JP7156056B2 - payment system - Google Patents

Description

The present invention relates to a settlement system using information codes.

BACKGROUND Conventionally, information codes such as bar codes and QR codes (registered trademark) have been used for various purposes, and their purposes of use are also diversifying. For example, it is assumed that the information recorded in the information code is used for settlement. As a technique for using such an information code for payment, for example, a system disclosed in Patent Document 1 below is known. In this system, at the time of payment, by sending predetermined data such as salesman ID, contract number, amount, etc., the barcode for payment obtained from the barcode conversion server is displayed on the display screen of the first mobile phone. . Then, the bar code for payment displayed on the first mobile phone is read by the second mobile phone, and the read decoded data is transmitted from the second mobile phone to the payment server via the AP server. be. Then, the payment is completed when the result of the payment processing by the payment server is transmitted to the first mobile phone or the second mobile phone via the AP server.

JP 2008-217277 A

Information codes used for payment and the like are required to have high security. For example, information codes printed on a paper medium can be easily duplicated by using a copier or the like. In addition, even if the received information code is displayed on the screen as in Patent Document 1, if the displayed information code is imaged by another device, the captured image is used. may be replicated by In other words, the information code is actually visible and can be easily copied. This may make the user feel uneasy.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and its object is to improve the security of payment processing using information codes by using both the face recognition result and the one-time password. To provide a settlement system capable of increasing

In order to achieve the above object, the invention described in claim 1 of the scope of claims includes:
a mobile terminal (20) carried by a user;
a payment server (30);
a code generation device (40) for generating an authentication code (C) as an information code for authentication;
an authentication device (50) for authenticating the user;
A payment system (10, 10a) comprising
The mobile terminal is
a terminal-side transmission unit (21, 26) for transmitting a terminal ID identifying the mobile terminal to the settlement server at the time of settlement;
a display unit (24) on which the authentication code obtained from the code generation device is displayed;
The payment server
a payment storage unit (32) in which payment information used for payment processing of the user is stored in association with the terminal ID;
When the terminal ID is received from the mobile terminal, a one-time password associated with the terminal ID is issued and transmitted to the code generation device together with the terminal ID, and the one-time password is associated with the payment information for the payment. a one-time password issuing unit (31) stored in a storage unit;
a settlement unit (31) that acquires purchase information relating to a purchase target to be purchased by the user and performs settlement processing based on the purchase information using the settlement information;
The code generator is
a code generation storage unit (42) in which facial feature point information relating to facial feature points extracted from the facial image of the user and the terminal ID of the mobile terminal of the user are stored in association with each other;
When the one-time password and the terminal ID are received from the settlement server, the facial feature point information stored in the code generation storage unit in association with the terminal ID and the received one-time password are recorded. a code generator (41) for generating the authentication code so that
an output unit (43) for outputting the authentication code generated by the code generation unit to the mobile terminal specified from the received terminal ID,
The authentication device
an imaging unit (53, 54);
a reading unit (51) for reading the facial feature point information and the one-time password recorded in the authentication code from an image of the authentication code displayed on the display unit, which is captured by the imaging unit;
an extraction unit (51) for extracting facial feature points from an image of the user's face captured by the imaging unit;
a matching unit (51) for matching the facial feature points read by the reading unit and the facial feature points extracted by the extracting unit;
a device-side transmission unit (51, 57) for transmitting information on the verification result of the verification unit and the read one-time password to the settlement server;
The settlement unit of the settlement server performs settlement processing based on the purchase information when it is determined that the authentication is successful and the one-time password is valid based on the information received from the authentication device. The payment information stored in the payment storage unit in association with the one-time password is used.
It should be noted that the symbols in parentheses above indicate the corresponding relationship with specific means described in the embodiments to be described later.

