JP2000339366A - System and method for authentication utilizing cd - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an identity confirmation system utilizing a CD for authenticating a site access authority by utilizing a CD in which authentication information is stored. SOLUTION: This identity confirmation system utilizing a CD includes a CD in which authentication information for accessing a specified site is stored, a computer 20 which reads the authentication information stored in the CD to access the specified site, requests identity confirmation and receives the access authority to the specified site by a response signal, a DB(database) 40 in which the CD authentication information is stored and a DB managing part 50 which collates with the DB and outputs an access permit or a rejection message to the specified site to the computer into which the CD is inserted when the authentication information is offered.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an authentication system and method using a compact disk, and more particularly, to a compact disk (Compa) including authentication information.
The present invention relates to an identity confirmation and e-commerce system using a ct disk (hereinafter, referred to as a CD), and an identity confirmation method and a money settlement method using the same.

[0002]

2. Description of the Related Art In recent years, there has been an increasing tendency to perform public business and personal business through a computer according to the development of computers and various facilities.

[0003] Further, as a network connecting computers in various ways has been developed, other computers connected to the network have access to other computers even if they are not their own computers, and work is performed on their own computers.

[0004] In particular, as the number of Internet users increases, various types of available / free servers connected to the Internet are accessed to obtain information or provide information.

[0005]

However, when a specific site is freely accessed using a personal computer, or when a specific site is visited by connecting to the Internet, access of a visitor whose identity is not confirmed. Need to be restricted.

[0006] For example, a business operator operating an adult site is trying to block minors from entering by displaying a comment prohibiting the entrance of minors on the initial screen. Is only a formal thing, and there was a problem that it was difficult to achieve a forcible blocking effect.

[0007] In addition, a company that provides a specific service only to a subscribing member by adopting a paid membership system checks whether or not the member has access through a process of confirming the identity of the member when the homepage is opened. Not only is the process cumbersome for the user, but if personal information is leaked, it is stolen and causes social problems.

[0008] In addition, electronic commerce is increasing with the development of the computer and its various facilities.

In general, electronic commerce (EC: Electr)
Sonic CommercialTransaction
n) is an Internet virtual shopping mall site (shopp), which is a virtual space through a network such as the Internet, without requiring the buyer to go directly to the sales floor.
This is a form of commerce in which shopping and purchasing of goods can be performed at an in mall site.

[0010] Such electronic commerce is not limited by the business hours of the seller, and can reduce the time required for the buyer to move directly to the sales floor and the cost required for the movement. It is a trend that Netizen is mainly taking advantage of it as a major commercial transaction type.

FIG. 1 is an explanatory diagram of general electronic commerce. As shown in FIG. 1, a consumer operates a user computer to determine a purchase intention in cyber space via a shopping mall merchant server (Merchant se ng) via the Internet or a van (VAN) network.
rver) 2, the shopping mall merchant server 2 requests the certification institution 3 to authenticate the buyer's payment means, and the payment gate 40 secures from the financial institution 5 such as a bank or card company that issued the payment means. After referring to an authentication database (Date Base: hereinafter, referred to as DB), the electronic commerce is approved.

[0012] In such electronic commerce, electronic money for electronic commerce is used as a settlement means of the transaction, and the type of the money is input to a rechargeable IC chip attached to a card and used as electronic money. The electronic money is classified into a card-type electronic money and a network-type electronic money whose amount information is stored on a user's hard disk and used as the electronic money.

At this time, in order to use the IC card type electronic money, there is a sense of burden that a separate IC card reader must be purchased and provided around the computer.
For network type electronic money, the amount information is downloaded (d
Since it is stored on the hard disk of the user computer during the process of own load, it is inconvenient to use and is vulnerable to security. For example, since a method of confirming the identity of a purchaser depends on a unique number and a password assigned to each individual, it is usual that the person who is trying to steal this is unprotected.

The present invention has been made to solve the above problems, and an object of the present invention is to provide an identity verification system using a CD for authenticating a site access right using a CD in which authentication information is stored. To provide.

