KR20160002529A - method of data processing for security-improved providing of order information, method of data processing for security-improved inquiring of order information, and readable recording medium thereof. - Google Patents

Abstract

According to an embodiment of the present invention, disclosed is an information processing method for providing security-improved order information. The information processing method for providing security-improved order information comprises the following steps of: outputting a purchase order including at least one part of order information and from which detailed information about the order information is skipped to a product supply company system; receiving an authentication request including authentication information for inquiring of the detailed information from a security authentication company system distinguished from the product supply company system which receives the purchase order; performing an authentication using the authentication information; and outputting the detailed information when the authentication is approved according to a result of the authentication or outputting an error message when the authentication is failed.

Description

TECHNICAL FIELD The present invention relates to an information processing method for providing security-enhanced order information, an information processing method for security-enhanced ordered information inquiry, and a computer-readable recording medium for security-improved inquiring of order information, and readable recording medium thereof.

An information processing method for providing order information with enhanced security, an information processing method for security-enhanced order information inquiry, and a computer-readable recording medium.

Recently, electronic commerce such as internet shopping has been activated and the purchase of commodities by home shopping channels has been increasing. When a purchaser purchases a commodity using electronic commerce, the purchaser provides the address of the commodity to be shipped to the seller and his / her contact, and the seller uses the courier service to deliver the commodity to the purchaser. Is used as a method. Buyers who do not have time to visit the place where they sell their products can easily purchase goods using e-commerce.

As such, the e - commerce environment can improve human convenience, but it can cause a lot of social problems. For example, personal information of a buyer collected to deliver a product is leaked out to be used commercially or causing economic damage, so that anxiety of e-commerce users is increasing.

On the other hand, JP2002-0010002 discloses a method of notifying the user of the connection of the Internet portal service to the user's account in order to prevent personal information of the user of the Internet portal service from being leaked.

(Patent Document 1) Korean Patent Publication No. 2002-0010002

Embodiments of the present invention provide an information processing method for providing security-enhanced order information, an information processing method for security-enhanced order information inquiry, and a computer-readable recording medium. It is to be understood that the technical scope of the present invention is not limited to the above-described technical problems, and other technical problems may be deduced from the following embodiments.

An embodiment of the present invention provides a method of providing an order, comprising: outputting a purchase order including at least a part of order information, the order information missing detailed information from the order information to a goods supplier system; Receiving an authentication request including authentication information for inquiring the detailed information from a security authentication system distinguished from a goods supplier system that receives the purchase order; Performing authentication using the authentication information; And outputting the detailed information when the authentication is successful according to a result of the authentication and outputting an error message if the authentication fails. do.

Another embodiment of the present invention is a method for receiving order information, comprising: receiving a request for detailed information of order information from a delivery company system; Generating authentication information for inquiring the detailed information from a server, and requesting the server for authentication using the authentication information; Receiving an authentication result including the detailed information or an error message from the server in response to the authentication request; And outputting the detailed information when the authentication result includes the detailed information, and outputting the error message when the authentication result includes the error message. An information processing method is disclosed.

There is provided a computer-readable recording medium storing a program for causing a computer to execute the information processing method according to another aspect of the present invention.

Other aspects, features, and advantages will become apparent from the following drawings, claims, and detailed description of the invention. These general and specific aspects may be implemented by using a system, method, computer program, or any combination of systems, methods, and computer programs.

The information processing method for providing order information according to embodiments of the present invention provides detailed information requiring high security among the order information through a separate authentication system so that the risk of personal information leakage is reduced and security is improved.

The information processing method for order information inquiry according to the embodiments of the present invention acquires detailed information requiring high security from the order information through a separate authentication system and provides the information to the delivery company system so that the risk of leakage of personal information is reduced, .

According to the electronic commerce system according to the embodiments of the present invention, the order detail information is inquired through the security authentication system having the authentication system even if there are multiple commodity supplier systems, so that the management of the authentication system is easy and security is improved.