In the invention according to claim 1, when the terminal ID is received from the mobile terminal in the settlement server, a one-time password associated with the terminal ID is issued and transmitted to the code generation device together with the terminal ID. It is stored in the payment storage unit in association with the payment information. Then, when the one-time password and the terminal ID are received from the settlement server, the code generation device generates facial feature point information stored in the code generation storage unit in association with the terminal ID and the received one-time password. An authentication code is generated so as to be recorded, and output to the mobile terminal specified by the terminal ID from which this authentication code was received. Then, in the authentication device, the facial feature point information and the one-time password recorded in the authentication code displayed on the display unit of the mobile terminal are read from the captured image of the authentication code displayed on the display unit of the mobile terminal by the imaging unit, and the one-time password is used. Facial feature points are extracted from an image of a person's face captured by an imaging unit, the facial feature points read by the reading unit and the facial feature points extracted by the extracting unit are compared, and information about the matching result is read. A one-time password is sent to the payment server. Then, in the settlement unit of the settlement server, when it is determined that the authentication is successful and the one-time password is valid based on the information received from the authentication device, the settlement processing based on the purchase information is performed using the one-time password. This is performed using the payment information associated and stored in the payment storage unit.

As a result, the user can use face authentication using facial feature points for payment processing only by causing the imaging unit of the authentication device to image the authentication code acquired from the code generation device and the user's own face. On the other hand, even if a third party causes the authentication device to read the authentication code displayed on the user's portable terminal, the face authentication fails, so that the third party does not perform unauthorized payment processing. In particular, since the one-time password sent from the payment server is recorded in the authentication code, both the face recognition result and the one-time password can be used on the payment server. can enhance sexuality.

In the invention according to claim 2, in the payment server, when it is determined that the authentication has failed based on the information received from the authentication device, the terminal ID stored in the payment storage unit in association with the one-time password is Information about the authentication failure is registered by the registration unit. As a result, the authentication failure history can be registered for each terminal ID. For example, when authentication fails a predetermined number of times within a predetermined period of time, by setting the terminal ID to be unusable, the one associated with the terminal ID can be disabled. A time password is not issued, and generation of unnecessary authentication codes can be eliminated.

In the third aspect of the present invention, the code generation unit stores the one-time password in the public area, encrypts the facial feature point information using the decryption key so that it can be decrypted, and records the partially private code in the private area. Then, the authentication code is generated, and the reading unit reads the facial feature point information and the one-time password recorded in the authentication code using the decryption key.

As a result, an ordinary reading device that does not have a decryption key can read the one-time password from the authentication code but cannot read the facial feature point information. The security of this settlement system can be further improved.

In the invention according to claim 4, the second imaging section for imaging the face of the user is the user pointing the portable terminal to the first imaging section for imaging the authentication code displayed on the display section. It is arranged at a position for capturing an image of a face. Since the user who points the portable terminal to the first imaging unit as described above is usually stationary, the user's face image can be clearly and reliably captured using the second imaging unit. .

BRIEF DESCRIPTION OF THE DRAWINGS It is explanatory drawing which shows roughly the structure of the settlement system which concerns on this embodiment. FIG. 2A is a block diagram schematically showing the electrical configuration of the mobile terminal, FIG. 2B is a block diagram schematically showing the electrical configuration of the settlement server, and FIG. ) is a block diagram schematically showing the electrical configuration of the code generator, and FIG. 2D is a block diagram schematically showing the electrical configuration of the authentication device. FIG. 4 is an explanatory diagram illustrating a part of a portion where facial feature points are extracted from imaged face image data; FIG. 4 is an explanatory diagram for explaining the flow up to matching processing in a series of processing in the payment system; FIG. 4 is an explanatory diagram for explaining the flow from matching processing in a series of processing in the payment system; FIG. 4 is an explanatory diagram for explaining the flow of authentication processing by the authentication device; It is an explanatory view showing roughly composition of a settlement system concerning a modification of this embodiment.

An embodiment embodying a settlement system according to the present invention will be described below with reference to the drawings.
The payment system 10 according to this embodiment is configured as a system that performs payment processing using face authentication. As shown in FIG. 1, this payment system 10 includes a mobile terminal 20 carried by a user, a payment server 30, a code generation device 40 for generating an authentication code C as an information code for face authentication, and a and an authentication device 50 for authenticating a person. In this embodiment, the payment system 10 is employed in a system that performs payment processing using an information code when purchasing a product at a store such as a retail store. It is arranged in the vicinity and configured to output the result of face authentication and the like to the POS register 60 .

