JPH04153860A - Secret code information system for terminal in home trade system - Google Patents

Abstract

PURPOSE:To increase the reliability and to eliminate the need for dialing for specifying the terminal from a center side by making a security check on a communication request, which is made from the terminal before the center informs the terminal of a secret code, by using the telephone number of a member in addition to the membership number and password number. CONSTITUTION:The telephone number is also set in addition to the membership number and password number at the time of an initial registration request from the terminal 16 to the center. Therefore, the number of digits of security check object information increases greatly, so it becomes extremely difficult to illegally generate the information. Consequently, the dialing for specifying the terminal 16 from the center is not necessary, the need for transmission facilities for it is eliminated, and the hardware quantity and cost are reducible.

Description

[Detailed Description of the Invention] [Summary] This invention relates to a method for securely notifying a secret code for use in transactions from a center to a terminal in a home trading system.

To notify the secret code to the device.

The purpose is to eliminate the need to connect the line by dialing from the center to the terminal.2 The user registers the user's membership number, PIN number, and telephone number at the center in advance, and the user can use the center to start using home trading. When you transfer your initial registration to , please provide your membership number,
The center sends a message requesting initial registration, including the PIN and phone number (each data), and the center compares the user's member number 3 PIN and phone number in the message with those registered in advance, and confirms that they are valid. In this case, the secret code 1 assigned to the user is returned to the terminal via a telegram, and the second terminal stores the secret code in the received telegram in a predetermined area for use in future trading transactions. It was configured as follows.

[Industrial application field]

The present invention is a home trade system.

Relates to a method for securely notifying a σ secret code from a center to a terminal for use in transactions.

[Conventional technology]

In recent years, OhmTrade, which conducts various transactions from home via communication using computers, Captains, Famicoms, etc., has become active, but currently the C person f1 authentication method uses a membership number and PIN entered by the user. The number made me laugh. Therefore, if a third party were to know the member number and PIN number, it could easily be misused.

Therefore, we set up a secret code that is processed only in the hardware between the terminal and the center without informing the user, and first the terminal makes an initial registration request to the center, and then the terminal is identified by the line connection from the center. Send the secret code to that device, it will memorize it,
For future trades, a secret code will be added to the message and sent to the center, which will use it as one of the check information. However, this method of notifying the secret code by connecting the line from the center requires communication equipment and line for secret code notification on the center side, which is separate from the normal trading communication equipment and line, which is an economical problem. was there.

FIG. 5 is a block diagram of a conventional home trading terminal.

In Fig. 5, ■ is the main body of the terminal, 2 is the MPU that executes processing according to the program, 3 is the ROM/RAM memory card in which the program is stored, 4 is the RAM where the program work area is placed, and 5 is the key band. 6 is an input control unit that receives input data from the keypad received by the light receiving unit; 7 is a sound/display control unit that outputs audio signal display signals to the television; 8 is a telephone and a telephone; A line control unit that is connected to the line and performs line control, 9
A VRAM 10 that stores secret codes is a remote keypad that inputs data and commands such as telephone numbers, membership numbers, pin numbers, trade details, etc., and a television 11 that displays input data and response information from the center.

FIG. 6 is an explanatory diagram of conventional home trade processing performed using a home trade terminal as shown in FIG. 5.

The home trade processing includes membership contract processing (I) in which the user signs a contract to become a member of the home trade system;
Initial registration processing (n), which performs initialization processing such as embedding a secret code so that the terminal used by the user can be used as a home terminal, and trading processing (1), which involves sending trade information from the terminal to the center and requesting a trade. It is divided into three parts.

(1) In membership contract processing, the user creates a membership application document and sends it to the center. In the document.

The user's PIN number, phone number, etc. are entered. The center will accept documents for membership applications.

In addition to assigning a membership number to the user and notifying the user in one document,
Generate a secret code and create an account in the management file. The account has a membership number, pin number, phone number, and secret code registered, and an area for storing trade details. A secret code is randomly selected for each member.

The reason why the secret code is not notified to the user in writing at this time is to eliminate the need for the user to know the secret code in order to increase confidentiality. Let the device automatically retrieve it.

