JP2006285824A - Electronic commerce system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic commerce system allowing a safe commercial transaction via a network such as the Internet without using account information of a financial institution, without being pretended. <P>SOLUTION: In this electronic commerce system, a third party organization 3 previously issues a one-time password function-equipped ID card to a user 1 of the system, authenticates the user by a one-time password every time application from the user 1 is performed, issues a temporary identification account number to the authenticated user 1, and performs the commercial transaction with a transaction destination 2 on the network. The transaction destination 2 notifies the third party organization 3 about the identification account number of the user, and applies the issuing of the identification account number for the transaction destination for settlement. The third party organization 3 substitutes for the settlement of the transaction destination 2 on the basis of the identification account number for the transaction destination. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

 The present invention relates to an electronic commerce system that performs secure commerce using a network such as the Internet.

As a conventional electronic commerce system, for example, Patent Document 1 receives an issuance of an identifier that guarantees that a user is an account opener from a financial institution, and the user attaches an identifier to personal information from a member store. Shopping, the merchant attaches an identifier and charges the third party institution for the purchase price. The third party institution attaches the identifier to the financial institution and requests payment, and the merchant pays the price. An electronic commerce system is shown that makes paying.
Further, Patent Document 2 discloses that once an orderer makes an electronic payment, the orderer decides freely without using the conventional account recitation number (A) for the electronic settlement financial institution. As long as the recitation number (B), account number and other data required for transfer are sent to the electronic payment financial institution by e-mail, the order details and recitation number (B) are sent to the order destination by e-mail. The recitation number (B) from the buyer is sent to the electronic settlement financial institution by e-mail for double check. The recitation number (B) directly from the orderer and the recitation number (B) that has passed the order from the orderer. There is shown a safer electronic payment method without using a credit card, which reconfirms that the payment request of the orderer is made by going to an electronic payment financial institution and performs a transfer process.

JP 2002-352157 A (paragraph numbers 0007 to 0018, FIG. 1) Japanese Patent Laid-Open No. 10-187845 (paragraph numbers 0010 to 0014, FIG. 1)

  However, Patent Document 1 proposes a mechanism for concealing user's account information by mediating a third-party organization and making a settlement by using an identifier, but a device that does not abuse the identifier itself. Is not mentioned. That is, in Patent Document 1, the problem that the identifier application and utilization by impersonation cannot be prevented, and the member store that provides the product also uses the same identifier. Therefore, until the settlement by the member store is completed, the user sets a new identifier. There was a problem that it could not be issued.

  Patent Document 2 proposes a mechanism for improving safety by using a one-time recitation number, but does not mention a mechanism for concealing the account number or information transmission means other than e-mail. In other words, when an account number is leaked, there is a problem that the use by impersonation cannot be prevented, and there is a problem in the reliability of notification by using e-mail and the real-time property.

 The present invention has been made to solve the above-described problems, and performs business transactions via a network such as the Internet safely without using account information of a financial institution and without impersonation. The goal is to obtain an e-commerce system that can

 In the electronic commerce system according to the present invention, in the electronic commerce system in which a business transaction is performed between a user and a business partner via a network, a user who can perform a commercial transaction is transmitted using a one-time password. Authentication means for authenticating, identification account number issuing means for issuing a temporary identification account number used for commercial transactions to a user authenticated by the authentication means, and the identification account number issued by the identification account number issuing means When a commercial transaction is carried out between the user and the business partner, a settlement agent means is provided for performing a transfer operation from the user account of the financial institution to the business partner account of the financial institution.

  As described above, the present invention uses a one-time password transmitted from a user to a user who can perform a commercial transaction in an electronic commerce system that performs a commercial transaction between a user and a business partner via a network. Authentication means for authenticating, identification account number issuing means for issuing a temporary identification account number used for commercial transactions to a user authenticated by the authentication means, and the identification account number issued by the identification account number issuing means When a business transaction is performed between a user and a customer, the payment agent means that the transfer operation from the user account of the financial institution to the customer account of the financial institution is provided. By not exchanging the institution's account information on the network, it is possible to eliminate the leakage of the account information of the financial institution and to conduct business transactions using a temporary identification account number. , It is possible to prevent spoofing.

