JP5172240B2 - Electronic commerce system and computer program - Google Patents

Description

  The present invention relates to an electronic commerce system using a network.

  Conventionally, in electronic commerce using a network such as online shopping, a card such as a credit card is generally used as a settlement method. Specifically, if there is a card number and an expiration date, payment can be made. Therefore, it was supposed to be easily abused by stealing cards or seeing numbers. Therefore, there is a technique for signing by connecting a touch panel portable terminal device (see, for example, Patent Document 1).

  There is also a method of authenticating personal information using a mobile terminal device (see, for example, Patent Document 2).

JP 2001-331802 A Japanese Patent Laid-Open No. 2001-223779

  However, in the above-described conventional technology, there is a possibility that the handwriting is still stolen, and it cannot be said that it is a sufficient response. As for fingerprint authentication, there is a possibility that the attached fingerprint may be stolen, and it cannot be said that it is sufficient.

  Also, in conventional card payments on electronic commerce, since the signature is omitted, it is not sure whether the card payment is used by the person as compared with normal card payment. Since there was no signature left, there was a problem that it was not possible to fully disprove the claim that it was not used by the person.

  An object of the present invention is to provide an electronic commerce system that enables settlement of electronic commerce using a network more securely and safely.

  In order to solve the above-mentioned problems, an electronic commerce system according to the present invention provides a transaction terminal device that performs electronic commerce with a store via a network, and the store that communicates with the transaction terminal device. Electronic commerce comprising: a store server provided; a credit company server provided in a credit company connected to the store server; and an authentication terminal device that communicates with the credit company server and authenticates the electronic commerce In the system, the transaction terminal device includes transmission means for transmitting transaction instruction information and card information related to a transaction instruction to the store server, and the store server transmits the transaction instruction information transmitted from the transaction terminal device. Receiving means for receiving the card information, and the transaction received by the receiving means Sending means for sending transaction amount information corresponding to the indication information and the card information to the credit company server, the credit company server receiving the card information from the store server, Based on the card information received by the receiving means, specifying means for specifying an authentication terminal device corresponding to the card information registered in advance, to the authentication terminal device specified by the specifying means, By the transmission means for transmitting all or part of the information on the store, the card information and the transaction amount information, the reception means for receiving authentication confirmation information for confirming the authentication from the authentication terminal device, and the reception means Processing means for executing a payment process based on the received authentication confirmation information.

  In the electronic commerce system according to the present invention, in the above invention, the authentication terminal device is a portable terminal device, and the authentication terminal device itself has at least an inclination, a movement amount, a movement direction, and a movement speed. Detection means for detecting any one of the above, storage means for storing information relating to the movement of the authentication terminal device registered in advance, movement of the authentication terminal device detected by the detection means, and the storage means A determination unit that determines whether or not the movement of the information stored by the information is similar to a predetermined threshold value or more, and a result of the determination by the determination unit is that the degree of similarity is equal to or greater than a predetermined value, Generating means for generating information; and transmitting means for transmitting information related to the authentication confirmation generated by the generating means to the credit company server; Characterized by comprising a.

  In the electronic commerce system according to the present invention, in the above invention, the movement of the information stored in the storage means of the authentication terminal device is substantially the same as the movement when the cardholder signs. It is characterized by being.

  In the electronic commerce system according to the present invention, in the above-mentioned invention, in addition to the information regarding the movement stored in the storage unit of the authentication terminal device, the writing speed for each character when signing, and for each character Information on at least one of the inclination of the authentication terminal device itself and the size of each character is included.

  The electronic commerce system according to the present invention is characterized in that, in the above invention, the transaction terminal device and the authentication terminal device are the same device.

  The electronic commerce system according to the present invention includes a transaction terminal device that performs electronic commerce with a financial institution, a financial institution server provided in a financial institution that communicates with the transaction terminal device, and the financial institution In an electronic commerce system comprising: an authentication terminal device that communicates with a server and authenticates the electronic commerce transaction, the transaction terminal device sends transaction instruction information and card information relating to a transaction instruction to the financial institution server. Based on the card information received by the receiving means, and receiving means for receiving the transaction instruction information and the card information transmitted from the transaction terminal device. Extraction means for extracting an authentication terminal device corresponding to the card information registered in advance; Means for transmitting all or part of the transaction amount information corresponding to the card information and the transaction instruction information to the authentication terminal device extracted by the means, and authentication for confirming authentication from the authentication terminal device It is characterized by comprising receiving means for receiving confirmation information and processing means for executing a settlement process based on the authentication confirmation information received by the receiving means.

  A computer program according to a seventh aspect causes a computer to execute the procedure of the electronic commerce system according to any one of the first to sixth aspects.

  According to the present invention, it is possible to more easily authenticate use of a card in electronic commerce, and without omitting a signature that is omitted in the case of using a card in electronic commerce. Thus, it is possible to obtain more easily, and it is possible to prevent electronic commerce by a malicious person. As a result, there is an effect that an electronic commerce system capable of performing settlement of electronic commerce more reliably and safely can be obtained.

  Exemplary embodiments of an electronic commerce system according to the present invention will be described below in detail with reference to the accompanying drawings.

(Configuration of electronic commerce system)
First, the functional configuration of the electronic commerce system will be described. FIG. 1 is a block diagram showing an outline of an electronic commerce system according to an embodiment of the present invention. In FIG. 1, the electronic commerce system according to the present embodiment includes a transaction terminal device 101, an authentication terminal device 102, a store server 111, and a credit company server 112. Furthermore, instead of the store server 111 and the credit company server 112, a financial institution server 113 may be used. Each of these components 101 to 113 is connected by a network 100 such as the Internet.

  The transaction terminal device 101 performs electronic commerce with a store via the network 100. Specifically, it connects to the store site registered in the store server 111 via the network 100, and performs electronic commerce such as so-called online shopping using the store site. The authentication terminal device 102 communicates with the credit company server 112 or the financial institution server 113 to authenticate the electronic commerce performed by the transaction terminal device 101. Both the transaction terminal device 101 and the authentication terminal device 102 are generally devices owned by a trader, but they may be separate devices or the same device. Good.