First, the configuration of the mobile terminal 20 will be described with reference to FIGS. 1 and 2A.
The mobile terminal 20 is, for example, a smartphone, and as shown in FIGS. It includes a touch panel type display unit 24 whose contents are controlled, an operation unit 25 that outputs operation signals to the control unit 21 in response to touch operations and key operations on the touch panel, and a communication unit 26 that communicates with external devices. there is

A predetermined application program (hereinafter simply referred to as a payment application) for performing payment using the authentication code C is installed in the mobile terminal 20 configured as described above and stored in the memory 22 . This payment application is a site on the Internet operated by a management server (not shown) managed by the operator of this payment system 10. Information used for payment processing such as personal information and credit numbers (hereinafter referred to as payment (also referred to as information) and the transmission of face image data in which the user's face is captured. At the time of this installation, a unique ID (hereinafter also referred to as a terminal ID) set by the management server so that the mobile terminal 20 can be specified is also stored in the memory 22 . The payment information entered in this way is transmitted from the management server to the payment server 30 together with the corresponding terminal ID.

The management server extracts a plurality of facial feature points from the facial image data by performing facial feature point extraction processing for extracting known facial feature points from the facial image data of the user. . In this embodiment, as facial feature points, items such as the size, shape, and outline of facial features such as eyes, eyebrows, nose, ears, and mouth, and the arrangement positions of facial features are adopted. 3, features of each item, such as data such as "D1: length of cut eyes" and "D2: large mouth", are calculated and extracted as facial feature points. be. Information relating to facial feature points extracted in this way (hereinafter also referred to as facial feature point information) is transmitted from the management server to the code generation device 40 together with the corresponding terminal ID.

Next, the settlement server 30 will be explained using FIGS. 1 and 2(B).
The settlement server 30 issues a one-time password in response to a request from a user, and sends the result of successful authentication of the user, a valid one-time password, and purchase information related to the purchase target (for example, product price, product name, etc.). etc.) from the POS register 60, and performs payment processing using the user's payment information for the purchase target. The settlement server 30 includes a control unit 31 that controls the entire settlement server 30, as shown in FIG. 2(B). The control unit 31 is composed mainly of a microcomputer, has a CPU, a system bus, an input/output interface, and the like, and functions in cooperation with the storage unit 32 as information processing means regarding payment and the like.

In the storage unit 32, a predetermined application program for performing a one-time password issuing process for issuing a one-time password in response to a request from a user and a settlement process using the user's settlement information is stored by the control unit 31. stored executable. Further, in the storage unit 32, a database is constructed in which the payment information received from the management server, the terminal ID, and the issued one-time password are stored in association with each other. The settlement server 30 also includes a communication unit 33 for communicating with external devices such as the mobile terminal 20, the code generation device 40, the POS register 60, and the management server. Note that the storage unit 32 may correspond to an example of a “settlement storage unit”.

In the settlement server 30 configured as described above, when a terminal ID is received from the mobile terminal 20 in the one-time password issuing process performed by the control unit 31, a password valid for a predetermined time is issued so as to be associated with the terminal ID. A time password is issued and transmitted to the code generator 40 together with the terminal ID. In this one-time password issuing process, the one-time password issued as described above is stored in the storage unit 32 so as to be associated with the payment information corresponding to the terminal ID. Note that the control unit 31 that performs the one-time password issuing process can correspond to an example of a "one-time password issuing unit".

Then, in the settlement server 30, when the authentication success result, the valid one-time password, and the purchase information are received from the POS register 60 in the settlement processing performed by the control unit 31 after the one-time password is issued, the purchase is processed. Payment processing based on information is performed using payment information stored in the storage unit 32 in association with the one-time password. Note that the control unit 31 that performs the above-described payment processing may correspond to an example of a "payment unit".

