WO2002021363A1

WO2002021363A1 - Settlement system

Info

Publication number: WO2002021363A1
Application number: PCT/JP2001/007704
Authority: WO
Inventors: Shinichi Naka; Yasuhiro Umemoto
Original assignee: Mallservice Inc; Shinichi Naka; Yasuhiro Umemoto
Priority date: 2000-09-07
Filing date: 2001-09-05
Publication date: 2002-03-14
Also published as: AU2001284436A1; JP2001076059A

Abstract

When individual information is sent from a user terminal (10), an authentication server (30) ciphers the individual information through a first cipher and sends it to the user terminal to allow the user terminal to store it therein. When an order of transaction by the user terminal is received over the Internet (20) through the ordered company, the authentication server (30) instructs the user terminal to confirm the content of the transaction and to send the ciphered individual information to the authentication server, deciphers the received information ciphers the information through a second cipher, and sends the individual information ciphered through the second cipher to a settlement server (40).

Description

Payment system technology

The present invention relates to a settlement system for conducting settlement of a commercial transaction via an Internet connection network. In recent years, with the spread of communication means such as mobile terminals, especially mobile phones that can be connected to the Internet, individual users can use a so-called electronic shop server via their Internet from a user terminal such as their mobile phone. Access the website established by

It has become possible to conduct business transactions such as scrutinizing the contents of products and services, and making purchases and contracts easily.

In conjunction with these trends, payment of goods and services generated by business transactions via the Internet is settled with payment institutions such as banks and credit companies in a manner involving the operation of the e-shop server. It is being done between. Here, a mechanism in which authentication and settlement processes are performed between an individual user, a settlement institution, and a certification institution that authenticates the individual user to the settlement institution is referred to as a “settlement system”.

By the way, as is well known, the Internet has a feature that anyone can use it if registered with a provider or the like and given personal identification information such as an ID number or password. For this reason, it is thought that the Internet itself is close to a state where security measures cannot be relied on as a communication system, such as personal authentication information being stolen or a so-called virus infection channel.

For this reason, if the Internet system is to be interposed in the payment system described above, various problems for ensuring security will occur as described below. Basically, they use sophisticated encryption technology in payment systems in handling personal information in the sense of personal authentication information and card information related to credit cards issued by credit companies. The question of whether to adopt it easily. The following is a detailed description from several viewpoints.

First, an explanation will be given from the individual user side. In the exchange of personal information in the process of authentication and settlement between individuals and the certifying institution, between individuals and the settlement institution, etc., it is considered that the above fundamental problems appear most clearly. Ensuring security from the individual user's perspective involves two contradictory technical requirements. In other words, (1) by encrypting personal information, etc., to make it difficult to understand even if it is intercepted by others, and to want more security, and (2) in the actual use scene, the user terminal It is necessary to simplify the operation of inputting information to enhance convenience, and it is necessary to ensure both security requirements and security.

However, if personal information is encrypted to secure security at the request of ①, the personal information itself will be complicated. That is, if personal information is encrypted, it is difficult for individual users to store or store the information or to input the information to a user terminal, so that it is convenient as it is. This is hardly compatible with the request for simplification in ②.

On the other hand, secondly, problems on the part of clearing houses and certification bodies are explained. Traditionally, authentication and settlement processes are performed using secure public lines, especially dedicated lines. In this regard, most of the authentication and settlement processes performed between authentication agencies, payment institutions, and operators of e-shops, etc., for commercial transactions via the Internet, still use the same public and private lines. And so on. For this reason, the authentication and settlement processes that occur in commerce transactions over the Internet use a mixture of two or more types of communication methods in terms of the procedures for performing this process and the means actually used. It is complicated and time-consuming.

Also, in the payment system, there is a demand that non-payment institutions do not want personal information to be stored in internal storage devices such as hard disks. Conventionally, certification body And payment institutions store personal information, and files are referenced each time authentication or payment is made. The fact that personal information is filed means that there is a risk that security may not be maintained due to leakage of personal information when the file is viewed. In particular, for a certification body that is in a position to file a lot of personal information, even if the internal storage means such as a hard disk is protected by a firewall, etc. The fact is that if the structure is accessible from, the settlement institution demands that security be particularly strict, or that it does not hold any personal information.