  The store server 111 is a server provided in each store, and communicates with the transaction terminal device 101. The store server 111 manages processing related to the provision of products and services via a browser 400 described later of the transaction terminal device 101. In addition, the credit company server 112 is connected, and the credit company server 112 is requested to perform settlement processing related to the transaction price.

  The credit company server 112 is a server provided in the credit company and is connected to the store server 111. And it manages the payment processing of the price of electronic commerce (for example, merchandise sales) between the transaction terminal device 101 and the store server 111. Further, the credit company server 112 specifies the authentication terminal device 102 related to the payment processing requested from the store server 111, and communicates by connecting to the specified authentication terminal device 102. Receive.

  The financial institution server 113 is a server provided in the financial institution, and communicates with the transaction terminal device 101. The financial institution server 113 communicates with the transaction terminal device 101 during electronic commerce such as net banking, performs settlement processing, and also communicates with the authentication terminal device 102.

  FIG. 2 is a block diagram illustrating the hardware configuration of the transaction terminal device 101 and the authentication terminal device 102. In FIG. 2, transaction terminal apparatus 101 or authentication terminal apparatus 102 has, for example, a mobile phone type or PDA type shape. Transaction terminal device 101 or authentication terminal device 102 includes CPU 201, ROM 202, RAM 203, R / W 204, sensor 205, GPS 206, wireless I / F 207, display 208, button 209, and speaker 210. And a microphone 211. The components 201 to 211 are connected by a bus 200.

  The CPU 201 controls the entire information processing terminal device by executing programs stored in the ROM 202 and the RAM 203. The ROM 202 and RAM 203 store programs and data.

  The R / W 204 reads / writes data from / to a removable external storage medium such as a memory card, IC chip, or FRID tag. Specifically, a contact or non-contact card reader may be used.

  Specifically, the sensor 205 includes various sensors such as a gyro sensor and an acceleration sensor. The gyro sensor detects the angular velocity (how many times it has moved within a predetermined time). When the moving object rotates, the angular velocity is detected by utilizing the phenomenon that Coriolis force acts perpendicularly to the velocity direction.

  An acceleration sensor measures the amount of displacement of a weight attached to a spring and estimates the acceleration applied to the weight. Specifically, it is a MEMS (micro electro mechanical systems) sensor that makes an acceleration detection mechanism by a semiconductor process. In addition, the acceleration sensor can detect not only whether it has moved or not, but also how much force it has moved to obtain the numerical value. Furthermore, it is possible to detect how much the apparatus is tilted with respect to the ground using an acceleration sensor. The acceleration sensor detects “how much acceleration is applied” in a plurality of axial directions and acquires the numerical values.

  The GPS 206 detects and outputs a position where the transaction terminal device 101 or the authentication terminal device 102 exists. Specifically, the GPS 206 receives radio waves from a GPS satellite and obtains a geometric position with respect to the GPS satellite, and can be measured anywhere on the earth. The radio wave is generated using an L1 radio wave carrying a C / A (Coarse and Access) code and a navigation message with a carrier wave of 1.575.42 MHz. The C / A code has a bit rate of 1.023 Mbps, and the code length is 1023 bits = 1 ms. The navigation message has a bit rate of 50 bps, the code length is 300 bits = 6 s for a subframe, 1500 bits = 30 s for a main frame, 5 main frames are 1 main frame, and 25 main frames are 1 master. It is a frame.

  The wireless I / F 207 transmits and receives wireless signals to and from a base station (not shown), and connects to the network 100 shown in FIG. 1 via the base station. Specifically, a wireless LAN, a PHS, a wireless mobile phone line, and the like. Information is exchanged with the store server 111, the credit company server 112, and the financial institution server 113 via the network 100 by the wireless I / F 207.

  The display 208 displays various contents. The display 208 is, for example, a liquid crystal display or an organic EL display. The (operation) button 209 is composed of numeric keys, cross keys, and the like. The speaker 210 outputs sound to the outside of the apparatus. Furthermore, although illustration is omitted, a vibration generating device (vibrator) that generates vibration and notifies the operator may be provided as in the case of a conventional mobile phone. The microphone 211 inputs sound into the transaction terminal device 101 or the authentication terminal device 102.

  The transaction terminal device 101 or the authentication terminal device 102 (particularly the transaction terminal device 101) may be a personal computer, and in that case, the hardware configuration is equivalent to the block diagram shown in FIG. be able to.

  FIG. 3 is a block diagram showing a hardware configuration of a store server, a credit company server, and a financial institution server (including transaction terminal device 101 and authentication terminal device 102 in some cases). 3, the store server 111, the credit company server 112, and the financial institution server 113 (the transaction terminal device 101 and the authentication terminal device 102) include, for example, a CPU 301, a ROM 302, a RAM 303, and an HDD (hard disk drive) 304. HD (hard disk) 305, FDD (flexible disk drive) 306, FD (flexible disk) 307 as an example of a removable recording medium, display 308, I / F (interface) 309, and keyboard 310 , A mouse (including a pointing device) 311, a scanner 312, and a printer 313. The components 301 to 313 are connected by a bus 300.

  The CPU 301 governs overall control of the store server 111, the credit company server 112 and the financial institution server 113. The ROM 302 stores a program such as a boot program. The RAM 303 is used as a work area for the CPU 301. The HDD 304 controls reading / writing of data with respect to the HD 305 according to the control of the CPU 301. The HD 305 stores data written under the control of the HDD 304.

  The FDD 306 controls reading / writing of data with respect to the FD 307 according to the control of the CPU 301. The FD 307 stores data written under the control of the FDD 306 or causes the information processing apparatus to read data recorded in the FD 307. In addition to the FD 307, a removable recording medium may be a CD-ROM (CD-R, CD-RW), MO, DVD (Digital Versatile Disk), memory card, or the like. The display 308 displays data such as documents, images, and function information. For example, in addition to a TFT liquid crystal display, a CRT or a plasma display may be used.

  An I / F (interface) 309 is connected to the network 100 through a communication line, and is connected to other information processing apparatuses and servers via the network 100. The I / F 309 serves as an interface between the network 100 and the inside of the apparatus, and controls input / output of data from other information processing apparatuses / servers. The I / F 309 is, for example, a modem or a LAN adapter.

