the firewall 13, the Internet network 5 and the firewall 23.
[0024]
When the WWW server 21 in the financial institution apparatus 2 receives the purchase data, it confirms the amount, serial number, store name, and store digital signature in the purchase data, and creates a user input page based on the purchase data ( Step S10). The source data of the user input page is stored in the first predetermined URL, and the customer apparatus 3 is instructed to change to the page of the first predetermined URL of the WWW server 21 in the financial institution apparatus 2 (step S11). On the user input page, items such as the customer's name, credit card number (or bank account number), personal identification number, and customer's digital signature can be entered.
[0025]
When the customer apparatus 3 receives the page change command in step S9 or S11, the customer apparatus 3 accesses the first predetermined URL of the WWW server 21 in the financial institution apparatus 2 (step S12). Note that the access destination may be changed by operating a button arranged on the Web page based on the source data sent from the WWW server 11.
[0026]
The WWW server 21 transmits the source data of the accessed first predetermined URL to the customer device 3 (step S13). Until the source data of the user input page is stored in the first predetermined URL, for example, initial data indicating that the input page is being created is stored.
[0027]
The customer device 3 receives the source data sent from the WWW server 21 and displays a Web page on the display screen (step S14). Since the sent source data finally becomes the source data of the user input page, the Web page displayed on the display screen of the customer apparatus 3 becomes the user input page. That is, the input of credit card data is requested by displaying the user input page.
[0028]
The purchaser inputs characters by key operation on each input item such as the customer name, credit card number, password, and customer digital signature on the user input page. When the input operation for each input item is completed, when the purchaser operates the transmission button displayed on the page with the key or the mouse pointer, the input data is transmitted from the customer apparatus 3 to the WWW server 21 (step S15). ). In this transmission, the input data is encrypted by SSL. By using SSL, there is an advantage that data can be safely transmitted via a communication line network without using dedicated software.
[0029]
When receiving the input data, the WWW server 21 confirms the customer's name, credit card number, password, and customer's digital signature in the input data, and stores the input data in the database 24 (step S16). And it is discriminate | determined whether a purchaser can pay (step S17). This determination is for confirming whether the purchaser or payer corresponding to the credit card number has the payment capability, and may be performed based on the customer's financial information stored in the database 24. In addition, an external customer financial information database may be queried via the Internet network 5.
[0030]
If the determination result in step S17 is payable, the WWW server 21 sends payable data including the amount charged to the purchaser, the store name, the serial number, the digital signature of the store, and the digital signature of the financial institution to the WWW server 11. (Step S18). If the determination result of step S17 is unpaid, the unpaid data is transmitted to the WWW server 11 in the store apparatus 1 (step S19). Moreover, the customer apparatus 3 is instructed to change the page of the second predetermined URL of the WWW server 11 in the store apparatus 1 (step S20).
[0031]
When receiving data from the WWW server 21, the WWW server 11 displays the content of the received data on its own display screen (step S21), and stores the received data in the database 14 in association with the serial number and the selected product (step S21). S22). Further, it is determined whether or not the received data is payable data (step S23). In the case of payable data, Web page source data indicating that the product purchase procedure has been completed is created and stored in the second predetermined URL (step S24). In the case of non-payable data, source data of a Web page indicating that the product cannot be purchased is created by a command from a financial institution and stored in the second predetermined URL (step S25). After execution of step S24 or S25, the customer apparatus 3 is instructed to change the access destination to the page of the second predetermined URL of the WWW server 11 in the store apparatus 1 (step S26).
[0032]
When the customer apparatus 3 receives the page change command in step S20 or S26, the customer apparatus 3 accesses the second predetermined URL of the WWW server 11 in the store apparatus 1 (step S27). Note that the access destination may be changed by operating a button arranged on the Web page based on the source data sent from the WWW server 21.
[0033]
The WWW server 11 transmits the source data of the accessed second predetermined URL to the customer device 3 (step S28). For example, initial data indicating that a product is being purchased is stored until the source data of the Web page indicating whether or not the product can be purchased is stored in the second predetermined URL.
[0034]
The customer device 3 receives the source data sent from the WWW server 11 and displays a Web page on the display screen (step S29). A Web page indicating that the product purchase procedure has been completed or a Web page indicating that the product cannot be purchased is displayed according to a command from a financial institution according to the source data sent. The customer can determine whether or not the current product purchase is successful from the display content of the display screen.
[0035]
In the store, the delivery of the commodity determined to be payable is arranged according to the data for each serial number stored in the storage device 14 of the database.
[0036]
The mail server 12 in the store apparatus 1 creates a delivery order form based on the data stored in the storage device 14 as shown in FIG. 3, and transmits it to the mail server 42 of the delivery company apparatus 4 as an e-mail. (Step S31). In addition to the store name, serial number, and product name, the delivery order form includes customer data such as customer name, customer address and telephone number, and delivery date and time to the customer. The delivery order form also includes the date and time of receipt of the delivery product at the store.
[0037]
As shown in FIG. 4, the mail server 42 in the delivery company apparatus 4 periodically monitors the reception state of the e-mail (step S32). When the e-mail is received, is the e-mail including the delivery order form? It is determined whether or not (step S33). This is determined by, for example, the subject (subject) of the electronic mail or a delivery order form in a predetermined format. If it is determined in step S33 that the order is a delivery order, the contents of the order are stored in the database storage device 44 (step S34), and an e-mail indicating the delivery order receipt date and time is returned to the mail server 12 of the store apparatus 1. (Step S35).
[0038]
The mail server 42 in the delivery company apparatus 4 transmits an email of the delivery request form to the terminal device (not shown) of the person in charge of the delivery company according to the data stored in the storage device 44 of the database (step S36). This delivery request form includes the store name, the date and time of receipt of the delivery product at the store, the product name, the customer name, the customer address and telephone number, and the delivery date and time to the customer.
[0039]
In steps S31 to S36, a delivery order form or the like can be automatically sent by e-mail by the mail server 12 sharing the database with the WWW server 11. As a result, the time required for the delivery process is shortened, and the product can be quickly delivered to the customer. Needless to say, it may be mailed in writing without the automatic sending process.
[0040]
Further, as shown in FIG. 3, the mail server 12 in the store apparatus 1 creates an invoice based on the data stored in the database 14, and transmits it as an e-mail to the mail server 22 of the financial institution apparatus 2. (Step S41). The invoice includes a serial number, a store digital signature and a financial institution digital signature. This is because the serial number indicates which product purchase the bill is for. This is to show that the digital signature of the financial institution is a legitimate request.
[0041]
As shown in FIG. 5, the mail server 22 in the financial institution apparatus 2 periodically monitors the reception state of the e-mail (step S42). When the e-mail is received, it is determined whether the e-mail includes an invoice. Is discriminated (step S43). This is determined, for example, based on whether or not the text of the e-mail is a bill in a predetermined format including digital signatures of financial institutions and stores. If it is determined in step S43 that it is a bill, it is determined whether or not the digital signature of the financial institution attached to the bill is its own signature (step S44). Further, it is determined based on the data stored in the storage device 24 whether or not the digital signature of the store attached to the invoice is an appropriate signature (step S45). Since the store's digital signature is stored for each serial number in the storage device 24, the store's digital signature is read from the storage device 24 and compared with the store's digital signature attached to the bill. When it is confirmed in both steps S44 and S45 that the digital signature of the financial institution and the store is an appropriate signature, an e-mail indicating the payment amount to the store is sent to the financial institution according to the data stored in the storage device 24. To the terminal device (not shown) of the person in charge of payment (step S46). Further, the usage details are transmitted to the customer by e-mail (step S47).
[0042]
In steps S41 to S46, an invoice can be automatically sent by e-mail by the mail server 12 sharing the database with the WWW server 11. However, it may be mailed in writing without being automatically sent.
【The invention's effect】
[0043]
As described above, in the mail order system of the present invention, credit card data such as the credit card number and password of the customer who is the product purchaser is transmitted to the financial institution device, and the payment capability is determined in the financial institution device. Because the determination result is notified to the store device, the customer's credit card data is not supplied to the store device, and the purchaser connected to the communication network and the device of each store can pay safely. can do.
[Brief description of the drawings]
[0044]
FIG. 1 is a block diagram showing a mail order system according to the present invention.
FIG. 2 is a diagram showing a sequence of each device in FIG. 1;
FIG. 3 is a flowchart showing the operation of the mail server of the store apparatus.
FIG. 4 is a flowchart showing the operation of the mail server of the delivery company apparatus.
FIG. 5 is a flowchart showing the operation of the mail server of the financial institution apparatus.
[Explanation of symbols]
[0045]
DESCRIPTION OF SYMBOLS 1 Store apparatus 2 Financial institution apparatus 3 Customer apparatus 4 Delivery company apparatus 5 Internet line network 6 Public telephone line network 7 Provider apparatus