1 illustrates an electronic commerce system according to an embodiment of the present invention.
FIG. 2 illustrates an information processing apparatus 100 for providing order information according to an embodiment of the present invention.
FIG. 3 illustrates an information processing apparatus 400 for inquiring order information according to another embodiment of the present invention.
4 is a flowchart illustrating an information processing method of an electronic commerce system according to an embodiment of the present invention.
5 is a flowchart illustrating an information processing method of an electronic commerce system according to another embodiment of the present invention.
6 is a flowchart of an information processing method for providing order information according to an embodiment of the present invention.
7 is a flowchart of an information processing method for inquiring order information according to another embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention is capable of various modifications and various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. The effects and features of the present invention and methods of achieving them will be apparent with reference to the embodiments described in detail below with reference to the drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings, wherein like reference numerals refer to like or corresponding components throughout the drawings, and a duplicate description thereof will be omitted .

In the following embodiments, the terms first, second, and the like are used for the purpose of distinguishing one element from another element, not the limitative meaning. In the following examples, the singular forms "a", "an" and "the" include plural referents unless the context clearly dictates otherwise. In the following embodiments, terms such as inclusive or possessive are intended to mean that a feature, or element, described in the specification is present, and does not preclude the possibility that one or more other features or elements may be added.

1 illustrates an electronic commerce system according to an embodiment of the present invention.

1, an electronic commerce system according to an embodiment of the present invention includes a server 10 and a goods supplier system 20, a delivery company system 30, and a security And an authenticator system 40. The goods supplier system 20, the delivery company system 30, and the security certificate system 40 can communicate with each other through a communication network.

The electronic commerce system according to one embodiment provides an online shopping service. The server 10 according to an embodiment provides a web service for online shopping and outputs an order book according to a customer's order history. The merchandise supplier system 20 according to an embodiment requests an invoice output to the delivery company system 30 when the purchase order is received from the server 10. The delivery company system 30 receives an invoice output from the goods supplier system 20, generates an invoice number, and outputs the generated invoice number to the goods supplier system 20 to deliver the goods. Here, the order form is a document that describes the item name, quantity, specification, amount, etc. of the product to be shipped and sends it to the supplier of the product by describing the address to be delivered, the date of delivery, the delivery condition and the payment condition. In this specification, the purchase order document refers to a document generated by the server 10 providing the electronic commerce web service to deliver the order details received from the customer to the goods supplier system 20.

The e-commerce system according to an embodiment provides an enhanced online shopping service. According to an embodiment of the present invention, order information output from the server 10 may include order information, and the order information may be missing detailed information. The server 10 may provide order information to the goods supplier system 20 while omitting detailed information related to the customer's personal information. In this case, the delivery company system 30 may request the security certificate system 40 to inquire the detailed information in order to acquire the missing detailed information. The security authentication system 40 according to an exemplary embodiment of the present invention includes an authentication system with the server 10 and requests authentication to request detailed information from the server 10 through the authentication system. It is possible to acquire detailed information from the terminal 10. The security certificate system 40 transmits the acquired detailed information to the delivery company system 30, the delivery company system 30 generates an invoice number for delivery using the detailed information, And outputs it to the supplier system 20.

According to the present embodiment, since detailed information of order information is inquired only through the security authentication system 40 having the authentication system with the server 10, security for order information, in particular, detailed information is strengthened. The detailed information may be related to the personal information of the customer such as the address and the contact of the customer, but is not limited thereto, and various information requiring security may be treated as detailed information. Meanwhile, the electronic commerce system according to an embodiment of the present invention may be configured to include a plurality of commodity supplier system 20, and in this case, detailed information can be inquired only through one security certificate system 40 . According to this, the path for inquiring the detailed information regardless of the number of the goods supply company system 20 is limited between the security authentication system 40 and the server 10, The possibility of leakage of detailed information compared with the case where the system is equipped is significantly reduced, and the authentication system can be easily managed. However, the electronic commerce system according to an embodiment may include a plurality of security authentication system, and each security authentication system may have the same or different authentication system with the server. Even in this case, since the authentication system is operated separately from the goods supplier company system 20, the authentication system can be managed irrespective of the relatively variable goods supplier system.