By the way, from the standpoint of a payment institution, filing personal information means, for example, that the personal information is stored in a hard disk built into a personal computer that can be connected to the Internet, such as a personal user. Even so, there is a danger that personal information will be leaked because it is easily accessible from the outside, and it is considered to be basically undesirable.

Considering the dangers, from the standpoint of a clearing house, if the self-certification is performed without using a certifying body, the security problem associated with the intervening certifying body will be solved. Therefore, it is conceivable that the clearing house may perform the authentication and payment work directly with the individual user.

-However, conducting authentication directly to individual users also covers all authentication and settlement operations across various subjects and formats from all individual users. It is considered that there is little merit. Therefore, it is advantageous to cooperate with the certifying body by securing the security and securing the subjects and formats to some extent by several certifying bodies, which is advantageous for the smooth operation of the payment system. That's right.

A settlement system that can secure the same or higher level of security required in conventional customary practices in which various situations exist, and is expected to be used by individual users. Payment system suitable for the Internet The system does not yet exist or has not been proposed. Disclosure of the invention

The present invention has been made in view of such a situation, and secures sufficient security for personal information on the Internet, improves the operability of a user terminal, and furthermore, from commercial transactions to settlements. It is an object of the present invention to provide a payment system that can consistently complete the process using only the Internet and reduce the risk of storing personal information.

In order to solve the above problem, the present invention provides a payment system connected to a payment terminal via the Internet, the authentication server including an authentication server connected to the user terminal via the Internet. When the personal information is transmitted from the user terminal, the authentication server encrypts the personal information with the first encryption, returns the personal information to the user terminal, and stores the personal information. When an order for a commercial transaction on the Internet is received via an ordering party, the user terminal is made to confirm the contents of the commercial transaction, and then the encrypted personal information by the first encryption is transmitted to the authentication server. After receiving the password, the decryption is performed by the second encryption, and the personal information encrypted by the second encryption is transmitted to the payment server. Decrypting the encrypted personal information by the number and authenticating the personal information, approving and executing the commercial transaction with the supplier via the authentication server, and settling the price of the commercial transaction. To provide a payment system.

According to this invention, when the user terminal places an order for a commercial transaction through the user terminal, for example, at an electronic shop or the like, the encrypted personal information stored in the terminal is requested from the authentication server and transmitted. The user does not need to enter the encrypted personal information. In addition, the user terminal stores personal information encrypted by the first encryption, and the personal information cannot be easily decrypted.

Therefore, individual users do not need to enter complicated encrypted personal information. The operation of the user terminal is easy and the operability is good, and the security of the personal information of the user terminal is maintained.

On the other hand, the personal information transmitted and received from the user terminal to the authentication server and from the authentication server to the payment server are encrypted by the first and second encryptions, respectively. Although the information is decrypted, since the information is encrypted by the second encryption, the personal information is not stored in a storage medium such as a hard disk, and therefore, the personal information does not remain in the authentication server. Moreover, the entire process from ordering a transaction to settlement can be performed on the Internet.

In this way, no personal information remains on the authentication server, and therefore, the risk of leakage of personal information on the authentication server can be reduced as compared with the case where personal information is filed, and the security for transmission and reception of personal information on the Internet Is also secured. Therefore, business transactions and settlements on the Internet can be made safe and convenient for individual users.

Preferably, the user terminal includes a removable storage unit, and the storage unit stores the personal information encrypted by the first encryption.

According to this invention, the encrypted personal information is stored in the storage means, and the storage means is detachable. Therefore, by detaching only the storage means from the user terminal, the danger of a third party using the terminal to steal personal information can be reduced. The owner of the storage means may apply the storage means to another user terminal to use the other user terminal.

Preferably, the second symbol is based on the same encryption method as the first symbol, and the encrypted personal information according to the first encryption received from the user terminal is decrypted by the authentication server. Without being converted to the payment server. According to this invention, in the authentication server, the personal information is transmitted to the settlement server in an encrypted state. Therefore, in the authentication server, there is no danger of the personal information being stolen or leaked, and the security Security is secured. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a block diagram schematically showing a configuration of a settlement system according to an embodiment of the present invention.

FIG. 2 is a schematic diagram showing an example of a mobile phone according to one embodiment of the present invention.

