JP2001184413A - Mail-order system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a mail-order system which enables safe payment between devices of a purchaser and a store connected to a communication network. SOLUTION: The customer device commands a purchase of an article through a Web page on the store device and the store device sends purchase data including the price of the article to a financial institution device in response to the command of the customer device and the financial institute device requests credit card data of the customer device through a Web page; and the customer device sends the credit card data to the financial institution device through a Web page at the request, the financial institution device decides whether or not the price of the article can be paid according to the credit card data and financial information and informs the store device of the decision result, and the store device confirms the decision result.

Description

DETAILED DESCRIPTION OF THE INVENTION

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a store for selling goods, a customer for issuing a purchase request for goods, and a financial institution for holding financial information of a customer connected to a communication network. Related to mail order systems.

2. Description of the Related Art As a method of payment when a purchaser purchases a product from an Internet store on the Internet, (1) the purchaser forms information such as a credit card number on a WWW page of the Internet store. The method of inputting it into the form and sending it to the computer of the store, (2) the method using the SET (Secure Electronic Transaction) protocol, (3) the CAFIS (Credit And Fin)
ance Information System) is already known.

SUMMARY OF THE INVENTION
According to the method (1), even if a connection using an authentication service called SSL (Secure Sockets Layer) is made between the purchaser's computer and the store's computer, if the store side has malicious intent, However, there is a possibility that information on the credit card of the buyer is leaked, and security concerns remain. In the above method (2), dedicated software is required, and the introduction of the dedicated software is not only troublesome for the user, but also the storage area of a storage device such as a hard disk in the computer is used for the dedicated software. There was a problem that it was used for wear. Also, in the above method (3), if the store is malicious, information on the credit card of the purchaser may leak out. In addition, special software is required for the computer at the store. Therefore, an object of the present invention is to provide a mail order system that can safely pay between devices of a purchaser and a store connected to a communication network.

SUMMARY OF THE INVENTION A mail-order sales system according to the present invention comprises a store device of a store that sells a product, a customer device that issues a purchase request for a product, a financial institution device that holds financial information of a customer, and a device. And a communication network connecting the client devices to each other, wherein the customer device commands the purchase of the product via a web page of the store device, and the store device purchases the product including the price according to the command of the customer device. The data is transmitted to the financial institution device, and the financial institution device transmits the credit card data to the customer device according to the purchase data on the Web
Request via the web page, the customer device transmits the credit card data to the financial institution device via the web page as requested, and the financial institution device has the ability to pay the commodity amount based on the credit card data and the financial information. It is characterized in that it is determined whether or not there is, and the determination result is notified to the store device, and the store device confirms the determination result.

