JP7323436B2 - Multiple media use system and multiple media use method - Google Patents

Description

The present invention relates to a multiple medium utilization system and a multiple medium utilization method.

There is Patent Document 1 as a background art of this technical field. In Patent Document 1, "A step of storing the identification code of each customer of a plurality of companies and point information in association with each other by the management server of the system operator, and a program for processing the point information is downloaded from the management server. A step of holding a mobile communication terminal up to reading means placed at the store of the company to transmit the point information of the mobile communication terminal together with the customer identification code to the management server, and comparing the identification code with the management server. and updating the point information, and transmitting the updated information to the mobile communication terminal."

JP 2013-228766 A

In Patent Document 1, it is assumed that rights information such as a plurality of points is associated with a mobile communication terminal and used. However, this form of use does not disclose a method of using rights information using a plurality of terminals and media.

For example, in the rights information, multiple rights information such as free pass ticket information and reservation ticket information can be linked to one ID, and these rights information can be used by linking to multiple media held by individuals or multiple people. In such a case, the amount of linked rights information increases. This also increases security risks such as theft and unauthorized use.

An object of the present invention is to ensure security required when one user uses a plurality of media or security when a plurality of users use rights information.

A multiple media usage system according to one aspect of the present invention is a multiple media usage system that uses multiple services and multiple media tied to a single ID, wherein based on the user's action or behavior history, the usage and an alarm notification unit for notifying a predetermined alarm when the fraud detection unit detects the fraud.

A method of using multiple media according to one aspect of the present invention is a method of using multiple media that uses multiple services and multiple media linked to a single ID, wherein the usage and an alarm notification step of notifying a predetermined alarm when the fraud detection unit detects the fraud.

According to one aspect of the present invention, it is possible to ensure the security required when one user uses a plurality of media or the security when a plurality of users use rights information.

1 is a system configuration diagram of a multiple medium utilization system of an embodiment; FIG. 1 is a hardware configuration diagram for realizing a system using multiple media according to an embodiment; FIG. FIG. 10 is a diagram showing an example of a right information table; FIG. 4 is a diagram showing an example of a table of terminal definition information; FIG. 10 is a diagram showing an example of a table of usage history information; It is a figure which shows the example of the table of detection setting information. FIG. 10 is a diagram showing an example of a screen for setting detection setting information; It is a flowchart which shows the operation|movement for performing fraud detection of an Example.

An embodiment will be described below with reference to the drawings.

In the embodiment, an example of a fraud detection method in a common ID fraud detection system 1000 that makes it possible to use services set over multiple systems using a single ID linked to multiple media will be described.

A multiple medium utilization system according to an embodiment will be described with reference to FIG.
The multiple media utilization system has a rights management system 1100 , a user terminal 1200 , a business operator terminal 1300 and a common ID fraud detection system 1000 . Common ID fraud detection system 1000 is connected to user terminal 1400 , business operator terminal 1500 and setting terminal 1600 . Here, the user terminal 1200 and the user terminal 1400 may use the same terminal. Also, the same terminal may be used for the business terminal 1300 and the business terminal 1500 . In the embodiment, the common ID fraud detection system 1000 will be described assuming that it is implemented as hardware, but it can also be implemented as software that is installed in the rights management system 1100 .

The rights management system 1100 is a system that manages rights to receive services such as a ticket reservation system and an entrance/exit management system, and holds rights information 1101 and rights management functions 1102 . The right information is mainly managed by the system, such as right information, right reservation status, and user information. The right management function is a function for managing right information, and performs processes such as referencing and rewriting of right information. The rights management function includes functions for providing services used by external users, such as Web I/F for users to use.

A user terminal 1200 is a terminal for a user to make a reservation or use with respect to the rights management system 1100, and includes, for example, a PC and a mobile phone. The user uses this terminal to connect to the rights management system 1100, and performs operations such as confirmation of available rights and reservation.

The business operator terminal 1300 is a terminal such as an automatic gate that automatically determines the usage status by a terminal handled by a staff member or dedicated hardware in order to confirm whether or not the right can be used. These terminals are terminals that can determine the usage status by reading ticket media or the like indicating the reservation status into the terminal, and confirm information such as availability by reading media such as IC tickets and magnetic tickets. The provider terminal 1300 may be used offline without being connected to the rights management function 1102 .

