WO2006013882A1

WO2006013882A1 - User authentication system, authentication method for the system, user authentication program, and recording medium on which the program is recorded

Info

Publication number: WO2006013882A1
Application number: PCT/JP2005/014188
Authority: WO
Inventors: Junji Suetsugu; Kazuya Oyama
Original assignee: Sharp Kabushiki Kaisha
Priority date: 2004-08-06
Filing date: 2005-08-03
Publication date: 2006-02-09
Also published as: JP2006050466A; JP3789923B2

Abstract

A credit sale system (1) authenticates a user (34) by using the telephone number specifying the portable telephone (35) of the user and the password specifying the user (34). The system (1) has a center server (10) including a database (21) where telephone numbers and passwords corresponding to the respective telephone numbers are stored. A POS server (30) acquiring a telephone number from a portable telephone (35) having entered a shop through an access point (32), acquires the password corresponding the acquired telephone number from the database (21), and adds the set of the acquired telephone number and password to a list. When the POS server (30) authenticates the user (34) in the shop, the POS server acquires the password from the user (34) by means of a POS terminal (31) and searches the list for the telephone number corresponding to the acquired password, thus identifying the user (34) and the portable telephone (35).

Description

Specification

USER AUTHENTICATION SYSTEM, AUTHENTICATION METHOD FOR THE SYSTEM, USER AUTHENTICATION PROGRAM, AND RECORDING MEDIUM CONTAINING THE PROGRAM

Technical field

[0001] The present invention relates to a user authentication for authenticating a user using the object specifying information that the portable object that the user carries and specifying the portable object and the personal specifying information that specifies the user. The present invention relates to a system, an authentication method for the system, a user authentication program, and a recording medium on which the program is recorded. In particular, the present invention relates to a user authentication system in which the portable object is a wireless communication terminal. Background art

Conventionally, a technique for authenticating a user having a wireless communication terminal by acquiring and collating terminal identification information (object identification information) from a wireless communication terminal such as a cellular phone and identifying the wireless communication terminal is known. It has been. For example, Patent Document 1 (Japanese Published Patent Publication “Japanese Patent Laid-Open Publication No. 2002-125268” (published date: April 26, 2002)) has a directivity infrared communication (IrDA (Infrared) Data Association)) is described. Patent Document 2 (Japanese Published Patent Publication “JP 2002-63652 A” (publication date: February 28, 2002)) reads a wireless communication terminal in order to identify the wireless communication terminal. It describes the use of wireless tags and barcodes that need to be held over the machine. Patent Document 3 (Japanese Published Patent Publication “JP 2002-16968 A” (published date: Jan. 18, 2002)) has multiple orientations so as not to detect multiple wireless communication terminals. It is described that a narrow-area communication area is set with a sex antenna. In addition, in Patent Document 4 (Japanese Published Patent Publication “JP 2002-95047 A” (published date: March 29, 2002)), the terminal identification information obtained from the wireless communication terminal and the user input It is described that the wireless communication terminal is specified by collating it with the specified terminal specifying information.

[0003] Further, when a wireless communication terminal is stolen or dropped, there is a possibility that a third party may misuse the wireless communication terminal. This is particularly a problem when electronic payments and billing processes are performed on wireless communication terminals. For this reason, terminal identification information is acquired and verified, and wireless communication terminals are used. User power It is desirable to authenticate users by acquiring and collating personally identifiable information. Here, personal identification information includes a password, biometric information, handwriting, and the like. Disclosure of the invention

[0004] However, when authenticating a user, terminal identification information is acquired and collated, and further, individual identification information is acquired and collated is obtained when terminal identification information is acquired and collated. In comparison, it takes time, and the provision of various services after authentication is delayed. This becomes significant as the number of wireless communication terminals increases.

[0005] The present invention has been made in view of the above problems, and an object of the present invention is to provide a user authentication system capable of quickly specifying a user's portable object and a user. is there.

[0006] In order to achieve the above object, a user authentication system according to the present invention includes object specifying information that is included in a portable item carried by a user and that specifies the portable item, and personal identification information that specifies the user. A user authentication system that authenticates a user by using a storage means for storing a plurality of the object specifying information and personal specifying information corresponding to each object specifying information, and a portable object within a predetermined area. Acquisition means for acquiring the object identification information of the portable object, and personal identification information corresponding to the acquired object identification information is obtained from the storage means, and a list of the acquired object identification information and individual identification information is listed. When the user is authenticated within the predetermined area and the list addition means to be added to the user, personal identification information is acquired from the user, and object identification information corresponding to the acquired personal identification information is obtained from the list. The rope to Rukoto, have a feature in that it comprises a specifying means for specifying the user and the portable object.

[0007] Here, as the portable object, any portable object that can be carried by the user and has the object specifying information can be selected. Examples of portable objects include a mobile phone having a storage device such as an IC chip in which object identification information is recorded, a card having a magnetic tape or a barcode, and a semiconductor memory in which object identification information is stored, such as a node disk. Examples include portable wireless communication terminals such as PDA (Personal Digital Assistant). Examples of personal identification information for identifying a user include fingerprints, voiceprints, veins of predetermined parts, facial images Biometric information such as, PIN, and handwriting.

[0008] Further, examples of the predetermined area include an area in a store, an airport gate, and a station premises. In addition, in order to obtain object identification information of a portable object from a portable object that has entered the predetermined area, if the portable object is a wireless communication terminal, a base station and an access point having the predetermined area as a communication area are portable. If the object identification information can be acquired by performing wireless communication with an object, or if only the gate (gateway) entrance force can be entered in a predetermined area, such as at an airport or a station, the portable object force can be obtained at the gate entrance. Also, the object specifying information may be acquired.

[0009] According to the above configuration, the object specifying information of the portable object is acquired from the portable object that has entered the predetermined area, the personal specifying information corresponding to the acquired object specifying information is acquired from the storage unit, A set of acquired object identification information and individual identification information is added to the list. Thereby, the list includes a set of object specifying information and individual specifying information for each portable object existing in the predetermined area. When the user is authenticated within the predetermined area, the personal identification information is acquired from the user, and the object identification information corresponding to the acquired personal identification information is searched from the list, so that the user and the portable object are retrieved. Is identified.