(II) In the initial registration process, the user dials from a terminal, connects a line with the center, enters the membership number, creates an initial registration message requesting a secret code, and sends it to the center.

After transmitting this message, the terminal disconnects the line.

When the center receives the initial registration message, it extracts the member number from the message, reads the phone number of the terminal from the corresponding member's account in the management file, dials it, and reconnects the line with the terminal.

Identify your device by phone number. Next, read the secret code from your account, create and send a secret code message. The terminal extracts the secret code from the received message and stores it in its internal memory.

Once the initial registration is performed in this manner, trading processing can be started at any time.

In the trade processing (I[[), the user dials from the terminal, connects the line with the center, enters the member number, PIN number, and trade details, reads the secret code from the memory, and sends the trade information telegram. Create and send to the center. The center refers to the corresponding account in the management file based on the member number in the received message, and matches it with the member number, PIN, and secret code in the message.

If the verification results match and it is recognized as legitimate, the trade content in the message is checked, and if it is legitimate, the trade is approved and stored in the trade content area of the account, and the trade response is notified of the result of the trade processing. Create an information telegram and send it to the terminal. When the terminal receives the message, it disconnects the line and displays the response information.

[Problem to be solved by the invention]

The conventional method of notifying the secret code to the terminal is that after the user sends the membership number and PIN from the terminal to the center, the center must identify the terminal by disconnecting the -Hoshi line and having the center dial the number again. It connected the terminal to the line by ringing, and after confirming the terminal, a secret code was sent. This is because in the conventional method, it was not possible to increase the number of digits in the PIN using the membership number and PIN that the user had.
If you fix the member number and repeat the process while changing the PIN, it is relatively easy to get a match, but there was a risk that the secret code would be known to a third party, so apart from the line connection made from the terminal, the center This is because it was necessary to confirm the terminal by dialing the terminal again.

This method required the center to have communication equipment and a dedicated incoming line used for normal trading, as well as communication equipment to enable dialing from the center and an outgoing line.

An object of the present invention is to eliminate the need for a line connection by dialing from a center to a terminal in order to notify the terminal of a secret code.

[Means to solve the problem]

The present invention improves credibility by performing a security check on communication requests made from the terminal using the user's telephone number in addition to the user's membership number and PIN number before the center notifies the terminal of the secret code. This eliminates the need for dialing to identify the terminal from the 5 center side.

FIG. 1 is a diagram explaining the principle of the present invention.

In FIG.

12 is processing on the user side.

13 is the processing on the 5 center side.

14 is a membership contract request document.

15 is a management file.

16 is a terminal.

Further, (1) in FIG. 1 is a membership contract process, (■) is an initial registration process, and (■) is a trade process.

In the membership contract process (1), the user requests a membership contract from the center using a membership contract request document 14 in which a password and telephone number are written. The center accepts membership, assigns a membership number and notifies the user, generates a secret code, and stores a PIN number for each membership number in the management file I5.

Create an account with a phone number, secret code and trade details area.

In the initial registration process (n), the user 5 calls the center and enters his/her own telephone number along with the membership number and password into the terminal 16, or reads out his/her own telephone number pre-stored in the terminal and initializes. Create an initial registration message requesting registration and send it to the center. When the center receives the initial registration message from the terminal, it reads the member account from the management file 15 using the member number, and! The PIN number and phone number in the text are checked, and if they match, a secret code notification message is created using the same line connection and sent to the terminal. The terminal extracts the secret code from the received message and stores it in a predetermined area.

(Illf) trade processing, the user calls the center, enters the membership number, PIN number, and trade details into the terminal 16, and creates a trade information telegram requesting a trade with the stored secret code added. , send to the center.

At the center, management file 15 will be sent from the membership number in the message.
Reads the member's account, checks the member number, pin number, and secret code, and if they match, checks the requested trade details, and if valid, approves the trade, stores it in the trade details area, Creates a trade response information telegram that notifies the processing results and sends it to the terminal.

Thereafter, the same process is repeated every time a trade is made.