It is another object of the present invention to provide an electronic commerce system using a CD for authenticating an access right to a shopping mall site using a CD in which authentication information is stored.

Another object of the present invention is to provide an identification method using the identification system using the CD.

Another object of the present invention is to provide the CD
An object of the present invention is to provide a money settlement method using an e-commerce system using the Internet.

[0018]

In order to achieve the above object of the present invention, an identification system using a CD according to a feature of the present invention includes a CD storing authentication information for accessing a specific site. A computer that reads the authentication information stored in the CD to access a specific site, requests identification, and receives a computer that is given access authority to the specific site by a response signal, and a CD authentication information. DB to save and D if authentication information is provided
B inquiring B to output a message indicating permission or disallowance of access to a specific site of the computer in which the CD is inserted D
B management unit.

According to another aspect of the present invention, there is provided an electronic commerce system using a CD according to a feature of the present invention, comprising: a CD for storing authentication information; An electronic gift certificate DB management unit having information and outputting a transaction permission or refusal message,
The authentication information is provided from the CD to the electronic gift certificate DB management unit to confirm whether or not the corresponding transaction is permitted. If the corresponding transaction is permitted, the request information on the corresponding article is used in response to the purchase request. A shopping mall DB management unit that updates the price information for each authentication information of the electronic gift certificate DB management unit and permits the corresponding transaction based on the price extraction information.

According to another aspect of the present invention, there is provided an identification method using a CD according to a feature of the present invention, wherein the identification information is stored in a CD, and the authentication information is converted into a network command and output. Computer that checks the authentication information input via the network and outputs a message indicating whether access to a specific site is permitted or not, and confirms the identity of the user who has the CD. And (i) checking whether the authentication information read from the CD is valid when the authentication information is input after being converted to a network.
i) outputting a message indicating that access to a specific site is not possible when the authentication information is determined to be invalid in step (i); and (iii) checking that the authentication information is valid in step (i). Granting access to specific sites, if any.

According to another aspect of the present invention, there is provided a money settlement method using a CD according to another aspect of the present invention, comprising the steps of: (a) accessing when an access request to an electronic commerce system is requested; Providing shopping mall information in cyber space by permitting
A step of checking whether there is an article purchase request and checking if shopping is completed if there is no article purchase request; Check how the CD is inserted
Is inserted, the authentication information stored therein is read, and (d) the read authentication information is compared with the price information for each authentication information stored in the electronic gift certificate DB management unit to determine whether it is valid. It is checked whether or not at least one of them is invalid, and if the result of the comparison between the step (d) and the step (d) outputs a transaction refusal message, the transaction is permitted if it is valid. Updating the difference information between the information and the billing amount information to the amount information for each authentication information and feeding back to step (b).

According to another aspect of the present invention, there is provided a method for paying money using a CD according to another aspect of the present invention, comprising the steps of (I) automatically setting an electronic catalog built in the inserted CD. Activating the electronic catalog function stored through the execution unit to check whether shopping is completed when the shopping mall information is provided, and (II) shopping mall if there is an article purchase request in step (I). Permitting access to the DB management unit and reading the built-in authentication information from the inserted CD; and (III) storing the read authentication information in the electronic gift certificate DB management unit and storing the price information for each authentication information. To check whether or not it is defective, and if at least one of them is defective, output a non-trading message and read in (IV) step (III) If the issued authentication information is normal, the transaction is permitted and the difference information between the recorded amount information and the requested amount information is updated to new amount information, and the step of feeding back to step (II) is performed. ,including.

[0023]

Embodiments of the present invention will be described below in more detail with reference to the drawings.

FIG. 2 is a diagram for explaining an identification system using a CD according to the present invention. As shown in FIG. 2, an identification system using a CD according to an embodiment of the present invention includes a CD 10 for storing authentication information,
A user computer 20 for reading authentication information from the CD 10 and outputting an identity confirmation request signal;
0, an information inquiry DB 40 for storing the authentication information of the already issued CD, and various permission information input via the network 30 to check the permission information and a permission / prohibition message for the identity of the user computer 20 into which the CD is inserted. Is output, and the identity verification D authenticates the identity of the CD user.
B management unit 50.