[0010] Therefore, the user authentication system according to the present invention acquires the object specifying information of the portable object when the portable object enters the predetermined area. Therefore, when the user is authenticated, the personal identification information is used. If acquired, it is possible to quickly authenticate a good user. In addition, since the set of object identification information and individual identification information in the above list is limited to the number of portable objects existing in the predetermined area, the object identification information corresponding to the individual identification information acquired from the user can be quickly retrieved from the above list. The user can be quickly identified.

[0011] Note that the portable object may have a wireless communication function, and the user authentication system may further include wireless communication means for performing wireless communication with the portable object in the predetermined area. here

As wireless communication, for example, UWB (UltraWideBand), wireless LAN (Local Area Network), near field communication technology such as Bluetooth (registered trademark), infrared communication, PHS (Personal Handy-phone System), mobile phone System can be used.

In the present invention, since user authentication is performed using both object specifying information and individual specifying information, even if the object specifying information of a portable object is intercepted, the individual specifying information must be intercepted. For example, there is little impact on security.

[0013] Further, in the user authentication system according to the present invention, the acquisition unit acquires the object identification information of the portable object via the wireless communication unit that performs radio communication using weak directivity! I prefer to do that.

[0014] When the directivity is strong, the communication area is narrowed. For this reason, in order to acquire object specifying information from a portable object, it is necessary to move the portable object within a narrow communication area. On the other hand, since the directivity is weak in the present invention, the communication area is widened, so the necessity for moving the portable object is reduced. Further, by using radio waves as a wireless communication medium, for example, wireless communication can be performed with a portable object in a bag, so that it is not necessary to take out or move the portable object.

[0015] Further, in the user authentication system according to the present invention, when the user authentication is performed within the predetermined area, the specifying unit acquires the user power individual specifying information and also performs the wireless communication from the portable object. Preferably, the user and the portable object are specified by acquiring the object specifying information through the means and searching the list of the acquired personal specifying information and object specifying information from the list.

[0016] In this case, when the user is authenticated, the user strength personal identification information is acquired, and the portable physical strength also acquires the object identification information, so that the accuracy of the authentication is improved. In addition, since the set of acquired personal identification information and object identification information is searched from the list, it is possible to suppress an increase in the time required to identify the user and the portable object.

[0017] It should be noted that various types of information may be provided to the portable object via wireless communication means after user authentication. For example, when a user is authenticated for product purchase, it may be possible to provide information on the receipt and usage details after authentication.

[0018] Further, in the user authentication system according to the present invention, the specifying means includes the mobile communication device via the wireless communication means for performing wireless communication using radio waves with high directivity or low output. It is preferable to acquire object specifying information from an object. In this case, since the communication area of the wireless communication is narrowed, it is possible to prevent other portable objects from being mixed, and it is possible to prevent acquisition of object specific information of other portable objects.

[0019] Further, in the user authentication system according to the present invention, the user inputs personal identification information. It is preferable that the input means is further connected to the specifying means by wire. In this case, since the personal identification information is acquired by wire, security can be ensured even if the object identification information of the portable object is intercepted.

[0020] Further, the user authentication system according to the present invention is a list that deletes a set of object specifying information and individual specifying information from the list based on object specifying information of a portable object that comes out of a predetermined area. It is preferable to further include a deleting unit.

[0021] Here, when the portable object is out of the predetermined area, if the portable object is a wireless communication terminal, the base station and the access point having the predetermined area as the communication area are wirelessly connected to the portable object. This can be done when communication is disabled, or when it is possible to exit only from a predetermined area via a gate exit, such as at an airport or a station, the object identification information can be obtained from a portable item at the gate exit. It can be done by acquiring.

[0022] In this case, since the list includes only a set of object specifying information and personal specifying information related to a portable object that currently exists in the predetermined area, it is possible to prevent the number of sets in the list from continuing to increase. Thus, it is possible to reliably identify the user and the portable object quickly. It is also preferable from the viewpoint of security to delete unnecessary object identification information and individual identification information.

[0023] The user authentication system according to the present invention further includes display means for displaying various information, and the storage means stores personal information that is information about the user in addition to the personal identification information. The list adding means acquires personal identification information corresponding to the acquired object identification information and a part or all of the personal information from the storage means, and acquires the acquired object identification information, personal identification information, and A set of personal information is added to the list, and the specifying means acquires personal information corresponding to the personal specifying information acquired from the user from the list, and displays the acquired personal information via the display means. Thus, it is preferable to include a specific assisting means for assisting the identification of the user.

Here, examples of personal information regarding the user include the user's name, address, telephone number of the fixed telephone, age, gender, occupation, usage limit, and facial photo information. Moreover, it is preferable that the personal information acquired by the list adding unit from the storage unit includes an age and sex that can identify the user from the appearance. Note that the present invention is suitable for a credit sales system. When used, the personal information acquired from the storage means by the list adding means preferably includes a usage limit amount.

[0025] According to the above configuration, the identification assisting means displays the acquired personal information via the display means. For example, if there is a monitor when performing user authentication, the monitor can assist the user identification by referring to the personal information displayed on the display means. The accuracy of authentication can be improved.

[0026] An authentication method of the user authentication system according to the present invention includes a portable object carried by a user, and uses object specifying information for specifying the portable object and personal specifying information for specifying the user. An authentication method of a user authentication system for performing authentication of the above, wherein the user authentication system includes storage means for storing a plurality of the object specifying information and personal specifying information corresponding to each object specifying information, An acquisition step of acquiring object identification information of the portable object from a portable object that has entered the predetermined area, and personal identification information corresponding to the acquired object identification information is acquired from the storage means, and the acquired object identification information and A list addition step for adding a set of personal identification information to the list, and when the user is authenticated within the predetermined area, the personal identification information is acquired from the user, and the acquired personal identification information is acquired. By obtaining the corresponding object identification information from the list, it is characterized by comprising the steps of identifying the user and the portable object.

