JP4388039B2 - Internet payment system - Google Patents

Description

The present invention relates to an online payment system .

  Conventionally, card identification information (card number) such as a credit card or bank card and a personal identification number are stored in a mobile phone, and when the personal identification number input to the cellular phone matches the stored personal identification number, There is a mobile phone that also functions as a card by displaying a card number on the display of the mobile phone (see, for example, Patent Document 1).

  However, such a cellular phone with a card function has the following problems.

JP 2002-64597 A

  Data is stored in and deleted from the mobile phone with a card function described in Patent Document 1 through communication. That is, it is assumed that this mobile phone is connected to a network.

  As described above, if a card number or a password is stored in a mobile phone that can be connected to a network, the card number or the password is wiretapped or altered by a malicious third party due to unauthorized access or the like. There are a lot of dangers, and it becomes a security problem.

  Therefore, if the mobile phone is configured so that it cannot be connected to the network, the above-described fear of eavesdropping or tampering may be eliminated.

  However, in recent years, it has become common for mobile phones to have a network communication function in addition to a basic call function, and it is practically difficult to configure a mobile phone so that it cannot be connected to a network. In addition, it is necessary to provide an encryption program or the like in order to prevent the stored card number and password from being read from the outside while maintaining the current configuration of the mobile phone, and the configuration becomes complicated. .

  In addition, in the case of the mobile phone of Patent Document 1, if the card number displayed on the display of the mobile phone is once stolen by a third party, regardless of unauthorized access via the network described above, The person can use the card number to conduct online commerce by credit settlement on the Internet, and security in this respect is also low.

  In consideration of the fact that online commerce can be conducted with only the card number as described above, the present patent applicant, in addition to presenting the card number, presents the card member with a fixed password predetermined by the card member. The Internet payment system has started to operate so that online commerce cannot be performed without authentication.

  However, once this fixed password is also known to a third party, it becomes possible for the third party to pretend to be a card member and conduct online commerce, which is not necessarily safe.

The present invention has been made in view of the above-described conventional problems, and the object of the present invention is that there is no risk of eavesdropping or tampering with a card number or a password by unauthorized access or the like, and Another object of the present invention is to provide an internet payment system using an internet payment assistance device that can carry out internet commerce more safely.

The invention of claim 1 is used by an online payment assisting device, a contractor terminal used by a credit card card contractor, a plurality of authentication servers for authenticating the contractor, and a credit card member store. A net settlement system using a member store terminal and a mediation server that mediates between the member store terminal and the authentication server, wherein the net settlement auxiliary device includes a display, a driving power source, and a card slot. And a portable network settlement auxiliary device that does not include an authentication processing CPU and memory, wherein the card slot is detachable from an IC card that includes a CPU and a memory. In the memory of the card, card information including at least identification information of the credit card contractor is stored in advance so that it cannot be read from the outside. The card information storage unit and authentication information, which is biometric information indicating the biometric characteristics of the contractor or the password for authenticating the contractor, are stored in advance so that they cannot be read from the outside. An authentication information storage unit; and an OTP generation information storage unit that is stored in advance in a state where the OTP generation information associated with the card information and unique to the contractor cannot be read from outside. The card CPU compares the input information input from the online payment assistant device with the authentication information stored in the authentication information storage unit of the memory of the IC card, thereby allowing the operator of the online payment assistant device. However, if the user is authenticated and the identity is confirmed, the identification information is read from the card information storage unit of the memory of the IC card. Authentication means to be displayed on the display of the online payment assistant, and after the identification information is displayed, a one-time password is generated using the OTP generation information and displayed on the display of the online payment assistant. Generating means, and in the net payment system, the authentication means of the IC card inserted in the net payment assisting device includes the input information input to the net payment assisting device, and the authentication information storage unit The user is authenticated by comparing with the authentication information stored in the card, and when the identity is confirmed, the identification information of the contractor stored in the card information storage unit is read and displayed on the display. The member store terminal receives the input from the contractor and displays the identification information displayed on the display of the online payment assisting device. Information is received at least from the contractor terminal, and the order information of the contractor, the identification information, and member store identification information for identifying the member store are transmitted to the broker server, and the broker server is connected to the member store terminal. It confirms whether the merchant identification information received from the merchant server matches the merchant identification information held in advance by the mediation server, and if it matches, the identification received together with the merchant identification information Using the information, an authentication server for authenticating credit card payment is specified, and the identification information is transmitted to the specified authentication server. The authentication server sends the received identification information to the authentication server. By confirming whether it is registered in advance, the contractor authenticates whether it is a contractor who can receive an online commerce service using the online payment assisting device, Authentication result is transmitted to the member store terminal via the mediation server, and the member store terminal sends the authentication result and the authentication to the contractor terminal if the authentication result is valid. Information indicating the access destination to the server, and the OTP generation means of the IC card inserted in the network settlement auxiliary device encrypts date / time information or usage count information at a predetermined timing with the OTP generation information The one-time password is generated and displayed on the display, and the authentication server receives access from the contractor terminal by the information indicating the access destination to the authentication server received from the member store terminal, The one-time password displayed on the display of the online payment assistant device that has received input from the contractor, and the identification information Is received from the contractor terminal, and the OTP generation information corresponding to the received identification information is specified, whereby the user authentication of the contractor is performed using the received one-time password and the specified OTP generation information. The authentication result by the one-time password and information indicating the access destination to the member store terminal are transmitted to the contractor terminal, and the member store terminal accesses the member store terminal received from the authentication server. The access by the information indicating the destination is accepted from the contractor terminal, the authentication result by the one-time password received by the contractor terminal from the authentication server is received from the contractor terminal, and the authentication result by the one-time password is valid. Transaction data including identification information of the contractor for the acquirer terminal used by the acquirer in some cases And the authentication result by the one-time password, the authorization request for the credit card settlement is transmitted to the issuer terminal used by the issuer via the acquirer terminal, and the amount of money in the order information is In the network settlement system, the result of the authorization request indicating that the credit line is secured for settlement is received from the issuer terminal via the acquirer terminal .

According to the first aspect of the present invention, if the identity verification of the contractor is not performed as a result of the identity verification of the contractor by the network settlement assisting device, even the contractor himself / herself cannot know the card information, Since the card information is stored in such a manner that it cannot be read from the card, the confidentiality of the card information is enhanced, unlike the conventional credit card in which the card information is exposed, and the unauthorized use of the card information in the Internet commerce is prevented.

  In addition, since the online payment assistance device is portable, it is possible to conduct secure online commerce using a mobile phone, a home computer, and a personal computer at the place where the contractor is located. Increase.

  In addition, since the one-time password created based on the contractor-specific OTP generation information stored in the online payment assistant device is used for the authentication of the contractor, a third party temporarily obtains the one-time password. However, it cannot be used for the next online commerce.

  The OTP generation information for generating a one-time password is stored in a state that cannot be read from the outside, so even the contractor himself cannot know the OTP generation information and operates the online payment assisting device. Only the contractor who is doing this can know the one-time password that is generated. In other words, since a one-time password cannot be generated by a third party, the safety of online commerce is further guaranteed.

  Moreover, since the one-time password is generated only after the card information is displayed on the online payment assistance device, a third party who does not have the online payment assistance device Even if only the identification information is known, the one-time password cannot be generated. Even if a third party steals the online payment assistant device, the one-time password cannot be generated without the authentication information input to the online payment assistant device.

  In other words, the contractor receives the personal authentication by the authentication means of the online payment assisting device, and further receives the personal authentication by the authentication server, and finally two different authentications are possible until the online commerce is possible. Since it is necessary to pass identity authentication based on information, spoofing by a third party is further prevented, and the safety of online commerce increases.

Further, if the password is used as the authentication information, the input means and the authentication means can be configured at a relatively low cost, so that the use of the online payment assisting device can be promoted.

In addition, if biometric information is used as authentication information , the identity of the contractor can be authenticated with high accuracy. Therefore, even if the online payment assistant device is stolen, the online payment assistant device is not likely to be misused.

  According to the online payment assisting device of the present invention, if the identity of the contractor is not verified by the online payment assisting device, even if the contractor himself / herself is not verified, the card information cannot be known. Because it is stored in a state that cannot be read from the outside, unlike conventional credit cards in which the card information is exposed, the confidentiality of the card information is increased, and unauthorized use of the card information in online commerce is prevented. .

  In addition, since the online payment assistance device is portable, it is possible to conduct secure online commerce using a mobile phone, a home computer, and a personal computer at the place where the contractor is located. Increase.

  In addition, since the one-time password created based on the contractor-specific OTP generation information stored in the online payment assistant device is used for the authentication of the contractor, a third party temporarily obtains the one-time password. However, it cannot be used for the next online commerce.

  The OTP generation information for generating a one-time password is stored in a state that cannot be read from the outside, so even the contractor himself cannot know the OTP generation information and operates the online payment assisting device. Only the contractor who is doing this can know the one-time password that is generated. In other words, since a one-time password cannot be generated by a third party, the safety of online commerce is further guaranteed.