The CD 10 encodes and stores authentication information for accessing a specific site and a type of key information using an encryption technique.

The computer 20 has a built-in CD-RO
When the CD 10 is inserted into an M driver (not shown), the encoded authentication information is decoded (decrypted) to convert the protocol into a network command, and the authentication information converted into the network command is transmitted to the network 30. The data is provided to the identity confirmation DB management unit 50 via the above.

At this time, the protocol (Protocol)
Is a software communication protocol that defines various protocols for data transmission in a network system, and the most common protocol in a computer network is TCP / IP (Tr) used on the Internet.
announcement Control Protocol
ol / Internet Protocol) and Novell's NetWare (Net War)
e) IPX / SPX (Int used in network)
internetwork packet exchange
/ Sequenced Packet Exchange
e).

As is well known, the network 30 is a facility that is connected to two or more computers so that they can communicate with each other or with other additional devices (devices). LAN (Local Area Network), which is a short-distance communication network,
A WAN (Wide Area Ne) that is a telecommunications network
work) or the Internet.

The information inquiry DB 40 stores the already issued CD1
Save the authentication information for 0. More specifically, the information inquiry DB 40 includes a main authentication information DB that stores main authentication information that has been pre-encoded and stored on a previously issued CD, and an external surface or a CD that is already issued separately from the main authentication information. And a sub-authentication information DB that stores sub-authentication information attached to one side of the case by a printing method or a sticker method.

The reason that the secondary authentication information is included as a secondary part is to perform an auxiliary authentication function for the main authentication information. Is to be managed more smoothly.
For example, if a previously issued CD is damaged or damaged, the desired site cannot be accessed using the CD. Therefore, the sub-authentication information directly printed on the CD or attached by a sticker method cannot be used. You can use it to reissue it.

The identity confirmation DB management unit 50 is connected to the network 3
0 and the authentication information stored in the information inquiry DB 40 are checked to see if they are the same, and if they are the same, an access permission message to the site through the computer with the CD inserted is sent to the network. It outputs to the user computer 20 via 30 and if it is not the same, outputs an access denied message to the user computer 20.

FIG. 3 is a block diagram showing the configuration of an electronic commerce system using a CD according to an embodiment of the present invention. As shown in FIG. 3, an e-commerce system using a CD according to the present invention includes a CD 100 having authentication information.
And a user computer 200 having a multimedia function, and an electronic commerce management unit 300 including an electronic gift certificate DB management unit 310 and a shopping mall DB management unit 320.

The CD 100 includes authentication information, and the authentication information is issued on the side that operates the electronic commerce operation unit 300,
The issued authentication information is managed by the electronic gift certificate DB management unit 310 of the electronic commerce operation unit 300. At this time, the authentication information includes a unique ID (I) for each CD serving as an electronic gift certificate in a part where the user cannot access.
Saved when issuing D).

The user computer 200 has a CD 100
And provides the authentication information to the e-commerce operation unit 300 via the network and converts the converted network command into a network command.

In general, the user computer 200, which is currently widely used, has a multimedia function and an online connection function for connecting to the Internet, etc., and the programs distributed these days are added by increasing the capacity. A CD-ROM driver is provided for facilitating installation of the program.

The electronic gift certificate DB management section 310 has built-in price information for each authentication information for confirming permission of electronic commerce.

More specifically, the electronic gift certificate DB management unit 31
No. 0 has built-in price information for each authentication information provided by the side that operates the shopping mall DB management unit 320, and such authentication information is stored in the shopping mall DB management unit (Shho).
The information is changed by the operator of the shopping mall DB management unit 320, and can be changed in response to a request of the operator of the shopping mall DB management unit 320. If the transaction is permitted, the price information is already set. A specific CD in which the difference information between the price information and the purchase price information is overwritten on the price information already set
Update the different price information.