[0027] According to the above method, the object specifying information of the portable object is acquired from the portable object that has entered the predetermined area, the individual specifying information corresponding to the acquired object specifying information is acquired from the storage means, A set of acquired object identification information and individual identification information is added to the list. Thereby, the list includes a set of object specifying information and individual specifying information for each portable object existing in the predetermined area. When the user is authenticated within the predetermined area, the personal identification information is acquired from the user, and the object identification information corresponding to the acquired personal identification information is searched from the list, so that the user and the portable object are retrieved. Is identified.

[0028] Therefore, the authentication method of the user authentication system according to the present invention acquires the object specifying information of the portable object when the portable object enters the predetermined area. Therefore, when authenticating the user, If specific information is acquired, it is possible to quickly authenticate a good user. In addition, the set of object identification information and individual identification information in the above list Therefore, the object identification information corresponding to the personal identification information acquired from the user can be quickly retrieved from the list, and the user and the portable object can be identified quickly.

[0029] Note that the acquisition unit, the list addition unit, and the identification unit in the user authentication system can be executed on a computer by a user authentication program. Furthermore, by storing the user authentication program in a computer-readable recording medium, the user authentication program can be executed on an arbitrary computer.

[0030] As described above, the user authentication system according to the present invention acquires the object specifying information of the portable object when the portable object enters the predetermined area, so when performing user authentication, Acquiring personal identification information has the effect of quickly authenticating a good user, and the set of object identification information and personal identification information in the above list is limited to the number of portable items in the predetermined area. If the object identification information corresponding to the personal identification information obtained from the above can be quickly retrieved from the above list, and the user and the portable object can be identified quickly, there is an effect.

[0031] Still other objects, features, and advantages of the present invention will be sufficiently enhanced by the following description. The benefits of the present invention will become apparent from the following description with reference to the accompanying drawings.

Brief Description of Drawings

FIG. 1 is a block diagram showing a schematic configuration of a credit sales system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a schematic configuration of a center server in the credit sales system.

FIG. 3 is a diagram showing an example of the contents of credit sales information stored in the center server in a table format.

FIG. 4 is a block diagram showing a schematic configuration of a POS system in the credit sales system.

FIG. 5 is a block diagram showing a schematic configuration of a POS server in the POS system. FIG. 6 is a block diagram showing an example of the contents of a store visitor list stored in the storage unit of the POS server in a table format.

FIG. 7 is a flowchart showing processing operations performed by the store visit processing unit of the POS server.

FIG. 8 is a flowchart showing processing operations performed by the payment processing unit of the POS server.

FIG. 9 is a flowchart showing a processing operation performed by a store exit processing unit of the POS server.

FIG. 10 is a diagram schematically showing a processing flow in the credit sales system.

FIG. 11 is a flowchart showing processing operations performed by the control unit of the POS server and the control unit of the center server when the user visits the store in the sales system according to another embodiment of the present invention.

FIG. 12 is a flowchart showing processing operations performed by the control unit of the POS server and the control unit of the center server when purchasing a product in the sales system.

FIG. 13 is a flowchart showing processing operations performed by the control unit of the POS server and the control unit of the center server when the user leaves the store in the sales system.

FIG. 14 is a diagram schematically showing the flow of processing in the credit sales system.

BEST MODE FOR CARRYING OUT THE INVENTION

[Embodiment 1]

An embodiment of the present invention will be described below with reference to FIGS. FIG. 1 shows a schematic configuration of a credit sales system according to this embodiment.

[0034] In the credit sales, when a contractor contracted with a certain credit sales company purchases a product at a store designated by the credit sales company, the credit sales company trusts the contractor to pay the price in advance and By paying the purchase price with the store, the product is forwarded to the contractor, and the credit company charges the contractor for the price later. Credit sales companies also include companies that conduct credit sales together with other businesses such as banking or department store operations that are not limited to companies specializing in credit sales!

As shown in FIG. 1, the credit sales system (user authentication system) 1 of this embodiment includes a center server 10 provided in a credit sales company and a plurality of POS (points) provided in a plurality of stores. -of-sale) The system 11 is connected to the system 11 via the dedicated line 12. In the credit sales system 1, the center server 10 contracts with multiple POS systems 11. The purchase price of the user (user) is settled, and information on the purchase price is stored in order to charge the user later.

FIG. 2 shows a schematic configuration of the center server 10. As illustrated, the center server 10 includes a control unit 20, a database 21, a communication IZF unit 22, a settlement processing unit 23, and an encryption unit 24.

The control unit 20 controls each component in the center server 10 in an integrated manner. The function of the control unit 20 is realized by a CPU (Central Processing Unit) executing a program stored in a storage device such as a RAM (Random Access Memory) or a flash memory.

The database 21 includes a storage device such as a node disk drive (HDD), and stores various information. In the present embodiment, the database 21 stores various information related to credit sales (hereinafter referred to as “credit sales information”). Details of credit sales information will be described later.

[0039] Communication The IZF unit 22 is for data communication with a plurality of POS systems 11.

As described above, data communication between the communication IZF unit 22 and the POS system 11 is performed through a dedicated line from the viewpoint of preventing information leakage.

[0040] The payment processing unit 23 performs payment processing with a plurality of POS systems 11. The encryption key unit 24 encrypts data to be transmitted to the POS system 11 based on the encryption key from the viewpoint of preventing information leakage. The encrypted data is transmitted to the POS system 11 together with the encryption key.

FIG. 3 shows an example of the contents of the credit sales information stored in the database 21 for a certain user. As shown in the figure, the credit sales information includes ID (identification information), personal identification information, personal information, face photo information, and usage information.

[0042] The ID is information for specifying an object that has been credited, such as a credit card (hereinafter referred to as "credited object"). Credit products (portable items) are provided to the user from the credit sales company when contracted with the credit sales company. Magnetic cards are mainly used as credits, but recently, IC cards and IC chips built into mobile phones have been used. In this embodiment, the trusted object is a mobile phone, and the ID is a mobile phone. This is the phone number of the mobile phone. In this case, it is not necessary for the user to carry a credit object such as a credit card separately. Although details will be described later, the mobile phone used in the present embodiment is a mobile phone having a function of connecting to a wireless LAN.