Although not shown in the drawings, the server 10, the merchandise supplier system 20, the delivery company system 30, and the security authentication system 40 according to the embodiment may include a memory, an input / output unit, a program storage unit, A control unit, and the like.

The communication network serves to connect the server 10, the goods supplier system 20, the delivery company system 30, and the security certificate system 40. For example, the communication network provides a connection path so that the server 10, the goods supplier system 20, the delivery company system 30, and the security authentication system 40 can transmit and receive packet data to each other.

FIG. 2 illustrates an information processing apparatus 100 for providing order information according to an embodiment of the present invention. The information processing apparatus 100 according to an exemplary embodiment outputs an order book including order information in which detailed information is missing according to a purchase order of a purchaser, performs authentication according to an authentication request for inquiring detailed information, If authentication is successful, detailed information can be output. The information processing apparatus 100 according to the present embodiment may be provided on the server 10 side.

The information processing apparatus 100 shown in FIG. 2 shows only the components related to the present embodiment in order to prevent the characteristic of the present embodiment from being blurred. Accordingly, it will be understood by those skilled in the art that other general-purpose components other than the components shown in FIG. 2 may be further included.

The information processing apparatus 100 shown in FIG. 2 may correspond to at least one processor or may include at least one or more processors. Accordingly, the information processing apparatus 100 may be operated in a form contained in another hardware device such as a microprocessor or a general-purpose computer system.

2, the information processing apparatus 100 includes an order book output unit 110, an authentication request receiving unit 120, an authentication unit 130, an authentication result output unit 140, a database 150, . ≪ / RTI > The database 150 may store an order information list including order information for purchase of goods. The order information list may include a plurality of order information, and the order information may be provided corresponding to one product purchase or correspond to one purchase event (which may include a plurality of products) As shown in FIG. The order information may include an order number, a product name (or product code), a quantity, a specification, a name of a goods supplier, personal information of a buyer, and delivery information. The buyer's personal information may include one or more of a name, a customer code (e.g., ID), a telephone number, a date of birth, an email, and an address, and the shipping information may include one or more of the recipient's name, address, telephone number, . The server 10 can update the database 150 every time a new event occurs such as a purchase of a buyer of a buyer, a request for refund of a buyer of a buyer, or a purchase order is output to the goods supplier system 20. The database 150 may store a customer information list and each customer information may include a customer's customer code (e.g., ID), a customer's name, address, phone number, date of birth, email, address, The customer information list and the order information list can be stored in one or a separate database.

The order book output unit 110 according to an embodiment generates and outputs an order book including at least a part of order information. The purchase order can be transmitted to the goods supplier system 20. The purchase order book output unit 110 can generate an order book with reference to the database 150. [ For example, when the order book output unit 110 is requested to download an order form from the goods supplier system 20, it can inquire the order information corresponding to the goods supplier and generate and output the purchase order using the inquired order information.

The purchase order sheet output by the purchase order sheet output unit 110 is generated to include the order information as described above, but the order information included in the purchase order sheet may be missing detailed information. For example, the order book output unit 110 deletes or modifies detailed information from the order information inquired in the database 150, and generates and outputs an order book using the order information in which the detailed information is missing. The absence of the detailed information means that the detailed information is not completely included, and not only when the detailed information is completely deleted, but also when the detailed information is partially deleted or the detailed information is modified or modified, The original data of the < RTI ID = 0.0 > On the other hand, the purchase order document does not need to include all the items of the order information recorded in the database 150, and the purchase order output unit 110 can generate an order book using at least a part of the order information recorded in the database 150 . For example, the order information included in the purchase order may include an order identification number for identifying the order, a name or ID of the customer who created the order, a delivery address of the goods recipient, and a telephone number of the goods recipient. As part of this information, part of the recipient's shipping address and part of the recipient's phone number may be missing. For example, information on a delivery address that is less than a predetermined administrative unit may be excluded, and the last four digits of a telephone number may be excluded.