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 shows a mail order system according to the present invention. In this mail order system, a store device 1, a financial institution device 2, a customer device 3,
A delivery company device 4 is provided, and the store device 1, the financial institution device 2, the customer device 3, and the delivery company device 4 can communicate with each other via the Internet network 5. The store device 1 is installed in a store, and the financial institution device 2 is installed in a facility of the financial institution. Financial institutions are banks and credit card companies. The customer device 3 is an Internet network 5
It is not necessary to be constantly connected to the Internet, and as shown in FIG. 1, it can be connected to the public telephone network 6 and the Internet network 5 via the provider device 7. The delivery company apparatus 4 is installed in a delivery company facility. The shop device 1 includes a WWW server 11 and a mail server 12. Each of the WWW server 11 and the mail server 12 is connected to the Internet network 5 through the firewall 13.
It is connected to the. Further, the store device 1 is provided with a storage device 14 serving as a database that can be read and written from each of the WWW server 11 and the mail server 12. In the financial institution device 2, the WWW server 2
1 and a mail server 22 are provided. Each of the WWW server 21 and the mail server 22 is a firewall 2
3 is connected to an Internet network 5.
Further, the financial institution apparatus 2 is provided with a storage device 24 forming a database that can be read and written from each of the WWW server 21 and the mail server 22. The delivery company apparatus 4 also includes a WWW server 41 and a mail server 42. Each of the WWW server 41 and the mail server 42 is connected to the Internet network 5 via a firewall 43. In addition, the delivery company device 4 includes a storage device 44 that forms a database that can be read and written from each of the WWW server 41 and the mail server 42. In each of the store device 1, the financial institution device 2, and the delivery company device 4, a router (not shown) is provided between the firewalls 13, 23, 43 and the Internet network 5. Customer device 3
Is a so-called personal computer, which can be connected to the public telephone network 6 by a modem or TA (terminal adapter) not shown. Further, the customer device 3 includes a WWW browser as application software, and when the WWW browser is activated, accesses a desired URL (uniform resource locator) on the Internet according to the operation of the purchaser, and from there, HTML.
Source data including a file can be imported and displayed as a Web page on a display via a WWW browser image. In the communication system having such a configuration, TCP / IP is used as a communication protocol, and the WWW servers 11 and 21 and the mail server 1 are used.
2, 22 and the firewalls 13 and 23 are assigned IP addresses, respectively. Next, the operation of the communication system will be described with reference to the sequence diagram of FIG. The purchaser operates the customer device 3 to display a WWW browser image on a display screen.
The user accesses a URL corresponding to a Web page (homepage) of the WW server 11 (step S1). This access is performed from the customer device 3 through the public telephone network 6, the provider device 7, the Internet network 5, and the firewall 13 of the store device 1. WWW server 1
Reference numeral 1 denotes the source data of the accessed URL in the customer device 3
(Step S2). Source data is supplied from the WWW server 11 to the customer device 3 via the firewall 13, the Internet network 5, the provider device 7, and the public telephone network 6 of the store device 1. The customer device 3 receives the source data sent from the WWW server 11 and displays a Web page on a display screen (Step S3). These steps S1 to S3 are repeated in response to the purchaser's access operation to the URL corresponding to the new page. When the purchaser selects a product displayed on the Web page using a key or a mouse pointer, product data indicating the selected product is transmitted from the customer device 3 to the WWW server 1.
1 (step S4). Upon receiving the product data, the WWW server 11 transmits source data corresponding to the Web page for selecting a financial institution to the customer device 3 (step S5). The customer device 3 receives the source data corresponding to the financial institution selection Web page sent from the WWW server 11, and displays the Web page on the display screen (step S6). When the purchaser selects any one of the plurality of financial institutions displayed on the Web page by using a key or a mouse pointer, the financial institution data indicating the selected financial institution is transmitted from the customer device 3 to the WWW server 11. Is performed (step S7). Here, the selected financial institution is a financial institution provided with the financial institution device 2. Upon receiving the financial institution data, the WWW server 11 transmits purchase data including the price, the serial number, the store name, and the digital signature of the store corresponding to the selected product to the WWW server 21 in the financial institution device 2 of the selected financial institution ( Step S8). Further, it instructs the customer device 3 to change to a page of a predetermined URL of the WWW server 21 in the financial institution device 2 (step S9). A script language such as Perl is used for the data transmission and the change command. The purchase data is supplied from the WWW server 11 to the WWW server 21 in the financial institution apparatus 2 via the firewall 13, the Internet network 5, and the firewall 23. Upon receiving the purchase data, the WWW server 21 in the financial institution device 2 checks the amount, serial number, store name, and digital signature of the store in the purchase data, and creates a user input page based on the purchase data ( Step S10). The source data of the user input page is stored in the first predetermined URL, and the customer device 3 is instructed to change to the first predetermined URL page of the WWW server 21 in the financial institution device 2 (step S11). Items such as the customer's name, credit card number (or bank account number), personal identification number, and customer's digital signature can be entered on the user input page. Upon receiving the page change command in step S9 or S11, the customer device 3 accesses the first predetermined URL of the WWW server 21 in the financial institution device 2 (step S12). The access destination may be changed by operating a button arranged on a Web page based on the source data sent from the WWW server 11. The WWW server 21 transmits the accessed source data of the first predetermined URL to the customer device 3 (Step S13). Until the source data of the user input page is stored in the first predetermined URL, for example, initial data indicating that the input page is being created is stored.
The customer device 3 receives the source data sent from the WWW server 21 and displays a Web page on a display screen (Step S14). Since the transmitted source data finally becomes the source data of the user input page, the Web data displayed on the display screen of the customer device 3 is displayed.
Page b is a user input page. That is, the input of the credit card data is requested by the display of the user input page. The purchaser performs a key operation on each input item such as the customer name, credit card number, personal identification number, and customer digital signature on the user input page by key operation. When the input operation for each input item is completed, the purchaser operates the transmission button displayed on the page with a key or a mouse pointer, and the input data is transmitted from the customer device 3 to the WWW server 21 (step S15). ). In this transmission, the input data is encrypted by SSL. The use of SSL has an advantage that data can be safely transmitted via a communication network without using dedicated software. WWW server 21