  The keyboard 310 and the mouse 311 are used for inputting / setting various data. The scanner 312 optically reads image information. It also has a function to read barcodes, digital watermarks, and the like. In addition to the scanner device, the scanner 312 may be a digital still camera or a digital video camera that can optically read an image. The scanner 312 may be a reader that reads card information or a reading device that reads an IC of a card. The printer 313 prints image information and other information. For example, a laser beam printer, an ink jet printer, a thermal printer, an impact printer, or the like.

(Functional configuration of transaction terminal device)
FIG. 4 is a block diagram showing a functional configuration of the transaction terminal device. In FIG. 4, the transaction terminal device 101 includes a browser 400, an input unit 401, a reading unit 402, a display unit 403, and a transmission unit 404.

  The browser 400 is software for browsing data, and displays the contents of the data. The input unit 401 accepts input of various data including card information, transaction instruction information, and the like. Specifically, the function of the input unit 401 can be realized by, for example, the button 209 shown in FIG. 2, the keyboard 310, the mouse 311 shown in FIG. Further, it may be realized by a touch panel provided on the display 308.

  The reading unit 402 receives input of the read card information by reading the card information. Specifically, the function can be realized by the R / W 204 shown in FIG. 2, the scanner 312 shown in FIG. The card information includes information regarding a card number and an expiration date. The card information may be input by the input unit 401, or may be read from the card by the reading unit 402.

  The display unit 403 displays the content of data displayed by the browser 400. Specifically, the function of the display unit 403 can be realized by the display 208 shown in FIG. 2, the display 308 shown in FIG. 3, and the like. The transmission unit 404 receives information to be displayed by the browser 400 from a predetermined server via the network 100. In addition, information input by the input unit 401 on the browser 400 or information read by the reading unit 402 is transmitted to a predetermined server via the network 100.

(Functional configuration of store server)
FIG. 5 is a block diagram showing a functional configuration of the store server. In FIG. 5, the store server 111 includes a reception unit 501, an amount information extraction unit 502, a transmission unit 503, a customer information database (DB) 511, and a transaction information database (DB) 512. Yes.

  The receiving unit 501 receives transaction instruction information and card information transmitted from the transaction terminal device 101. The customer information in the transaction instruction information is stored in the customer information DB 511 and the transaction information is stored in the transaction information DB 512. Therefore, customer information concerning transactions is stored in the customer information DB 511, and transaction information that the store has made with the customer is stored in the transaction information DB 512. Here, the customer information is various pieces of information for identifying the customer such as the customer's mail address, name, address, and telephone number. The transaction information is various information for specifying a transaction, such as a product, service content, transaction amount, transaction date and time.

  The receiving unit 501 also receives various information transmitted from the credit company server 112. Specifically, the receiving unit 501 can realize its function by, for example, the I / F 309 shown in FIG. Further, the customer information DB 511 and the transaction information DB 512, specifically, realize their functions by a storage medium such as the ROM 302, the RAM 303, the HD 305, and the FD 307 shown in FIG. Further, each of the customer information DB 511 and the transaction information DB 512 may be provided in another information processing apparatus connected via the network 100.

  The money amount information extraction unit 502 extracts, from the transaction instruction information received by the receiving unit 501, information (transaction amount information) related to the transaction amount, which is information necessary for crediting the credit company server 112. To do. Specifically, the money amount extraction unit 502 can realize its function by the CPU 301 executing a program stored in a storage medium such as the ROM 302, the RAM 303, the HD 305, and the FD 307 shown in FIG.

  The transmission unit 503 transmits the card information received by the reception unit 501 and the transaction amount information extracted by the amount information extraction unit 502 to the credit company server 112 based on the customer information stored in the customer information DB 511. . Moreover, the transmission part 503 transmits various information also with respect to the terminal device 101 for transaction.

  Specifically, for example, for the purpose of causing a customer to confirm the contents of information indicating that credit has been completed and various information relating to transactions stored in the customer information DB 511 and the transaction information DB 512, etc. In some cases, the data may be transmitted to 101. Specifically, the transmission unit 503 can realize its function by, for example, the I / F 309 shown in FIG.

(Functional configuration of credit company server)
FIG. 6 is a block diagram showing a functional configuration of the credit company server. 6, the credit company server 112 includes a receiving unit 601, a settlement processing unit 602, a transmission unit 603, a card information database (DB) 611, and a settlement information database (DB) 612. Yes.

  The receiving unit 601 receives the card information and transaction amount information transmitted from the store server 111 and sends them to the settlement processing unit 602. Specifically, the reception unit 601 can realize its function by, for example, the I / F 309 shown in FIG.

  Based on the card information received by the receiving unit 601, the settlement processing unit 602 identifies information related to the authentication terminal device 102 corresponding to the card information registered in advance in the card information DB 611. That is, information regarding which authentication terminal device 102 should be used to authenticate the received card information is extracted. Specifically, this information is information that can identify the authentication terminal device 102 and can transmit information, such as information about the mail address of the authentication terminal device 102 or information about a telephone number. Good.

  Further, the payment processing unit 602 stores information related to payment in the payment information DB 612 and reads information stored in the payment information DB 612. Specifically, the settlement processing unit 602 can realize its function by the CPU 301 executing a program stored in a storage medium such as the ROM 302, the RAM 303, the HD 305, and the FD 307 shown in FIG.

  Based on the information about the authentication terminal device 102 extracted by the settlement processing unit 602, the transmission unit 603 receives all or part of the information about the store, the card information, and the transaction amount information regarding the store server 111. 102. These pieces of information may be information necessary for authentication in the authentication terminal device 102, and other information may be transmitted to the authentication terminal device 102 or may not be transmitted. . Other information can be used as a reference for authentication. Specifically, the transmission unit 603 can realize its function by, for example, the I / F 309 shown in FIG.

  The receiving unit 601 receives authentication confirmation information for confirming authentication from the authentication terminal device 102. Then, the settlement processing unit 602 executes settlement processing based on the authentication confirmation information received by the receiving unit 601. Specifically, when authentication is confirmed, payment processing is executed based on the authentication confirmation, and when authentication is not confirmed, payment processing is not executed and the payment is not established. finish.

(Functional configuration of financial institution server)
FIG. 7 is a block diagram showing a functional configuration of the financial institution server. The financial institution server 113 has both functions of the store server 111 and the credit company server 112 shown in FIG. 7, the financial institution server 113 includes a receiving unit 701, a settlement processing unit 702, a transmitting unit 703, a customer information database (DB) 711, a card information database (DB) 712, and a transaction information database (DB) 713. , A payment information database (DB) 714.