Next, the code generation device 40 will be described with reference to FIGS. 1 and 2(C).
The code generation device 40 is configured as a computer that generates an authentication code C as an optically readable information code used when performing face authentication. As shown in FIG. 2(C), the code generation device 40 includes a control unit 41 having a CPU and the like for overall control, a storage unit 42 comprising ROM, RAM, HDD, etc., and a communication interface configured as a communication interface. A portion 43 and the like are provided. The storage unit 42 stores a predetermined application program for performing code generation processing for generating the authentication code C so that the control unit 41 can execute the application program. Further, in the storage unit 42, a database is constructed in which the facial feature point information and the terminal ID received from the management server via the communication unit 43 are associated and stored. Note that the storage unit 42 may correspond to an example of a “code generation storage unit”.

When the one-time password and the terminal ID are received from the settlement server 30 via the communication unit 43, the control unit 41 performs code generation processing to store the terminal ID and the storage unit 42 associated with the terminal ID. and the received one-time password are recorded.

Specifically, in the code generation process performed by the control unit 41, the one-time password and the terminal ID are recorded in the public area, and the facial feature point information is encrypted using the decryption key so that it can be decrypted. An authentication code C is generated as a partially non-disclosed code recorded in . The authentication code C generated in this way is output via the communication unit 43 to the mobile terminal 20 specified by the terminal ID. The control unit 41 that generates the authentication code C may correspond to an example of a "code generation unit", and the communication unit 43 may correspond to an example of an "output unit".

Next, the authentication device 50 will be described with reference to FIGS. 1 and 2(D).
The authentication device 50 is installed in the POS register 60 and configured as an external device for authenticating a user who uses the POS register 60 . As shown in FIG. 2D, the authentication device 50 includes a control unit 51, a storage unit 52, a first imaging unit 53 and a second imaging unit 54, a display unit 55, an operation unit 56, a communication unit 57, and the like. ing.

The control unit 51 is composed mainly of a microcomputer, performs overall control of the authentication device 50 and performs various calculations, and functions to execute, for example, authentication processing described later. The storage unit 52 is composed of known storage media such as ROM, RAM, HDD, and non-volatile memory. stored. A decryption key for decrypting the authentication code C is stored in advance in the storage unit 52 .

The first imaging unit 53 and the second imaging unit 54 are configured as cameras each having a light receiving sensor (for example, a C-MOS area sensor, a CCD area sensor, etc.). 51.

The first image capturing unit 53 is configured as an image capturing unit suitable for capturing an image of an information code such as an authentication code C or a QR code held over a predetermined reading window. An irradiation unit for irradiating illumination light is separately provided.

The second image capturing unit 54 is configured as an image capturing unit suitable for capturing an image of the user's face. It is arranged at a position (for example, a position in the vicinity of the reading window) for imaging the face of the facing user.

In the control unit 51, the data recorded in the information code is read by performing predetermined reading processing (decoding processing) on the captured image of the information code captured by the first imaging unit 53. FIG. In particular, the captured image of the authentication code C captured by the first imaging unit 53 is subjected to reading processing for the partial non-disclosure code using the decryption key stored in the storage unit 52. The one-time password and terminal ID recorded in the public area of the authentication code C and the facial feature point information recorded in the private area are read. Note that the control unit 51 that performs the predetermined reading process and the reading process for the partial non-disclosure code can correspond to an example of the "reading unit".

In addition, in the control unit 51, the captured image of the user's face captured by the second imaging unit 54 is subjected to facial feature point extraction processing in the same manner as the management server, thereby extracting facial features from the captured image. Points are extracted. Note that the control unit 51 that performs the facial feature point extraction process can correspond to an example of an “extraction unit”.

The display unit 55 is composed of an LED, a liquid crystal display, or the like, is controlled by the control unit 51, and is configured to be able to visually notify the results of the authentication process and the like. The operation unit 56 is configured to output an operation signal corresponding to the input operation to the control unit 51, and the control unit 51 receives the operation signal and performs processing according to the input operation. there is The communication unit 57 is configured as a communication interface for performing data communication with an external device such as the POS register 60, and is configured to cooperate with the control unit 51 to perform communication processing.