FIG. 3 is a flowchart relating to encryption of personal information according to an embodiment of the present invention.

FIG. 4 is a flowchart showing a flow from ordering to settlement in the settlement system according to the embodiment of the present invention. BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. In the following description, “individual user” refers to an individual as a general consumer, but may be a group or an organization. Also, the expression "a personal user who is the owner of a mobile phone" may be simply described as "a mobile phone is."

(Embodiment 1)

FIG. 1 is a conceptual block diagram illustrating a configuration of a payment system 80 according to an embodiment of the present invention, and FIG. 2 is a schematic diagram illustrating an example of a mobile phone used in the payment system 80. In FIGS. 1 and 2, 10 (10a to l0c) is a mobile phone (hereinafter simply referred to as a mobile phone) as an example of a user terminal capable of connecting to the Internet, 15 is storage means, and 20 is In Yuichi Net, 30 indicates an authentication server, 40 indicates a settlement server, and 50 indicates an electronic shop.

The payment system 80 according to the present invention includes an authentication server 30 connected to the mobile phone 10 via the Internet 20, and the authentication server 30 is a payment server via the Internet 1 net 20. Connected to 40. In such a payment system 80, the authentication server 30 transmits the information from the mobile phone 10 beforehand, for example, at the time of contract between the individual user and the operator of the authentication server 30 regarding the execution of commercial transactions on the Internet. The personal information is transmitted, the personal information is encrypted by the first encryption, and returned to the mobile phone 10 for storage.

Furthermore, when a commercial transaction is to be performed from the mobile phone 10 via the Internet, the authentication server 30 transmits the personal information encrypted by the first encryption to the authentication server 30, and And decrypts the received personal information with the second encryption, and transmits the personal information encrypted by the second encryption to the settlement server 40.

Hereinafter, the payment system 80 according to the present embodiment will be described in detail. Fig. 3 shows a flowchart for encryption of personal information, and Fig. 4 shows a flowchart for the flow from ordering to settlement. “Terminal” in FIGS. 3 and 4 means the mobile phone 10.

The mobile phone 10 is an example of a user terminal, and has a configuration that can be connected to the Internet 20 and a configuration that can store personal information encrypted by the authentication server 30. It can be used to exchange information and commerce with the electronic shop 50 on the Internet 20. The user terminal according to the present invention includes, in addition to the mobile phone 10 shown in the present embodiment, a mobile information terminal such as a so-called “mobile computer”, and a desktop PC terminal that can be connected to the Internet. Etc. are included. In addition, commerce means to examine the contents of goods and services and to make purchases and contracts easily.

The mobile phone 10 used in the present embodiment includes a storage unit 15, and the storage unit 15 is detachable by being attached to or inserted into the main body of the mobile phone 10 and directly connected to the mobile phone 10. Can be electrically connected. In order to make the storage means 15 detachable, the main body of the mobile phone 10 is provided with a storage means mounting portion 11a (FIG. 2) into which the storage means 15 can be mounted or inserted. There is provided a means (not shown) for enabling reading, writing, and the like for 15. In addition, the mobile phone 10 stores (1) when the encrypted personal information is transmitted from the authentication server 30 (FIG. 3, step 305), and (2) the business performed by the mobile phone 10. When the transaction is requested by the authentication server 30, the personal information is transmitted to the authentication server (FIG. 4, step 4 04), and the processing is programmed. As such a storage means 15, a small-sized and large-capacity storage medium that can be attached to a mobile phone 10 that has become large enough to fit in a hand due to recent technological advances has been realized. Examples include so-called smart media, compact flash, memory stick, PC card, MO disk, and floppy disk.

According to such a configuration using the removable storage means 15, the encrypted personal information is stored in the storage means 15 in advance, and the storage means 15 is determined depending on whether the storage means 15 is used. Since it can be arbitrarily attached and detached, if only the storage means 15 is detached from the mobile phone 10 when not in use, a state in which the storage means 15 cannot be accessed from the Internet or a personal computer can be maintained.