  The receiving unit 701 receives transaction instruction information and cash card information (customer information) transmitted from the transaction terminal device 101. Then, the customer information of the transaction instruction information is stored in the customer information DB 711, and the transaction information (such as caching information) is stored in the transaction information DB 713. Therefore, customer information related to the transaction is stored in the customer information DB 711, and transaction information performed with the customer is stored in the transaction information DB 713. Specifically, the reception unit 701 realizes its function by, for example, the I / F 309 illustrated in FIG.

  Based on the card information received by the receiving unit 701, the settlement processing unit 702 identifies information related to the authentication terminal device 102 corresponding to the card information registered in advance in the card information DB 712. That is, information regarding which authentication terminal device 102 should be used to authenticate the received card information is extracted. Specifically, this information is information that can identify the authentication terminal device 102 and can transmit information, such as information about the mail address of the authentication terminal device 102 or information about a telephone number. Good.

  The payment processing unit 702 stores information related to payment in the payment information DB 714 and reads information stored in the payment information DB 714. Specifically, the settlement processing unit 702 can realize its function by the CPU 301 executing a program stored in a storage medium such as the ROM 302, the RAM 303, the HD 305, and the FD 307 shown in FIG.

  The transmission unit 703 transmits all or part of the card information and transaction amount information to the authentication terminal device 102 based on the information regarding the authentication terminal device 102 extracted by the settlement processing unit 702. The transmission unit 703 also transmits various information to the transaction terminal device 101. Specifically, the transmission unit 703 can realize the function by, for example, the I / F 309 illustrated in FIG. 3.

  The receiving unit 701 receives authentication confirmation information for confirming authentication from the authentication terminal device 102. Then, the settlement processing unit 702 executes settlement processing based on the authentication confirmation information received by the receiving unit 701. Specifically, when authentication is confirmed, payment processing is executed based on the authentication confirmation, and when authentication is not confirmed, payment processing is not executed and the payment is not established. finish.

(Functional configuration of authentication terminal device)
FIG. 8 is a block diagram showing a functional configuration of the authentication terminal device. 8, the authentication terminal device 102 includes a transaction information receiving unit 801, a notification unit 802, a display unit 803, a motion detection unit 804, a motion information transmission unit 805, a signature information storage unit 806, and a similarity degree. The configuration includes a determination unit 807, an input unit 808, an authentication confirmation information generation unit 809, and an authentication confirmation information transmission unit 810.

  The transaction information receiving unit 801 receives transaction information transmitted from the credit company server 112 or the financial institution server 113. Specifically, transaction information receiving section 801 realizes its function by, for example, wireless I / F 207 shown in FIG.

  When the transaction information is received by the transaction information receiving unit 801, the notification unit 802 notifies the carrier (that is, the certifier) of the authentication terminal device 102 to that effect. Specifically, the notification unit 802 may notify by generating a predetermined sound by the speaker 210 shown in FIG. 2, for example, or by displaying a predetermined image or moving image by the display 208. Further, notification may be made by vibrating the authentication terminal device 102 itself by a vibration function provided in the authentication terminal device 102, which is not shown in FIG. Moreover, you may make it notify combining any 2 or more of an audio | voice, an image, a moving image, and a vibration.

  The display unit 803 displays all or part of the received transaction information when the transaction information is received by the transaction information receiving unit 801. Also, the authentication procedure is displayed. Details of the display contents will be described with reference to FIGS. 9-1 and 9-2 described later. Specifically, the display unit 803 realizes its function by, for example, the display 208 shown in FIG.

  FIG. 9A and FIG. 9B are explanatory diagrams illustrating an appearance of the authentication terminal device 102. In FIG. 9A and FIG. 9B, the authentication terminal device 102 which is a mobile phone has a width of about 3 cm to 10 cm, so that the authenticator can hold it with one hand. Holding this authentication terminal device 102 in the same way as a writing instrument, for example, the bottom of the authentication terminal device 102 is seen at the tip of the writing instrument, and the authentication terminal device 102 draws characters and the like. Move.

  FIG. 9A shows a state in which transaction information (member store name, approval number, purchase date / time, card number, card expiration date, card holder name, payment category, product, amount, etc.) is displayed on the display screen 900. Show. It is not necessary to receive and display all of these, and it is sufficient to display only necessary information to the extent that a transaction can be specified. For example, only the member store name, approval number, purchase date and time, card number, and amount may be displayed.

  FIG. 9-2 shows a state where an authentication (signature) procedure is displayed on the display screen 900. The authentication terminal device 102 is moved in the same manner as a writing instrument, with a predetermined button (button 901) being pressed with a finger (for example, an index finger) while drawing a character or the like. When the movement is completed, the moving operation is completed by releasing the finger from the button 901. Thereafter, the signature operation is terminated by a procedure (such as a confirmation operation) according to an instruction displayed on the display screen 900.

  The motion detection unit 804 detects at least one of the inclination, movement amount, movement direction, and movement speed of the authentication terminal device 102 itself. Specifically, the motion detection unit 804 realizes its function by, for example, the sensor 205 shown in FIG.

  The motion information transmission unit 805 transmits information regarding the motion detected by the motion detection unit 804 to the credit company server 112 or the financial institution server 113. By transmitting information related to the movement to the credit company server 112 or the financial institution server 113, it is possible to perform authentication based on the movement in the credit company server 112 or the financial institution server 113. Specifically, the motion information transmission unit 805 realizes its function by, for example, the wireless I / F 207 shown in FIG.

  The signature information storage unit 806 stores information (signature information) relating to the movement of the authentication terminal device 102 registered in advance. When storing the signature information, the authenticator (signer) actually holds the authentication terminal device 102, moves the authentication terminal device 102 in the same manner as when signing with a writing instrument, and moves the movement. By causing the detection unit 804 to detect, information regarding movement can be collected and stored.