Receives the input data, confirms the customer's name, credit card number, personal identification number, and customer's digital signature in the input data, and stores the input data in the database 2
4 (step S16). Then, it is determined whether or not the purchaser can pay (step S17).
This determination is for confirming whether the buyer or payer corresponding to the credit card number has the ability to pay, and may be performed based on the customer's financial information stored in the database 24. Alternatively, an inquiry may be made via the Internet network 5 to a database on financial information of external customers. If the result of the determination in step S17 is payable, the WWW server 21 sends the payable data including the amount charged to the purchaser, the store name, the serial number, the digital signature of the store, and the digital signature of the financial institution to the WWW server 11. (Step S1)
8). If the result of the determination in step S17 is inability to pay, the inability to pay data is sent to the WWW server 1 in the shop device 1.
1 (step S19). Further, the second predetermined UR of the WWW server 11 in the store apparatus 1 is provided to the customer apparatus 3.
An instruction to change to page L is issued (step S20). W
Upon receiving the data from the WWW server 21, the WW server 11 displays the content of the received data on its own display screen (step S21), and stores the received data in the database 14 in association with the serial number and the selected product (step S21). S22). Further, it is determined whether or not the received data is payable data (step S2).
3). In the case of payable data, source data of a Web page indicating that the product purchase procedure has been completed is created and stored in the second predetermined URL (step S24). In the case of insolvency data, source data of a Web page indicating that the product cannot be purchased by a command from the financial institution is created and stored in the second predetermined URL (step S2).
5). After the execution of step S24 or S25, the customer device 3
To the second predetermined U of the WWW server 11 in the store device 1
An access destination change to the RL page is instructed (step S26). Upon receiving the page change command in step S20 or S26, the customer device 3 accesses the second predetermined URL of the WWW server 11 in the store device 1 (step S2).
7). The access destination may be changed by operating a button arranged on a Web page based on the source data sent from the WWW server 21.
The WWW server 11 transmits the source data of the accessed second predetermined URL to the customer device 3 (step S2).
8). Until the source data of the Web page indicating whether the purchase of the product is possible or not is stored in the second predetermined URL, for example, initial data indicating that the purchase of the product is being determined is stored.
The customer device 3 receives the source data sent from the WWW server 11 and displays a Web page on a display screen (Step S29). Web indicating that the product purchase procedure has been completed according to the source data sent
A page or a Web page indicating that the product cannot be purchased by a command from the financial institution is displayed. The customer can determine whether or not the current product purchase has been successful based on the display content on the display screen. In the store, delivery of goods determined to be payable is arranged in accordance with the data for each serial number stored in the storage device 14 of the database. The mail server 12 in the store device 1
As shown in FIG. 3, a delivery order is created based on the data stored in the storage device 14, and is sent as an e-mail to the mail server 42 of the delivery company device 4 (step S31). The delivery order includes customer data such as a customer name, a customer address and a telephone number, as well as a store name, a serial number, and a product name, and the date and time of delivery to the customer. The delivery order also includes the date and time of delivery of the delivery item at the store. As shown in FIG. 4, the mail server 42 in the delivery company apparatus 4 periodically monitors the reception state of the e-mail (step S32), and upon receiving the e-mail, determines whether the e-mail includes the delivery order form. Is determined (step S
33). This is determined based on, for example, the subject (subject) of the electronic mail and whether or not the delivery order is a delivery order in a predetermined format. If it is determined in step S33 that the order is a delivery order, the content of the order is stored in the storage device 44 of the database (step S34), and an e-mail indicating the date and time of delivery order receipt is returned to the mail server 12 of the store device 1. (Step S35). The mail server 42 in the delivery company apparatus 4 sends a delivery request e-mail to the terminal device (not shown) of the person in charge of the delivery company according to the data stored in the storage device 44 of the database (step S3).
6). The delivery request form includes the store name, the date and time of receiving the delivery product at the store, the product name, the customer name, the customer address and telephone number, and the delivery date and time to the customer. Step S3
In 1 to S36, the database is stored in the WWW server 1
The mail server 12 shared with the server 1 can automatically perform a delivery order and the like by electronic mail. As a result, the time required for the delivery process is reduced, and the product can be promptly delivered to the customer. Needless to say, mail may be sent in writing without performing the automatic sending process. Also, as shown in FIG. 3, the mail server 12 in the store apparatus 1 creates a bill based on the data stored in the database 14 and sends it as an e-mail to the mail server 22 of the financial institution apparatus 2. (Step S4
1). The bill includes the serial number, the digital signature of the store and the digital signature of the financial institution. The serial number is for indicating which product purchase is the bill. This is to show that the digital signature of the financial institution is a legitimate claim. The mail server 22 in the financial institution apparatus 2 periodically monitors the reception state of the e-mail as shown in FIG. 5 (step S42), and upon receiving the e-mail, determines whether or not the e-mail includes a bill. Is determined (step S43). This is determined, for example, based on whether the body of the e-mail is a bill in a predetermined format including a digital signature of a financial institution and a store. If it is determined in step S43 that it is a bill, it is determined whether or not the digital signature of the financial institution attached to the bill is its own signature (step S44). Further, it is determined whether or not the digital signature of the store attached to the bill is an appropriate signature based on the data stored in the storage device 24 (step S45). Since the storage device 24 stores the digital signature of the store for each serial number,
The digital signature of the store is read from the storage device 24, and is compared with the digital signature of the store attached to the bill to make a determination. If it is confirmed in both steps S44 and S45 that the digital signatures of the financial institution and the store are appropriate signatures, an e-mail indicating the payment amount to the store according to the data stored in the storage device 24 is sent to the financial institution. Is transmitted to the terminal device (not shown) of the person in charge of payment (step S46). Further, the usage statement is transmitted to the customer by e-mail (step S47). Step S
In steps S41 to S46, the mail server 12 sharing the database with the WWW server 11 can automatically send a bill or the like by electronic mail. However, mail may be sent in writing without performing the automatic sending process.