[0043] The personal identification information is information for identifying an individual, and in this embodiment is a personal identification number. In addition to the personal identification number, the personal identification information includes fingerprints, voiceprints, veins of predetermined parts, biometric information such as face images, and handwriting. If the PIN is used as personal information, simple input and processing becomes possible. On the other hand, if biometric information is used as personal identification information, individuals can be identified with high accuracy.

[0044] The personal information is information related to an individual, and includes, for example, a name, an address, a telephone number of a fixed telephone, an age, a sex, an occupation, a limit of use, and the like. The face photo information is information on an individual's face photo, and is used by a store clerk to confirm the individual. If the store clerk does not confirm the individual, it is not necessary to store facial photo information in the database 21.

[0045] The usage information is information generated when the user uses the credit sales system 1, and includes, for example, a remaining usage limit and usage details information. The usage details information includes the product purchased by the user, the price, the date, the usage store, and the like. Based on the usage details information, an invoice for charging the user is created and sent to the user.

[0046] FIG. 4 shows a schematic configuration of the POS system 11! /. As shown in the figure, the POS system 11 includes one or more POS terminals (input means, display means) 31, a POS server 30, and one or more access points (wireless communication means) 32 for wireless LAN. The configuration is connected via LAN33.

[0047] The POS terminal 31 is used as a cash register of a store (in the illustrated case, a convenience store), and the name of the product sold and the amount of money are input and transmitted to the POS server 30. The POS terminal 31 may be capable of reserving various tickets and transferring various public charges.

[0048] In the present embodiment, when the user 34 purchases a product, the POS terminal 31 is directly input with a personal identification number from the user 34. The security code is sent to the POS terminal 31 via radio waves or infrared rays. It is possible to prevent the security code from being leaked by entering it directly at the POS terminal 31. In addition, the POS terminal 31 transmits the entered password to the POS server 30.

[0049] The access point 32 is connected to one or a plurality of mobile phones (wireless communication terminals) 35 using near field communication technology such as UWB, wireless LAN (IEEE802.11), BluetootM registered trademark). , Form a wireless LAN. As a result, the access point 3 2 can enter the phone 36 and perform data communication with the mobile phone 35.

[0050] In the present embodiment, it is only necessary to perform wireless communication only with the mobile phone in the store! Therefore, the communication area of the access point 32 may be approximately the same as the area in the store. Also, from the viewpoint of preventing information leakage, it is desirable for the access point 32 to change the communication channel used for newly entered data communication to a communication channel different from the communication channel used for normal data communication. It is also desirable to communicate encrypted data.

[0051] The POS server 30 controls the components in the POS system 11 in an integrated manner.

Specifically, the POS server 30 collects sales information such as the name, price, and sales date of the sold products from the POS terminal 31. Further, it is desirable that the POS server 30 can connect to an external server, if necessary, to reserve various tickets from the POS terminal 31 and transfer various public charges.

In the present embodiment, the POS server 30 acquires information related to the wireless LAN from the access point 32. Specifically, the POS server 30 obtains from the access point 32 the phone number of the mobile phone 35 newly entering the wireless LAN and the phone number of the mobile phone 35 that was disconnected from the wireless LAN cable due to communication failure. To do. Note that the POS server 30 preferably obtains information about the mobile phone 35 currently connected to the wireless LAN from the access point 32 in order to keep track of the mobile phone 35 present in the store.

In the present embodiment, the POS server 30 acquires from the access point 32 the telephone number of the mobile phone 35 that newly enters the wireless LAN. Thereby, the mobile phone 35 is authenticated. The POS server 30 transmits the acquired telephone number to the center server 10, and the PIN number, face photo information, and personal information corresponding to the telephone number are transmitted to the center server. Receive from server 10. The POS server 30 adds the received personal identification number and the like to the visitor list and stores it. It should be noted that the personal information transmitted from the center Sano 10 to the POS server 30 is preferably limited to only information that allows the store clerk to confirm the user 34, such as gender and age, from the viewpoint of privacy protection.

In the present embodiment, when the POS server 30 acquires a personal identification number from the POS terminal 31, the POS server 30 identifies a telephone number corresponding to the personal identification number from the customer list. As a result, the user 34 is authenticated. The POS server 30 transmits the identified telephone number to the center server 10 together with sales information for the user 34. At this time, the center server 10 performs a payment process with the POS system 11 and stores sales information in the database 21 in order to charge the user for a later date.

Therefore, the credit sales system 1 of the present embodiment acquires the telephone number of the mobile phone 35 from the mobile phone 35 that entered the store, and stores the personal identification number corresponding to the acquired telephone number in the database 21 of the center server. And a set of the phone number and password obtained is added to the visitor list. Thus, the store visitor list includes a set of a telephone number and a personal identification number for each mobile phone 35 present in the store. Then, when authenticating the user 34 in the store, the user 34 and the mobile phone are obtained by acquiring a password from the user 34 and searching the store visitor list for a telephone number corresponding to the acquired password. Specify 35.

[0056] Therefore, since the credit sales system 1 acquires the phone number of the mobile phone 35 when the mobile phone 35 enters the store, when authenticating the user 34, the credit sales system 1 acquires the password. Good user authentication can be performed quickly. In addition, since the number of pairs of phone numbers and passwords in the above-mentioned store visitor list is limited to the number of mobile phones 35 existing in the store, the phone number corresponding to the password obtained from the user 34 is stored in the above-mentioned visitor list. The user 34 and the mobile phone 35 can be quickly identified.

Hereinafter, details of the POS system 11 will be described with reference to FIG. 5 and FIG. The POS terminal 31 has a configuration in which a keypad for entering a password is added to a normal POS terminal. However, a conventional POS terminal that can use a credit card reads a credit card. In some cases, it may have a function of inputting a personal identification number together with the taking function.