  The movement related to the information stored in the signature information storage unit 806 of the authentication terminal device 102 may be substantially the same as the movement at the time of signing the card owner. The information on the movement stored in the signature information storage unit 806 further includes at least the writing speed for each character when signing, the inclination of the authentication terminal device 102 for each character, and the size for each character. Information about any one is included. Therefore, even if the signature is the same, the similarity can be prevented from exceeding a predetermined threshold unless the signature operation is performed with a predetermined size, speed, and angle. Specifically, the signature information storage unit 806 realizes its function by a storage medium such as the ROM 202 and the RAM 203 shown in FIG.

  The similarity determination unit 807 determines whether the movement of the authentication terminal device 102 itself detected by the movement detection unit 804 is similar to the movement of the information stored in the signature information storage unit 806 by a predetermined threshold or more. to decide. The determination result is notified to the authentication confirmation information generation unit 809. Specifically, the similarity determination unit 807 can realize its function by the CPU 201 executing a program stored in the ROM 202 and the RAM 203 shown in FIG.

  The input unit 808 inputs a predetermined password when authenticating. The entered password is notified to the authentication confirmation information generation unit 809. Specifically, the input unit 808 realizes its function by, for example, the button 209 shown in FIG.

  The authentication confirmation information generation unit 809 generates information related to the authentication confirmation when the similarity determination unit 807 determines that both are more than a predetermined threshold. Further, the authentication confirmation information generation unit 809 is a case where both are similar to each other by a predetermined threshold or more and the predetermined password input from the input unit 808 matches the password stored in the signature information storage unit 806 or the like in advance. In addition, information regarding authentication confirmation may be generated.

  Further, when both are similar to each other by a predetermined threshold or more, information regarding authentication confirmation may be generated in any case where the passwords input by the input unit 808 match. If this is not the case, information regarding authentication confirmation is not generated, or information indicating that authentication confirmation could not be performed is generated.

  Further, the GPS 206 shown in FIG. 2 is used to detect the position of the authentication terminal device 102 and to generate authentication confirmation information on condition that the authentication terminal device 102 exists at a predetermined position. Also good. Therefore, when the authentication terminal device 102 is stolen, even if a signature operation is performed using the authentication terminal device 102 that has been stolen, the presence location does not match the predetermined location. It is possible to prevent authentication verification from being executed. In this way, even if information regarding the movement of the signature is stolen, further security can be imposed.

  Specifically, the authentication confirmation information generation unit 809 can realize its function by the CPU 201 executing a program stored in the ROM 202 and the RAM 203 shown in FIG.

  The authentication confirmation information transmission unit 810 transmits information related to the authentication confirmation generated by the authentication confirmation information generation unit 809 to the credit company server 112 or the financial institution server 113. Specifically, the authentication confirmation information transmission unit 810 realizes its function by, for example, the wireless I / F 207 shown in FIG.

(Processing procedure of authentication terminal device)
FIG. 10 is a flowchart illustrating a processing procedure of the authentication terminal device. In the flowchart of FIG. 10, first, the authentication terminal device 102 determines whether or not the transaction information transmitted from the credit company server 112 or the financial institution server 113 has been received (step S1001). If the transaction information is received and received (step S1001: Yes), a notification processing (alarm, vibration, etc.) that the transaction information is received is given to the user of the authentication terminal device 102. ) Is executed (step S1002).

  For example, as shown in the display screen 900 of FIG. 9A, transaction amount information and card information are displayed (step S1003). Subsequently, the signature instruction process is performed (step S1004). Specifically, in the signature instruction process, for example, the content as shown in the display screen 900 of FIG. 9-2 is displayed to prompt the authenticator to perform the signature process. When a predetermined button (for example, button 901) is pressed, a timer not shown in FIG. 8 is started (step S1005).

  Next, it is determined whether the motion detection unit 804 illustrated in FIG. 8 has detected the motion of the authentication terminal device 102 (step S1006). If no motion is detected (step S1006: No), it is determined whether or not a predetermined time has elapsed since the timer was started (step S1007). If the predetermined time has not yet elapsed (step S1007: No). Returns to step S1006. On the other hand, when the predetermined time has elapsed (step S1007: Yes), for example, the authentication confirmation information generation unit 809 generates a settlement stop signal (step S1008), and for example, the authentication confirmation information transmission unit 810 generates A settlement stop signal is transmitted to the credit company server 112 or the financial institution server 113 that has transmitted the transaction information (step S1009), and a series of processing ends.

  If the movement of the authentication terminal device 102 is detected in step S1006 (step S1006: Yes), then the process waits for the movement to end, and if the movement ends (step S1010: Yes), it is detected. Information relating to the movement is stored in a predetermined storage area not shown in FIG. 8 (step S1011). Next, signature information (if there are a plurality of signature information) is extracted from the signature information storage unit 806 shown in FIG. 8 (step S1012).

  In step S1011, the information regarding the movement stored in the predetermined storage area is compared with the extracted signature information in step S1012 (step S1013). As a comparison method, specifically, for example, the determination is made by comprehensively comparing the inclination direction, order, acceleration, and the like of the authentication terminal device 102. Also, a difference in time from the start to the end of movement (signature time) can be taken into account. Therefore, the signer can always perform the comparison process with higher accuracy by keeping in mind to sign at the same time.

  As a result of the comparison, it is determined whether or not the similarity between the two is equal to or greater than a predetermined value (step S1014). About the predetermined value of a similarity degree, it can set individually according to a signer. It is preferable to set an optimal predetermined value by a prior test. In steps S1015 to S1016, which will be described later, if the degree of similarity is not greater than or equal to a predetermined value, the signature process is repeated a predetermined number of times. . That is, as the number of repetitions increases, the predetermined value of similarity may be decreased, and conversely, the predetermined value of similarity may be increased.

  In step S1014, if the similarity between the two is not greater than or equal to a predetermined value (step S1014: No), it is next determined whether or not the repetition is a predetermined number of times (step S1015). If the predetermined number of times has not been reached (step S1015: No), a signature redo instruction process is executed (step S1016). Specifically, on the display screen 900 shown in FIG. 9B, although not shown, the content prompting the user to redo the signature again is displayed because the user has not been authenticated. Then, the process returns to step S1005.

  In step S1014, when the similarity between the two is equal to or greater than a predetermined value (step S1014: Yes), for example, authentication confirmation information generation unit 809 generates authentication confirmation information (step S1017), and for example, an authentication confirmation information transmission unit. In 810, the generated authentication confirmation information is transmitted to the credit company server 112 or the financial institution server 113 that has transmitted the transaction information (step S1018), and the series of processes is terminated.