Therefore, the stored personal information cannot be viewed from the outside when detached from the mobile phone 10. Such storage means 15 can substantially eliminate the risk that a third party steals personal information using the mobile phone 10 using the Internet or a personal computer. Further, the owner of the storage unit 15 applies the storage unit 15 to another mobile phone as long as the storage unit 15 is not hindered in the form of attachment or insertion or the form of transmission and reception of electrical signals. , Other mobile phones can also be used.

The use of a detachable storage means 15 has the advantages as described above. Alternatively, the storage means 15 may be built in the mobile phone 10, Instead of the storage means, an internal memory area or the like may be used.

The authentication server 30 transmits (1) personal information including personal authentication information and force information of the individual user holding the mobile phone 10 from the mobile phone 10 to the settlement server 40 via the authentication server 30. In addition to having a function of transmitting, (2) a function of encrypting the personal information in advance. The authentication server 30 has necessary means and functions related to encryption.

The function of the authentication server 30 transmitting personal information to the payment server 40 (section (1)) will be described. When a commercial transaction is started between an individual user of the mobile phone 10 and the electronic shop 50 (step 410), first, the authentication server 30 receives an order for a commercial transaction from the electronic shop 50 and performs authentication. Is requested (step 402), the mobile phone 10 confirms the contents (step 4003), and then makes a request to send the encrypted personal information by the first encryption to the authentication server 3.

0 is transmitted (step 4 0 4).

Next, the authentication server 30 receives (2) decrypts the encrypted personal information after receiving it, encrypts the decrypted personal information with the second encryption, and transmits the encrypted personal information encrypted with the second encryption to the settlement server. Send to 40 (step 4 05). Therefore, the function of the authentication server 30 transmitting the personal information to the settlement server 40 is a two-step process of (1) and (2). In practice, after the e-shop 50 receives a commercial transaction inquiry, the authentication server 30 makes the mobile phone 10 confirm the contents such as the amount and quantity of the commercial transaction (step 4003). If the individual user of the mobile phone 10 approves this transaction (step 4 04), the personal authentication information of the mobile phone can be sent to the authentication server 30 as approval.

In the present embodiment, the first and second ciphers are different ciphers based on a public key method. Since the present embodiment employs the first and second two ciphers, for example, it is possible to set an encryption method that allows the first cipher to be easily adopted in the mobile phone 10 according to the current technology. The first and second ciphers may be ciphers other than the public key system. In the present embodiment, the PIN number of the mobile phone is used as the personal authentication information. When transmitting the personal authentication information, the mobile phone 10 also transmits the personal information encrypted by the first encryption to the authentication server 30 in response to a request from the authentication server (step 4104).

Also, as described above, the authentication server 30 has a function of encrypting personal information in advance (section (2) above). This encryption function is used before the mobile phone is fully used. In advance That is, as described above, this is performed when a contract is made between an individual user and the operator of the authentication server 30 regarding the execution of commercial transactions on the Internet.

As shown in FIG. 3, first, the storage means 15 is attached to the mobile phone 10 (step 301), the mobile phone 10 is connected to the authentication server 30 (step 302), and the mobile phone When the personal information is input to the authentication server 30 via 10 (step 303), the authentication server 30 encrypts the personal information with the first encryption (step 304). Send and memorize (Step 3 05).

In the authentication server 30, a procedure for executing the above-described series of processing functions (steps 400 to 405) and the encryption function (steps 301 to 305) is stored as a computer program. ing. Further, the authentication server 30 has encryption and decryption means and functions relating to the first and second encryption systems.

The settlement server 40 decrypts the encrypted personal information by the second encryption, authenticates the decrypted personal information (step 406), and then sends the electronic shop 5 of the ordering party via the authentication server 30. The commercial transaction is approved and executed for 0 (step 407), and the price of the commercial transaction is settled (step 409). The settlement step 409 is executed at any time after step 406.

Therefore, the settlement server 40 has a decryption means and a function related to the second encryption method, and the settlement server 40 has a procedure for executing the series of processing functions and the encryption / decryption function described above. It is stored as a computer program. Such a settlement server 40 can be operated by a bank or a credit company.

The electronic shop 50 requests the authentication server 30 to authenticate the commercial transaction in step 402, and executes the commercial transaction to the mobile phone 10 in step 408. In response to the authentication request, the execution of the commercial transaction is permitted by the authentication server 30 in step 407, and the execution of the commercial transaction is settled by the settlement server 40. In this specification, an electronic shop means a server or the like that can perform such commercial transactions.