[0058] That is, the POS terminal 31 is similar to a normal POS terminal, a control unit that comprehensively controls each component in the terminal, a storage unit that stores various types of information, and clerk input information or barcodes. An input unit that accepts reading information, a display unit that displays various information, a printing unit that prints out receipt information, and a network IZF unit that is communicably connected to a LAN. This is a well-known configuration including a keypad for inputting a personal identification number for accepting input. Therefore, detailed description of the POS terminal 31 is omitted.

[0059] FIG. 5 shows a schematic configuration of the POS server 30! /. As shown in the figure, the POS server 30 includes a control unit 40, a storage unit (storage means) 41, a network IZF unit 42, and a communication IZF unit 43.

[0060] The control unit 40 controls each component in the POS server 30 in an integrated manner. The function of the control unit 40 is realized by the CPU executing a program stored in a storage device such as a RAM or a flash memory. The configuration of the control unit 40 in the present embodiment will be described later.

[0061] The storage unit 41 includes a storage device such as a RAM node drive (HDD) and stores various types of information. In the present embodiment, information stored in the storage unit 41 will be described later.

[0062] The network IZF unit 42 is for data communication with the POS terminal 31 and the access point 32 via the LAN 33. The LAN 33 is preferably a wired LAN from the viewpoint of preventing information leakage. The communication I / F unit 43 is for data communication with the center server 10 via the dedicated line 12.

In the POS server 30 of the present embodiment, the storage unit 41 stores a store visitor list 47.

FIG. 6 shows an example of the contents of the store visitor list 47. As shown in the figure, the visitor list 47 includes, for each mobile phone 35 connected to the wireless LAN, a mobile phone 35 phone number (mobile phone ID), a personal identification number, an encryption key, the age and gender of the user 34, It includes the remaining usage limit and face photo information. The information in the store visitor list 47 may be encrypted with the encryption key.

[0064] Further, as shown in FIG. 5, the control unit 40 has a store visit processing unit (acquisition means, list addition means). 44, a payment processing unit (specifying means) 45, and a store closing processing unit (list deletion means) 46.

[0065] The store visit processing unit 44 performs a processing operation when the user 34 carries the mobile phone 35 and visits the store. FIG. 7 shows processing operations performed by the store visit processing unit 44. As shown in the figure, first, a new mobile phone 35 is searched by wireless LAN (step S10. Hereinafter, it may be simply referred to as “S10”. The same applies to other steps). Repeat until you find it (NO at SI 1).

[0066] If the newly-entered mobile phone 35 finds power (YES in S11), the ID (phone number) of the watched mobile phone 35 is acquired via the access point 32 (S 12). The acquired ID is transmitted to the center server 10 (S13). At this time, the center server 10 searches the database 21 for the personal identification information (password) corresponding to the received ID, the age and sex of the personal information, the face photo, and the remaining limit of the usage information. Then, the encryption unit 24 encrypts predetermined information and transmits it to the POS server 30 together with the encryption key. As a result, the POS server 30 acquires the personal identification information, age, gender, face photo, remaining limit, and encryption key (S13).

[0067] Then, the acquired personal identification information, age, sex, face photograph, remaining limit, and encryption key are added to the store visitor list 47 of the storage unit 41 together with the ID of the mobile phone 35 (S14). . Then, the process returns to step S10 and the above processing operation is repeated.

The payment processing unit 45 performs a processing operation when the user 34 purchases a product.

FIG. 8 shows processing operations performed by the payment processing unit 45. As shown in the figure, first, the password of the user 34 is obtained from the POS terminal 31 by directly inputting the password at the user 34 power SPOS terminal 31 (S20), and the obtained password is retrieved from the visitor list 47. Search (S21

) o

[0069] If the password that matches the acquired password is strong enough to be seen from the store list 47 (NO in S22), predetermined error processing is performed. On the other hand, if a password that matches the acquired password is found in the visitor list 47 (YES in S22), personal information and face photo information corresponding to the found password are sent to the POS terminal 31. (S23). As a result, the store clerk can identify the user 34 with the mobile phone 35 as personal information or facial photo information. Can be confirmed. Thereafter, when the store clerk inputs approval / disapproval of the user 34 at the input unit, approval approval / disapproval information indicating approval / disapproval of the store clerk is created at the POS terminal 31 and transmitted to the POS server 30. Thereby, the POS server 30 can acquire the approval / disapproval information of the store clerk (S23).

Next, if the store clerk does not approve from the obtained approval approval / disapproval information (NO in S24), error processing is performed. On the other hand, if the store clerk approves (YES in S24), the ID corresponding to the searched PIN and the payment information for payment of the product price with the credit sales company are sent to the center server 10. (S25). As a result, the center server 10 performs the settlement in the settlement processing unit 23, and the usage details and the remaining usage limit amount of the user 34 in the database 21 are updated.

Next, the remaining usage limit corresponding to the ID is updated in the store visitor list 47 (S26), and receipt information is transmitted to the mobile phone 35 corresponding to the ID (S27). This saves the trouble of printing the recipe. In addition to the receipt information, various types of information such as privilege information for purchasing a product may be transmitted to the mobile phone 35. Thereafter, the processing operation performed by the payment processing unit 45 is terminated.

The store exit processing unit 46 performs a processing operation when the user 34 exits the store. FIG. 9 shows processing operations performed by the store closing processing unit 46. As shown in the figure, first, the mobile phone 35 that cannot communicate with the wireless LAN is detected (S30), and this is repeated until it is detected (NO in S31).

[0073] When a mobile phone 35 that cannot be communicated is detected (YES in S31), the ID of the detected mobile phone 35 and information corresponding to the ID, that is, personal identification information, age, gender, face photo The remaining limit amount and the encryption key are deleted from the store visitor list 47 of the storage unit 41 (S32). Thereafter, the process returns to step S32 and the above processing operation is repeated.