The common ID fraud detection system 1000 is based on the premise that when there are a plurality of rights management systems 1100, each system can handle rights information held by each system with a common ID. It is for doing One common ID fraud detection system 1000 is connected to one rights management system 1100 . As a result, for example, a single IC ticket can be used to exercise reservation rights and service rights held by a plurality of systems.

Common ID fraud detection system 1000 includes a right information table storing right information 1001, a terminal definition information table storing terminal definition information 1002, a usage history information table storing usage history information 1003, and a detection table storing detection setting information 1004. It has a setting information table, detection setting unit 1005 , fraud detection unit 1006 and alarm notification unit 1007 .

Common ID fraud detection system 1000 connects to other common ID fraud detection systems 1000 using network 1700 between common ID fraud detection systems 1000, and obtains rights information 1001, terminal definition information 1002, and usage history information held by each system. 1003, the information of the detection setting information 1004 is shared.

Here, the right information 1001 is information for linking a common ID with a plurality of services and a plurality of usage media, and also holds information on the number of users when the service is used by a plurality of people. The terminal definition information 1002 is information that links a terminal ID and a service ID, and also has position information of the terminal.

The usage history information 1003 records usage of rights information using this system, and has information on usage time and location in addition to common ID, medium ID, and usage service ID. Detection setting information 1004 is setting information for detecting unauthorized use of a medium, and has information such as service ID, special medium designation, minimum number of people in a group, allowable movement speed, allowable duration, and allowable distance.

A detection setting unit 1005 is a function for determining the value of the detection setting information 1004, and is set by the operator or the user using the screen shown in FIG. The fraud detection unit 1006 has a function of detecting fraud using the detection setting information 1004, is executed each time the medium is used, and detects the possibility of fraud from the behavior of the user. The alarm notification unit 1007 has a function of notifying the user or the operator of the result when fraud is detected. Send information.

Further, connected to the common ID fraud detection system 1000 are a user terminal 1400 for mainly using rights, a business operator terminal 1500, and a setting terminal 1600 for determining the operation of the system. The user terminal 1400 and the operator terminal 1500 are, for example, a terminal such as a mobile phone held by the user, a counter terminal held by the operator, an automatic gate, etc., and access to the common ID fraud detection system 1000 is performed using various media. conduct. Then, the rights information 1101 held by the rights management system 1100 is accessed through the common ID fraud detection system 1000 .

A hardware configuration for implementing the embodiment will be described with reference to FIG.
The hardware configuration shown in FIG. 2 is a hardware configuration for implementing the common ID fraud detection system 1000, the rights management system 1100, the user terminal 1200, the operator terminal 1300, the user terminal 1400, the operator terminal 1500, and the setting terminal 1600. 2000 examples.

Hardware includes a central processing unit 2002, a main storage device 2003, an internal bus 2004, a bus I/F 2005, an external bus 2006, a screen output device I/F 2007, a user input device I/F 2008, a large capacity storage device 2009, and a communication device I /F 2010 and an input/output device I/F 2011.

The central processing unit 2002 is a device for performing calculations such as program execution, and for realizing the operations of the detection setting unit 1005, the fraud detection unit 1006, and the alarm notification unit 1007 of the common ID fraud detection system 1000 of FIG. used for

The main storage device 2003 is used as a processing area during program execution and as a temporary storage area for data. For example, a basic program such as an OS (Operating system), programs and temporary programs held by the common ID fraud detection system 1000, the rights management system 1100, the user terminal 1200, the operator terminal 1300, the user terminal 1400, the operator terminal 1500, and the setting terminal 1600 Temporarily stores programs and temporary information for realizing processing in each device such as information.

The central processing unit 2002 and main storage unit 2003 are connected by an internal bus 2004 , which is connected to an external bus 2006 via a bus I/F 2005 .
The external bus 2006 is connected to a screen output device I/F 2007, a user input device I/F 2008, a mass storage device I/F 2009, a communication device I/F 2010, and an input/output device I/F 2011. A bus I/F 2005 and an internal bus 2004 are used to mediate data input/output with the central processing unit 2002 and the main memory unit 2003 .