  Moreover, since the one-time password is generated only after the card information is displayed on the online payment assistance device, a third party who does not have the online payment assistance device Even if only the identification information is known, the one-time password cannot be generated. Even if a third party steals the online payment assistant device, the one-time password cannot be generated without the authentication information input to the online payment assistant device.

In other words, the contractor receives the personal authentication by the authentication means of the online payment assisting device, and further receives the personal authentication by the authentication server, and finally two different authentications are possible until the online commerce is possible. Since it is necessary to pass identity authentication based on information, spoofing by a third party is further prevented, and the safety of online commerce increases.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments of the invention will be described in detail with reference to the accompanying drawings. FIG. 1A is an external view of the online settlement assistant device 1, and FIG. 1B is a configuration diagram of electrical hardware of the online settlement assistant device 1.

  The online payment assisting apparatus 1 includes a contractor terminal (such as a mobile phone or a personal computer) of a card contractor such as a credit card or a debit card, and an authentication server (usually owned by a card company) for authenticating the contractor. In a network payment system connected to each other, a contractor is used when performing online commerce such as online shopping by a payment using identification information of the contractor, and is shown in FIG. As described above, the casing 10 has an outer shape that fits in the palm of the hand and is thin and portable. The display 11 and the key operation unit 12 are exposed on the outer surface of the casing 10.

  The display 11 of the present embodiment is an 8-digit display, and the key operation unit 12 includes a numeric keypad 12a from 0 to 9 and a start key 12b.

  As shown in FIG. 1B, the inside of the housing 10 includes a display 11, a key operation unit 12, a card information storage unit 13, an authentication information storage unit 15, an authentication unit 14, an OTP generation unit 16, and an OTP generation. Hardware (CPU, memory) for functioning as the information storage unit 17 and the time measuring means 18, respectively, and a driving power source for driving these hardware electrical components (display 11, key operation unit 12, CPU, memory) 19 (battery).

  The housing 11 of this embodiment is provided with a slot for incorporating an IC card such as a SIM in addition to the display 11, the key operation unit 12, and the driving power supply 19. The IC card is inserted into the slot. Use. The CPU and memory used in this IC card are used. As will be described later, the card information storage unit 13, the authentication information storage unit 15, and the OTP generation information storage unit 17 store different information for each contractor, so such information is stored in the memory of the IC card. Thus, the housing 11 itself may be common regardless of the contractor by inserting it into the slot, and the housing 11 itself does not hold personal information, so that the productivity of the housing 11 is improved. In addition to the improvement, handling and management of the housing 11 are facilitated.

  Moreover, although the drive power supply 19 of the present embodiment is a button battery, it may be a solar battery or a rechargeable battery. In addition, the online payment assisting apparatus 1 may be configured so that the power is turned off in a normal state, and the power is activated when any key operation of the key operation unit 12 is performed, for example.

  Specifically, the card information storage unit 13, the authentication information storage unit 15, and the OTP generation information storage unit 17 according to the present embodiment are configured by memories that store card information, authentication information, and OTP generation information, which will be described later. Physically, the memory may be one memory that collectively stores these pieces of information, or two or more memories.

  Specifically, the authentication unit 14 and the OTP generation unit 16 of the present embodiment are configured by a program stored in a memory, and the CPU in the net settlement auxiliary device 1 reads the program from the memory and executes it. As a result, the functions of the authentication unit 14 and the OTP generation unit 16 are realized. Note that in a network settlement auxiliary device that does not include a CPU and memory, the functions of the authentication unit 14 and the OTP generation unit 16 may be realized in a circuit form using electronic components.

  The network settlement assistant device 1 of this embodiment is an individual card member from an issuer (or a bank or card issuing company that issues a debit card if it is a debit card) that issues a credit card based on a license contract with a credit card brand. Is distributed to the contractor in a state where card information, authentication information, and OTP generation information unique to each contractor are recorded in the memory at the issuer (the distribution form may be either lending or transfer). Yes, the contents stored in the memory (card information storage unit 13, authentication information storage unit 15, OTP generation information storage unit 17) cannot be read from the outside after distribution.

  Further, even the contractor himself / herself who is distributed with the online payment assisting device 1 cannot read out the recorded contents of the memory from the outside. The contractor himself / herself can know only the card information by displaying the card information on the display 11 only when the identity of the contractor is verified and the identity of the contractor is confirmed. The card information is kept secret.

  The reason why the stored contents of the memory cannot be read from the outside is that the net settlement auxiliary device 1 is a non-net-connected terminal that does not have an interface connected to a network such as the Internet. It is.

  In order to further improve security against eavesdropping and tampering with the contents stored in the memory, the Internet payment assisting device 1 or an IC card such as a SIM built in the Internet settlement assisting device 1 is tamper resistant (disassembled and If the recorded contents are read directly from the memory, the recorded contents in the memory may be erased or the program may not be started.

  Hereinafter, the details of each part of the net settlement assistant device 1 will be described.

  The card information storage unit 13 is a memory in which card information including at least contractor identification information is stored in advance so that the card information cannot be read from the outside, and the card information of this embodiment includes the contractor-specific identification information. (Card number), expiry date, and security code (a 3-digit decimal number previously encrypted by a predetermined method. Usually printed on the sign panel of a plastic type credit card. Can be confirmed). The name of the holder may also be included. Further, the card information may be composed only of identification information. Moreover, it is not necessary for the card information to include all of the expiration date, the security code, and the name of the holder, and the card information may be configured by appropriately combining one or more.

  The authentication information storage unit 15 is an authentication for authenticating the contractor's identity, such as a personal identification number determined by the contractor, or biometric information obtained by quantifying the biometric features of the contractor's fingerprint, iris, vocal cord, face photo This is a memory in which information is stored in advance so that it cannot be read from the outside.

  Note that the authentication information stored in the authentication information storage unit 15 is different from the authentication information used by the authentication server in the net settlement system for authenticating the contractor, so that the net settlement assistant device 1 authenticates the contractor. Required authentication information. Further, the authentication information in the authentication server and the authentication information in the network settlement auxiliary device 1 are different in type.

  The OTP generation information storage unit 17 is a memory in which OTP generation information unique to the net settlement assistant device 1 is stored in advance so that it cannot be read from the outside. This is a common key unique to the device 1, and the common key is stored in the card information storage unit 13 in a server (authentication server in an embodiment described later) that verifies the one-time password generated by the OTP generation unit 16. Associated with the identification information.

  The common key is a key that is stored only in the authentication server for authenticating the contractor and the net settlement auxiliary device 1 in the net commerce. In this embodiment, the OTP generation means 16 described later is a one-time key. Used to generate a password.

  The authenticating means 14 is means for authenticating whether or not the operator of the online payment assisting apparatus 1 is a contractor (card member) who can use the identification information stored in the card information storage unit 13. The input information input from the input means (in this embodiment, the numeric keypad 12a) and the authentication information stored in the authentication information storage unit 15 are checked to see if they match. It is means for reading at least identification information from the card information stored in the card information storage unit 13 and displaying it on the display 11 as the operator is the contractor himself / herself.

  The authentication unit 14 according to the present embodiment is activated when the operator presses the start key 12b of the key operation unit 12 to detect the start key 12b being pressed. After that, when the operator depresses the numeric keypad 12a corresponding to the input means and inputs a four-digit number, the authentication means 14 determines that the input number is the password stored in the authentication information storage unit 15. It is confirmed whether or not they match, and if they match, the card information is displayed on the display 11.

  If the authentication information is a personal identification number as in the present embodiment, it is sufficient if there is a numeric keypad as an input means, and the matching process between the input information and the authentication information is also easily performed. Is realized, and the use of the net settlement apparatus 1 is promoted.

  The authentication information of this embodiment is a four-digit password, but the authentication method and authentication information are not limited to this, and authentication means based on a plurality of authentication methods may be appropriately combined, and a plurality of authentication means are adopted. If this is done, the accuracy of authentication is increased accordingly, and abuse of the online payment assistance device by a third party is prevented.

  For example, if the authentication means 14 adopts a biometric authentication method, the authentication information is biometric information (data obtained by quantifying biometric features such as fingerprints, irises, vocal cords, facial photographs, etc.) The means is a scanner, a microphone, a digital camera, or the like for inputting the biometric information.

  Since the biometrics authentication method is a highly accurate authentication method, even if the online payment assistant device 1 is stolen by a third party, the online payment assistant device is not used unless the online payment assistant device 1 is distributed. 1 cannot be used and misuse is prevented.

  In addition, the personal identification number, which is the authentication information of the present embodiment, may include alphabets in addition to numerals. In this case, it is necessary for the network payment assistance apparatus to include an alphabet key in addition to the numeric keypad.

  The OTP generation unit 16 generates a one-time password based on the OTP generation information (common key in this embodiment) stored in the OTP generation information storage unit 17 after the card information is displayed by the authentication unit 14. And means for displaying on the display 11.