[Effect]

According to the present invention, during the initial registration process from the terminal to the center, the center verifies the terminal by checking the membership number and telephone number (
For example, 11 digits are used), so it is possible to maintain sufficient security and eliminate the need for dialing to identify the terminal from the center as in the past. .

〔Example〕

The present invention will be explained in detail with reference to FIGS. 2 to 4.

FIG. 2 shows the format of the message used in the embodiment of the present invention. Figure (a) is the initial registration message format,
It consists of the following fields: text type (00), membership number, reserve, password, and talk number. Figure (b) shows the secret code notification message format, where the message type (
01), membership number, reserve, pin number, and secret code fields. Figure (C) shows the trade information telegram format, which includes text type (10), membership number, reserve, PIN number, and trade information (trade content).
Consists of each field of the secret code. Figure (b)
is the trade response information telegram format.

Message type (11), membership number, Reserve 5 PIN number.

Consists of trade response information.

FIG. 3 is a flow diagram of a program that performs home trade processing on the terminal side. When the user enters a command requesting initial registration, the user then enters the membership number 2 and password 2, which are input by key, and enters the phone number, as shown in Figure 2 (
Assemble a message according to the initial registered message format in a) and send it to the center. Next, wait to receive the secret code notification message, and when you receive this message, ! We will check the membership number and PIN in the message, and if they match the user's membership number and PIN, we will determine that the message is legitimate.
Take out the secret code from it.

It is stored in a predetermined area of memory and ends.

Next, when the user inputs a command requesting a trade, the user inputs the membership number, password, and trade details, reads the secret code from the memory, and enters the 211th A message is assembled according to the trade information message format shown in (C) and sent to the center. Thereafter, the system waits for the trade response information message to be received, and when this message is received, the member number and password in the message are checked, and if they are valid, the trade response information is retrieved and displayed on the screen.

The fourth issue is a flow diagram of a program that performs home trade processing on the center side.

If you receive an initial registration message, please include your membership number in the message,
Check the phone number and password, and if it is valid, use the membership number, pin number, and secret code as shown in Figure 2 (b).
Assemble a seat talent code notification message for l and send it to the terminal.

In addition, if the center receives a trade information telegram,
Extract the member number in the message, refer to the corresponding account in the management file, check the member number, PIN, and secret code in the message, and if it is valid, extract the trade information in the message and enter the trade details area of the management file. Then, using the trade processing result, membership number, and password, a message is assembled according to the trade response information message format shown in FIG. 2(d) and sent to the terminal.

[Effects of the Invention] According to the present invention, by transmitting a telephone number in addition to the member number and PIN number during the initial registration message from the terminal to the center, the number of digits of information subject to security checks can be significantly increased. Therefore, it is extremely difficult to create one illegally, so there is no longer a need for dialing to identify a terminal from a center as in the past, and there is also no need for transmission equipment for that purpose, which reduces the amount of hardware and costs. It is possible to reduce the

[Brief explanation of drawings]

Fig. 1 is an explanatory diagram of the principle of the present invention, Fig. 2 is an explanatory diagram of a message format according to an embodiment of the present invention, Fig. 3 is a flow diagram of home trade processing on the terminal side, and Fig. 4 is a diagram of home trade processing on the center side. FIG. 5 is a block diagram of a conventional home trading terminal. FIG. 6 is an explanatory diagram of conventional home trade processing. In Figure 1. 12 is processing on the terminal side 13 is processing on the center side 14 is membership contract request document 15 is a management file 16 is on the terminal

Claims (1)

[Claims] A trade request message consisting of the user's membership number, PIN number, secret code, and trade details is sent from the terminal to the center via a telephone line, and the center receives the user's membership number in the message. In the home trading system, the user's membership number, PIN, and telephone number are registered at the center in advance, and the user's home When making an initial registration request to the center to start using trading, please provide your membership number,
A message requesting initial registration including the PIN and phone number data is sent to the center, and the center compares the user's membership number, PIN and phone number in the message with those previously registered and confirms that they are valid. , the secret code assigned to the user is sent back to the terminal via telegram, and the terminal stores the secret code in the received telegram in a predetermined area for use in subsequent trade requests. Secret code notification method to terminals in trading systems.