A screen output device I/F 2007 is an I/F for connecting with the display 2100 and outputs information obtained through the external bus 2006 to the display 2100 . The display 2100 is, for example, a device that can display the setting screen of FIG. 7, the processing status, and the like, and can also display information and the like for operating the basic program.

A user input device I/F 2008 is an I/F for connecting with the user input device 2200 and outputs information input from the user input device to the external bus 2006 . A user input device is a device for receiving input from a user, such as a keyboard and a mouse, and information input from the user input device is output to the user input device I/F 2008 .

A mass storage device I/F 2009 is an I/F for connecting with the mass storage device 2300 and mediates data input/output from the mass storage device to the external bus 2006 . The large-capacity storage device is, for example, a device such as a HDD (Hard Disk Drive). , the rights management system 1100, the user terminal 1200, the operator terminal 1300, the user terminal 1400, the operator terminal 1500, the setting terminal 1600, and the rights information in the common ID fraud detection system 1000. 1001, terminal definition information 1002, usage history information 1003, and detection setting information 1004 are stored when the device is turned off or when the program is not executed. Also, when executing various processes, the central processing unit 2002 reads these programs and data into the main storage unit 2003 and executes the programs.

A communication device I/F 2010 is an I/F for connecting with the communication device 2400 and mediates data input/output from the communication device to the external bus 2006 . The communication device is a device for connecting to an external server device or the like via Ethernet (registered trademark), for example, and can communicate with systems connected by the network 1700 between the common ID fraud detection systems 1000 .

The input/output device I/F 2011 is an I/F for connecting with the input/output device 2500 and mediates data input/output from the input/output device to the external bus 2006 . The input/output device is a drive device capable of reading and writing to an external medium, a finger vein reading device for user authentication, or the like.

FIG. 3 shows an example of a table of right information 1001. As shown in FIG.
It includes an available service ID linked to the common ID, an upper limit on the number of users who can use the service ID, a medium ID that can be used to use the service, and a medium type that indicates the type of medium. A plurality of services and a plurality of media are associated with a certain common ID, so that various services can be used on various media.

A common ID is an ID for bundling a plurality of services and a plurality of media. For example, a user can receive a plurality of services with one medium, or can receive a plurality of services by properly using a plurality of media. As another example, in a situation where multiple services linked to a common ID are linked to multiple media, giving one of the media to a certain user and giving another medium to another user , multiple users can share services linked to a common ID.

The usable service ID is an ID representing the type of service, and indicates the content of the service that can be used by a certain common ID. Such a service ID may be held by the rights management system 1100, in which case an inquiry is made to the rights management system 1100 using the common ID as a key.

The number of users indicates the number of users who can use the service, and is set for each service ID. If a value of 2 or more is set, it is possible to link media within the range of that value, and it is assumed that each medium will be distributed to separate users. Also, if it is set to 1, there is no limit to the number of linked media, but it is assumed that one user will use a plurality of media separately. Here, it is conceivable that a plurality of users use a plurality of media separately. In this case, if each user has information on the allocated medium, the method disclosed below can be applied.

A medium ID is an ID for identifying each medium, and when an ID sent from the operator terminal 1500 or user terminal 1400 matches this ID, the corresponding service can be used.

The medium type defines what kind of medium the medium having the medium ID is. Types of media, such as media and mobile terminals owned by users, are described.

FIG. 4 shows an example of the terminal definition information 1002 table.
It consists of a service ID for identifying a service, a terminal ID for using each service, and a terminal position indicating the position of each terminal.
The service ID is an ID for identifying the service type as described above, the terminal ID is an ID corresponding to the operator terminal 1500 and the user terminal 1400, and the terminal position indicates a position on the map such as latitude and longitude. Information is provided.

FIG. 5 shows an example of the usage history information 1003 table.
Common ID, medium ID used for use linked to the common ID, service ID used for the use linked to the common ID, usage time history of the use, location history of the use, and detection setting information In 1004, whether or not the special medium specified for each service was used is recorded as a history. By using such history information, it is possible to understand what kind of behavior or behavior a single user or a group of users was doing, and to perform fraud detection by applying behavior patterns at the time of unauthorized use from this history information. reduce risks for both users and operators.