Embodiment 1 FIG.
FIG. 1 is a schematic diagram showing an entire electronic commerce system according to Embodiment 1 of the present invention.
In FIG. 1, the environment connecting the user 1, the business partner 2, and the third party organization 3 is a network environment that can be accessed by an unspecified large number such as the Internet. The third party institution 3, the financial institution A4 on the user side, and the financial institution B5 on the customer side are connected by an environment in which security is guaranteed such as a dedicated line.
The third-party organization 3 has an electronic commerce system, and issues an ID card having a one-time password function in response to a system use application from a user. Using the ID card's one-time password, the user receives authentication from a third-party organization and issues a temporary identification account number from the third-party organization 3 for each business transaction with a business partner. And using this identification account number, conduct an actual commercial transaction with a business partner.
For the settlement of the customer 2, the third party institution 3 performs a settlement agency, and in accordance with an instruction from the third party institution 3, the transaction of the customer side financial institution B5 from the user account of the financial institution A4 on the user side. Payment is made to the previous account. In the third party organization 3, identification account management information 6 is constructed to manage the identification account number.

FIG. 2 is an explanatory diagram showing a system use application of the electronic commerce system according to Embodiment 1 of the present invention.
2, 1, 3, and 4 are the same as those in FIG. User 1 makes a system use application to third party institution 3 after obtaining a normal account from financial institution A4. In response to this application, the third party institution 3 performs an examination and issues an ID card with a one-time password function. As a result, the user 1 can use the electronic commerce system. In addition, through the issuance of the ID card, user information 7 such as customer information and customer account information is constructed in the third party organization 3.

FIG. 3 is a block diagram showing an electronic commerce system according to Embodiment 1 of the present invention.
In FIG. 3, the electronic commerce system 30 is configured as follows.
The reliability investigation means 31 receives a system use application by a postcard of the user 1 and determines whether or not it is a person who can make a transaction from the financial transaction performance of the individual user. The ID card issuing means 32 gives a user ID managed by the company and issues an ID card to which a one-time password function is added when the result of the investigation by the reliability investigation means 31 indicates that the person is allowed to trade. At this time, user information 7 of customer information and customer account information is created.

The general communication means 33 is means for an unspecified number of individual users 1 such as the Internet to use the network. The authentication unit 34 determines whether the user who has received the inquiry via the general communication unit 33 is the person who issued the company's ID card. Alternatively, it is determined whether the identification account number used for the commercial transaction is issued by the company and is valid. User information 7 is used for this determination.
The identification account number issuing means 35 is an account number managed by the company for the user 1 who has been authenticated by the authentication means 34 and can be used for electronic commerce, and can be used for identification purposes (withdrawal, transfer, etc.) Is issued and notified to the user 1 via the general communication means 33. At this time, the identification account management information 6 is created. In addition, an identification account number for settlement is also issued to the business partner 2.
The usage notification means 36 is a notification destination and a notification method (e-mail, letter, etc.) registered in advance in the user information 7 when an electronic commerce is performed between the user 1 and the customer 2. Report usage details to User 1. Further, the business partner 2 is notified when the settlement agent is completed.

  The dedicated communication means 37 is a means for using a dedicated line that can be used only with a specific financial institution and cannot be used by anyone other than related parties, and communication security is ensured. Based on the identification account management information 6, the payment agent means 38 performs payment for the customer 2 and performs operations such as confirmation of the account number of the financial institution designated by the user 1, withdrawal, and transfer.

FIG. 4 is a diagram showing customer information managed by a third party organization of the electronic commerce system according to Embodiment 1 of the present invention.
In FIG. 4, the customer information stores a user ID unique to the user, which is also written on the ID card, usage notification means, usage notification information, name, address, telephone number, and the like.

FIG. 5 is a diagram showing customer account information managed by a third party organization of the electronic commerce system according to Embodiment 1 of the present invention.
In FIG. 5, the user ID and the number of applications are shown. In the case of multiple applications, an account application number that increases in value, a financial institution number used by the user, a financial institution branch number, and an account of the financial institution A number, expiration date, etc. are stored.

  FIG. 6 is a flowchart showing an ID card issuing procedure of the electronic commerce system according to Embodiment 1 of the present invention.

FIG. 7 is a diagram showing an example of a use application screen of the user of the electronic commerce system according to Embodiment 1 of the present invention.
In <Screen 1> in FIG. 7, a screen is formed to input the purpose of distinguishing between withdrawal and transfer, user ID, password, expiration date, usage amount, number of validity, and disclosure level. Has been. <Screen 2> shows the identification account number.