  This one-time password is transmitted from the contractor terminal to the authentication server, and is used for collation with the one-time password generated based on the OTP generation information by the authentication server when the authentication server authenticates the contractor. . When the verification results of these one-time passwords match and the identity is verified by the authentication server, online commerce by settlement using the identification information of the contractor becomes possible.

  In this embodiment, after authentication by the authentication means 14 is performed and the card information is displayed on the display 11, when the operator presses the start key 12b, the fact that the start key 12b has been pressed activates the OTP generation means 16. A one-time password is generated and displayed.

  The OTP generation unit 16 of the present embodiment generates a one-time password by a time synchronization method, which will be described in detail later. However, other generation methods, for example, a counter synchronization method, a challenge and response method, A one-time password may be generated.

  The time measuring means 18 is a means necessary for the OTP generation means 16 of this embodiment to generate a one-time password by the time synchronization method, and is a means for measuring time. The time measuring means 18 may be constituted by a real time clock, or a time measuring program may be stored in a memory, and the time reading program may be read and executed by the CPU to realize a time measuring function. . In addition, when the OTP generation unit 16 generates a one-time password by a method other than the time synchronization method, the time measuring unit 18 is unnecessary, and instead, a unit necessary for each generation method is added. .

  In this embodiment, as described above, the OTP generation unit 16 waits for detection of pressing of the start key 12b after the authentication unit 14 displays the card information on the display 11. When it is detected that the start key 12b is pressed, the OTP generation unit 16 transmits the pressing detection to the time measuring unit 18. The time measuring means 18 measures the date and time when the start key 12b is detected to be pressed, and delivers the date and time data (year / month / day / hour / minute / second, second is in units of 30 seconds) to the OTP generating means 16.

  Then, the OTP generation unit 16 reads the common key from the OTP generation information storage unit 17, encrypts the delivered date and time data with the read common key, converts it into a decimal number, and displays it on the display 11. The encryption method of the present embodiment employs a common key encryption method, but other encryption methods may be used.

  According to the net settlement assistant device 1 described above, the identity of the contractor is authenticated by the internet settlement assistant device 1 and the card information displayed by the authentication means 14 can be used for card settlement when the identity is confirmed. After being input from the website of the member store or the authentication server and input to the card information input screen displayed on the contractor terminal, it can be transmitted to the website or the authentication server.

  As described above, the identity verification of the contractor is performed by the net settlement assistant device 1 and is not confirmed as the principal, that is, the input information that has been input must match the authentication information stored in the net settlement assistant device. For example, the contractor himself cannot know the card information and the card information is stored in such a way that it cannot be read from the outside, which is different from the conventional credit card in which the card information is exposed. , The confidentiality of the card information is enhanced, and unauthorized use of the card information in the Internet commerce is prevented.

  In addition, since the online payment assistance device is portable, it is possible to conduct secure online commerce using a mobile phone, a home computer, and a personal computer at the place where the contractor is located. Increase.

  In addition, the one-time password displayed by the OTP generation unit 16 can be transmitted to the authentication server after being input from the authentication server that authenticates the contractor and entered on the one-time password input screen displayed on the contractor terminal. At the same time, if they match by matching with the one-time password generated by the authentication server, identity verification is performed, and online commerce by settlement using the contractor's identification information is made possible.

  In this way, since the one-time password created based on the contractor-specific OTP generation information stored in the online payment assistant device is used for the authentication of the contractor, a third party temporarily obtains the one-time password. However, it cannot be used for the next online commerce.

  The OTP generation information for generating a one-time password is stored in a state that cannot be read from the outside, so even the contractor himself cannot know the OTP generation information and operates the online payment assisting device. Only the contractor who is doing this can know the one-time password that is generated. In other words, since a one-time password cannot be generated by a third party, the safety of online commerce is further guaranteed.

  In addition, since the one-time password is generated only after the card information is displayed on the online payment assistant device, a third party who does not have the online payment assistant device Even if only the identification information is known, the one-time password cannot be generated. Even if a third party steals the online payment assistant device, the one-time password cannot be generated without the authentication information input to the online payment assistant device.

  In other words, the contractor receives the personal authentication by the authentication means of the online payment assisting device, and further receives the personal authentication by the authentication server, and finally two different authentications are possible until the online commerce is possible. Since it is necessary to pass identity authentication based on information, spoofing by a third party is further prevented, and the safety of online commerce increases.

  In addition to the above-described authentication information, the authentication information storage unit 15 receives the re-input of the input information when the input information and the authentication information do not match in the match determination process performed by the authentication unit 14 (error tolerance). Number of times) may be stored in advance. In that case, the net settlement assistant device 1 or the authentication unit 14 includes a counting unit (counter).

  In the flow in which the authentication unit 14 performs the match determination process, when the input information does not match the authentication information, the count unit counts up from 1 each time, and the counted number, the allowable error count, If the number counted up exceeds the allowable number of errors, the authenticating unit 14 prevents the processing itself from being performed, and further prevents the OTP generating unit 16 from being activated. The authentication flow and the OTP generation flow are not performed.

  As a result, it is possible to prevent the card information and the one-time password from being displayed on the display 11 as a result of a malicious third party stealing the online payment assisting device 1 and entering authentication information on a random basis. .

If the input information and the authentication information match without the counted up number exceeding the allowable number of errors, the authentication unit 14 displays the card information on the display 11. The counted up number is reset (initialized) to 0.

  Here, FIG. 5 shows an example of the operation procedure of the online payment assisting apparatus 1 and the screen transition of the display 11. The display 11 of this embodiment is an 8-digit alphanumeric / symbol display.

  First, when the start key 12b is pressed by the operator, the power source of the online payment assisting apparatus 1 is activated (S200), and “APPLI” is displayed on the display 11 (S210), so the start key 12b is further pressed. (S225) When the card information is to be displayed, the operator presses "1" on the numeric keypad 12a (S230), and when the authentication information (password) is to be changed, "2" on the numeric keypad 12a. "Is pressed (S330).

  When “1” is pressed (S230), “PIN” is displayed on the display 11. Therefore, the operator selects and presses the 4-digit password from the numeric keypad 12a as authentication information (S240). Thereafter, the start key 12b is pressed (S245), and if the pressed password matches the authentication information stored in the authentication information storage unit 15, of the card information stored in the card information storage unit 13 First, the upper eight digits of identification information (hereinafter referred to as a card number) are displayed on the display 11 (S250).

  Subsequently, when the start key 12b is pressed (S255), the last eight digits of the card number are displayed on the display 11 (S260).

  Subsequently, when the start key 12b is pressed (S265), the expiration date and the security code are displayed on the display 11 (S270). Note that the flow of S265 and S270 is not essential, and only the card number in the card information may be displayed.

  Subsequently, when the start key 12b is pressed (S275), “OTP = 1” is displayed on the display 11, and a selection is made as to whether to generate and display a one-time password or whether to end. Here, after the start key 12b is pressed (S290), when “1” of the numeric keypad 12a is pressed (S295), “PIN” prompting the user to input authentication information is displayed on the display 11 (S305). ) The operator again presses the 4-digit password from the numeric keypad 12a and presses the start key 12b (S310).

  If the pressed password matches the authentication information stored in the authentication information storage unit 15, a one-time password is generated based on the OTP generation information stored in the OTP generation information storage unit 17, and this is displayed on the display. 11 (S315).

  When the start key 12b is pressed again (S320), the power supply of the online payment assisting apparatus 1 is shut off.

  When a key other than “1” on the numeric keypad 12a is pressed or no key is pressed and a predetermined time has elapsed (S300), the power supply of the online settlement assisting apparatus 1 is automatically turned on. Blocked.

  Note that the passwords input in S240 and S305 may be different passwords for displaying card information and for generating a one-time password. In this case, each password is stored in the authentication information storage unit 15. It is stored separately.

  In the present embodiment, before the flow of displaying the one-time password on the display 11 (S315), the operator is prompted to input authentication information again in S305. However, S305 is omitted and S310 is started. A one-time password may be generated only by pressing the key 12b.

  If “2” on the numeric keypad 12a is pressed after S225 (S330), “CHANGE?” Is displayed on the display 11 (S335).

  When the start key 12b is pressed (S340), “PIN” is displayed on the display 11 and the password is prompted to be entered, so the operator presses the 4-digit password from the numeric keypad 12a (S345). Further, when the start key 12b is pressed (S350) and the pressed password matches the authentication information stored in the authentication information storage unit 15, “NEW1” prompting the input of the changed password is displayed. 11, the operator presses the changed password from the numeric keypad 12a (S355), and further presses the start key 12b (S360).

  Next, “NEW2” prompting the input of the changed password is displayed on the display 11 again, so that the operator presses the changed password again from the numeric keypad 12a (S365). Further, the start key 12b is pressed (S370).

  If the personal identification number pressed in S355 matches the personal identification number pressed in S365, “COMPLETE” indicating that the personal identification number has been changed is displayed on the display 11 (S375). After the confirmation, when the start key 12b is pressed (S380), the procedure for changing the personal identification number is completed and the power is shut off.