The shopping mall DB management unit 32
0 receives the authentication information input via the user computer 200 and provides it to the electronic gift certificate DB management unit 310 to check whether or not the qualification of the buyer who wants the electronic commerce is approved. If permitted, the purchase of the article is permitted, and the corresponding price information is stored in the electronic gift certificate DB.
Provided to the management unit 310.

In the above description, the case where only the authentication information is included in the CD has been described as an example. After the settlement, the difference information can be updated to the amount information for each authentication information and also stored on a CD. Of course, at this time, the CD is read /
A CD-ROM that can be written and mounted on a computer
Obviously, the ROM must be a readable / writable CD-ROM.

Although the case where only the authentication information is included in the CD has been described as an example, other than that, an encryption processing function, an electronic catalog function, an automatic execution function, an Internet connection function, and shopping browsing (Shoppin).
g browsing) function.

More specifically, the encryption processing function means that the authentication information and the password are applied by applying a public key encryption algorithm when trying to transmit the authentication information and the password using a communication network such as the Internet. This function is to prevent unauthorized use of the electronic gift certificate by transmitting the encrypted information.

The electronic catalog function means that various information related to an electronic commerce article is composed of moving images, music, audio, photos, graphics, etc., and is offline (off-l).
Ine), it is possible to search for articles even when the user selects a desired article, so that the Internet connection function is automatically activated so that the user can connect to the Internet shopping mall with only one click. Function.

The automatic execution function plays a role of automatically executing the electronic catalog function when a CD, which is a kind of electronic gift certificate, is inserted into the CD-ROM driver, and the Internet connection function is one for the convenience of the user. This function allows you to connect to the Internet shopping mall with only one click.

The shopping browsing function is a function for searching for an article online in order to transmit article information other than the electronic catalog or article information of another shopping mall.

In view of the fact that the CD has a large capacity as described above, by adding various functions not mentioned above, the CD can be effectively used for electronic commerce in addition to the function of the electronic gift certificate. .

Although the CD has been described as including the authentication information stored by encoding using an encryption technique, sub-authentication information having an auxiliary function for the authentication information is printed outside the CD or on one side of the case. It can be provided through a system or a sticker system. At this time, the sub-authentication information of the auxiliary function is for dealing with the damage or damage of the CD.
This is for managing CDs issued from the side and smoothly reissuing them when a reissue request is made.

Next, the operations of the identity confirmation system and the electronic commerce system using the CD storing the authentication information will be described in more detail.

FIG. 4 is a flowchart for explaining a method of confirming the identity of the user computer shown in FIG. 2 using a CD.

Referring to FIGS. 2 and 4, it is first checked whether the authentication information is inserted into the CD 10 in which the authentication information is encoded and stored (S110).

If the CD 10 is inserted in step S110, the authentication information is read from the CD 10 (step S12).
0), and converts the read authentication information into a network command and outputs it to the identity confirmation DB management unit 50 via the network 30 (step S130).

Next, it is checked whether a response signal provided from the identity confirmation DB management unit 50 has been received (step S14).
0) If the response signal is received, it is checked whether it is valid authentication information (step S150), and if it is checked that the authentication information is invalid, a message indicating that the authentication information is invalid is received. Is displayed (displayed) (step S160).

If it is determined in step S150 that the authentication information is valid, a message indicating that the authentication information is valid is displayed (step S170).

Next, after outputting a message indicating that the information is valid authentication information in step S170, it is checked whether a site connection request signal has been input by the user (step S180). Checks whether the electronic commerce is completed, if it is completed, terminates the electronic commerce, and if not completed, feeds back to the step of checking whether a site connection request signal is input (step S185).

If a site connection request signal is input in step S180, the user is connected to a specific site requested by the user (step S190).

FIG. 5 shows C in the identity confirmation DB management unit shown in FIG.
9 is a flowchart for explaining an identity confirmation method using D.

Referring to FIGS. 2 and 5, first, it is checked whether the protocol-converted main authentication information input from the user computer 20 via the network 30 is received (step S210).