FIG. 8 is a diagram showing identification account management information of the user of the electronic commerce system according to Embodiment 1 of the present invention.
8, the user's identification account number issued as a one-time account number for each use, the account classification meaning debit, the withdrawal user ID, and the withdrawal account application number (customer account application in FIG. 5) Number), information disclosure level indicating the range of personal information that can be referred to by the business partner, effective number indicating the number of transactions, cumulative number of actual withdrawals, expiration date of identification account number, and completion A completion flag that is set to 1 is stored.

  FIG. 9 is a flowchart showing an identification account number issuing procedure of a third party institution in the electronic commerce system according to Embodiment 1 of the present invention.

FIG. 10 is a diagram showing an example of a customer application application screen of the electronic commerce system according to Embodiment 1 of the present invention.
In <Screen 3> in FIG. 10, an identification account number, a withdrawal user ID, a usage date, and a usage amount are input as the purpose and withdrawal destination information. The screen is formed so that the password, transfer date, financial institution, store number, and financial account number are entered. In <Screen 4>, an identification account number is shown.

FIG. 11 is a diagram showing the update of the identification account management information of the user of the electronic commerce system according to Embodiment 1 of the present invention.
In FIG. 11, when the cumulative number is incremented by 1 and the cumulative number becomes equal to the valid number, the completion flag is updated to 1.

FIG. 12 is a diagram showing identification account management information of a business partner of the electronic commerce system according to Embodiment 1 of the present invention.
In FIG. 12, the identification account number issued to the business partner, the account classification meaning transfer, the withdrawal user ID and withdrawal account application number and information disclosure level copied from FIG. 8, and the customer user ID of the business partner (If not, the temporary ID is numbered.), The transfer account application number, the transfer account number, the effective number of times that was set to 1 in the case of transfer, the cumulative number that was actually dropped, and this An expiration date of the identification account number and an expiration date indicating the scheduled transfer date, a completion flag set to 1 upon completion, and the like are stored.

FIG. 13 is a diagram showing the update of the identification account management information of the business partner of the electronic commerce system according to Embodiment 1 of the present invention.
In FIG. 13, when the cumulative number is incremented by 1 and the cumulative number becomes equal to the valid number, the completion flag is updated to 1. In addition, the actual processing time is input as the final result.

  FIG. 14 is a flowchart showing a settlement agent procedure of a third party in the electronic commerce system according to Embodiment 1 of the present invention.

Next, the operation will be described.
The third party organization 3 has an electronic commerce system, receives an application for system use from the user 1, and issues an ID card having a one-time password function. The user 1 receives the authentication of the third party organization 3 and issues an identification account number from the third party organization 3 for each business transaction with the customer 2 using the one-time password of the ID card. Using this identification account number, an actual commercial transaction is performed with the business partner 2. For the settlement of the customer 2, the third party institution 3 performs a settlement agency, and in accordance with an instruction from the third party institution 3, the transaction of the customer side financial institution B5 from the user account of the financial institution A4 on the user side. Payment is completed by transferring the money to the previous account.

Hereinafter, the details of the electronic commerce will be described sequentially.
First, the electronic commerce system use application shown in FIG. 2 will be described. This is a procedure for issuing an ID card.
The user 1 first opens a personal account at an arbitrary financial institution A (h in FIG. 2). Next, application for registration of account information and personal information (address, contact means and contact information at the time of use, etc.) to the third party organization 3 is made in advance (j in FIG. 2). This application is based on the use of letters and postcards, and allows multiple registrations such as multiple accounts within the same financial institution, or accounts of another financial institution A ′. The third-party organization 3 investigates whether or not the user is a reliable user based on the account information (withdrawal, transfer) and personal information, and the password changes to the approved user at regular intervals. Send ID card with one-time password function (k). At this time, the third party organization 3 creates and manages the customer information of FIG. 4 and the customer account information of FIG.

Next, the ID card issuing procedure in the third party organization 3 will be described with reference to the flowchart of FIG.
First, a personal ID card use application postcard is received from the applicant (step S1). Next, the reliability of the applicant is confirmed by the reliability survey means 31 (step S2). In the case of reliability that can be traded (step S3), the ID card issuing means 32 creates an ID card with a one-time password function of the applicant (step S4), and sends the created ID card to the applicant (step S4). Step S5). If the reliability is not such that the transaction can be made (step S3), a transaction stop notification is sent to the applicant (step S6).