The common ID is an ID used for linking the service ID and the medium ID, and is information on the history of which common ID has been used as the core information of service use. The medium ID is history information indicating which medium has been used. The used service ID is history information indicating which service has been used. The usage time history is information representing the time when the usage occurred. The place-of-use history is information representing the place where the item was used.

FIG. 6 shows an example of a table of the detection setting information 1004. As shown in FIG.
Service ID set by each operator, designation of special media designated as having sufficient security, minimum number of people in a group when used by multiple users, allowable range of usage time differences between users when used by multiple users, This includes the allowable range of mutual usage distances when multiple users use the media, and the allowable movement speed of users when a single user uses multiple media.

By setting such a value, for example, when multiple people hold different media and share multiple services through a single common ID, it is possible to prevent the media from being used at a location away from the group due to theft of the media, etc. or ignoring group unity and using media with more than the specified number of people. In addition, even in cases where a single user uses several media separately, it is also possible to prevent events such as leaving the single user's hand and being used in a manner different from the service assumptions of the user or business operator. .

Such a detection setting can be set by designating a service ID, and in addition, assuming use across services, when the service ID is blank, it is possible to perform general setting that does not depend on a specific service. A service ID is an ID for uniquely specifying a service determined by a service provider.

A special media designation is a media type that is determined by a service provider and can be considered safe. For example, if the criterion for safety is based on the success or failure of identity verification (if the media is defined as safe if the person in question is using it), specify media that use biometric authentication such as finger authentication and face authentication as special media. is considered to be

The minimum number of people in a group is information that determines how many of the group users are collectively regarded as a group. It is used for judgment such as deeming.

Also, when the minimum number of people in a group is set to 1, it means that group use is not performed. This information can be defined by the business, but depending on the design of the service, the user may set it within the range specified by the business.

The allowable movement speed is used to confirm whether or not each medium linked to one common ID is being used by a large number of people when one user receives services using a plurality of media. For example, if a user uses medium A at a certain point and then uses medium B in a distant place, it is assumed that the user has moved at high speed or that some kind of fraud has been committed. The speed is set to what degree can be regarded as appropriate. This information can be defined by the business, but depending on the design of the service, the user may set it within the range specified by the business.

The permissible time span is a criterion for judging whether or not group members are close to each other when using a group and are acting together. This information can be defined by the business, but depending on the design of the service, the user may set it within the range specified by the business.

The permissible range of distance is a criterion for judging whether group members are close to each other when using a group and whether they are acting together. This information can be defined by the business, but depending on the design of the service, the user may set it within the range specified by the business.

FIG. 7 shows an example of a screen for setting detection setting information 1004 .
The setting screen 7100 has a screen 7100 for general setting and a screen 7200 for setting for each service. This screen is mainly used by operators who define and set up services. However, given that users have a certain degree of freedom depending on their usage style, the minimum number of people in a group, the allowable travel speed, the allowable time span, and the allowable distance range should be determined in consideration of the risks of both operators and users. It may be adjustable.

The general setting 7100 is for setting the general setting part of the detection setting information 1004 . Since the general settings 7100 do not depend on the service ID, it is possible to set the special medium specification, the minimum number of people in the group, the allowable movement speed, the allowable duration, and the allowable distance in the detection setting information 1004 .

The setting for each service 7200 is a screen for setting the detection setting information 1004 for each service, and has a preset call button in addition to each item of the detection setting information. The preset call buttons are divided into items such as mobile service and stay service. In mobile services, the allowable time span is set to a small value in consideration of the pattern that groups often use the same mobility. In addition, stay-type services can be used within certain premises such as theme parks and lodging facilities, so the allowable range of distance is set small, and the setting pattern can be customized according to the nature of the service.

An operation for fraud detection in the embodiment will be described with reference to FIG.
This operation is performed by the fraud detection unit 1006 . In this operation, a case in which a plurality of media are allocated to each person and used by a group, and a case in which a single user uses a plurality of media separately are described separately. However, if it is assumed that each member of the group will hold a plurality of media, the process of step 8107 may be performed for each individual.

