WO2001077921A1 - Authentication/settlement method - Google Patents

Abstract

A trading system over a network where the credit card numbers are not leaked and spread over the network is configured. In a server of an authentication/settlement mechanism (20), biometric data on a purchaser (14) and information on a settlement method selected by the purchaser (14) are stored. The server searches the biometric data given from outside through the Internet (12) for the purchaser (14) having the biometric data. By the settlement method selected by the purchaser (14), the authentication/settlement mechanism (20) performs the settlement on behalf of a shop (10). Therefore, information concerning the settlement method selected by the purchaser is not leaked and spread at all over the Internet (12). As a result, a safer network trading is possible, and the privacy of the purchaser is protected.

Description

 Description Authentication payment method Technical field

 The present invention relates to a system for selling products on a network. In particular, the present invention relates to a network trading method for performing personal authentication and settlement on behalf of individuals using biometric data. Background art

 In recent years, commercial transactions using networks have been widely performed.

 The configuration diagram of such a commercial transaction system is shown in FIG. As shown in this figure, the store 10 on the network publishes a so-called WEB page regarding product introduction and order reception via the Internet 12. The purchaser 14 browses the web page via the Internet and determines a product or the like to purchase. Then, on the WEB page for ordering goods, enter the address and name of the buyer and specify the payment method.

 Various methods are used as a method of paying for goods and the like. For example, a buyer may choose to pay by credit card. With credit card settlement, the buyer enters the credit card number along with his / her name on the WEB page.

 In the store 10, credit is given to the credit company 16 and the like using the input credit card number, and transactions are made with a normal credit card.

By the way, conventional business transactions are performed as described above, but in order to prevent the act of purchasing a product by impersonating another person, it is necessary to confirm the identity of the person by some method. Generally, it is determined that the credit card number itself is the data for identifying the user, but the buyer 14 may be required to input a passcode or the like. Disclosure of the invention

 Since conventional business transactions are conducted as described above, the credit card number flows over the network, and there is a risk of plagiarism. Therefore, encryption was often used when transmitting credit card numbers.

 However, since there is always a risk of decryption in encryption, it is necessary to frequently change the key and increase the number of digits.

 Therefore, it is desirable to build a transaction system in which the credit card number itself does not flow on the network. If such a system can be constructed, the above-mentioned complicated measures will not be necessary, and safer transactions will be possible.

 The present invention has been made in view of such a problem, and an object of the present invention is to construct a transaction system on a network in which a credit card number or the like does not flow on the network.

 In the present invention, in order to prevent the credit card number and the like from flowing on the network, the biometric data is instead passed on the network.

 Specifically, the present invention employs the following means.

 In order to solve the above problems, the present invention stores a receiving step of receiving biometric data via a network, an individual's biometric data, and information on a settlement method selected by the individual. A retrieval step of retrieving the received biometric data from the storage means and retrieving information on a payment method selected by an individual having the retrieved biometric data; and performing a payment based on the payment method retrieved in the retrieval step. And a settlement step to be performed.

 According to such a configuration, biometric data is sent to the network instead of the payment method, and personal authentication and information on the payment method are simultaneously performed. As a result, no information about the payment method flows to the network.

 Further, according to the present invention, there is provided the authentication and settlement method, wherein the biometric data is signature data.

Since signature data is difficult to forge, it is extremely difficult for third parties to commit fraud. Further, according to the present invention, a receiving step of receiving the biometric data of the product purchaser, the product purchase information of the product purchaser, and the received biometric data and the product purchase information A product sales method characterized by including a requesting step of requesting externally for authentication of the product purchaser and settlement of the product purchase by transmitting the product via the network.

 According to such a configuration, by transferring the biometric data to the outside, the personal authentication of the product purchaser and the acquisition of the payment method can be outsourced, and there is no need to handle information on the settlement method. .

 Further, the present invention is the product selling method, wherein the receiving step receives, via a network, biometric data of the product purchaser and product purchase information of the product purchaser.

 In particular, if the system is configured to receive biometric data via a network, so-called network transactions can be performed. Even in this case, there is no need to send any information on the settlement method to the network, so that the purchaser's personal information is not leaked to a third party and smooth transactions can be performed.