In the credit sales system 1 having the above-described configuration, processing operations from when the user 34 makes a credit contract to when purchasing a product will be described with reference to FIG. Figure 10 shows the overall processing flow in the credit sales system1. First, the user 34 makes a credit contract with a credit sales company in advance. At this time, the user 34 provides a face photo and a personal identification number to the credit sales company (Al). The credit sales company will use the photo and password provided to the mobile phone. Along with the ID (telephone number) of the speaker, personal information, and usage information, it is stored in the database 21 of the center server 10 (A2). The credit sales company provides the mobile phone 35 having the above telephone number (ID) to the user 34 (A3).

[0075] Next, the user 34 holds the bag 36 containing the mobile phone 35 and visits a convenience store. Then, the POS system 11 automatically connects to the mobile phone 35 via the access point 32 and acquires the ID from the mobile phone 35 (A4, S10 to S12 in FIG. 7) .Next, the POS system 11 The acquired ID is transmitted to the center server 10 (A5), and the personal identification number, personal information, and face photo information corresponding to the ID are acquired from the center server 10 (A6, S13 in FIG. 7). Then, the obtained personal identification number, personal information, and face photograph information are added to the visitor list 47 together with ID (A7, S14 in FIG. 7).

[0076] Next, when the user 34 approaches the POS terminal 31 to purchase a product and enters a personal identification number at the POS terminal 31 (A8, S20 in FIG. 8), the POS system 11 The ID corresponding to the number, personal information, and face photo are also identified in the visitor list 47, and the identified personal information and face photo are displayed on the POS terminal 31. As a result, the store clerk can also confirm the user with personal information and facial photographic power (A9, S21 to S23 in FIG. 8).

[0077] After the clerk confirms the user, the POS system 11 transmits the ID corresponding to the entered password and the settlement information to the center server 10 (A10, S25 in FIG. 8). At this time, the center server 10 performs a payment process based on the payment information (All).

Next, the POS system 11 updates the remaining usage limit corresponding to the ID in the store visitor list 47 (S26 in FIG. 8). Then, the POS system 11 transmits the receipt information and the usage details information to the mobile phone 35 (A12, S27 in FIG. 8), and completes the processing operation.

[Embodiment 2]

Next, another embodiment of the present invention will be described with reference to FIGS. The credit sales system according to this embodiment is different from the credit sales system shown in FIG. 1 in that user authentication is performed by the center server 10, and the other configurations are the same. In addition, the same code | symbol is attached | subjected to the structure which has the function similar to the structure demonstrated in the said embodiment, and the description is abbreviate | omitted.

[0080] The center server 10 of this embodiment is different from the center server 10 shown in FIG. The only difference is that the store visitor list as shown in FIG. 6 is stored in the database 21 and the processing operation in the control unit 20 is the same. Further, the POS server 30 of the present embodiment differs from the POS server 30 shown in FIG. 5 only in the configuration of the store visitor list 47 stored in the storage unit 41 and the processing operation in the control unit 40. Other configurations are the same. The store visitor list 47 in this embodiment is obtained by omitting the password, encryption key, and remaining usage limit from the store visitor list 47 shown in FIG.

FIG. 11 shows processing operations performed by the control unit 40 of the POS server 30 and the control unit 20 of the center server 10 when the user 34 visits the store. As shown in the figure, first, the POS server 30 searches for a newly-entered mobile phone 35 via the wireless LAN (S40) and repeats until it is found (NO in S41).

[0082] If a newly entered mobile phone 35 is found (YES in S41), the POS server 30 acquires the ID (phone number) of the mobile phone 35 that has been found through the access point 32 ( S42), the acquired ID is transmitted to the center server 10 (S43). At this time, the center server 10 stores the personal identification information (password) corresponding to the received ID, the age and gender of the personal information, the face photo, and the remaining limit of the usage information in the database 21. The force is also acquired and added to the store visitor list stored in the database 21 (S44).

[0083] Next, the center server 10 transmits the acquired face photograph, age and sex to the POS Sano 30 together with the ID (S45). At this time, the POS server 30 receives the ID, face photograph, and age and sex from the center server 10 (S46), and adds the received ID, face photograph, age and gender to the store visitor list 47 (S47). ) Then, return to step S40 and repeat the above processing operation.

FIG. 12 shows processing operations performed by the control unit 40 of the POS server 30 and the control unit 20 of the center server 10 when purchasing a product. As shown in the figure, first, the POS server 30 obtains the password of the user 34 from the POS terminal 31 by directly inputting the password at the POS terminal 31 by the user 34 (S50). And the settlement information relating to the purchase of the product is transmitted to the center server 10 (S51).

[0085] At this time, the center server 10 uses the password obtained from the POS server 30 to (S52). If the password that matches the acquired password is not found in the store list (NO in S53), the center server 10 transmits error information to the POS server 30 (S54). When receiving the error information (YES in S55), the POS server 30 performs predetermined error processing.

[0086] On the other hand, if the center server 10 finds a password that matches the acquired password from the store listing (YES in S53), the center server 10 assigns the ID corresponding to the searched password to the terminal (mobile phone ) Is transmitted to the POS server 30 as a terminal identification notification indicating that it has been identified (S56).

[0087] When the POS server 30 receives the ID from the center server 10 as a terminal identification notification (S5

7) The personal information and face photo information corresponding to the received ID are sent to the POS terminal 31 (S5

8). As a result, the store clerk can confirm the personal information and the facial photograph information power of the user 34 having the mobile phone 35. Thereafter, when the clerk inputs approval / disapproval of the user 34 at the input unit, approval approval / disapproval information indicating approval / disapproval of the clerk is created at the POS terminal 31 and transmitted to the POS server 30. Thereby, the POS server 30 can acquire the approval / disapproval information of the store clerk (S58).

Next, if the store clerk does not approve from the obtained approval approval / disapproval information (NO in S59), predetermined error processing is performed. On the other hand, if the store clerk approves (YES in S59), the ID is transmitted to the center server 10 as a settlement instruction for instructing execution of settlement (S60). Then, receipt information is transmitted to the mobile phone 35 corresponding to the ID (S61). Thereby, the trouble of printing the receipt can be saved. Thereafter, the processing operation performed by the control unit 40 of the POS server 30 is terminated.