In order to improve security, it is desirable that the input value is not displayed on the display 11 even if an input is made from the numeric keypad 12a in S355 and S365.

  In the following, a credit card member (hereinafter referred to as a card member) who is a credit card contractor distributed with the online payment assisting device 1 shown in FIG. An embodiment in the case where network commerce such as internet shopping (hereinafter referred to as “net commerce”) is performed from a mobile phone by settlement using the card number of the card member will be described.

  The system configuration and network connection relationship of the network settlement system of this embodiment are shown in the system configuration diagram of FIG. The flow of online commerce in the online payment system of the present embodiment is shown in the flowchart of FIG.

  In this embodiment, it is a credit card brand that provides an online commerce service in the online payment system.

  The card member applies for a credit card in advance to the issuer and receives the issue of the credit card. At the same time, the issuer receives authentication information specific to each card member (such as the PIN number registered by the card member when applying for the credit card, It is assumed that the distribution device 1 has received distribution of the online payment assisting device 1 storing biometric information such as fingerprint information), card information (card number unique to each card member, expiration date), and OTP generation information (common key). .

  In the present embodiment, the configuration excluding the display 11, the key operation unit 12, and the driving power source 19 among the configurations of the online settlement assisting device 1 shown in FIG. 1B is stored in advance in an IC card such as a SIM. The function of the net settlement assisting apparatus 1 is realized by inserting the IC card into an IC card slot (not shown) provided in the housing 10. The IC card may not be provided, and when the IC card is not provided, the network settlement assisting device itself may be provided with a CPU and a memory.

  In addition, the online payment assisting apparatus 1 of the present embodiment is used for online commerce using card member identification information, that is, card payment, but the card member wants only online commerce. However, when a real face-to-face transaction using a credit card made of a conventional plastic type magnetic card, IC card or the like is not desired, the credit card is not required to be issued.

  In addition, when the credit card brand also performs the issuer's business, the network settlement assistance device 1 may be distributed from the credit card brand.

  The member terminal 2 is a contractor's terminal, and is a terminal for a card member to conduct online commerce using the online payment assisting device 1, such as a personal computer or a mobile phone having at least a communication function and a browser display function. It is a terminal.

  The member store terminal 3 provides a virtual store (website) to the member terminal 2 to accept orders for goods and services, and requests the issuer to authenticate the card member who has ordered, and the card member's identity is verified. Once done, the authorization (card acquisition / contract / management operations based on the license agreement with the credit card brand) is authorized to the credit card for the amount of goods and services ordered. This is a terminal that checks whether or not a member remains, and requests that the amount of credit be secured for settlement if a credit limit remains.

  The acquirer terminal 4 is a terminal that re-requests the authorization request received from the member store terminal 3 to the issuer (authorization re-directed).

  The intermediary server 5 is a server that serves as an intermediary between the member store terminal 3 and an authentication server 7 described later, that is, a role that mediates the card member authentication service between the member terminal 2 and the member store terminal 3.

  In this embodiment, the mediation server 5 is a server operated by a credit card brand, and the member store identification information for identifying the member store corresponding to the Internet commerce service using the Internet settlement assisting device 1 and the Internet settlement assisting device. And issuer identification information for identifying an issuer corresponding to the Internet commerce service using 1.

  In the net settlement system according to the present embodiment, when the internet commerce service that does not use the internet settlement assisting device 1 is mixed, the intermediary server 5 is a member that does not support the internet commerce service using the net settlement assisting device 1. Store and issuer identification information must be stored separately from the member store identification information and issuer identification information.

  The issuer terminal 6 is a terminal that accepts an authorization request received from the acquirer terminal 4 and performs authorization.

  The authentication server 7 is a server that authenticates the identity of the card member prior to authorization when performing online commerce. In the present embodiment, the authentication server 7 is a server operated by the issuer, connected to the issuer terminal 6, and card information (card card) of a card member who can perform online commerce using the online payment assisting device 1. Number, expiration date) and OTP generation information (a common key unique to the network settlement assistant device 1) are stored in a state of being associated with each other. That is, for each card member, the card information and the OTP generation information are associated with each other and stored in the authentication server 7.

  Note that the storage of these pieces of information in the authentication server 7 is performed at the same time as or before and after the distribution of the online payment assisting device 1 to the card members.

  In FIG. 2, the member terminal 2, the member store terminal 3, the mediation server 5, and the authentication server 7 are respectively connected by a network 9a such as the Internet, and the member store terminal 3, the acquirer terminal 4, and the issuer terminal 6 are Are connected by a dedicated line 9b.

  The issuer terminal 6 and the authentication server 7 are individually prepared for each issuer, and are connected to the member terminal 2, the acquirer terminal 4, and the mediation server 5 through the network 9a and the dedicated line 9b.

The member store terminals 3 are also prepared for each member store, and are connected to the member terminal 2, the mediation server 5, and the acquirer terminal 4 through the network 9a and the dedicated line 9b.

  Hereinafter, the flow of online commerce using the online payment assisting apparatus 1 will be described based on the flowchart of FIG. 3 and the system configuration diagram of FIG. The card member accesses the member store terminal 3 which is a virtual store (Web site) from the member terminal 2 via the network 9a, and browses products and services. Then, when the product to be ordered and the desired service are determined, the member terminal 2 transmits to the member store terminal 3 a request for online commerce by card settlement regarding the ordered product and the desired service.

  The member store terminal 3 displays the card information input screen 100 as shown in FIG. 4A on the member terminal 2, and inputs the card number and the card expiration date to the member terminal 2 so as to transmit. To ask.

  Therefore, when the card member presses the start key 12b of the net settlement assisting apparatus 1, the authentication means 14 of the net settlement assisting apparatus 1 is activated, and the net settlement assisting apparatus 1 enters an authentication waiting state. Subsequently, the card member inputs input information (four-digit personal identification number in this embodiment) necessary for personal authentication from the numeric keypad 12a. The four-digit password entered here is determined in advance by the card member when applying for the card, and is already stored in the authentication information storage unit 15 in the network settlement assistant device 1.

  The authentication unit 14 reads out the authentication information stored in the authentication information storage unit 15 and confirms whether it matches the input information input from the numeric keypad 12a. If the two match, the authentication unit 14 reads the card number and the expiration date as the card information from the card information storage unit 13 and displays them on the display 11.

  When all the card numbers and expiration dates are displayed on the display 11, the authentication unit 14 notifies the OTP generation unit 16 that the display has been completed. As a result, the OTP generation unit 16 enters a one-time password generation waiting state to be described later.

  In this embodiment, since the number of digits that can be displayed on the display 11 is limited to 8 digits, the authentication unit 14 divides the card number read from the card information storage unit 13 into upper 8 digits and lower 8 digits. After processing, first, the first eight digits of the card number are displayed on the display 11. Based on the display, the card member inputs the first eight digits of the card number in the card number input field 100a of the card information input screen 100.

  When the first eight digits of the card number have been entered, the card member presses the start key 12b. Upon receiving the detection of pressing of the start key 12b, the authentication unit 14 displays the last 8 digits of the card number on the display 11. Based on the display, the card member inputs the last eight digits of the card number in the card number input field 100a of the card information input screen 100.

  When the last eight digits of the card number have been entered, the card member presses the start key 12b. Upon receiving detection of pressing of the start key 12b, the authentication unit 14 displays the expiration date in four digits (MM (month) / YY (year)). Based on the display, the card member inputs the expiration date in the expiration date input field 100b of the card information input screen 100.

  Of course, if the display area and the number of digits that can be displayed are sufficient, the card number may be displayed on the display all at once, or the card number and the expiration date may be displayed all at once. May be. Conversely, when the displayable number of digits is less than 8 digits, the authentication unit 14 divides the card information read from the card information storage unit 13 in advance according to the number of displayable digits, and starts the start key. 12b In addition, the divided card information may be displayed sequentially by detecting pressing of an arbitrary key.

As described above, the online payment assistance device 1 displays the card information on the display 11 only when the input information that has been input matches the authentication information stored in the authentication information storage unit 15. If the information is not known, even if a third party steals the online payment assisting apparatus 1, the internal card information cannot be known. Therefore, it is safer than a conventional credit card on which card information is printed, and there is no fear that the card information is misused for online commerce.

  When the card member finishes inputting the card number and the expiration date (not shown in the card information input screen 100 in FIG. 4), the ordered product / service name, price, order date, member store name, The information such as the shipping address may be displayed on the same screen), and the transmission button 100c in the card information input screen 100 is clicked. When the send button 100c is clicked, the entered card information is sent to the member store terminal 3 (S10).

  Received from the member terminal 2 order information regarding the ordered product / service name, price, order date, member store name, merchandise destination, etc., and card information such as the card number and expiration date of the card used for the settlement of the ordered product In addition to the received card information, the member store terminal 3 transmits member store identification information given to each member store to the intermediary server 5 connected via the network 9a. It is requested to confirm whether or not it is a member who can receive the used online commerce service (authentication execution availability confirmation) (S20).