The authentication request receiving unit 120 receives an authentication request from the security authentication system 40 to inquire detailed information. The authentication request includes authentication information for inquiring detailed information. The authentication information may be generated by using the order information described in the purchase order document of the security certificate system 40. For example, the authentication information may be generated using the name of the goods recipient included in the order information, and the order identification number. According to one embodiment, the purchase order sheet may include modified detailed information, in which case the authentication information may be generated using the modified detailed information. Meanwhile, the security authentication system 40 is a system separate from the goods supplier system 20 that receives the purchase order from the server 10, and the order information described in the purchase order is directly or indirectly transmitted from the goods supplier system 20 .

The authentication unit 130 according to an embodiment performs authentication using the authentication information received from the security authentication system 40. [ The authentication may include a first inquiry step of inquiring, for example, whether or not order information matching the authentication information is in the database 150 corresponding to the authentication information. The authentication may include a second inquiry step of inquiring, in the database 150, whether or not the delivery corresponding to the inquired order information has been completed. The authentication includes a validation step of confirming whether the authentication information is valid data, a step of inquiring the number of times authentication has been performed using the authentication information, whether the authentication using the authentication information is permitted by the server 10 And a step of inquiring of the user. For the second inquiry, the order information stored in the database 150 may include shipping status information regarding the current shipping status of the order, and the second inquiry step may be performed by inquiring the shipping status information.

The authentication unit 130 determines whether or not the authentication is successful according to the result of the authentication step. For example, in the case where both the first inquiry step and the second inquiry step are performed, a method of determining success or failure of authentication will be described. The authentication unit 130 determines that the authentication is successful if the order information is inquired in the first inquiry step and the delivery status is not completed in the second inquiry step. The authentication unit 130 determines that the authentication fails if the order information is inquired in the first inquiry step and the delivery status is completed in the second inquiry step. The authentication unit 130 determines that authentication fails if the order information is not inquired in the first inquiry step.

The authentication result output unit 140 according to the embodiment may output detailed information or output an error message according to whether authentication of the authentication unit 130 is successful or not. When the authentication is successful, the detailed information is outputted by referring to the order information inquired according to the authentication information. For example, if the authentication is successful, the authentication result output unit 140 obtains the customer code included in the inquired order information, refers to the customer information list stored in the database 150 using the customer code, Acquire the information, and output the obtained detailed information. It goes without saying that the process of acquiring detailed information using the customer code may be performed by the authentication unit 130. [

If authentication fails, the authentication result output unit 140 outputs an error message. The error message may include a message indicating the cause of authentication failure. The authentication result output unit 140 may output an authentication inconsistency message when there is no order information matching the cause of the failure with the authentication information. When the cause of the failure has already been delivered, The controller 140 may output a delivery completion message. The authentication result output unit 140 may output an authentication token expiration message when the number of times that the authentication using the authentication information has already been performed exceeds the number of the authentication tokens. If the reason for the failure is that the server 10 has blocked the inquiry of order information, the authentication result output unit 140 may output an inquiry blocking message. However, it is needless to say that the authentication result output unit 140 may be configured to output an error message indicating that the authentication fails simply without a message indicating the authentication failure reason. The user can appropriately set the number of authentication tokens.

When the authentication result output unit 140 outputs an error message, the authentication result output unit 140 generates an event to notify that an unintended access has occurred from the outside.