In the authentication device 50 configured as described above, the facial feature points read from the captured image of the first imaging unit 53 and the face extracted from the captured image of the second imaging unit 54 are detected by the authentication processing performed by the control unit 51 . Feature points are matched. Then, if the facial feature points are considered to match, the authentication success result or the like is output to the POS register 60, and if the facial feature points are not considered to match, the authentication failure result or the like is output to the POS register 60. In the present embodiment, it is determined that the authentication is successful when all the items at the facial feature points match. It may be judged as successful. Also, the control unit 51 that performs processing for matching the read facial feature points with the extracted facial feature points may correspond to an example of a "matching unit."

Next, in the settlement system 10 configured as described above, when the user makes a settlement using the authentication code C, each of the mobile terminal 20, the settlement server 30, the code generation device 40, and the authentication device 50 The processing to be performed will be described with reference to FIGS. 4 to 6. FIG.

When a user who has selected a purchase target lines up at the checkout counter of the store to make a payment, the user performs a predetermined operation on the operation unit 25 of the portable terminal 20 to execute the payment application. By executing the payment application, the terminal ID and the like are transmitted to the payment server 30 via the communication unit 26 under the control of the control unit 21 of the mobile terminal 20 (S11 in FIG. 4). Note that the control unit 21 and the communication unit 26 may correspond to an example of a "terminal-side transmission unit".

In the settlement server 30, when the terminal ID and the like are received from the mobile terminal 20, a one-time password valid for a predetermined period of time is issued by the one-time password issuing process performed by the control unit 31 (S12). The one-time password issued in this way is transmitted to the code generator 40 together with the terminal ID (S13).

In the code generation device 40, when the one-time password and the terminal ID are received, the one-time password and the terminal ID are recorded in the public area by the code generation processing performed by the control unit 41, and are associated with the terminal ID. An authentication code C is generated so that the facial feature point information stored in the storage unit 42 is decryptably encrypted using a decryption key and recorded in the private area (S14). The authentication code C generated in this way is transmitted to the mobile terminal 20 specified by the terminal ID (S15).

When the mobile terminal 20 receives the authentication code C from the code generation device 40 as described above in response to the transmission of the terminal ID and the like to the payment server 30 while the payment application is running, the authentication code C is displayed on the display. 24 (S16 in FIGS. 4 and 6).

Thereafter, the user holds the authentication code C displayed on the screen over the reading window of the first imaging unit 53 of the authentication device 50 at the time of payment at the cash register (S17).

When the controller 51 of the authentication device 50 detects that the portable terminal 20 is held over as described above, authentication processing is executed. In this authentication process, the authentication code C is imaged by the first imaging unit 53 (S18), and reading processing for the partial non-disclosure code is performed using the decryption key stored in the storage unit 52 for this imaged image. is done. As a result, the one-time password and terminal ID recorded in the public area and the facial feature point information recorded in the private area are read (S19). In addition, when the user holds the authentication code C over the reading window of the first imaging unit 53, the face of the user is facing the reading window of the first imaging unit 53, so the second imaging unit 54 uses the authentication code C. The person's face can be photographed (S20). Therefore, the face of the user holding the authentication code C over the reading window is imaged by the second imaging unit 54 (S21), and facial feature point extraction processing is performed on this imaged image (face image data). Then, facial feature points are extracted from the captured image (S22).

In the authentication process, when the authentication code C is read from the image captured by the first image capturing unit 53, the image capturing by the second image capturing unit 54 may be started, or the image captured by the second image capturing unit 54 may be read. When facial feature points are extracted from , imaging by the first imaging unit 53 may be started.