Claims (6)

A store device of a store that sells products, a customer device that has a Web (web) browser and commands purchase of a product, a financial institution device that holds customer financial information, and a communication network that connects the devices to each other A mail order system including
The customer device receives source data of a first Web page for purchasing a product transmitted from the store device, displays the first Web page on the Web browser, and purchases the product according to an input operation. Via the first web page,
The store apparatus transmits purchase data including a product price to the financial institution apparatus according to the instruction of the customer apparatus, and instructs the customer apparatus to change the access destination to the financial institution apparatus,
The customer device accesses the financial institution device in response to the access destination change command,
When the financial institution apparatus receives the purchase data and receives access from the customer apparatus, the financial institution apparatus transmits source data of a second Web page for inputting credit card data to the customer apparatus,
The customer device to display the first 2Web page to the Web browser receives the source data of the first 2Web page, the credit card data is transmitted via the first 2Web page to the financial institution system in accordance with an input operation ,
When the financial institution apparatus receives the credit card data , the financial institution apparatus determines whether or not the customer has the ability to pay for the product amount based on the credit card data and the financial information, and notifies the store apparatus of the determination result. And
The mail order system according to claim 1, wherein the store apparatus executes product sales in accordance with the determination result that the merchandise amount has a payment capability .   The mail order system according to claim 1, wherein the transmission of the credit card data from the customer device to the financial institution device is encrypted by SSL.   2. The mail order system according to claim 1, wherein the purchase data includes a digital signature of the store, and the determination result includes a digital signature of the financial institution.   The mail order system according to claim 1, wherein the store device notifies the customer device that the purchase procedure of the product is completed if the determination result that the store device is capable of paying the product amount is confirmed. .   If the store apparatus confirms the determination result that the merchandise amount is payable, the store apparatus transmits an e-mail indicating a delivery order form of the merchandise to a delivery company apparatus of a delivery company connected to the communication line network. The mail order system according to claim 1.   If the store apparatus confirms the determination result that it is capable of paying a product amount, the store apparatus transmits an e-mail indicating a bill including a digital signature of the store and the financial institution to the financial institution apparatus. The mail order system according to claim 1 or 3.

Images