  The intermediary server 5 checks whether or not the received member store identification information matches the member store identification information that it holds (member store authentication). If these pieces of information match, it means that the intermediary server 5 has been accessed from the member store terminal 3 of the member store participating in the online commerce service using the online payment assisting device 1. If they do not match, it is an access from the member store terminal 3 that does not participate in the online commerce service using the online payment assisting device 1 or is an unauthorized access, and therefore the subsequent flow does not proceed.

  Based on the card information of the card member received from the member store terminal 3 participating in the online commerce service using the online payment assisting device 1, the mediation server 5 identifies the issuer in which the card number of the card member has been issued. Then, the card information is transmitted to the identified issuer authentication server 7 to confirm whether or not the card member is a member who can receive the online commerce service using the online payment assisting device 1 (authentication execution availability confirmation). Request (S30).

  In the mediation server 5 of this embodiment, issuer identification information for identifying an issuer is stored. The mediation server 5 searches the issuer identification information based on the received card information to identify the issuer.

  That is, the mediation server 5 of this embodiment does not directly check whether or not the authentication can be performed, but performs member store authentication and issues a card member card number based on the card information received from the member store terminal 3. The specified issuer is specified, the card information is transferred to the specified authentication server 7 of the specified issuer, and the authentication execution propriety confirmation result received from the authentication server 7 is transferred to the member store terminal 3.

  In this embodiment, the mediation server 5 is a server operated by a credit card brand. However, each member store terminal 3 may be provided with this, and in this case, the member store terminal 3 is directly connected. The authentication server 7 is requested to confirm whether or not authentication can be executed. Further, the authentication server 7 may perform member store authentication.

  The authentication server 7 confirms whether or not the card information received from the intermediary server 5 is registered in the authentication server 7, so that the card member having the card information performs an online commerce service using the online payment assisting device 1. It is confirmed whether or not the card member can be accepted (authentication execution propriety confirmation), and the result is returned to the mediation server 5 (S40). Note that the authentication execution propriety confirmation result is “OK” if the card information received from the intermediary server 5 is registered in the authentication server 7, and “NO” if not registered.

  Then, the mediation server 5 that has received the authentication execution propriety confirmation result transfers the result to the member store terminal 3 (S50).

  When the card member authentication execution confirmation result is “Yes”, this means that the card member can receive the online commerce service using the online payment assisting device 1. The process proceeds to a flow for requesting the member authentication (S60). Specifically, the member store terminal 3 transmits to the member terminal 2 the URL information of the authentication server 7 of the issuer that has previously confirmed whether or not the authentication can be executed, together with the result of whether or not the authentication can be executed.

  The member terminal 2 that has received the authentication request from the member store terminal 3 accesses the same authentication server 7 that was previously accessed by the mediation server 5 based on the received URL, and makes an authentication request (S70). Note that the flow of S70 is performed as a series of flow from S60, and can be realized by using a redirect function or the like generally provided in a personal computer or a mobile phone browser used as the member terminal 2, and the card member is conscious of it. This is a flow that is automatically processed inside the member terminal 2.

  The authentication server 7 prompts the member terminal 2 to transmit a one-time password, and authenticates the card member based on the one-time password received from the member terminal 2 (S80).

  Specifically, the authentication server 7 receives the card information and the order information from the member terminal 2 that has accessed, and the card member having this card information has just passed through the intermediary server 5 from the member store terminal 3. Then, it is confirmed whether or not the card member has received a request to confirm whether or not to execute authentication. This confirmation leaves a log as to whether or not the card member's card information has been received from the intermediary server 5 before a predetermined time, and the card member's card information received from the member terminal 2 is stored for a predetermined time. This is done by checking whether or not it matches the card information previously left in the log.

  The order information may be transmitted from the member store terminal 3 to the authentication server 7 via the mediation server 5 in the flow of S20, 30 instead of from the member terminal 2, or from the member store terminal 3 to the member terminal. 2, when the URL information of the authentication server 7 is transmitted, the URL information may be transmitted together and transferred to the authentication server 7 when the member terminal 2 accesses the authentication server 7.

  In addition, the authentication server 7 can check whether the card member of the member terminal 2 that has been accessed is the same as the card member that has received the authentication execution permission confirmation request from the member store terminal 3 only by checking the card information. Instead, the order information may be received from both the member terminal 2 and the member store terminal 3 (directly the intermediary server 5), and their collation may be performed together.

  If the authentication server 7 confirms that the access is from the card settlement network settlement auxiliary device 1 of the card member who has received the request to confirm whether or not the authentication can be executed first, the authentication server 7 uses the received order information as shown in FIG. The one-time password input screen 101 as shown in FIG. 6 is created and transmitted to the member terminal 2 that has been accessed.

  On the one-time password input screen 101 in FIG. 4B, the name of the member store with whom the card member conducts the online commerce, the amount of goods / services to be ordered, and the order date are displayed.

  When the one-time password input screen 101 is displayed on the member terminal 2, the card member presses the start key 12 b of the online payment assisting apparatus 1. When detecting that the start key 12b has been pressed, the OTP generation unit 16 of the online payment assisting apparatus 1 shifts from the one-time password generation waiting state to the one-time password generation flow.

  The OTP generation unit 16 reads the common key stored in the OTP generation information storage unit 17, and the date / time data (year / month / day / second, second is 30) measured by the timing unit 18 and including the date / time when the start key 12b is pressed. A one-time password is generated by encrypting the second unit) with this common key, and this is converted to a decimal number and displayed on the display 11. Note that the encryption method of this embodiment employs a common key encryption method. Further, since the displayable number of digits of the display 11 of the present embodiment is eight digits, the upper six to eight digits of the generated one-time password are displayed on the display 11.

  When the card member inputs the one-time password displayed on the display 11 of the network settlement assistant device 1 in the password input field 101a of the one-time password input screen 101 displayed on the member terminal 2, and clicks the send button 101b, The input one-time password is transmitted to the authentication server 7.

  After the input of the one-time password is completed, the card member re-presses the start key 12b of the net settlement assisting apparatus 1 to change the one-time password displayed on the display 11 of the net settlement assisting apparatus 1. It is desirable from the viewpoint of security to hide it. At the same time, it is desirable to turn off the power supply from the viewpoint of energy saving.

  Upon receiving the one-time password from the member terminal 2, the authentication server 7 first confirms that the member terminal 2 is the other party who requested the transmission of the one-time password first, This is confirmed by confirming whether or not the reply is for the one-time password input screen 101 generated and transmitted individually for the member terminal 2.

  After the confirmation, the authentication server 7 uses the card member's card information received before requesting the transmission of the one-time password to obtain the common key registered in association with this card number from the OTP generation information. The date / time data (year / month / day / second, second is in units of 30 seconds) consisting of the date / time when the authentication server 7 received the one-time password from the member terminal 2 is encrypted with this common key, and a one-time password is generated. Is converted to decimal. Note that the encryption method of this embodiment employs a common key encryption method.

  In this way, the authentication server 7 confirms whether or not the one-time password generated by the authentication server 7 matches the one-time password received from the member terminal 2 earlier. If they match, it is proved that the one-time password is a one-time password created almost at the same time by the common key stored only in the network settlement assistant device 1 and the authentication server 7.

  In other words, the operator of the member terminal 2 who has transmitted the one-time password to the authentication server 7 stores the common key used for generating the one-time password and card information associated with the common key. The card member who is an operator of the apparatus 1 and can use the card information, and the identity of the card member who requested the online commerce is confirmed.

  When the one-time password generation method employs a time synchronization method as in the present embodiment, the date and time used by the online settlement assistant device 1 for one-time password generation and the authentication server 7 for one-time password generation. The date and time are not exactly the same. Therefore, after the authentication server 7 generates the one-time password, the card member presses the start key 12b of the net settlement assisting apparatus 1 and the net settlement assisting apparatus 1 In this embodiment, the second resolution of the date / time data is set to 30 seconds in consideration of the time difference until the one-time password is generated.

  However, as long as the one-time passwords generated by the two do not completely match, the card member does not recognize the authenticity of the card member. If the card member presses the start key 12b of the online payment assisting device 1, the one-time password is generated. When the authentication server 7 has received more than 30 seconds from when the authentication server 7 receives the one-time password from the member terminal 2, the one-time passwords do not match and authentication is not performed. On the contrary, the convenience of online commerce will be impaired.

  Therefore, even if the one-time password received from the member terminal 2 does not match, the authentication server 7 shifts the date and time when the one-time password is received from the member terminal 2 by N times before and after by 30 seconds, and the authentication server 7 If the one-time password is generated again on the side and matches the one-time password generated on the member terminal 2, the identity of the card member is confirmed.

  N is determined in advance in consideration of security accuracy. That is, when it is desired to increase the security accuracy, N is set small. When the security accuracy is decreased and priority is given to the convenience on the cardholder side, N is set large.

  The authentication server 7 transmits the card member authentication result based on the one-time password verification to the member terminal 2 (S90). Specifically, the authentication server 7 transmits the URL information of the member store terminal 3 in addition to the authentication result to the member terminal 2 so that the authentication result is transferred from the member terminal 2 to the member store terminal 3. Keep it.