(Overall processing procedure)
FIGS. 11-13 is explanatory drawing which shows the procedure of the process in the electronic commerce system concerning embodiment of this invention. FIG. 11 shows a case where the transaction is normally completed. In FIG. 11, the processing is executed in the procedures (1) to (9).

(1) A customer performs transaction terminal net shopping from transaction terminal device 101, selects (credit) card payment, and inputs card information (card number and expiration date) from browser 400 shown in FIG. The information is transmitted to the store server 111 via the network 100.

(2) The store server 111 transmits the received card information as it is to the credit company server 112 via the network 100 and requests execution of credit limit examination (authorization).

(3) The credit company server 112 conducts a credit limit examination, and if it passes, puts an electronic sales slip on the authentication terminal device (mobile phone) 102 stored in association with the card number. Send e-mail (transaction information).

(4) The authentication terminal device 102 causes the authenticator to perform a self-signed signature operation using the authentication terminal device 102.

(5) The authentication terminal device 102 includes signature information registered in the authentication terminal device 102 (signature information storage unit 806), past history stored in a history data storage unit not shown in FIG. Verify the identity by verifying the data.

(6) The authentication terminal device 102 copies the signature data on the electronic sales slip (generates authentication confirmation information) and returns the data to the credit company 112.

(7) The credit company server 112 also refers to the signature information registered in advance in the card information DB 611 and verifies the signature related to the signature data.

(8) The credit company server 112 transmits information to the effect of reporting the sale completion to the store server 111 via the network 100.

(9) The store server 111 transmits information to the effect of reporting the sale completion to the transaction terminal device 101 via the network 100. The information is displayed by the browser 400.

  FIG. 12 shows a case where the purchase and sale by the principal is cancelled. In FIG. 12, the processing is executed in the procedures (1) to (7). Since steps (1) to (3) are the same as steps (1) to (3) shown in FIG. 11, the description thereof is omitted.

(4) The authentication terminal device 102 causes the authenticator to perform a self-signed signature operation using the authentication terminal device 102, but the authenticator signs the electronic sales slip in order to cancel the sale. Leave as it is.

(5) The credit company server 112 determines that the sale is not successful because the signature return mail does not arrive even after the predetermined time has elapsed.

(6) The credit company server 112 transmits to the store server 111 information indicating that the sale is not established via the network 100.

(7) The store server 111 transmits information to the effect that the transaction failure is reported to the transaction terminal device 101 via the network 100. The information is displayed by the browser 400.

  FIG. 13 shows a case where trading by a malicious person is performed. In FIG. 13, processing is executed according to the procedures (1) to (8). Since steps (1) to (3) are the same as steps (1) to (3) shown in FIG. 11, the description thereof is omitted.

(4) The authentication terminal device 102 allows the authenticator to perform a self-signed signature operation using the authentication terminal device 102. However, since the authenticator is a purchase / sell that he / she does not remember, he / she does not sign it. Give an emergency stop instruction. Further, even if it is not noticed at that time, if it is noticed later, an emergency stop instruction may be issued when it is noticed.

(5) In response to the emergency stop instruction, the authentication terminal device 102 returns emergency stop information to the credit company server 112 instead of the information obtained by copying the signature data on the electronic sales slip.

(6) Upon receiving the emergency stop information, the credit company server 102 determines that the transaction is due to unauthorized use of the card, and puts the card into a stopped state.

(7) The credit company server 112 transmits, to the store server 111, information indicating that the sale failure due to unauthorized use is reported via the network 100.

(8) The store server 111 transmits warning information to the transaction terminal device 101 via the network 100 indicating that the transaction has not been established due to unauthorized use. The information is displayed by the browser 400.

  When the financial institution server 113 is used, in the above procedure, transmission / reception between the store server 111 and the credit company server 112 is merely omitted, and the other steps are the same as the above procedure. The description is omitted.

  As described above, according to the present embodiment, the transaction terminal device 101 that conducts electronic commerce with the store and the store that communicates with the transaction terminal device 101 via the network are provided in the store. An electronic commerce system comprising a server 111, a credit company server 112 provided in a credit company connected to the store server 111, and an authentication terminal device 102 that communicates with the credit company server 112 and authenticates electronic commerce. The transaction terminal device 101 includes a transmission unit 404 that transmits transaction instruction information and card information related to a transaction instruction to the store server, and the transaction instruction information transmitted from the store server 111 and the transaction terminal device 102. Receiving unit 501 that receives the card information and the transaction received by receiving unit 501 A transmission unit 503 that transmits transaction amount information corresponding to the indication information and card information to the credit company server 112, and the credit company server 112 receives the card information from the store server 111; Based on the card information received by the receiving unit 601, a settlement processing unit 602 that identifies an authentication terminal device 102 corresponding to card information registered in advance, and an authentication terminal device 102 identified by the settlement processing unit 602. , A transmission unit 603 for transmitting all or a part of the store information, card information and transaction amount information, a reception unit 601 for receiving authentication confirmation information for confirming authentication from the authentication terminal device 102, and a reception unit 601. A payment processing unit 602 for executing payment processing based on the authentication confirmation information received by Therefore, now typically relied only on the input card number and expiration date, so it is possible to perform the authentication for use of the card in the electronic commerce more easily.

  Further, according to the present embodiment, the authentication terminal device 102 is a portable terminal device, and at least one of the inclination, movement amount, movement direction, and movement speed of the authentication terminal device 102 itself is obtained. A motion detection unit 804 to detect, a signature information storage unit 806 that stores information related to the motion of the authentication terminal device 102 registered in advance, a motion of the authentication terminal device 102 detected by the motion detection unit 804, and signature information The similarity determination unit 807 that determines whether or not the movement of the information stored in the storage unit 806 is more than a predetermined threshold, and the similarity determination unit 807 determines whether the similarity is a predetermined value. In the above case, an authentication confirmation information generation unit 809 that generates information about authentication confirmation, and information about authentication confirmation generated by the authentication confirmation information generation unit 809 Due to the provision of an authentication confirmation information transmitting section 810 that transmits to the credit company server 112, and has enabled authenticated by simple operation rather than move the authentication information terminal device 102.