Then, the facial feature points read from the captured image of the first imaging unit 53 and the facial feature points extracted from the captured image of the second imaging unit 54 are collated (S23), and the collation result (face authentication result) and the like are communicated. It is output to the POS register 60 via the unit 57 (S24 in FIG. 5). For example, when it is determined that the facial feature points match based on the collation result, the authentication success result is output to the POS register 60 via the communication unit 57 together with the one-time password and the terminal ID as the collation result. On the other hand, if it is not determined that the facial feature points match from the collation result, the authentication failure result is output to the POS register 60 via the communication unit 57 together with the one-time password and the terminal ID as the collation result. When outputting the result of authentication failure to the POS register 60 in this way, information about the result of authentication failure is reported using screen display, sound, or the like on the display unit 55 . Also, the control unit 51 and the communication unit 57 that transmit the collation result and the like to the POS register 60 (settlement server 30) can correspond to an example of the "apparatus-side transmission unit."

When the POS register 60 receives the collation result and the like from the authentication device 50, the collation result and the like are transmitted to the settlement server 30 together with the purchase information read from the bar code or the like attached to the purchase target of the user (S25). ).

The settlement server 30 receives the collation result and the like from the POS register 60 (S26), and if the authentication is successful (Yes in S27) and the one-time password is valid (Yes in S28), the received one-time password Payment processing for the purchase information is performed using the payment information stored in the storage unit 32 in association with the password and terminal ID (S29). After that, payment completion information is transmitted from the payment server 30, and information regarding the completion of payment is reported to the POS register 60 or the like that has received this payment completion information. In this way, the user can purchase the purchase target simply by running the payment application and holding the authentication code C displayed on the screen over the authentication device 50 .

Further, in the settlement server 30, even if the authentication success result is received from the POS register 60 (Yes in S27), if the one-time password is invalid (for example, if the predetermined time has passed) (in S28 No), information indicating that the one-time password is invalid is sent (S30). Then, the POS register 60 or the like that receives this information notifies that the one-time password is invalid.

On the other hand, in the settlement server 30, when the authentication failure result is received from the POS register 60 (No in S27), the terminal ID is negative-registered (S31). Specifically, in order to enable the authentication failure history to be registered for each terminal ID, the number of authentication failures, the date and time, and the like are stored in the storage unit 32 so as to be associated with the terminal ID. As a result, for example, when the same terminal ID fails authentication a predetermined number of times within a predetermined period of time, the terminal ID is set to be unusable, thereby prohibiting issuance of a one-time password associated with the terminal ID. be able to. Note that the control unit 31 that performs negative registration of the terminal ID can correspond to an example of a “registration unit”.

As described above, in the payment system 10 according to the present embodiment, when the terminal ID is received from the mobile terminal 20 in the payment server 30, a one-time password associated with the terminal ID is issued and a code is issued together with the terminal ID. The one-time password is transmitted to the generation device 40 and stored in the storage unit 32 in association with the payment information. Then, when the one-time password and the terminal ID are received from the settlement server 30, the code generation device 40 generates facial feature point information stored in the storage unit 42 in association with the terminal ID and the received one-time password. An authentication code C is generated so as to be recorded, and output to the mobile terminal 20 specified by the terminal ID from which this authentication code C is received. Then, in the authentication device 50, the facial feature point information recorded in the authentication code C and the facial feature point information recorded in the authentication code C from the captured image of the authentication code C displayed on the display unit 24 of the mobile terminal 20 by the first imaging unit 53. While the time password is read, facial feature points are extracted from the captured image of the user's face captured by the second imaging unit 54, and the read facial feature points are compared with the extracted facial feature points. Information about the result and the read one-time password are sent to the settlement server 30 via the POS register 60 . Then, in the settlement server 30, based on the information received from the authentication device 50 via the POS register 60, when it is determined that the authentication is successful and the one-time password is valid, settlement processing based on the purchase information is performed. , using the payment information stored in the storage unit 32 in association with the one-time password.

As a result, the user simply causes the first imaging unit 53 and the second imaging unit 54 of the authentication device 50 to image the authentication code C acquired from the code generation device 40 and the user's own face, thereby obtaining facial feature points. The used face recognition can be used for payment processing. On the other hand, even when a third party causes the authentication device 50 to read the authentication code C displayed on the mobile terminal 20 of the user, the face authentication fails, and the third party may perform fraudulent payment processing. None. In particular, since the one-time password transmitted from the settlement server 30 is recorded in the authentication code C, the settlement server 30 can use both the result of face recognition and the one-time password, so settlement using the information code is possible. It is possible to enhance the security of processing.