  The member terminal 2 that has received the authentication result further transfers the authentication result (person authentication OK, user authentication NG) to the member store terminal 3 (S100). Like S70, the flow of S100 is performed as a series of flow from S90, and can be realized by the redirect function of the browser of the member terminal 2. In practice, the card member is not conscious of the inside of the member terminal 2. It is a flow that is automatically processed.

  The member store terminal 3 receives the authentication result from the member terminal 2, and when the identity of the card member is confirmed as a result of the authentication (authentication of the user is OK), the member store terminal 3 makes an authorization request for the card member to the acquirer. In addition, the authentication result is transmitted to the acquirer terminal 4 in addition to the transaction data including the card member's card information and the desired payment amount (the amount of the product / service that the card member intends to order) (S110). Note that the transaction data already generated at the time when the order information and the card information are transmitted from the member terminal 2 and stored in the member store terminal 3 in S10 may be read.

  Based on the transaction data received from the member store terminal 3 and the authentication result, the acquirer terminal 4 identifies the issuer that is the card issuer based on the card number of the card member of the personal authentication OK, and the issuer of the identified issuer. The transaction data and the authentication result are transferred to the terminal 6 (S120).

  Upon receiving the transaction data and the authentication result, the issuer terminal 6 receives the authorization request for the desired payment amount included in the transaction data based on the member information and credit information for each member stored in a member database (not shown). Check if it is within the credit line of the member. If the desired settlement amount is within the range of the credit limit, the credit OK for the desired settlement amount is secured as an authorization OK.

  Then, the issuer terminal 6 transmits the authorization result (authorization OK, authorization NG) to the acquirer terminal 4 (S130), and the acquirer terminal 4 transfers the authorization result to the member store terminal 3 (S140). ).

  Then, after receiving the authorization result from the acquirer terminal 4, the member store terminal 3 notifies the member terminal 2 of the result (S150). Specifically, if the authorization result is OK, a screen to the effect that online commerce by settlement using the card number of the card member is established between the member store and the card member is sent to the member terminal 2 And displayed on the member terminal 2. If the authorization result is NG, a screen indicating that the Internet commerce is not established is transmitted to the member terminal 2 and displayed.

In the present embodiment, the personal authentication using the one-time password in the authentication server 7 is performed every time an online business transaction is performed between the member terminal 2 and the member store terminal 3. That is, since the one-time password generated by the OTP generation means 16 of this embodiment is effective for one-time online commerce, a third party who does not have an online payment assistant device temporarily Even if eavesdropping, the third party cannot impersonate the card member and carry out subsequent online commerce, and the safety of online commerce is further improved.

  Next, the card member distributed with the online payment assistant device 1a (not shown) uses the card member's card number from a personal computer or mobile phone having a communication function using the online payment assistant device 1a. An embodiment in which online commerce is performed by settlement will be described.

  The difference between the first embodiment and the present embodiment is that the one-time password generation method of the OTP generation means 16 included in the net settlement auxiliary device, the stored contents of the OTP generation information storage unit 17, and the member terminal in FIG. 2 and the contents of an authentication flow (S80, S90) between the authentication server 7 and the authentication server 7 (in this embodiment, the authentication server 7a).

  That is, in the first embodiment, the one-time password generation method is the time synchronization method, but in the present embodiment, the use frequency synchronization method is adopted. Along with this, in the online settlement assisting apparatus 1a of the present embodiment, the time measuring means 18 described in FIG. 1 replaces the counting means 18a (not shown).

  Regarding the net settlement assistance devices 1 and 1a and the authentication servers 7 and 7a, the configuration other than the above-described differences and the flow other than S80 and S90 are the same as those in the embodiment shown in FIGS. Hereinafter, the detailed flow of only the portions of S80 and S90 in FIG. 3 will be described with reference to FIGS.

  The OTP generation information stored in the OTP generation information storage unit 17 of the present embodiment is composed of a common key unique to the net settlement assistant device 1a and usage count information.

  Among these, the common key is stored in the OTP generation information storage unit 17 in a non-rewritable state, and is stored in the card information storage unit 13 in the authentication server 7a that verifies the one-time password generated by the OTP generation unit 16. Associated with stored card number.

  Similar to the common key, the usage number information is associated with the card number stored in the card information storage unit 13 in the authentication server 7a.

  That is, these OTP generation information is stored in the authentication server 7a in a state associated with the card number, and when the authentication server 7a receives the one-time password from the member terminal 2, the authentication is performed in the same manner as the member terminal 2. The server 7a also generates a one-time password and checks whether or not they match, thereby performing validity verification of the one-time password and card member authentication.

  The usage count information is information that can be rewritten only when a rewrite command is issued from the OTP generation means 16, and is incremented by 1 such as 0 times, once, and twice by the counting means 18a. Alternatively, after subtracting one by one, such as 100 times, 99 times, and 98 times, the numerical value after addition or subtraction is stored in the OTP generation information storage unit 17, and the usage count information is updated. Whether to add or subtract is determined in advance.

  The counting means 18a may be included in the OTP generation means 16, or may be provided separately from the OTP generation means 16. In the latter case, the OTP generation means 16 controls the counting means 18a. Thus, the usage frequency information needs to be rewritten.

  In S80 of FIG. 3, the authentication server 7a first prompts the member terminal 2 to transmit a one-time password, and authenticates the card member based on the one-time password received from the member terminal 2.

  Specifically, the authentication server 7a receives the card information and the order information from the member terminal 2 that has accessed, and the card member having this card information has just passed through the intermediary server 5 from the member store terminal 3. Then, it is confirmed whether or not the card member has received a request to confirm whether or not to execute authentication. This confirmation leaves a log as to whether or not the card member's card information has been received from the intermediary server 5 before a predetermined time, and the card member's card information received from the member terminal 2 is stored for a predetermined time. This is done by checking whether or not it matches the card information previously left in the log.

  Note that the order information may be transmitted from the member store terminal 3 to the authentication server 7a via the mediation server 5 in the flow of S20, 30 instead of from the member terminal 2, or from the member store terminal 3 to the member terminal. 2, when the URL information of the authentication server 7a is transmitted, it may be transmitted together and transferred to the authentication server 7a when the member terminal 2 accesses the authentication server 7a.

  In addition, if the authentication server 7a is the same as the card member of the member terminal 2 that has accessed and the card member that has received the request for confirmation of whether or not authentication can be executed from the member store terminal 3, it can be confirmed only by checking the card information. Instead, the order information may be received from both the member terminal 2 and the member store terminal 3 (directly the intermediary server 5), and their collation may be performed together.

  When it is confirmed that the authentication server 7a is an access from the card settlement auxiliary device 1 of the card member who has received the authentication execution feasibility confirmation request, the authentication server 7a uses the received order information as shown in FIG. The one-time password input screen 101 as shown in FIG. 6 is created and transmitted to the member terminal 2 that has been accessed.

  On the one-time password input screen 101 in FIG. 4B, the name of the member store with whom the card member conducts the online commerce, the amount of goods / services to be ordered, and the order date are displayed.

  When the one-time password input screen 101 is displayed on the member terminal 2, the card member presses the start key 12 b of the online payment assisting apparatus 1. When detecting that the start key 12b has been pressed, the OTP generation unit 16 of the online payment assisting apparatus 1 shifts from the one-time password generation waiting state to the one-time password generation flow.

  The OTP generation unit 16 reads the common key and the usage count information stored in the OTP generation information storage unit 17, encrypts the usage count information with the common key, generates a one-time password, and converts this into a decimal number. Displayed on the display 11.

  In the present embodiment, a one-time password is generated by using a predetermined one-time password generation algorithm for the usage count information.

  Further, since the displayable number of digits of the display 11 of the present embodiment is eight digits, the upper six to eight digits of the generated one-time password are displayed on the display 11.

  Note that the OTP generation information may include arbitrary information (for example, a policy or the like) that can be known only by the network settlement assistant device 1a and the authentication server 7a, in addition to the above-described usage count information and the common key. In that case, the number-of-uses information and the arbitrary information may be encrypted with a common key to generate a one-time password.

  After generating the one-time password, the OTP generation unit 16 causes the counting unit 18a to add or subtract 1 from the previously read usage count information, and rewrite and update the usage count information in the OTP generation information storage unit 17. .

  When the card member inputs the one-time password displayed on the display 11 of the network settlement assistant device 1 in the password input field 101a of the one-time password input screen 101 displayed on the member terminal 2, and clicks the send button 101b, The input one-time password is transmitted to the authentication server 7a.

  After the input of the one-time password is completed, the card member re-presses the start key 12b of the net settlement assisting apparatus 1 to change the one-time password displayed on the display 11 of the net settlement assisting apparatus 1. It is desirable from the viewpoint of security to hide it. At the same time, it is desirable to turn off the power supply from the viewpoint of energy saving.