Step 8101 is an operation for receiving the terminal ID and medium ID, and receives the terminal ID transmitted from the operator terminal 1500 and user terminal 1400 and the medium ID of the medium read by the operator terminal.

Step 8102 is an operation to determine whether or not the service can be used from the rights information 1001 and the terminal definition information 1002. The rights information 1001 is searched using the medium ID received in step 8101, and an operation to find a usable service ID; Similarly, it includes an operation of searching the terminal definition information 1002 using the received terminal ID and searching for the service ID. If the service ID retrieved from the terminal definition information 1002 matches the service that can be used in the right information 1001 retrieved in this way, it is determined that the service is available.

Step 8103 is a step of judging whether or not there is a usable service in the judgment of step 8102. If there is a usable service, the process proceeds to the next step. End the process.

Step 8104 is an operation to read the usage history information 1003 and the detection setting information 1004. For the usage history information 1003, the common ID information is searched from the medium ID, the history information linked to the common ID information is searched, and the , the detection setting information 1004 defined by the provider or user is read. In the following steps, determination is made using the retrieved information.

Step 8105 is an operation for determining whether or not the medium is a special medium-designated medium. Then, search the detection setting information 1004, acquire the content of the special medium designation in the service ID, and if it matches the medium type acquired from the medium ID, proceed to step 8106; move on. With this operation, it is possible to specify that the check is not performed according to the service regulations for media such as biometric authentication that are difficult to be illegally used.

Step 8106 is an operation for determining whether or not the number of users is one. The right information 1001 is searched using the medium ID as a key, and determination is made from the number of users linked to the common ID. If the number of users is one, proceed to step 8107; otherwise, proceed to step 8108.

Step 8107 is an operation for determining whether the speed is below the permissible speed. Use history information is obtained by retrieving the terminal definition information 1002 using the time of use and the terminal ID as keys, and the terminal position and medium ID as keys. 1003. This includes a process of obtaining an approximate travel speed by using the latest use time history and use place history at that time for all medium IDs linked to the common ID obtained by searching 1003 .

This moving speed is compared with the allowable moving speed in the detection setting information 1004. If the moving speed is equal to or less than the allowable moving speed, the process proceeds to step 8112. If the moving speed exceeds the allowable speed, the process proceeds to step 8111. By performing this operation, in a service where the number of users is stipulated as one, multiple people using separate media and sharing rights, and illegal use of one of the media held by legitimate users It is possible to prevent an operation such as interception of rights information when it is lost.

Step 8108 is an operation to determine whether or not there is a history of the group minimum number of people or more, and is an operation of confirming whether or not there is a history of the minimum number of people described in the detection setting information 1004 defined for each service ID. be. If the minimum number of people remains in the history, proceed to step 8109; otherwise, proceed to step 8112. This is because if the group does not have the same number of people, the history information cannot be compared.

Also, even when the history information is sufficiently complete, when another use starts again after the group members have finished using the system, it is possible to divide the use appropriately and re-determine the history.

Step 8109 is an operation for judging whether or not the difference from the most recent time is within the permissible time width or not. It is a judgment. For example, if two people are defined as a group, the time difference between the two media is determined, and if there are three people, it is determined whether or not the two with the most distant use times of the three media are within the range. to decide.

In such determination, general checks can be set regardless of the service ID, and it is also possible to define a specific service ID. As a result of determination, if the usage of multiple media linked to the same common ID in the usage history information 1003 is within the fixed time, the process proceeds to step 8110; otherwise, the process proceeds to step 8111.

Step 8110 is an operation for judging whether or not the difference from the nearest location is within the range of the allowable distance width, and similarly to the previous step, detection setting is made to determine whether or not the distance of the use location of a plurality of people defined as a group is within the allowable range. The determination is made based on the allowable distance width value of the information 1004 . As a result of this determination, if the difference from the nearest location is equal to or less than the allowable distance width, the process proceeds to step 8112; otherwise, the process proceeds to step 8111.

Step 8111 is an operation to issue an alarm to the user or business operator, and is executed when it is determined that there is a possibility of unauthorized use as a result of the determination, and this flow ends after execution. At this time, the output destination of the alarm can be assumed to be the registered user or the display on the business terminal 1500 when using the medium.