Next, the usage method when the user who issued the ID card uses the electronic commerce system will be described.
The user uses the ID card password information issued by the third party organization to issue an identification account number from the third party organization, and uses this identification account number to conduct electronic commerce with the business partner. . Hereinafter, description will be given with reference to FIG.
First, the user 1 applies for issuance of an identification account number on the use application screen of FIG. At this time, the user 1 applies for ID + one-time password + expiration date + valid number of times to the third party organization 3 on the screen of FIG. 1 and FIG. 7 <screen 1>), “identification account number A” is issued (b in FIG. 1 and FIG. 7 <screen 2>), and “identification account number A + user ID (as password) ) "Is used to shop at the customer 2 (c in FIG. 1).
In response to the application from the user, the third party institution 3 newly adds identification account management information as shown in FIG.

Next, the procedure of the third party organization in response to the use application will be described with reference to FIG.
First, when a use application item is input by a user on an Internet homepage (step S11), the input personal information is authenticated by the authentication means 34 (step S12). If authenticated (step S13), the identification account number issuing means 35 issues the identification account number used at the time of purchase shown in <Screen 2> in FIG. 7 (step S14), and if not authenticated (step S13). ), The issuance of the identification account number is stopped (step S15).

Next, issuance of an identification account number B for settlement by a third party institution for business partners will be described.
The customer 2 receives the order and inquires the third party institution for “identification account number A, withdrawal user ID” on FIG. 10 <screen 3>, and the information is registered. Confirm that the condition of ≧ current time is satisfied. (D in FIG. 1, <Screen 3> in FIG. 10)
Thus, when the information can be confirmed, the business partner 2 applies for the “identification account number B” together with its own transfer destination information (transfer account number, transfer date, etc.). (E in FIG. 1, <screen 3> in FIG. 10)
The third party organization 3 confirms the number of times of validity, the expiration date, etc., and replies “identification account number B, user ID” to the customer 2. At this time, when the customer 2 also has a user ID approved by the third party organization 3, only the “identification account number B” is acquired. (F in FIG. 1)
Note that the flow from <Screen 3> to <Screen 4> in FIG. 10 enables automatic processing with a required item as an argument without a screen.
At this time, the third party organization 3 updates the identification account management information of FIG. 8 as shown in FIG. That is, the cumulative number is incremented by 1, and the completion flag is set to 1 when the valid number is equal to the cumulative number.
Further, identification account management information for a business partner is created as shown in FIG.

  After the above update process, the third party institution 3 refers to the customer information in FIG. 4 based on the user ID at the timing when the completion flag = 1, and notifies the user that the business transaction has been established and its details. Notification is made by means 36. In this example, AAA @ XXX. com to send email. This completion flag is also an internal process for locking additional use, and the identification account number A becomes an unusable number thereafter, preventing abuse.

Next, the execution of the payment proxy by the payment proxy means 38 of the third party organization will be described.
The third-party organization 3 checks the expiration date of the identification account number B in the identification account management information 6 and when the designated transfer date (expiration date) comes, it is used from the user's withdrawal account to the customer's transfer account. Substituting money transfer (g in FIG. 1). At this time, the third party institution 3 performs work using a dedicated line (dedicated communication means 37) in which security is ensured with the financial institution A4.
When the settlement proxy process is completed, when the identification account number B of the business partner 2 is acquired, a transfer completion notice is sent to the contact address applied by the business partner 2 using the contact means. In the case of the customer 2 who has acquired the user ID in advance, it is also possible to notify the contact registered in the customer information in FIG.
At this time, the third party organization 3 updates the identification account management information of FIG. 12 as shown in FIG. That is, the cumulative number is incremented by 1, and the completion flag is set to 1 when the cumulative number is equal to the effective number.

Next, a settlement agent procedure by a third party will be described with reference to the flowchart of FIG.
First, the transfer request date managed by the identification account number is confirmed on the current date or before (step S21). If it can be confirmed, the transfer agent 38 performs the transfer operation from the withdrawal destination to the transfer destination (step S22). Next, the usage notification means 36 notifies the customer 2 that the transfer work has been completed (step S23).

  In the above-described embodiment, the case where the electronic commerce system is installed in a third party has been described. However, the electronic commerce system may be installed in a financial institution in which a user or a business partner has an account.

According to the first embodiment, it is possible to reduce leakage of personal information by not exchanging account information of a personal financial institution on the network, and by performing a commercial transaction using a temporary identification account number. , Can prevent spoofing.
In addition, by issuing the identification account number A of the user at the time of business transaction in one time instead of being fixed, and by specifying the expiration date and information disclosure level, even if information is leaked, it is difficult to be misused can do.
In addition, by issuing the user identification account number A when performing a commercial transaction in one time, it is possible to make it difficult to be abused even if personal ID information is leaked.