On the other hand, when the center server 10 receives the settlement instruction from the POS Sano 30 (S62), the settlement processing unit 23 executes the settlement process based on the settlement information transmitted from the POS server 30 at step S51. Then, the usage details and the remaining usage limit of the user 34 in the database 21 are updated (S63). Then, the center server 10 updates the remaining usage limit corresponding to the ID in the visitor list of the database 21 (S64), and then ends the processing operation performed by the control unit 20 of the center server 10. .

FIG. 13 shows the control unit 40 of the POS server 30 and the center server when the user 34 leaves the store. The processing operation performed by the control unit 20 of the server 10 is shown. As shown in the figure, the POS sensor 30 first detects the cellular phone 35 that cannot communicate with the wireless LAN (S70) and repeats until it detects it (NO in S71).

[0091] When a mobile phone 35 that cannot communicate is detected (YES in S71), the ID of the detected mobile phone 35 is transmitted to the center server 10 (S72). Then, the detected ID of the mobile phone 35 and the information corresponding to the ID, that is, the age, sex, and face photo information are deleted from the store visitor list 47 of the storage unit 41 (S73), and then the process returns to step S70. Repeat the above processing.

On the other hand, when the center server 10 receives the ID of the mobile phone 35 that cannot communicate from the POS server 30, the center server 10 receives the received ID and information corresponding to the ID, that is, personal identification information, age, gender, facial photograph. And the remaining limit amount are deleted from the store visitor list of the database 21 (S74). Thereafter, the processing operation performed by the control unit 20 of the center server 10 is terminated.

In the credit sales system 1 configured as described above, the processing operation from when the user 34 makes a credit contract until the purchase of a product will be described with reference to FIG. Figure 14 outlines the processing flow in the credit sales system1. First, contract processing (B1 to B3) with a credit sales company is performed. Since this processing is similar to the contract processing (A1 to A3) with the credit sales company shown in FIG. 10, the description thereof is omitted.

[0094] Next, the user 34 holds the bag 36 containing the mobile phone 35 and visits a convenience store. Then, the POS system 11 automatically connects to the mobile phone 35 via the access point 32 and acquires the ID from the mobile phone 35 (B4, S40 to S42 in FIG. 11). Next, the POS system 11 transmits the acquired ID to the center server 10 (B5, S43 in FIG. 11). At this time, the center server 10 acquires the personal identification number, personal information, and face photo information corresponding to the received ID from the database 21, and the acquired personal identification number, personal information, and facial photo information together with the ID in the database 21. Add to the visitor list (B6, S44 in Fig. 11).

Next, the center server 10 transmits the acquired personal information and face photo information together with the ID to the POS system 11 (B7, S45′S46 in FIG. 11). At this time, the POS system 11 adds the received ID, personal information, and face photo information to the visitor list 47 (B8, Fig. 11). S47).

[0096] Next, when the user 34 approaches the POS terminal 31 in order to purchase a product and enters a personal identification number at the POS terminal 31 (B9, S50 in FIG. 12), the POS system 11 acquires the personal identification number. Is sent to the center server 10 together with the settlement information (B10, S51 in FIG. 12). At this time, the center server 10 identifies the ID corresponding to the acquired personal identification number from the store visitor list 47 (Bll, S52 in FIG. 12), and transmits the identified ID to the POS system 11 as a terminal identification notification. (B12, S56 and S57 in Fig. 12).

At this time, the POS system 11 displays personal information and a face photograph corresponding to the received ID on the POS terminal 31. As a result, the store clerk can confirm the user with personal information and facial photographic ability (B13, S58 in FIG. 12).

After the clerk confirms the user, the POS system 11 transmits the ID as a settlement instruction to the center server 10 (B14, S60 ′ S62 in FIG. 12). At this time, the center server 10 performs a payment process based on the payment information (S63 in FIG. 12), and updates the remaining usage limit corresponding to the ID in the store visitor list (S64 in FIG. 12).

Then, the POS system 11 transmits the receipt information and the usage details information to the mobile phone 35 (B15, S61 in FIG. 12), and completes the processing operation.

[0100] As described above, user authentication can be performed by the center server 10 instead of by the POS server 30.

[0101] The present invention is not limited to the above-described embodiments, and various modifications can be made within the scope of the claims, and the technical means disclosed in the different embodiments can be appropriately combined. Such embodiments are also included in the technical scope of the present invention.

[0102] For example, in the above embodiment, the POS server 30 may store the store visitor list, and may be performed by the power POS terminal 31 that performs the store visit process, the payment process, and the store exit process.

[0103] In the above embodiment, the user 34 inputs the personal identification number at the POS terminal 31 at the time of purchase of the product, but moreover, the wireless communication with the mobile phone 35 is performed. You may get both IDs. Even in this case, since the user 34 and the mobile phone 35 are identified from the above-mentioned store visitor list in which the set of the user 34 and the mobile phone 35 is narrowed down, a quick process is possible. Furthermore, in the above case, in order to avoid obtaining the ID of another mobile phone 35, it is desirable that a narrow area near the POS terminal 31 is a communication area. For this reason, it is desirable to provide the POS terminal 31 with a wireless LAN antenna having a communication area in the vicinity of the POS terminal 31 separately from the access point 32. In addition, to narrow the communication area, it is only necessary to reduce the output of power radio waves using highly directional antennas. If the radio wave output is reduced, interception by other wireless communication terminals can be prevented, and the power consumption of the mobile phone 35 and the POS terminal 31 can be reduced. The technology for reducing the output of radio waves is described in detail in, for example, Japanese Patent Application Nos. 2004-206494 and 2004-028696 filed by the applicant of the present application. .

[0105] Furthermore, in the above case, when receiving receipt information or the like from the POS system 11 to the mobile phone 35, it is desirable to transmit the antenna power of the POS terminal 31 to the mobile phone 35 from the viewpoint of privacy protection.

[0106] In the above-described embodiment, the form of merchandise sales has been described. However, any form such as immigration control can be used as long as user authentication is required. Further, in the above-described embodiment, the same can be applied to the case where the power charge described in the case of the post-paid credit sales is the prepaid prepaid.