With the payment system 80 configured in this way, the individual When the user places an order for a commercial transaction with the electronic shop 50 or the like of the ordering party, the encrypted personal information stored in the mobile phone 10 is requested from the authentication server 30 and transmitted. Need not be re-entered into the mobile phone 10. At the same time, the mobile phone 10 stores personal information encrypted by the first encryption, and the personal information cannot be easily decrypted by a third party.

On the other hand, personal information transmitted and received from the mobile phone 10 to the authentication server 30 and from the authentication server 30 to the payment server 40 are encrypted by the first and second encryption, respectively, and In 30, the encrypted personal information is decrypted by the first encryption, but is immediately encrypted by the second encryption, so that the personal information is not stored in a storage medium such as a hard disk. In the end, the personal information does not remain in the authentication server 30, and the entire process from ordering to settlement of the commercial transaction can be performed on the Internet 20.

Therefore, the individual user does not need to input complicated encrypted personal information, so that the operation of the mobile phone 10 is easy and operable, and the security of the personal information of the mobile phone 10 is maintained. I have.

Further, no personal information remains on the authentication server 30, and therefore, the risk of leaking personal information on the authentication server 30 can be reduced as compared with the case where personal information is filed as in the past. The security of the transmission and reception of personal information on IN-Yuichi Net 20 is also ensured by the No.1 method. Therefore, the business transactions and settlements on the Internet 20 can be made safe and convenient for individual users.

In this embodiment, since personal information does not remain in the authentication server 30, conventionally, the operator of the settlement server 40 approaches one step closer to the security assurance requested by the operator of the authentication server 30. Can be. The settlement server 40 can independently determine the second cipher. Therefore, for example, even if the user wants to use an encryption method that is technically difficult to use with the mobile phone 10, the present system can be used. Can be used.

(Embodiment 2) As the operator of the authentication server 30, for example, if the approval of the operator of the settlement server 40 can be obtained, the second cipher can be set to be the same as the first cipher. Embodiment 2 has a configuration in which the second cipher is the same as the first cipher. Hereinafter, only the differences between the second embodiment and the first embodiment will be described.

As described above, if the second cipher is set to be the same as the first cipher, the personal information encrypted by the first cipher received from the mobile phone 10 does not need to be decrypted in the authentication server 30. Is sent to the settlement server 40 as it is.

Therefore, in the authentication server 30, the personal information is transmitted to the settlement server 40 in an encrypted state, and the symbol is not decrypted in the authentication server 30. There is no danger of information being stolen or leaked, and security is assured more reliably. Therefore, in the present embodiment, it is possible to further approach the security assurance requested by the operator of the settlement server 40 to the operator of the authentication server 30 conventionally.

The settlement system according to the present invention can sufficiently secure the security of personal information on the Internet and improve the operability of the user terminal. Furthermore, the process from commercial transaction to settlement can be completely completed using only the Internet. And reduce the risk of storing personal information.

Claims

The scope of the claims

1. An authentication server connected to a user terminal via the Internet, the authentication server being a payment system connected to a payment server via the Internet,

The authentication server,

When the personal information is transmitted from the user terminal, the personal information is encrypted by the first encryption and returned to the user terminal for storage.

When an order for a commercial transaction on the Internet by the user terminal is received via an ordering party, after confirming the contents of the commercial transaction by the user terminal, the personal information encrypted by the first encryption is transmitted to the authentication server. Receiving the information, decrypting the information, receiving the information, encrypting the information using a second encryption, transmitting the encrypted personal information using the second encryption to the settlement server,

The payment server,

After the personal information is authenticated by decrypting the encrypted personal information by the second encryption, the commercial transaction is approved and executed by the supplier through the authentication server, and the price of the commercial transaction is approved. Settlement system characterized by making settlement.

2. The settlement system according to claim 1, wherein the user terminal includes a removable storage unit, and the storage unit stores the personal information encrypted by the first encryption.

3. The second cipher is based on the same cipher system as the first cipher, and the personal information encrypted by the first cipher received from the user terminal is decrypted by the authentication server. The payment system according to claim 1, wherein the payment system is transmitted to the payment server without being converted.