According to another embodiment of the present invention, it is determined that the delivery has been completed by the second inquiry step or that the authentication has been performed by other steps performed separately, The security certificate system 40, the goods supplier system 20, or the delivery company system 30 can access and acquire detailed information through a special approval process. A separate web page with enhanced security may be provided. In order to inquire detailed information through the separate web page, a complicated process may be added, for example, a command for allowing detailed information to be inquired directly from the server 10 side.

FIG. 3 illustrates an information processing apparatus 400 for inquiring order information according to another embodiment of the present invention. The information processing apparatus 400 according to an embodiment generates authentication information in response to a request for detailed delivery information from the delivery company system 30, performs authentication through the authentication system with the server 10, After obtaining the detailed information, the obtained detailed information can be output to the delivery company system 30. [ The information processing apparatus 400 according to the present embodiment is provided in the security authentication system 40 side.

The information processing apparatus 400 shown in FIG. 3 shows only the components related to the present embodiment in order to prevent the features of the present embodiment from being blurred. Therefore, it will be understood by those skilled in the art that other general-purpose components other than the components shown in FIG. 3 may be further included.

The information processing apparatus 400 shown in FIG. 3 may correspond to at least one processor or may include at least one or more processors. Accordingly, the information processing apparatus 400 may be operated in a form contained in other hardware devices such as a microprocessor or a general-purpose computer system.

3, the information processing apparatus 400 includes a detailed information request receiving unit 410, an authentication requesting unit 420, an authentication result receiving unit 430, and a detailed information output unit 440 can do.

The detailed information request receiving unit 410 according to an embodiment receives a detailed information request of order information from the delivery company system 30. [ The request may include an order form and order information included therein.

In response to the request, the authentication request unit 420 generates authentication information for requesting detailed information from the server 10, and requests the server 10 for authentication using the authentication information. The authentication information may be generated based on the order information included in the purchase order received from the delivery company system 30. [ The authentication information may be generated based on a predetermined data format, for example, a format such as JSON or XML may be used. The authentication information includes an order number and a kind of detailed information to be inquired. When a part of the detailed information is included in the purchase order, the authentication information may include a part of the detailed information, for example, an address in which information below a predetermined administrative area unit is excluded, a telephone number excluding the last four digits, and the like. When simultaneously requesting the authentication of the detailed information about a plurality of orders, the total number of authentication requests can be transmitted to the server 10 together.

The authentication request unit 420 may access the server 10 through the communication network to request detailed information and may use a Secure Sockets Layer (SSL) protocol for communication with the server 10. SSL is an Internet protocol protocol developed by Netscape to allow secure transactions of information transmitted over the Internet. Accordingly, the security of communication between the authentication request unit 420 and the server 10 can be enhanced. The authentication request unit 420 may be configured to include a separate encryption and / or decryption function in order to maintain data security. However, the encryption and / or decryption function may be omitted according to the design of the system.

The authentication result receiving unit 430 according to an embodiment receives the authentication result from the server 10 in response to the authentication request of the authentication request unit 420. The authentication result includes the detailed information, Ali contains an error message. Here, the detailed information received from the server 10 may be composed of only a part of the detailed information. For example, when a part of the detailed information is included in the purchase order and the authentication information is generated based on the partial detail information, the detailed information received from the server 10 is composed of only the remaining part except for the part included in the purchase order . For example, when the purchase order includes a part of detailed information such as the address of the receiver whose information is less than or equal to a predetermined administrative zone unit, and the telephone number of the receiver whose last four digits are excluded, the detailed information received from the server 10 is May include information that is missing from the purchase order, such as information below a predetermined administrative area missing from the purchase order, and the last four digits missing from the order number of the recipient's telephone number.

The detailed information output unit 440 outputs detailed information when the authentication result includes detailed information, and outputs an error message or a corresponding message when the authentication result includes an error message. The detailed information output unit 440 may output the dispatcher information while outputting the detailed information. At this time, the dispatcher information may be the vendor information on the server 10. Since the entity that supplies the actual goods with respect to the order event may be the goods supplier but the entity that closes the transaction with the buyer is the server 10 side, You can notify the recipient that your order has been shipped through your order with the vendor.