 Further, in the method for selling goods, the biometric data is signature data.

 Since signature data is difficult to forge, it is extremely difficult for third parties to commit fraud.

 Further, the present invention provides a storage unit for storing biometric data of an individual, information on a settlement method selected by the individual, a receiving unit for receiving the biometric data via a network, and the receiving unit. And a retrieval means for retrieving the received biometric data from the storage means, and retrieving information on the payment method selected by the individual having the retrieved biometric data.

 According to such a configuration, it is possible to acquire information on an individual settlement method while performing individual authentication using the biometric data.

Further, the present invention is the authentication and settlement system, wherein the biometric data is signature data. Since signature data is difficult to forge, it is extremely difficult for third parties to commit fraud. BRIEF DESCRIPTION OF THE FIGURES

 FIG. 1 is an overall configuration diagram of a network transaction system according to a preferred embodiment 1 of the present invention.

 FIG. 2 is a flowchart showing the registration operation.

 Fig. 3 is a flowchart showing the operation of a buyer actually purchasing a product from a store.

 FIG. 4 is a configuration block diagram of the server of the authentication and settlement mechanism.

 Figure 5 is a block diagram of a conventional network commerce system. BEST MODE FOR CARRYING OUT THE INVENTION

 Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

 Embodiment 1

 FIG. 1 shows an overall configuration diagram of a network transaction system according to a preferred embodiment 1 of the present invention. As shown in the figure, a store 10 and a purchaser 14 are connected to the Internet 12. The buyer 14 places an order for goods to the store 10 via the Internet 12.

Also, as shown in FIG. 1, in the first embodiment, the server of the authentication and settlement machine 20 is connected to the Internet 12. The server of the authentication and settlement mechanism 20 stores the biometric data of the buyer 14 and information on the settlement method selected by the buyer 14. Then, for the biometric data provided from the outside via the Internet 12, the purchaser 14 having the biometric data is searched from the server, and the settlement method selected by the buyer 14 is selected. Based on, the authentication settlement mechanism 20 performs the settlement instead of the store 10. For example, in the case of payment using a credit card, the authentication and settlement mechanism 20 performs procedures for the credit company 16 and reports the result to the store 10 separately. With such a configuration, not only the credit card number but also information on the payment method selected by the buyer does not flow on the Internet 12 at all. Therefore, according to the first embodiment, more secure network transactions are possible, and the privacy of the buyer is maintained.

 The authentication and settlement mechanism 20 may be constituted by a corporation such as a stock company or may be constituted by an unincorporated organization. As described above, the authentication and settlement mechanism 20 authenticates the purchaser 14 in accordance with the information stored in the internal server, and performs settlement of the transaction.

 Hereinafter, a specific operation of the first embodiment will be described in detail based on a flowchart.

 Registration operation

 In the network transaction system according to the first embodiment, first, the buyer 14 needs to register in the server of the authentication and settlement mechanism 20. FIG. 2 shows a flowchart showing this registration operation. This server corresponds to the authentication settlement system of the present invention.

 First, in step S2-1, the buyer 14 mails his or her settlement method together with his / her name and address to the authentication settlement mechanism 20. In the first embodiment, mail is adopted, but any communication means other than a network may be used. For example, facsimile communication may be used, or it may be sent directly to the authentication and settlement mechanism 20.

 Payment method is selected by each buyer 14 by bank account withdrawal, account transfer, payment by credit card, type of the card, number of payments in installments, etc. Further, it is preferable that the registered contents can be changed at any time by the buyer 14.

 In step S2-2, the authentication and settlement mechanism 20 registers the received information such as the settlement method in the server.

In step S2-3, the date and time of inputting the signature data (biometric data) is notified to the buyer 14. This notification may be made via the Internet 12 or by mail or telephone. In step S2-4, at the specified date and time, the buyer 14 connects to the authentication and settlement mechanism 20 via the internet 12 and the signature data is written using the handwritten pad 14a. Then, the signature data is transmitted to the authentication and settlement mechanism 20. As shown in FIG. 1, each buyer 14 is provided with a handwritten pad 14a, and signature data can be input through the handwritten pad 14a.