  Upon receiving the one-time password from the member terminal 2, the authentication server 7a first confirms that the member terminal 2 is the other party who previously requested the transmission of the one-time password, This is confirmed by confirming whether or not the reply is for the one-time password input screen 101 generated and transmitted individually for the member terminal 2.

  After the confirmation, the authentication server 7a, based on the card information of the card member received before requesting the transmission of the one-time password, from the OTP generation information, the common key registered in association with this card number The usage number information is taken out, the usage number information is encrypted with a common key to generate a one-time password, and this is converted into a decimal number.

  In the present embodiment, a one-time password is generated by using a predetermined one-time password generation algorithm for the usage count information. Further, if arbitrary information is included in the OTP generation information, the arbitrary information is encrypted with the common key in addition to the usage count information.

  In this way, the authentication server 7a checks whether the one-time password generated by the authentication server 7a matches the one-time password received from the member terminal 2 earlier. If they match, it is proved that this one-time password is a one-time password created by using the number-of-uses information stored only in the network settlement assistant device 1 and the authentication server 7a and the common key.

  That is, the operator of the member terminal 2 that has transmitted the one-time password to the authentication server 7a is associated with the usage count information and the common key used to generate the one-time password, and the shared usage count information and the pass key. The operator of the online payment assisting apparatus 1 in which the card information is stored and the card member who can use the card information, and the identity of the card member who requested the online commerce has been confirmed. become.

  The authentication server 7a transmits the card member authentication result (personal authentication OK, personal authentication NG) based on the one-time password verification to the member terminal 2 and determines the number-of-uses information used for the previous one-time password generation in advance. The addition or subtraction is performed by the calculated calculation method, and the calculation result is rewritten and updated as the use frequency information in the authentication server 7a (S90).

  When the one-time password generation method adopts the usage frequency synchronization method as in the present embodiment, even if the operator of the member terminal 2 and the net settlement assistant device 1a is a valid card member, The number-of-uses information used by the settlement assistant device 1a for generating the one-time password is different from the number-of-uses information used by the authentication server 7a for generating the one-time password, and the one-time password may not match.

  Even if a card member generates a one-time password in the online payment assisting device 1a, there is no guarantee that it will be transmitted to the authentication server 7a, and the card member interrupts online commerce, In addition, even though the Internet commerce is not performed in the first place, the one-time password may be generated accidentally by operating the online payment assisting apparatus 1a. In such a case, the usage count information of the network settlement assistant device 1a is updated, but the usage count information of the authentication server 7a is not updated, so that the generated one-time password is naturally different. .

  However, as long as the one-time passwords generated by the two do not completely match, if the authenticity of the card member is not recognized, the authentication NG will increase, and the convenience of Internet commerce will be impaired.

  Therefore, even when the one-time password received from the member terminal 2 does not match, the authentication server 7a changes the usage count information stored in the authentication server 7a within a predetermined range (for example, usage count information + N). If the one-time password is generated again on the authentication server 7a side and matches the one-time password generated on the member terminal 2, the identity of the card member is confirmed.

N is determined in advance in consideration of security accuracy. That is, when it is desired to increase the security accuracy, N is set small. When the security accuracy is decreased and priority is given to the convenience on the cardholder side, N is set large.

  As described above, when online commerce is performed using the online payment assistant device of the present invention, when the card information is input to the card information input screen, the input information input to the online payment assistant device is transferred to the online payment assistant device. If the card information does not match the stored authentication information, even card members themselves cannot know the card information, so the confidentiality of the card information is enhanced, unlike conventional credit cards that expose the card information. Unauthorized use of card information in online commerce is prevented.

  In addition, since the online payment assistance device is portable, it is possible to conduct safe online commerce using a mobile phone, personal computer at home, and personal computer at the place where the cardholder is located. Increase.

  Further, the identity authentication of the card member when the online commerce is performed is performed based on whether or not the one-time password generated by the online payment assisting device matches the one-time password generated by the authentication server.

  This one-time password is unique to the online payment assistant device, is stored only in the online payment assistant device and the authentication server, and a predetermined key can be pressed using a common key that cannot be known even by the cardholder itself. This is an encrypted version of usage count information that is updated each time date / time data or a one-time password is generated.

  In other words, since it is authentication information that can be created only by the card member who operates the online payment assistant device, a third party who does not possess the online payment assistant device can pretend to be a card member and conduct online commerce. It is not possible to improve the safety of online commerce.

  Moreover, since the one-time password is generated only after the card information is displayed on the online payment assistance device, a third party who does not have the online payment assistance device Even if you know only the card number, you cannot generate a one-time password. Even if a third party steals the online payment assistant device, the one-time password cannot be generated without the authentication information input to the online payment assistant device. That is, since a third party cannot perform online commerce pretending to be a card member regardless of whether or not an online payment assistance device is obtained, the safety of online commerce is guaranteed.

  The one-time password generation method is not limited to the time synchronization method of the above embodiment, and any method that can authenticate the identity of the cardholder who owns the online payment assistant device between the online payment assistant device and the authentication server. That's fine.

  In addition, since the online payment assistant device adopts a non-net connection type configuration, the card information, authentication information, and OTP generation information once stored in the online payment assistant device can be read by unauthorized access or the like. In addition, even cardholders distributed with online payment assistance devices cannot read them.

  Assuming that the online payment assistance device can be connected to a terminal such as a personal computer or a mobile phone, if any trouble occurs while the online payment assistance device is connected to the terminal, the cause of the trouble is The point of responsibility disassembly, whether on the device side or on the terminal side, is unclear. Therefore, the net settlement assistance apparatus adopting the net non-connection type configuration is effective in the sense that the responsibility disaggregation point becomes clear.

  Here, FIG. 6 shows a system configuration and flow of pre-registration when a card member who does not have an online payment assisting device performs an online commercial transaction in the online payment system of the present embodiment.

  The card member accesses the WEB site for the card member operated by the card company (credit card brand or issuer) from the member PC, and the member information (birth date, telephone number, account number, etc.) that only the card member knows. Input and transmit to the WEB site ((1) in FIG. 6).

  The WEB site of the card company that has received the member information accesses the backbone system of the card company in which the member information is registered, and verifies the received member information with the member information registered in the backbone system. ((2) in FIG. 6). The backbone system returns the verification result to the WEB site ((3) in FIG. 6).

  If the collation result is OK, it is assumed that the identity of the card member has been confirmed, and a registration of a password is requested from the WEB site to the member PC. The member PC transmits the password to the WEB site ((4) in FIG. 6).

  The WEB site that received the password from the member PC registers the password in the authentication server 7 of the card company ((5) in FIG. 6).

  The password registered here is a fixed password, not a one-time password as generated by the online payment assisting device. In other words, when a cardholder who does not have an online payment assistance device performs online payment on the online payment system, the cardholder authentication method is only a method using a fixed password. Once known, it becomes possible for a third party to pretend to be a card member and make an online payment.

  In addition, card members who do not have an online payment assistance device must access the card company's WEB site and register their passwords after authenticating themselves in order to register their passwords. Is big.

  Furthermore, not only the card member but also the card company side needs to construct a WEB site for registering the password to the card member and to construct a basic system for authenticating the card member.

In addition, the online payment assistance device is usually configured such that the card number is not displayed unless the card number is exposed and only the card member can know or the authentication information possessed only by the card member is not entered. Furthermore, since the password used to authenticate cardholders during online payments is not a fixed password but a one-time password, it is extremely difficult for a third party to impersonate a cardmember and conduct online commerce. Become.

  As mentioned above, although demonstrated about the Example of the net payment auxiliary | assistance apparatus 1, the net payment auxiliary | assistance apparatus of this invention is not limited to the net payment auxiliary | assistance apparatus 1 provided with all the structural requirements demonstrated in the said Example, Various changes and modifications are possible, and it is possible to configure the net settlement assistance apparatus of the present invention by arbitrarily combining the constituent requirements necessary for realizing each object. It goes without saying that such changes and modifications also belong to the scope of the claims of the present invention.

  For example, in the embodiment, the online payment using the card number of the credit card has been described. However, if the card is capable of performing the online payment by at least the card number, the card is executed by a card such as a debit card in addition to the credit card. Examples also belong to the claims of the present invention.

  Further, in this embodiment, it is assumed that it is used for online commerce using card settlement. However, a card member wishes only for online commerce, and is realized by a credit card made up of a conventional plastic type magnetic card, IC card or the like. If the face-to-face transaction is not desired, a credit card may not be issued, and the owner of the online payment assisting device of the present invention does not necessarily have a conventional plastic type credit card.

  Further, for example, in the embodiment, card information of one card member having one type of card information is stored in the card information storage unit 13 of one net settlement assistant device 1, and one type of authentication is stored in the authentication information storage unit 15. Although the case where information is stored has been described, a plurality of card numbers may be stored in the card information storage unit 13. In this case, the authentication information may be common authentication information for displaying a plurality of card numbers, or the card number and the authentication information correspond to each other, and are displayed on the display 11 by the input authentication information. The card number may be different.