In step S210, the user computer 20
When the main authentication information is input from the server, the input main authentication information is referred to the main authentication information DB of the inquiry information DB 40 (step S220), and it is checked whether the main authentication information is valid information (step S220). Step S230).

If it is checked that the main authentication information provided in step S230 is invalid, a message indicating that the site cannot be accessed is output to the user computer 20 (step S240), and the main authentication information provided in step S230 is output. If the information is checked to be valid, a site access permission message is output to the user computer 20 (step S250).

Next, it is checked whether a site connection request signal is input from the user computer 20 (step S260). If the site connection request signal is input, the user computer 20 is connected to the corresponding site (step S260). Step S270).

As described above, for example, an operator who operates a short-distance communication network (LAN), a long-distance communication network (WAN), the Internet, or a specific site connected to the Internet accesses the own site. Issue a CD containing authentication information serving as a kind of key required for site access in order to permit the access.

Further, the authentication information of the CD issued by the operator is stored in a DB and managed, and users who do not have the CD issued by the operator are blocked from accessing the site, so that the site operated by the operator can be managed. Can be protected.

In the above, a specific server operator side manufactures and distributes a large number of compact disks having the same authentication information, and gives only users who have the distributed compact disks an opportunity to use the site of the operator side. That was explained.

On the other hand, the individual information corresponding to the member is stored on one compact disk, and when a site access request is made from the compact disk having the stored individual information, the personal information requested by the site operator side Even if the user does not fill in all the information, the operator must ask the user how to read each personal information stored, and the user must fill in the personal information by pressing only the Yes or No key. Can also be reduced. That is, a card issued by each credit card service company can be replaced with a compact disk. Of course, at this time, it is natural to take measures to prevent leakage of personal information.

FIG. 6 is a flow chart for explaining a purchase price settlement method according to the first embodiment of the electronic commerce using the CD of FIG.

Referring to FIG. 3 and FIG. 6, first, the purchaser is online (On-Line) such as the Internet.
The shopping mall DB management unit 320 is accessed using the function, and the shopping mall DB management unit 320 records the information of the corresponding shopping site, for example, the appearance, specification, price, and usage of the article in response to the access request of the buyer. The obtained catalog information is provided to the user computer 200 and displayed on a monitor (step S110), and the purchaser purchases an article to be purchased in cyber space (step S120).

Next, it is checked whether or not there is an article purchase request by the buyer (step S130), and step S130
If there is no product purchase request, it is checked whether shopping is completed. If it is determined that shopping is completed, the process is terminated. If it is determined that shopping is not completed, feedback is provided to step S120 (step S14).
0).

If there is an article purchase request in step S130, the user computer checks whether a CD containing authentication information and price information is inserted (step S15).
0) When the CD is inserted, the stored authentication information is read out and converted into a network command, and the converted network command is converted into the shopping mall DB management unit 32.
0 (step S160).

At this time, when an article purchase request is detected by the user shopping in the virtual space and purchasing the article, the detailed specification, price, manual, etc. relating to the article are checked. By clicking on the corresponding article, the purchase intention of the article is determined by the shopping mall D via a network, preferably the Internet.
Output to the B management unit 320.

Next, the shopping mall DB management unit 3
20 provides the authentication information input together with the purchase request command for the corresponding article to the electronic gift certificate DB management unit 310, and the electronic gift certificate DB management unit 310 provides the information provided from the shopping mall DB management unit 320, that is, step S160. Check whether the authentication information read out at step S is defective (step S
170).

More specifically, the electronic gift certificate DB management unit 31
0 compares the authentication information input in response to the user's purchase request with the built-in price information for each authentication information to check whether the corresponding CD is defective, and according to the result, manages the transaction authentication in the shopping mall DB. To the section 320.

If the authentication information provided from the CD is bad in step S170, a message indicating that the CD 100 built in the user computer 200 cannot be used as an electronic payment means is output by outputting a transaction refusal message. Provide (step S180).