4 is a flowchart illustrating an information processing method of an electronic commerce system according to an embodiment of the present invention. 4, there is shown a flowchart of an information processing method between the server 10, the goods supplier system 20, the delivery company system 30, and the security certificate system 40. [ 4 may be provided with the information processing apparatus 100 of FIG. 2, and the security authentication system 40 of FIG. 4 may include the information processing apparatus 400 of FIG. 3 , Contents described for the information processing apparatus 100 and the information processing apparatus 400 can be applied to FIG. 4 with reference to FIG. 2 and FIG.

Referring to FIG. 4, in step S41, the purchase order output unit 110 of the server 10 transmits the purchase order to the goods supplier system 20. At this time, order information may be included in the purchase order, but detailed information of the order information may be excluded. Although not shown in FIG. 4, the goods supplier system 20 may request the server 10 to transmit the purchase order before step S41. In response to the request, the server 10 inquires the order information for each company in the database, generates a purchase order including the order information of the vendor corresponding to the goods supplier system 20, and transmits the purchase order to the goods supplier system 20 .

In step S42, the merchandise supplier system 20 sends the purchase order to the delivery company system 30 and requests the invoice output. The merchandise supplier system 20 can send at least a part of the order information included in the purchase order. The goods supplier system 20 can perform step S42 by connecting to a service provided by the delivery company system 30 or by driving a program provided by the delivery company system 30 to select an order book and select an invoice output have.

In step S43, the delivery company system 30 requests the security authentication system 40 to inquire about the missing detailed information in the order information to generate an invoice. The delivery company system 30 can send the order book and the order information included therein to the security certificate system 40.

In step S44, the authentication requesting unit 420 generates authentication information for requesting authentication. For example, the security authentication system 40 may generate authentication information using the order information.

In step S45, the authentication request unit 420 of the security authentication system 40 requests detailed information using the authentication information generated in step S44.

The server 10 performs authentication using the authentication information. Steps S46 to S49 are the steps that follow when the server 10 succeeds in authentication. In step S46, the server 10 transmits the authentication result together with the detailed information to the security authentication system 40. [

The detailed information output unit 440 of the security authentication system 40 outputs the detailed information acquired in step S46 to the delivery company system 30 in step S47.

In step S48, the delivery company system 30 creates an invoice with reference to the detailed information. In step S49, the delivery company system 30 assigns an invoice number to the invoice and transmits the invoice number to the goods supplier system 20.

5 is a flowchart illustrating an information processing method of an electronic commerce system according to another embodiment of the present invention.

Since steps S41 to S45 in Fig. 5 are the same as those in Fig. 4, description thereof will be omitted.

Hereinafter, steps S51 to S54 show steps that follow when the server 10 fails to authenticate. In step S51, the server 10 transmits an error message notifying the security authentication system 40 to the authentication failure.

In step S52, the detailed information output unit 440 of the security authentication system 40 transmits an error message or a message corresponding to the error message to the delivery company system 30 to notify that the authentication has failed. The error message or the message corresponding to the error message may reflect the cause of the authentication failure. Therefore, the merchandise supplier system 20 can know the reason why the authentication failed through the error message. The error message may be predefined for unrestricted use in an electronic commerce system according to one embodiment.

In step S54, the goods supply company system 20 displays the contents of the error based on the error message.

6 is a flowchart of an information processing method for providing order information according to an embodiment of the present invention.

The flowchart shown in FIG. 6 is composed of the steps that are processed in a time-series manner in the information processing apparatus 100 shown in FIG. Therefore, the contents described above with respect to the configurations shown in Fig. 2 apply to the flow chart shown in Fig. 6, even if omitted from the following description.

Referring to FIG. 6, in step 61, the purchase order output unit 110 outputs a purchase order according to the purchase of a customer. The purchase order may be output each time a new purchase is made, but may be output every time a purchase order is requested from a goods supplier or periodically by querying a database. The purchase order information may include order information, but the order information may be missing detailed information.