  Further, according to the present embodiment, the movement of the information stored in the signature information storage unit 806 of the authentication terminal device 102 is substantially the same as the movement of the card owner's signature. The authentication process can be completed with almost the same operation as the signature of. In addition, even in electronic commerce without a signature, signature information can be kept as a history in the same way as normal card usage, and it is possible to confirm whether it is a signature by the person later. It was.

  In addition, according to the present embodiment, in addition to the information regarding the movement stored in the signature information storage unit 806 of the authentication terminal device 102, the writing speed for each character when signing, and the authentication for each character. Information on at least one of the inclination of the terminal device itself and the size of each character is included, so the authentication operation cannot be completed simply by stealing only the signature. I was able to do it.

  Further, according to the present embodiment, transaction terminal device 101 and authentication terminal device 102 may be the same device or may be separate devices. If the authentication terminal device 102 is a mobile phone, it can be easily carried anywhere, so that authentication can be confirmed more efficiently and easily.

  In addition, according to the present embodiment, transaction terminal device 101 that conducts electronic commerce with a financial institution, financial institution server 113 provided in a financial institution that communicates with transaction terminal device 101, and financial institution An electronic commerce system comprising an authentication terminal device 102 that communicates with a server 113 and authenticates electronic commerce, wherein the transaction terminal device 101 sends transaction instruction information and card information related to a transaction instruction to a financial institution The financial institution server 113 includes a receiving unit 701 that receives the transaction instruction information and card information transmitted from the transaction terminal device 101, and the card information received by the receiving unit 701. Payment processing unit for extracting authentication terminal device 102 corresponding to pre-registered card information based on 02, a transmission unit 703 that transmits all or part of the transaction amount information corresponding to the card information and the transaction instruction information to the authentication terminal device 102 extracted by the settlement processing unit 702, and the authentication terminal device 102 Since a receiving unit 701 that receives authentication confirmation information for confirming authentication and a settlement processing unit 702 that executes a settlement process based on the authentication confirmation information received by the receiving unit 701 are provided, financial services such as net banking In electronic commerce with an institution, authentication can be performed by a simpler operation of moving the authentication information terminal device 102.

  The processing procedure according to the electronic commerce system described in this embodiment can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. This program is recorded on a computer-readable recording medium such as a hard disk, a flexible disk, a CD-ROM, an MO, and a DVD, and is executed by being read from the recording medium by the computer. The program may be a transmission medium that can be distributed via a network such as the Internet.

  As described above, the electronic commerce system according to the present invention is suitable for use in electronic commerce using cards such as Internet shopping.

It is a block diagram which shows the outline | summary of the electronic commerce system concerning embodiment of this invention. It is a block diagram which shows the hardware constitutions of the terminal device for transaction and the terminal device for authentication. It is a block diagram which shows the hardware constitutions of a store server, a credit company server, and a financial institution server. It is a block diagram which shows the functional structure of the terminal device for transaction. It is a block diagram which shows the functional structure of a store server. It is a block diagram which shows the functional structure of a credit company server. It is a block diagram which shows the functional structure of a financial institution server. It is a block diagram which shows the functional structure of the terminal device for authentication. It is explanatory drawing which shows the external appearance of the terminal device for authentication. It is explanatory drawing which shows the external appearance of the terminal device for authentication. It is a flowchart which shows the procedure of the process of the terminal device for authentication. It is explanatory drawing which shows the procedure of the process in the electronic commerce system concerning embodiment of this invention. It is explanatory drawing which shows the procedure of the process in the electronic commerce system concerning embodiment of this invention. It is explanatory drawing which shows the procedure of the process in the electronic commerce system concerning embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Network 101 Transaction terminal device 102 Authentication terminal device 111 Store server 112 Credit company server 113 Financial institution server 400 Browser 401 Input part 402 Reading part 403 Display part 404 Transmission part 501 Reception part 502 Amount information extraction part 503 Transmission part 511 Customer Information database (DB)
512 Transaction Information Database (DB)
601 Receiving Unit 602 Settlement Processing Unit 603 Transmitting Unit 611 Card Information Database (DB)
612 Payment Information Database (DB)
701 Reception unit 702 Settlement processing unit 703 Transmission unit 711 Customer information database (DB)
712 Card information database (DB)
713 Transaction Information Database (DB)
714 Payment Information Database (DB)
801 Transaction information reception unit 802 Notification unit 803 Display unit 804 Motion detection unit 805 Motion information transmission unit 806 Signature information storage unit 807 Similarity determination unit 808 Input unit 809 Authentication confirmation information generation unit 810 Authentication confirmation information transmission unit 900 Display screen 901 button

Claims (7)