If the authentication information read in step S170 is normal, the shopping mall DB management unit 3
20 permits the corresponding e-commerce (step S190), and the electronic gift certificate DB management unit 310 stores the difference information between the billing amount information and the recorded amount information, and then feeds back the information to step S120 (step S195).

In the above, the validity of the electronic commerce is checked simply by providing only the authentication information on the CD. However, the amount information other than the authentication information can be further stored and used as an electronic gift certificate.

Although the shopping mall DB management unit has transmitted electronic catalog information on various shopping items operated by the company to the user via the Internet, in view of the fact that CDs are generally large in capacity, catalog information is further transferred to CDs. The buyer may first check the catalog provided by the shopping mall DB management unit to confirm and search for information on the corresponding article, and then provide a purchase request for the article to the shopping mall DB management unit. it can.

FIG. 7 is a flow chart for explaining a purchase amount settlement method according to the second embodiment of the electronic commerce using the CD of FIG.

Referring to FIGS. 3 and 7, a description will be given of a method of settlement of a purchase amount according to a second embodiment of electronic commerce using a CD according to the present invention.

First, it is checked whether a CD storing authentication information is inserted (step S210).

When the CD is inserted in step S210, the electronic catalog function is activated by the electronic catalog function built in the CD to display the catalog information on the shopping mall articles, and the user can use the electronic catalog provided in the cyber space. In step S220, the user purchases an article to be purchased.

Next, it is checked whether there is an article purchase request by the buyer (step S230). If there is no article purchase request, it is checked whether shopping has been completed. If the shopping has not been completed, the process feeds back to step S220 to shop the goods in the space that is continuously provided in the electronic catalog (step S240).

If there is an article purchase request in step S230, access is made to the shopping mall DB management section 320 (step S250).

Next, the authentication information contained in the CD together with the article information to be purchased is read and converted into a network command, and the converted network command is provided to the shopping mall DB management unit 320 (step). S260).

Next, the shopping mall DB management unit 3
20 provides the authentication information input together with the article purchase request command to the electronic gift certificate DB management unit 310, and the electronic gift certificate DB management unit 310 reads the information provided from the shopping mall DB management unit 320, that is, reads the information in step S260. Check whether the issued authentication information is bad (step S2)
70).

More specifically, the electronic gift certificate DB management unit 31
In response to a purchase request from a user, the value 0 compares the price information for each authentication information built in in response to the user's purchase request with the authentication information input via the shopping mall DB management unit 320 to check whether the corresponding transaction by the buyer is defective. Thereby, the transaction authentication information is provided to the shopping mall DB management unit 320.

If the authentication information is incorrect in step S270, a message indicating that the CD 100 built in the user computer 200 cannot be used as an electronic payment means is provided by outputting a transaction refusal message (step S280). .

If the authentication information read in step S270 is normal, the shopping mall DB management section 320 permits the corresponding transaction (step S290), and the electronic gift certificate DB management section 310 requests the corresponding transaction. After storing the difference between the amount and the stored amount, the process returns to step S220 (step S295).

FIG. 8 is a diagram showing a C which becomes an electronic gift certificate according to the present invention.
FIG. 4 is a detailed sequence diagram illustrating an example of electronic commerce using D.

Referring to FIGS. 3 and 8, a CD serving as an electronic gift certificate is inserted into a CD-R attached to a user computer.
When inserted into the OM driver (step S300), the online shopping mall is automatically connected (on-line) (step S310), the homepage of the corresponding shopping mall is displayed, and the user can display the homepage of the shopping mall. After shopping via, a desired article is selected (step S320).

Alternatively, when a CD serving as an electronic gift certificate is inserted into the CD-ROM driver of the user computer, the electronic catalog function is automatically activated in an off-line state, and articles are displayed on the user computer side ( In operation S315, the user may select a desired product after virtual shopping for the product displayed on the monitor.

Next, after selecting the article, the Internet connection tool is executed in the offline state (step S33).
0) In the online state, the electronic gift certificate ID and information on the selected article are stored in the article information DB of the shopping mall host computer without executing the Internet connection tool.
(Step S340).