As described above, in the mail order system according to the present invention, credit card data such as a credit card number and a personal identification number of a customer who is a product purchaser is transmitted to the financial institution apparatus, and the financial institution apparatus has a payment capability. Is determined, and the result of the determination is notified to the store device. Therefore, the store device is not supplied with the customer's credit card data, and the buyer and store devices connected to the communication network are connected to each other. Can be paid safely.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a mail order system according to the present invention.

FIG. 2 is a diagram showing a sequence of each device in FIG. 1;

FIG. 3 is a flowchart showing the operation of the mail server of the shop device.

FIG. 4 is a flowchart showing the operation of the mail server of the delivery company device.

FIG. 5 is a flowchart showing the operation of the mail server of the financial institution apparatus.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Store apparatus 2 Financial institution apparatus 3 Customer apparatus 4 Delivery company apparatus 5 Internet network 6 Public telephone network 7 Provider apparatus

Continued on front page F term (reference) 5B049 AA05 BB11 CC03 CC08 CC39 DD01 EE23 EE25 GG02 GG04 GG10 5B089 GA11 GA21 GB03 GB04 HA10 JA08 JA22 JA31 JB22 KA17 LB06 LB14 5J104 AA09 LA06 PA08 PA09 PA10

Claims (6)

[Claims] 1. Communication including a store device of a store that sells a product, a customer device that issues a purchase request for a product, a financial institution device that holds financial information of a customer, and a communication network that connects the devices to each other. A sales system, wherein the customer device instructs purchase of a product via a Web (Web) page of the store device, and the store device transmits purchase data including a product amount according to the command of the customer device to the financial system. Transmitting the credit card data to the customer device via a Web page according to the purchase data, and the customer device transmits the credit card data to the financial device according to the request. The financial institution apparatus transmits the commodity amount based on the credit card data and the financial information to the institution apparatus via a Web page. Mail-order system determines whether capacity is, notifies the determination result to the store unit, wherein the store device characterized by checking the determination result. 2. The mail order system according to claim 1, wherein transmission of said credit card data from said customer device to said financial institution device is performed by SSL encryption. 3. The mail order system according to claim 1, wherein the purchase data includes a digital signature of the store, and the determination result includes a digital signature of the financial institution. 4. The shop device, when confirming the result of the determination that the store device has the ability to pay for the product price, notifies the customer device that the purchase procedure of the product has been completed. The mail-order system described. 5. The store apparatus, upon confirming the determination result that the merchandise is capable of paying the amount of the commodity, displays a delivery order form of the commodity to a delivery company apparatus of a delivery company connected to the communication line network. The mail order system according to claim 1, wherein the mail order is transmitted. 6. The store apparatus, upon confirming the result of the determination that the store apparatus is capable of paying the commodity price, sends an e-mail indicating a bill including a digital signature of the store and the financial institution to the financial institution apparatus. The mail order system according to claim 1, wherein the mail order is transmitted.