Further, by separating the identification account number B at the time of billing by the customer from the identification account number A used by the user during the commercial transaction, the customer is not affected by the expiration date of the identification account number A. Can do billing.
In addition, since the notification of the contract contents is quickly received from the third party organization, even if the ID card is abused, it can be quickly sensed that the abuse has been made, and the transaction stop process can be performed.

In addition, by providing a transaction service as a third-party organization, a financial institution can be expected to acquire or lock in customers by improving services for users (such as reducing fees).
Furthermore, the third party institution conducts a user reliability survey in advance and increases the reliability from the financial institution, so that the number of collaborative financial institutions is increased, so that the satisfaction of the user can be improved.

BRIEF DESCRIPTION OF THE DRAWINGS It is the schematic which shows the whole electronic commerce system by Embodiment 1 of this invention. It is explanatory drawing which shows the system utilization application of the electronic commerce system by Embodiment 1 of this invention. It is a block diagram which shows the electronic commerce system by Embodiment 1 of this invention. It is a figure which shows the customer information which the 3rd party organization of the electronic commerce system by Embodiment 1 of this invention manages. It is a figure which shows the customer account information managed by the 3rd party organization of the electronic commerce system by Embodiment 1 of this invention. It is a flowchart which shows the ID card issue procedure of the electronic commerce system by Embodiment 1 of this invention. It is a figure which shows the example of a utilization application screen of the user of the electronic commerce system by Embodiment 1 of this invention. It is a figure which shows the identification account management information of the user of the electronic commerce system by Embodiment 1 of this invention. It is a flowchart which shows the identification account number issuing procedure of the 3rd party organization of the electronic commerce system by Embodiment 1 of this invention. It is a figure which shows the utilization application screen example of the customer of the electronic commerce system by Embodiment 1 of this invention. It is a figure which shows the update of the identification account management information of the user of the electronic commerce system by Embodiment 1 of this invention. It is a figure which shows the identification account management information of the customer of the electronic commerce system by Embodiment 1 of this invention. It is a figure which shows the update of the identification account management information of the customer of the electronic commerce system by Embodiment 1 of this invention. It is a flowchart which shows the payment agency procedure of the 3rd party organization of the electronic commerce system by Embodiment 1 of this invention.

Explanation of symbols

1 User 2 Business Partner 3 Third Party Institution 4 Financial Institution A
5 Financial Institution B
6 Identification account management information 7 User information 30 Electronic commerce system 31 Reliability survey means 32 ID card issuing means 33 General communication means 34 Authentication means 35 Identification account number issuing means 36 Use notification means 37 Dedicated communication means 38 Settlement agent means

Claims (7)

  Authentication means for authenticating a user who can make a commercial transaction by using a one-time password transmitted from the user in an electronic commerce system in which a commercial transaction is performed between the user and a business partner via a network, and this authentication An identification account number issuing means for issuing a temporary identification account number used for the commercial transaction to a user authenticated by the means, and a transaction with the user using the identification account number issued by the identification account number issuing means An electronic commerce system comprising settlement agent means for performing a transfer operation from a user account of a financial institution to the customer account of a financial institution when a commercial transaction is performed with the destination.   2. The electronic commerce system according to claim 1, wherein an expiration date is set for the identification account number issued by the identification account number issuing means according to an instruction from the user.   When the user's system use application is received, the reliability investigation means for investigating the reliability of the user, and when the reliability of the user by the reliability investigation means is acceptable, the user is given one time 3. An ID card issuing means for issuing an ID card with a password function, wherein the user is authenticated by the authentication means using a one-time password of the ID card. The electronic commerce system described.   The identification account number issuing means issues an identification account number for a business partner to the business partner in response to an application from the business partner who conducted a business transaction with the user, and the settlement agent means 4. The electronic commerce system according to claim 1, wherein the transfer operation is performed on the basis of the identification account number for the business partner.   5. The electronic commerce system according to claim 4, further comprising usage notification means for notifying the user of the establishment of a commercial transaction in response to the issue of the identification account number for the customer by the identification account number issuing means. .   The electronic commerce system according to any one of claims 1 to 5, wherein the electronic commerce system is installed in a third party organization different from a financial institution in which a user or a business partner has an account. system.   The electronic commerce system according to any one of claims 1 to 5, wherein the electronic commerce system is installed in a financial institution in which a user or a business partner has an account.

Images