[0107] Further, in the above embodiment, the detection that the mobile phone 35 has entered the store is checked by limiting the entrance to the predetermined gate depending on whether or not to newly enter the wireless LAN. May be performed. Similarly, it may be detected by checking that the mobile phone 35 has increased store power by limiting the exit to a predetermined gate. In this case, the check at the gate may be read by a reader that does not need to be wireless communication. Therefore, it may be a card having a magnetic tape or a bar code that is not used in a wireless communication terminal such as the cellular phone 35.

[0108] Each block in the control units 20 and 40 of the center server 10 and the POS server 30 may be configured by hardware logic, or may be realized by software using a CPU as follows. .

That is, the control units 20 and 40 of the center server 10 and the POS server 30 include a CPU that executes instructions of a control program that realizes each function, a ROM that stores the program, A RAM for expanding the program, a storage device (recording medium) such as a memory for storing the program and various data, and the like are provided. The object of the present invention is to provide program codes (execution format program, intermediate code program, source program) for the control program for the center server 10 and the control program for the POS server 30 that are software that realizes the functions described above. Recording media recorded so as to be readable by a computer are supplied to the center server 10 and the POS server 30, respectively, and the computer (or CPU or MPU) is recorded on the recording media to read and execute the program code. Can also be achieved.

[0110] Examples of the recording medium include a tape system such as a magnetic tape and a cassette tape, a magnetic disk such as a flexible disk Z hard disk, and a CD-ROMZMOZMDZD.

A disk system including an optical disk such as VDZCD-R, a card system such as an ic card (including a memory card) Z optical card, or a semiconductor memory system such as a mask ROM / EPROM / EEPROM / flash ROM can be used.

[0111] The control units 20 and 40 of the center server 10 and the POS server 30 may be configured to be connectable to a communication network, and the program code may be supplied via the communication network. The communication network is not particularly limited. For example, the Internet, intranet, extranet, LAN, ISDN, VAN, CATV communication network, virtual private network, telephone line network, mobile communication network, A satellite communication network or the like can be used. In addition, the transmission medium constituting the communication network is not particularly limited, and for example, IEEE 1394, USB, power line carrier, cable TV line, telephone line, ADSL line, etc. can be used for infrared communication such as IrD A or remote control. , BluetootM registered trademark), 802.11 wireless, HDR, mobile phone network, satellite line, terrestrial digital network, etc. The present invention can also be realized in the form of a carrier wave or a data signal sequence in which the program code is embodied by electronic transmission.

Industrial applicability

[0112] As described above, the user authentication system according to the present invention acquires the object specifying information of the portable object when the portable object enters the predetermined area, and performs the personal identification information when performing user authentication. And the corresponding object identification information is identified from the list. Both can be applied to systems that authenticate users using personally identifiable information.

Claims

The scope of the claims

[1] A user authentication system for authenticating a user using the object specifying information that the portable item carried by the user has and specifying the portable item and the individual specifying information that specifies the user,

Storage means for storing a plurality of the object specifying information and individual specifying information corresponding to each object specifying information;

An acquisition means for acquiring object specifying information of the portable object from a portable object that has entered the predetermined area;

Personal identification information corresponding to the acquired object identification information is acquired from the storage means, and list addition means for adding the set of the acquired object identification information and personal identification information to the list; and user authentication within the predetermined area. When performing, the user power also obtains personal identification information, and includes identifying means for identifying the user and the portable object by searching object identification information corresponding to the acquired personal identification information from the list. A user authentication system.

[2] The portable item has a wireless communication function,

The user authentication system according to claim 1, further comprising wireless communication means for performing wireless communication with a portable object in the predetermined area.

3. The acquisition unit according to claim 2, wherein the acquisition unit acquires the object specifying information of the portable object via the wireless communication unit that performs radio communication using weak directivity and radio waves. User authentication system.

[4] When the identification unit authenticates the user in the predetermined area, the identification unit acquires the individual identification information from the user and also acquires the object identification information from the portable object via the wireless communication unit. 3. The user authentication system according to claim 2, wherein the user and the portable object are specified by searching the list for a set of the acquired individual specifying information and object specifying information.

[5] The identification unit acquires object identification information from the portable object through the wireless communication unit that performs radio communication using radio waves having strong directivity or low output. The user authentication system described in 1.

[6] The user authentication according to claim 1, further comprising input means for the user to input personal identification information, wherein the input means is connected to the identification means by wire. system.

[7] The apparatus according to claim 1, further comprising: a list deleting unit that deletes a set of the object specifying information and the individual specifying information from the list based on the object specifying information of the portable object that has come out of the predetermined area. The user authentication system described.

[8] It further includes a display means for displaying various information,

In addition to the personal identification information, the storage means stores personal information that is information about the user,

The list adding means acquires personal identification information corresponding to the acquired object identification information and part or all of the personal information from the storage means, and acquires the acquired object identification information, personal identification information, and personal information. Is added to the list,

The identification means obtains personal information corresponding to the personal identification information acquired from the user from the list, and displays the acquired personal information via the display means, thereby supporting the identification of the user. The user authentication system according to claim 1, further comprising means.

[9] An authentication method of a user authentication system that authenticates a user using object specifying information that is included in a portable item carried by the user and that specifies the portable item and personal identification information that specifies the user. And

The user authentication system includes storage means for storing a plurality of the object specifying information and personal specifying information corresponding to each object specifying information,

An acquisition step of acquiring object identification information of the portable object from a portable object that has entered the predetermined area;

A list addition step of acquiring personal identification information corresponding to the acquired object identification information from the storage means, and adding a set of the acquired object identification information and personal identification information to the list;

When performing user authentication within the predetermined area, the user power also acquires personal identification information, and acquires object identification information corresponding to the acquired personal identification information from the list. And an identifying method for identifying the user and the portable object.

[10] A user authentication program that causes a computer to execute the acquisition unit, the list addition unit, and the identification unit in the user authentication system according to any one of claims 1 and 8 .

[11] A computer-readable recording medium in which the user authentication program according to claim 10 is recorded.