 In the first embodiment, signature data is used as biometric data. However, other biometric data, for example, various biometric data such as a fingerprint, a voiceprint, and a retinal pattern can also be used.

 In step S2-5, this signature data (biometric data) is registered in the server of the authentication and settlement mechanism 20.

 In this way, the server of the authentication and settlement mechanism 20 stores (1) the signature data (biometric data) of the individual, and (2) the settlement method selected by the individual.

 Thus, the registration of the information on the buyer 14 is completed.

 Purchase behavior

 Next, an operation in which the purchaser 14 actually purchases a product from the store 10 will be described based on the flowchart of FIG.

 First, in step S3-1, the buyer 14 browses the WEB page of the store 10 and issues a purchase request for a product. The purchase request itself is the same as the conventional operation.

 Next, in step S3-2, the buyer 14 inputs the signature data according to the instruction on the WEB page. This input is performed using the handwritten pad 14a, and the input signature data is transmitted to the WEB server of the store 10.

 In step S3-3, the signature data sent to the store 10 and data such as the price of the purchased product are transmitted to the authentication settlement mechanism 20.

 In step S3-4, a search for signature data is performed. The authentication settlement mechanism 20 retrieves the transmitted signature data from the server.

If the signature data is registered as a result of the search, the individual who registered the signature data is specified. That is, the authentication of the buyer 14 is successful. After that, The process proceeds to step S3-5, and the individual (buyer 14) substitutes for the store 10 on behalf of the store 10 based on the payment method selected in advance.

 The settlement procedure is performed for the credit company 16. The result of performing the procedure on behalf of store 10 is reported to store 10 (step S3-6).

 On the other hand, as a result of the search in step S3-4 above, if the corresponding person of the signature data is not found, it means that the authentication of the individual has failed, and the failure is reported to the store 10. (Step S3-7).

 As described above, according to the business model of the authentication settlement mechanism 20, it is not necessary to include any information on the settlement method such as the credit card number in the communication with the store 10 on the Internet. As a result, according to the business model of the first embodiment, since no personal information flows on the Internet, it is possible to realize smooth network transactions while ensuring the security of purchaser transactions.

 In the first embodiment, an example is shown in which the authentication and settlement mechanism 20 performs the procedures for the credit company 16 on behalf of the credit company 16.However, based on the selection of the buyer 14, the settlement of the settlement to It is equally possible to act on behalf of a procedure.

 Further, in the present embodiment, an example is shown in which the authentication and settlement mechanism 20 performs settlement on behalf of the user. However, the authentication and settlement mechanism 20 passes information on the settlement method to the store 10 and the store 10 performs the settlement as before. The method used is also preferred. In this case, the authentication and settlement mechanism 20 transmits information on the settlement method to the store 10 by means other than the network such as the Internet. For example, information on settlement is transmitted to the store 10 by mail or the like. Even with such a business model, more secure business transactions are possible because information about payment methods does not flow on the network.

 Application to store sales

 Further, in the first embodiment, an example in which the buyer 14 is connected to the store 10 via the Internet 12 has been described, but the buyer 14 purchases a product at the store 10. The same applies to the case where This is because the authentication and settlement mechanism 20 does not care what route the signature data transmitted from the store 10 was obtained.

Even when such a configuration is adopted, payment information such as credit card numbers is not Since it does not flow on the Internet 12, it is easily expected that the security of the buyer's transaction will be higher than before.

 In the conventional over-the-counter sales, the store 10 passed the credit card number on the communication line in the credit inquiry procedure, etc., but in the first embodiment, no such personal information flows. Because.

 Therefore, applying the present invention to over-the-counter sales is also a very effective business model.

 Server Configuration of Authentication and Payment Mechanism 20

 Next, the configuration of the server of the authentication and settlement mechanism 20 will be described. This server corresponds to the authentication and settlement system of the present invention. Fig. 4 shows a configuration block diagram of this server.

 The server 30 includes storage means 32 for storing personal signature data and the like, and communication means 34 for receiving signature data and the like transmitted by the store 10.