  Further, when a plurality of people use the same or a plurality of card numbers such as a parent-child credit card, different authentication information for each person may be stored in the authentication information storage unit 15, or common authentication information It may be stored.

  In the above-described embodiment, the card information and the OTP generation information are described as being associated with each other in the network settlement assistant devices 1 and 1a and the authentication servers 7 and 7a, respectively. Therefore, even if the card information and the OTP generation information are associated not indirectly but indirectly, they are included in the scope of the claims.

  Specifically, the card information input at the member terminal 2 in S10 of FIG. 3 is finally transmitted to the authentication servers 7 and 7a via the member store terminal 3 and the mediation server 5 in S20 and 30. At this time, the authentication servers 7 and 7a convert the card number in the received card information into a unique number different from the card number, and pass through the intermediary server 5 to the member store. It transmits to the terminal 3 (in S40, 50).

  Further, this unique number is transmitted from the member store terminal 2 to the member terminal 2, and is transmitted to the authentication servers 7 and 7a via the member terminal 2 (in S60 and 70).

  The authentication servers 7 and 7a that have received the unique number convert the unique number into a card number according to a conversion rule opposite to that in which the card number is first converted into a unique number. The associated OTP generation information is used for generating a one-time password.

  Thus, by associating the card number with a unique number other than the card number and the OTP generation information, the card number flows on the network 9a except that the card number is transmitted in S10, S20, and S30. Therefore, the possibility of eavesdropping on the card number is greatly reduced, contributing to security improvement.

  In the above embodiment, the member terminal 2 transmits the card information to the member store terminal 3, and the authentication servers 7 and 7a authenticate the identity of the card member in S80 of FIG. Although the case where it carries out was demonstrated, this invention is not necessarily restricted to this.

  For example, the member terminal 2 accesses the authentication servers 7 and 7a first, the authentication servers 7 and 7a transmit the card member-specific authentication information input screen to the member terminal 2, and the card information input on the authentication input screen. On the basis of the one-time password, card member identity authentication is performed between the member terminal 2 and the authentication servers 7 and 7a. As a result, after the identity is confirmed, a predetermined condition (for example, a predetermined time, a predetermined time) The member terminal 2 may access the website of the member store terminal 3 to perform online commerce within a predetermined number of member stores.

In other words, the network payment assisting device of the present invention is used for card member identity authentication between the member terminal 2 and the authentication server 7 or 7a on the card company side. It is based on the fact that online commerce can be performed at, and is not necessarily premised on a personal authentication request from the member store terminal 2.

  Each means and database in the present invention are logically distinguished from each other in function, and may be physically or practically the same area. Needless to say, a data file may be used instead of the database, and the description of the database includes the data file.

  In the above example, terminals and servers on the online payment system are credit card brands (providing entities for online commerce services), issuers (acquiring card members and issuing card members), acquirers (acquiring merchants).・ Contract / Administrative entity) and franchise stores are explained as being operated, but they are all conceptually and functionally distinct, and physically the issuer and acquirer are the same. Or the credit card brand, issuer, and acquirer may be the same.

  Therefore, for example, in the present specification, the net settlement assistant devices 1 and 1a are not limited to being distributed from the issuer. Further, the provider of the online payment system does not necessarily need to be a credit card brand. Further, the issuer terminal 6, the authentication servers 7, 7a, and the acquirer terminal 4 may be the same. Moreover, the mediation server 5 may be the same as any of other terminals and servers.

  In carrying out the present invention, the present invention is also realized by supplying a storage medium storing a software program for realizing the functions of the present embodiment to the system, and reading and executing the program stored in the storage medium by the computer of the system. Is done.

  In this case, the program itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program constitutes the present invention.

  As a storage medium for supplying the program, for example, a magnetic disk, a hard disk, an optical disk, a magneto-optical disk, a magnetic tape, a nonvolatile memory card, or the like can be used.

  In addition, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an operating system running on the computer is one of the actual processes based on the instructions of the program. A case where the function of the above-described embodiment is realized by performing part or all of the processing and the processing is also included in the present invention.

Furthermore, after the program read from the storage medium is written in the nonvolatile or volatile storage means provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the program is instructed. Based on this, the present invention also includes a case where the arithmetic processing unit or the like provided in the function expansion board or function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

It is a block diagram which shows the external appearance and electrical hardware structure of the network payment assistance apparatus of this invention. It is a schematic connection block diagram of the net payment system using a net payment auxiliary device. It is a figure which shows an example of the process flow of the internet commerce in an internet payment system. It is a figure which shows an example of the screen displayed on a member terminal in the process flow of the net commerce in a net payment system. It is a figure which shows the operation procedure of a net payment assistance apparatus, and a display screen transition. FIG. 2 is a schematic connection configuration diagram of a system necessary for registering a password for authenticating a card member in advance when a card member uses an online payment system that does not use an online payment assisting device.

Explanation of symbols

1: Net payment assistant device 10: Housing 11: Display 12: Key operation unit 12a: Ten key 12b: Start key 13: Card information storage unit 14: Authentication unit 15: Authentication information storage unit 16: OTP generation unit 17: OTP generation Information storage unit 18: Timekeeping means 19: Driving power supply 2: Member terminal 3: Member store terminal 4: Acquirer terminal 5: Mediation server 6: Issuer terminal 7: Authentication server 9a: Network 9b: Dedicated line

Claims (1)

Internet payment assist device, contractor terminal used by credit card card contractor, a plurality of authentication servers for authenticating the contractor, member store terminal used by credit card member store, and member A network payment system using an intermediary server that mediates between a store terminal and the authentication server,
The online payment assistance device
A portable online payment assisting device that includes a display, a power source for driving, and a card slot, and does not include a CPU and memory for authentication processing,
The card slot is detachable with an IC card including a CPU and a memory,
In the memory of the IC card,
A card information storage unit preliminarily stored in a state in which card information including at least identification information of a credit card contractor cannot be read from the outside;
An authentication information storage unit that is pre-stored in such a manner that authentication information that is a personal identification number or biometric information indicating the biometric characteristics of the contractor cannot be read from the outside, for performing authentication of the contractor;
An OTP generation information storage unit that is stored in advance in a state in which the OTP generation information associated with the card information and unique to the contractor cannot be read from the outside,
In the CPU of the IC card,
By comparing the input information input from the online payment assistant device with the authentication information stored in the authentication information storage unit of the memory of the IC card, the operator of the online payment assistant device is the contractor. Authenticating whether or not there is an identity, and when the identity is confirmed, an authentication means for reading the identification information from the card information storage unit of the memory of the IC card and displaying it on the display of the online payment assisting device;
OTP generation means for generating a one-time password using the OTP generation information after the identification information is displayed and displaying it on the display of the online payment assistant device,
In the online payment system,
The authentication means for the IC card inserted into the online payment assisting device is:
When the user authentication is performed by comparing the input information input to the online payment assisting device with the authentication information stored in the authentication information storage unit, and the identity verification is performed, the card information storage unit Read the stored identification information of the contractor, display on the display,
The member store terminal is
The member that receives the input from the contractor, receives at least the identification information displayed on the display of the online payment assistant device from the contractor terminal, and joins the contractor to identify the order information, the identification information, and the member store And store identification information to the mediation server,
The mediation server is
The member store identification information received from the member store terminal is checked to see if it matches the member store identification information previously held in the mediation server. Using the identification information received together with the identification server to identify an authentication server for authenticating credit card payment, and transmitting the identification information to the identified authentication server,
The authentication server is
By confirming whether the received identification information is registered in the authentication server in advance, it is authenticated whether or not the contractor is a contractor who can receive an online commerce service using the online payment assisting device. , Sending the authentication result to the member store terminal via the mediation server,
The member store terminal is
If the authentication result is valid, the authentication result and information indicating an access destination to the authentication server are transmitted to the contractor terminal,
The OTP generation means of the IC card inserted into the online payment assisting device is
Date and time information or usage count information at a predetermined timing is encrypted with the OTP generation information to generate a one-time password and display it on the display,
The authentication server is
One-time password displayed on the display of the online payment assisting device that has received access from the contractor terminal and has received input from the contractor terminal, and that has received access from the member store terminal indicating the access destination to the authentication server. And identifying the OTP generation information corresponding to the received identification information by using the received one-time password and the identified OTP generation information. Performs identity authentication of the contractor, sends the authentication result by the one-time password and information indicating the access destination to the member store terminal to the contractor terminal,
The member store terminal is
Access from the contractor terminal is received from the contractor terminal, which is received from the authentication server and indicating the access destination to the member store terminal, and an authentication result by the contractor terminal received from the authentication server is received from the contractor terminal. When the authentication result using the one-time password is valid, the transaction data including the identification information of the contractor and the authentication result using the one-time password are transmitted to the acquirer terminal used by the acquirer. By sending an authorization request for the credit card settlement to the issuer terminal used by the issuer via the acquirer terminal, it is confirmed that the credit limit for the amount in the order information is secured for settlement. Indicating the result for the authorization request from the issuer terminal to the acquirer end Received via the,
Internet payment system characterized by that.

Images