Step 8112 is an operation for recording a usage history, which is executed when no problem is found as a result of fraud detection. Fill in the media usage using the information referenced in the previous step.

According to the above-described embodiment, it is possible to reduce the security risk when using a plurality of rights information registered with a certain ID on a plurality of media.

1000 common ID fraud detection system 1001 right information 1002 terminal definition information 1003 usage history information 1004 detection setting information 1005 detection setting unit 1006 fraud detection unit 1007 alarm notification unit 1100 rights management system 1200 user terminal 1300 business operator terminal 1400 user terminal 1500 business operator Terminal 1600 Setting terminal

Claims (7)

A multiple media utilization system that uses multiple services and multiple media tied to a single ID,
a fraud detection unit that detects fraud of the user based on the user's action or behavior history;
an alarm notification unit that notifies a predetermined alarm when the fraud detection unit detects the fraud;
a right information table for storing right information, a usage history information table for storing usage history information, and a detection setting information table for storing detection setting information;
The rights information table is
storing a plurality of said services, a plurality of said media and the number of users of said users associated with said single ID;
The usage history information table is
storing the medium ID, service ID, time of use, and place of use associated with the single ID;
The detection setting information table includes:
Storing a service ID, minimum number of people in a group, allowable travel speed, allowable duration and allowable distance as detection setting information for detecting unauthorized use of the medium,
The fraud detection unit
A plurality of media, characterized in that the action or behavior of the user is determined by referring to the right information table, the usage history information table, and the detection setting information table, and fraudulent use of the user is detected. system of use. The fraud detection unit
When the plurality of users use the separate media to use the plurality of services linked to the single ID, the plurality of users use the service at a predetermined distance and at a predetermined time. By detecting that the plurality of users belong to a predetermined group,
2. The multiple media utilization system according to claim 1, wherein said fraud is detected when said user belonging to said group has taken said action deviating from said group. The fraud detection unit
When one user uses the service using a plurality of the media, the place where the service is used and the moving speed are calculated based on the usage history of the plurality of media, and the user's determining said behavior;
2. The multiple media utilization system according to claim 1, wherein said fraud is detected when it is determined that the same person is not using the system based on said behavior of said user. further comprising a detection setting unit for setting the detection setting information;
The fraud detection unit
Each time the medium is used, the behavior or behavior of the user is determined using the detection setting information, and fraudulent behavior of the user is detected based on the history of the behavior or behavior of the user. death,
The alarm notification unit
2. The multiple media utilization system according to claim 1 , wherein when said fraud detection unit detects said fraud, it notifies said user of the detection result of said fraud as said predetermined alarm. A multiple media usage method using multiple services and multiple media tied to a single ID,
a fraud detection step of detecting fraud of the user based on the user's action or behavior history;
an alarm notification step of notifying a predetermined alarm when the fraud is detected by the fraud detection step;
has
having a rights information table for storing rights information, a usage history information table for storing usage history information, and a detection setting information table for storing detection setting information,
The rights information table is
storing a plurality of said services, a plurality of said media and the number of users of said users associated with said single ID;
The usage history information table is
storing the medium ID, service ID, time of use, and place of use associated with the single ID;
The detection setting information table includes:
Storing a service ID, minimum number of people in a group, allowable movement speed, allowable duration, and allowable distance as detection setting information for detecting unauthorized use of the medium;
The fraud detection step includes:
A plurality of media characterized by referring to the right information table, the usage history information table, and the detection setting information table to determine the behavior or the behavior of the user and detect fraudulent activity of the user. How to Use. The fraud detection step includes:
When the plurality of users use the separate media to use the plurality of services linked to the single ID, the plurality of users use the service at a predetermined distance and at a predetermined time. By detecting that the plurality of users belong to a predetermined group,
6. The method of using multiple media according to claim 5 , wherein said fraud is detected when said user belonging to said group has taken said action deviating from said group. The fraud detection step includes:
When one user uses the service using a plurality of the media, the place where the service is used and the moving speed are calculated based on the usage history of the plurality of media, and the user's determining said behavior;
6. The method of using multiple media according to claim 5 , wherein the fraud is detected when it is determined that the same person is not using the media based on the behavior of the user.

Images