 The storage means 32 is composed of a hard disk or the like, and stores the following items by the above-described registration operation.

 (1) Personal signature data

 (2) Payment method selected by the individual

 (3) Other names and addresses of the individual

Since these items are recorded, the authentication and settlement mechanism 20 authenticates the individual based on the signature data sent by the store 10 and knows the settlement method if the authentication is successful. It is possible.

 The communication means 34 is means for connecting to the Internet 12 and means for transmitting and receiving signature data and the like to and from the store 10 and the like. The communication means 34 corresponds to the receiving means of the present invention.

Further, the server 30 includes a search unit 36. The search means 36 searches the storage means 32 for the signature data received from the store 10 by the communication means 34. As described above, the failure of the search means that the authentication has failed, and the search means 36 reports to the store 10 that the authentication has failed via the communication means 34. On the other hand, a successful search means a successful authentication, and the search means 36 Subsequently, the settlement method selected by the individual having the signature data is taken out from the storage means 32.

 The authentication settlement mechanism 20 performs a settlement proxy procedure based on the extracted information on the settlement method, and reports the result to the store 10.

 As described above, by using the server 30, it is possible to simultaneously perform personal authentication and settlement, and it is possible to smoothly perform an authentication settlement operation.

 Embodiment 2

 In the first embodiment, the authentication and settlement mechanism 20 is provided separately from the store 10, but it is a preferable business model to operate the store in combination with the store 10 as well. In the case of adopting such a configuration, the server 30 described above is provided inside the store 10 and the server 10 stores the server 10 based on the personal settlement method retrieved from the storage means 32. The body will perform the settlement procedure. Therefore, it can no longer be called proxy processing.

 However, even if such a configuration is adopted, as in Embodiment 1 described above, since no information regarding the personal settlement method flows on the Internet 12, the security of the network transactions of the buyers 14 is not guaranteed. And smooth transactions are possible.

 It is needless to say that the configuration of the second embodiment is also applicable to the case where the purchaser 14 purchases a product at a store, similarly to the first embodiment. Further, in this case, since the signature data is not transmitted via the Internet 12, the communication means 34 becomes unnecessary from the configuration of FIG.

 As described above, according to the present invention, authentication of an individual and acquisition of an individual settlement method are performed simultaneously using biometric data. Therefore, there is no need to send information on the settlement method over the network, and more secure network transactions can be realized.

 Further, according to the present invention, by receiving the biometric data from the product purchaser and transmitting the biometric data to the outside, the authentication of the individual and the acquisition of the settlement method can be outsourced. Therefore, it is possible to sell products without knowing any settlement method. Further, according to the present invention, a system that can simultaneously perform personal authentication and acquisition of information on an individual settlement method from biometric data is obtained, so that it is possible to purchase products using only biometric data. it can.

Claims

The scope of the claims 1. Retrieving the received biometric data from storage means for storing the biometric data received via a network, the individual's biometric data, and information on the payment method selected by the individual. And retrieving information on the payment method selected by the individual having the retrieved biometric data; and  A payment step for performing payment based on the payment method extracted in the search step;  An authentication settlement method comprising:  2. In the authentication settlement method described in claim 1,  The authentication and settlement method, wherein the biometric data is signature data.  3. a receiving step of receiving the product purchaser's biometric data, the product purchase information of the product purchaser, and  Transmitting the received biometric data and the product purchase information through the network, thereby requesting an external request for authentication of the product purchaser and settlement of the product purchase,  A method of selling goods, comprising:  4. In the method of selling goods described in claim 3,  The method of selling goods, wherein the receiving step receives, via a network, biometric data of a purchaser of the goods and purchase information of the goods of the purchaser.  5. The method for selling goods according to claim 3 or claim 4, wherein said biometric data is signature data.  6. storage means for storing the individual's biometric data and information about the payment method selected by the individual; A receiving means for receiving biometric data via a network, Searching means for searching the storage means for the biometric data received by the receiving means, and extracting information relating to the settlement method selected by the individual having the searched biometric data;  An authentication and settlement system comprising: 7. In the authentication and settlement system described in claim 6,  Wherein said biometric data is signature data.