In step 62, the authentication request receiving unit 120 receives an authentication request for inquiring the missing detailed information. The authentication request may be received from a third party security certificate company, which is distinguished from the goods supplier who has received the purchase order.

In step 63, the authentication unit 130 performs authentication using the authentication information. In step 64, the authentication unit 130 determines whether the authentication is successful, based on the result of one or more steps performed for authentication. If the authentication is successful, the process proceeds to step 65. If the authentication fails, the process proceeds to step 66. [

In step 65, the authentication result output unit 140 outputs detailed information. In step 66, the authentication result output unit 140 outputs an authentication failure message or a code.

7 is a flowchart of an information processing method for inquiring order information according to another embodiment of the present invention.

The flowchart shown in FIG. 7 consists of steps that are processed in a time-series manner in the information processing apparatus 400 shown in FIG. Therefore, the contents described above with respect to the configurations shown in Fig. 3 apply to the flow chart shown in Fig. 7, even if omitted from the following description.

Referring to FIG. 7, in step 71, the detailed information request receiving unit 410 receives a request from the delivery company system 30 to inquire detailed information. In step 72, the authentication request unit 420 generates authentication information for requesting detailed information, and transmits authentication information to the server 10 to request authentication. In step 73, the authentication result receiving unit 430 receives the authentication result from the server 10. In step 74, the detailed information output unit 440 determines whether the authentication is successful based on the authentication result. If authentication is successful, the detailed information output unit 440 proceeds to step 75 and outputs detailed information. On the other hand, if the authentication fails, the process proceeds to step 76 to output an error message or an error code.

According to the embodiments of the present invention, the server 10 provides the detailed information requiring high security through the separate authentication system among the order information, thereby reducing the risk of personal information leakage and improving security.

According to the embodiments of the present invention, the security authentication system 40 acquires detailed information requiring high security through a separate authentication step provided with the server 10 and provides the acquired information to the delivery company system, And the security is improved.

According to the e-commerce system according to the embodiments of the present invention, since the order detail information is retrieved through a single security authentication system equipped with the authentication system even when there are multiple commodity supplier systems, the authentication system can be easily managed and security can be improved do. However, the electronic commerce system according to the embodiments of the present invention does not necessarily have to have one security authentication system. For example, a plurality of security authentication system may be provided, and each security authentication system may have different authentication systems or may have the same authentication system. Even if a plurality of security authentication system are provided, the authentication system of each security authentication system is operated separately from the product supplier. Therefore, the server has a relatively large number of subscription / withdrawal, Operate, and manage.

According to the electronic commerce system according to the embodiment of the present invention, the merchandise supplier system 20 acquires the order information from which the customer's detailed information is excluded, and the security certificate system 40 acquires the order details Order information can be processed in a distributed manner, such as obtaining at least some information, thereby enhancing security of order information.

Meanwhile, the information processing methods shown in FIGS. 4 to 7 can be implemented in a general-purpose digital computer that can be created as a program that can be executed by a computer and operates the program using a computer-readable recording medium. The computer-readable recording medium includes a storage medium such as a magnetic storage medium (e.g., ROM, floppy disk, hard disk, etc.), optical reading medium (e.g., CD-ROM, DVD, etc.)