Furthermore, in the present embodiment, when the settlement server 30 determines that authentication has failed based on the information received from the authentication device 50, the terminal ID stored in the storage unit 32 in association with the one-time password is Then, information about authentication failure is registered (S31). As a result, the authentication failure history can be registered for each terminal ID. For example, when authentication fails a predetermined number of times within a predetermined period of time, by setting the terminal ID to be unusable, the one associated with the terminal ID can be disabled. A time password is not issued, and generation of an unnecessary authentication code C can be eliminated.

Further, in this embodiment, the one-time password and the terminal ID are stored in the public area by the code generation processing performed by the control unit 41 of the code generation device 40, and the facial feature point information can be decrypted using the decryption key. An authentication code C is generated as a partially private code that is encrypted and recorded in the private area (S14). Then, in the authentication process performed by the control unit 51 of the authentication device 50, the facial feature point information, the one-time password, etc. recorded in the authentication code C are read using the decoding key (S19).

As a result, even if a one-time password or a terminal ID can be read from the authentication code C, a normal reading device that does not have a decryption key cannot read the facial feature point information. security of the settlement system 10 can be further improved.

The authentication code C is not limited to being generated so that the one-time password and the terminal ID are stored in the public area and the facial feature point information is recorded in the private area. may be generated so that the facial feature point information is recorded in the non-disclosure area. This is because the payment server 30 can specify the terminal ID and payment information from the one-time password. Further, the authentication code C may be generated so that the terminal ID is stored in the public area and the one-time password and facial feature point information are stored in the private area, or other information that can be disclosed is stored in the public area. may be generated such that the one-time password, the terminal ID, and the facial feature point information are stored in the private area. Further, depending on the degree of security, the authentication code C may be generated by recording the one-time password, the terminal ID, and the facial feature point information so that they can be read by a normal reading device without being encrypted. good.

In this embodiment, the second imaging section 54 for imaging the user's face directs the mobile terminal 20 toward the first imaging section 53 to image the authentication code C displayed on the display section 24. It is arranged at a position to image the face of the user who is Since the user who points the portable terminal 20 to the first imaging unit 53 as described above is usually stationary, the user's face image is captured clearly and reliably using the second imaging unit 54. be able to.

For example, when high extraction accuracy is not required for extraction of facial feature points, the authentication device 50 eliminates the second imaging unit 54 and uses only the authentication code C in the first imaging unit 53. It may also be configured to capture an image of the user's face as well. This is because the user's face faces the reading window when holding the authentication code C over the reading window of the first imaging unit 53 . That is, the first imaging section 53 may be configured to serve as both an imaging section for imaging the authentication code C and an imaging section for imaging the user's face. In this case, by arranging the reading window of the first imaging unit 53 so as to face (directly face) the user's face when holding the authentication code C, the first imaging unit 53 can detect facial feature points. It is possible to easily capture an image of the user's face.

In addition, the present invention is not limited to the above embodiments, and may be embodied as follows, for example.
(1) In the payment system according to the present invention, the authentication code C is not limited to being generated by the code generation device 40 that receives the one-time password or the like from the payment server 30. As described above, the mobile terminal 20 may also function as the code generation device 40 , so that the authentication code C may be generated in the mobile terminal 20 that receives the one-time password or the like from the settlement server 30 .

In this configuration, in the mobile terminal 20, the facial feature point information acquired from the management server at the time of installation of the payment application is stored in the memory 22 functioning as a storage unit for code generation. Then, when a one-time password or the like is received from the settlement server 30 via the communication unit 26, code generation processing is performed by the control unit 21 functioning as a code generation unit, whereby the terminal ID and the terminal ID are generated. and the received one-time password are recorded. The authentication code C generated in this manner is output and displayed on the screen of the display unit 24 from which the authentication code C is obtained, whereby payment processing using the authentication code C can be performed.