A transaction terminal device for conducting electronic commerce with a store via a network;
A store server provided in the store that communicates with the transaction terminal device;
A credit company server provided in a credit company connected to the store server;
In an electronic commerce system consisting of an authentication terminal device that performs communication with the credit company server and authenticates the electronic commerce,
The transaction terminal device includes transaction means for transmitting transaction instruction information and card information related to a transaction instruction to the store server,
The store server
Receiving means for receiving the transaction instruction information and the card information transmitted from the transaction terminal device;
Transmission amount information corresponding to the transaction instruction information received by the reception means, and the card information, and transmission means for transmitting to the credit company server,
The credit company server is
Receiving means for receiving the card information from the store server;
Identifying means for identifying an authentication terminal device corresponding to the card information registered in advance based on the card information received by the receiving means;
Transmitting means for transmitting all or part of the information on the store, the card information and the transaction amount information to the authentication terminal device specified by the specifying means;
Receiving means for receiving authentication confirmation information for confirming authentication from the authentication terminal device;
Processing means for executing a payment process based on the authentication confirmation information received by the receiving means;
Equipped with a,
The authentication terminal device is a portable terminal device,
Detecting means for detecting a position of the authentication terminal device;
Detecting means for detecting at least one of the inclination, the moving amount, the moving direction, and the moving speed of the authentication terminal device itself;
Storage means for storing information relating to the movement of the authentication terminal device registered in advance;
Determining means for determining whether or not the movement of the authentication terminal device detected by the detecting means and the movement of the information stored by the storage means are more than a predetermined threshold;
As a result of the determination by the determination means, when the similarity between the two is a predetermined value or more and the position of the authentication terminal device detected by the detection means exists at a predetermined position, authentication is performed. Generating means for generating information about the confirmation;
Transmitting means for transmitting information related to the authentication confirmation generated by the generating means to the credit company server;
An electronic commerce system characterized by comprising: A transaction terminal device for conducting electronic commerce with a store via a network;
  A store server provided in the store that communicates with the transaction terminal device;
  A credit company server provided in a credit company connected to the store server;
  In an electronic commerce system consisting of an authentication terminal device that performs communication with the credit company server and authenticates the electronic commerce,
  The transaction terminal device includes transaction means for transmitting transaction instruction information and card information related to a transaction instruction to the store server,
  The store server
  Receiving means for receiving the transaction instruction information and the card information transmitted from the transaction terminal device;
  Transmission amount information corresponding to the transaction instruction information received by the reception means, and the card information, and transmission means for transmitting to the credit company server,
  The credit company server is
  Receiving means for receiving the card information from the store server;
  Identifying means for identifying an authentication terminal device corresponding to the card information registered in advance based on the card information received by the receiving means;
  Transmitting means for transmitting all or part of the information on the store, the card information and the transaction amount information to the authentication terminal device specified by the specifying means;
  Receiving means for receiving authentication confirmation information for confirming authentication from the authentication terminal device;
  Processing means for executing a payment process based on the authentication confirmation information received by the receiving means;
  With
  The authentication terminal device is a portable terminal device,
  Detecting means for detecting at least one of the inclination, the moving amount, the moving direction, and the moving speed of the authentication terminal device itself;
  Storage means for storing information relating to the movement of the authentication terminal device registered in advance;
  Determining means for determining whether or not the movement of the authentication terminal device detected by the detecting means and the movement of the information stored by the storage means are more than a predetermined threshold;
  As a result of the determination by the determination means, when the similarity between the two is a predetermined value or more, a generation means for generating information related to authentication confirmation;
  Transmitting means for transmitting information related to the authentication confirmation generated by the generating means to the credit company server;
  With
  The movement relating to the information stored in the storage means of the authentication terminal device is substantially the same as the movement when signing the owner of the card, and is stored in the storage means of the authentication terminal device. The information relating to movement includes information relating to at least one of the writing speed for each character when signing and the time from the start to the end of the signature operation. A transaction terminal device for electronic commerce with financial institutions;
A financial institution server provided in a financial institution that communicates with the transaction terminal device;
In an electronic commerce system consisting of an authentication terminal device that performs communication with the financial institution server and authenticates the electronic commerce,
The transaction terminal device includes transaction means for transmitting transaction instruction information and card information related to a transaction instruction to the financial institution server,
The financial institution server is
Receiving means for receiving the transaction instruction information and the card information transmitted from the transaction terminal device;
Extracting means for extracting an authentication terminal device corresponding to the card information registered in advance based on the card information received by the receiving means;
Transmitting means for transmitting all or part of the transaction amount information corresponding to the card information and the transaction instruction information to the authentication terminal device extracted by the extraction means;
Receiving means for receiving authentication confirmation information for confirming authentication from the authentication terminal device;
Processing means for executing a payment process based on the authentication confirmation information received by the receiving means;
Equipped with a,
The authentication terminal device is a portable terminal device,
Detecting means for detecting a position of the authentication terminal device;
Detecting means for detecting at least one of the inclination, the moving amount, the moving direction, and the moving speed of the authentication terminal device itself;
Storage means for storing information relating to the movement of the authentication terminal device registered in advance;
Determining means for determining whether or not the movement of the authentication terminal device detected by the detecting means and the movement of the information stored by the storage means are more than a predetermined threshold;
As a result of the determination by the determination means, when the similarity between the two is a predetermined value or more and the position of the authentication terminal device detected by the detection means exists at a predetermined position, authentication is performed. Generating means for generating information about the confirmation;
Transmitting means for transmitting information relating to the authentication confirmation generated by the generating means to the financial institution server;
An electronic commerce system characterized by comprising: A transaction terminal device for electronic commerce with financial institutions;
  A financial institution server provided in a financial institution that communicates with the transaction terminal device;
  In an electronic commerce system consisting of an authentication terminal device that performs communication with the financial institution server and authenticates the electronic commerce,
  The transaction terminal device includes transaction means for transmitting transaction instruction information and card information related to a transaction instruction to the financial institution server,
  The financial institution server is
  Receiving means for receiving the transaction instruction information and the card information transmitted from the transaction terminal device;
  Extracting means for extracting an authentication terminal device corresponding to the card information registered in advance based on the card information received by the receiving means;
  Transmitting means for transmitting all or part of the transaction amount information corresponding to the card information and the transaction instruction information to the authentication terminal device extracted by the extraction means;
  Receiving means for receiving authentication confirmation information for confirming authentication from the authentication terminal device;
  Processing means for executing a payment process based on the authentication confirmation information received by the receiving means;
  With
  The authentication terminal device is a portable terminal device,
  Detecting means for detecting at least one of the inclination, the moving amount, the moving direction, and the moving speed of the authentication terminal device itself;
  Storage means for storing information relating to the movement of the authentication terminal device registered in advance;
  Determining means for determining whether or not the movement of the authentication terminal device detected by the detecting means and the movement of the information stored by the storage means are more than a predetermined threshold;
  As a result of the determination by the determination means, when the similarity between the two is a predetermined value or more, a generation means for generating information related to authentication confirmation;
  Transmitting means for transmitting information relating to the authentication confirmation generated by the generating means to the financial institution server;
  With
  The movement relating to the information stored in the storage means of the authentication terminal device is substantially the same as the movement when signing the owner of the card, and is stored in the storage means of the authentication terminal device. The information relating to movement includes information relating to at least one of the writing speed for each character when signing and the time from the start to the end of the signature operation. When the similarity is not greater than or equal to a predetermined value, the detection means repeatedly detects the movement of the authentication terminal device a predetermined number of times, and changes the predetermined value of the similarity according to the number of repetitions. The electronic commerce system according to any one of claims 1 to 4. Wherein the transaction terminal device, wherein the authentication terminal device, an electronic commerce system according to any one of claims 1-5, characterized in that the same device. The computer program for functioning a computer as each means of the electronic commerce system as described in any one of Claims 1-6 .

Images