The present invention has been described with reference to the preferred embodiments. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

10: Server
20: Product supplier system
30: Delivery system
40: Security Certificate System
100: Information processing device
110: Purchase order output unit
120: authentication request receiver
130:
140: Authentication result output unit
150: Database
400: Information processing device
410: Detailed information request receiver
420: authentication request unit
430: Authentication result receiver
440: Detailed information output unit

Claims (14)

Outputting a purchase order including at least a part of the order information, wherein the order information is missing from the order information, to the goods supplier system;
Receiving an authentication request including authentication information for inquiring the detailed information from a security authentication system distinguished from a goods supplier system that receives the purchase order;
Performing authentication using the authentication information; And
Outputting the detailed information when the authentication is successful according to a result of the authentication, and outputting an error message if the authentication fails
Information processing method for providing security enhanced order information.
The method according to claim 1,
The detailed information includes at least one of a name of a goods purchaser or a recipient, a telephone number, an address, and a date of birth
Information processing method.
The method according to claim 1,
The order information includes a customer code for inquiring detailed information of a customer,
The step of performing the authentication includes:
And a first inquiry step of inquiring, in a database, order information corresponding to the authentication information,
The outputting step may output the detailed information based on the customer code included in the inquired order information when the authentication is successful
Information processing method.
The method according to claim 1,
The step of performing the authentication includes:
A first inquiry step of inquiring, in a database, order information matching the authentication information; And
And a second inquiry step of inquiring whether or not the delivery of the inquired order information is completed,
Wherein the outputting step comprises:
Outputting the detailed information when the order information is inquired by the first inquiry step and the delivery is not completed by the second inquiry step,
Outputting a delivery completion message when the order information is inquired by the first inquiry step and the delivery is completed by the second inquiry step,
And outputting an authentication inconsistency message when the order information is not retrieved by the first inquiry step
Information processing method.
The method according to claim 1,
Wherein the performing the authentication includes: inquiring the number of times authentication has been performed using the authentication information,
The outputting step may output the error message if the number of times of the inquiry is equal to or greater than a predetermined number of times
Information processing method.
The method according to claim 1,
Wherein the order information includes shipping status information regarding the current shipping status of the order,
The step of performing the authentication may include the step of inquiring the delivery status information of the order information matching the authentication information,
The outputting step may output the detailed information according to the delivery status information or output the error message
The method according to claim 1,
Wherein the purchase order includes at least a part of the missing detailed information,
Wherein the detailed information includes at least one of an address of the recipient from which information of a predetermined predetermined administrative zone unit or less is excluded and a telephone number of the recipient where some digits are excluded
Information processing method.
8. The method of claim 7,
Wherein the step of outputting includes the step of, when the authentication is successful, the information of the address of the recipient corresponding to a part of the detailed information missing from the purchase order, Output one or more
Information processing method.
Receiving a detailed information request of order information from the delivery company system;
Generating authentication information for inquiring the detailed information from a server, and requesting the server for authentication using the authentication information;
Receiving an authentication result including the detailed information or an error message from the server in response to the authentication request; And
Outputting the detailed information when the authentication result includes the detailed information, and outputting the error message when the authentication result includes the error message
Information processing method for security - enhanced order information inquiry.
10. The method of claim 9,
The detailed information includes at least one of a name of a goods purchaser or a recipient, a telephone number, an address, and a date of birth
Information processing method.
10. The method of claim 9,
Wherein the error message reflects the cause of the authentication failure according to the authentication result,
Wherein the error message includes a delivery completion message indicating that delivery has been completed, an authentication mismatch message indicating that order information corresponding to the authentication information is not present, an authentication token indicating that authentication using the authentication information has already been performed a predetermined number of times or more An expiration message, and an inquiry blocking message indicating that the inquiry of the order information corresponding to the authentication information is blocked
Information processing method.
The method according to claim 1,
Wherein the step of receiving the request comprises receiving a purchase order containing at least a portion of the missing information from the delivery company system,
Wherein the detailed information includes at least one of an address of the recipient from which information of a predetermined predetermined administrative zone unit or less is excluded and a telephone number of the recipient where some digits are excluded
Information processing method.
13. The method of claim 12,
The step of receiving the authentication result may further include the step of receiving, when the authentication is successful, the information of the address of the recipient corresponding to a part of the detailed information missing from the purchase order, Receive one or more digits
Information processing method.
A computer-readable recording medium storing a computer program for causing a computer to execute the method of any one of claims 1 to 13.

Images