(2) In the authentication process performed by the control unit 51 of the authentication device 50, based on the facial feature points extracted from the facial image data captured as described above and the facial feature points read from the authentication code C, In addition to performing verification processing, captured face image data, extracted facial feature points, captured image data of authentication code C, or read facial feature points are used as information related to the verification result, such as a one-time password and a terminal ID. may be transmitted to the settlement server 30 via the POS register 60 together with the In this case, the settlement server 30 can obtain the matching result by performing the matching process using the information about the matching result described above.

DESCRIPTION OF SYMBOLS 10,10a... Settlement system 20... Portable terminal 21... Control part (terminal side transmission part)
24... Display unit 26... Communication unit (terminal-side transmission unit)
30... Settlement server 31... Control unit (one-time password issuing unit, settlement unit)
32... Storage unit (storage unit for payment)
40... Code generation device 41... Control unit (code generation unit)
42... Storage unit (storage unit for code generation)
43...Communication unit (output unit)
50 ... authentication device 51 ... control unit (reading unit, extraction unit, collation unit, device side transmission unit)
53... First imaging section (imaging section)
54... Second imaging section (imaging section)
57...Communication unit (apparatus-side transmission unit)
C...Authentication code

Claims (4)

a mobile device carried by the user;
a payment server;
a code generator that generates an authentication code as an information code for authentication;
an authentication device that authenticates the user;
A payment system comprising
The mobile terminal is
a terminal-side transmission unit that transmits a terminal ID that identifies the mobile terminal to the settlement server at the time of settlement;
a display on which the authentication code obtained from the code generation device is displayed;
The payment server
a payment storage unit in which payment information used for payment processing of the user is stored in association with the terminal ID;
When the terminal ID is received from the mobile terminal, a one-time password associated with the terminal ID is issued and transmitted to the code generation device together with the terminal ID, and the one-time password is associated with the payment information for the payment. a one-time password issuing unit that stores in a storage unit;
a payment unit that acquires purchase information related to the purchase target purchased by the user and performs payment processing based on the purchase information using the payment information;
The code generator is
a code generation storage unit that stores facial feature point information related to facial feature points extracted from the facial image of the user and the terminal ID of the mobile terminal of the user in association with each other;
When the one-time password and the terminal ID are received from the settlement server, the facial feature point information stored in the code generation storage unit in association with the terminal ID and the received one-time password are recorded. a code generator that generates the authentication code so that
an output unit that outputs the authentication code generated by the code generation unit to the mobile terminal specified by the received terminal ID,
The authentication device
an imaging unit;
a reading unit that reads the facial feature point information and the one-time password recorded in the authentication code from an image of the authentication code displayed on the display unit that is captured by the imaging unit;
an extraction unit for extracting facial feature points from an image of the user's face captured by the imaging unit;
a matching unit for matching the facial feature points read by the reading unit and the facial feature points extracted by the extracting unit;
a device-side transmission unit configured to transmit information about the verification result of the verification unit and the read one-time password to the settlement server;
The payment unit of the payment server performs payment processing based on the purchase information when it is determined that the authentication is successful and the one-time password is valid based on the information received from the authentication device. A payment system characterized by using the payment information stored in the payment storage unit in association with a one-time password. The payment server fails authentication for the terminal ID associated with the one-time password and stored in the payment storage unit when authentication failure is determined based on the information received from the authentication device. 2. The settlement system according to claim 1, further comprising a registration unit for registering information about. The code generation unit stores the one-time password in a public area, encrypts the facial feature point information using a decryption key so that it can be decrypted, and stores the authentication information as a partially private code recorded in a private area. generate code for
3. The settlement system according to claim 1, wherein the reading unit uses the decryption key to read the facial feature point information and the one-time password recorded in the authentication code. The imaging unit includes a first imaging unit for imaging the authentication code displayed on the display unit, and a second imaging unit for imaging the user's face,
The second image capturing unit is arranged at a position for capturing an image of the face of the user who is pointing the mobile terminal toward the first image capturing unit in order to capture an image of the authentication code displayed on the display unit. The settlement system according to any one of claims 1 to 3, characterized by:

Images