The shopping mall DB management unit receives the article inventory status information from the article information DB and checks the stock of the article (step S350).

The shopping mall DB management unit 320 receives the electronic gift certificate ID and the electronic gift certificate balance information from the user computer and compares them with the authentication information database (step S360). Then, if they do not match, a transaction refusal message is output to the user computer (step S370).

In response to the password request from the shopping mall DB management unit 320, the user inputs a password (step S380), and the user computer encrypts the input password by applying a public key encryption algorithm (step S380). Step S390) Provide the shopping mall DB management unit 320.

The shopping mall DB management section 320 compares this with the password of the corresponding user stored in the electronic gift certificate DB management section 310 (step S400), and if they match, approves the corresponding transaction (step S410).

Shopping mall D approved for transaction
The B management unit 320 notifies the user computer of the transaction approval (step S420), and the user computer receiving the transaction approval confirms the purchased item and the balance, and ends the electronic commerce (step S430).

The shopping mall DB management unit 32
0 provides the price information on the purchased goods to the electronic gift certificate DB management unit 310, the electronic gift certificate DB management unit 310 corrects the balance information of the corresponding goods (step S440), and stores the corrected balance information in the transaction record file. save.

At this time, the electronic gift certificate DB management unit 310 stores the ID of the electronic gift certificate, the purchased item, the purchase date and time, and other information, and leaves backup data for the corresponding transaction (step S450).

In general, the company that operates the e-commerce management unit 300 forms a cyber space for shopping only by itself in cooperation with domestic and overseas Internet companies, and guides the shopping of buyers in the formed cyber space. In order to do so, if a CD according to the present invention is issued as an electronic gift certificate containing a certain amount of money and if there is any non-performing transaction through the electronic gift certificate DB management unit 310 operated by the company without a separate certification body, the user wants electronic commerce. The user can smoothly carry out electronic commerce using only a computer having a CD-ROM driver without adding a separate accessory device.

In the above, the changed amount information is not recorded on the CD in which the electronic commerce is completed by using the CD containing the authentication information as the electronic gift certificate, and the authentication information managed by the side managing the electronic commerce operation site. The new price information has been updated to the separate price information, but when replacing the CD with one having a read / write function, the changed price information is also recorded on the CD, so that the user can sort the difference information into a type. It can also be held as a backup file.

[0099]

As described above, according to the present invention, electronic money using a CD containing authentication information as a medium is an economic burden due to the purchase cost of a card reader that a conventional IC card type electronic money has. It is possible to solve the inconvenience in the use procedure and the security problem that the network-type electronic money has.

Further, by using a compact disk, to which the user is accustomed, as a medium for settlement of a purchase price for electronic commerce, electronic commerce can be dramatically expanded.

The service provider operating the e-commerce operation site operates the electronic gift certificate DB management unit having the price information for each authentication information on its own site network,
By recording the authentication information and the amount information on the CD issued by the company, the electronic commerce system can be easily operated without passing through an external authentication organization.

Also, due to the characteristics of the CD as a large-capacity storage medium, more convenient services can be provided by adding various functions such as an electronic catalog in addition to the authentication information, and such a CD can be specified. Used as an electronic gift certificate issued by the site administrator of the shopping mall, or as an electronic prepaid card, etc., in which a certain amount of money is paid in advance and a certain amount of money is stored and electronic purchase and settlement can be done electronically within a certain limit can do.

Although the preferred embodiments of the present invention have been described above, those skilled in the relevant technical field do not depart from the spirit and scope of the present invention described in the claims of the present invention. The present invention can be variously modified and changed within the scope.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a general electronic commerce system.

FIG. 2 is a diagram illustrating an identification system using a CD according to an embodiment of the present invention.

FIG. 3 is a block diagram illustrating a configuration of an electronic commerce system using a CD according to an embodiment of the present invention.

FIG. 4 is a flowchart illustrating a method of confirming the identity of a user computer using a CD in FIG. 2;

5 is a flowchart for explaining an identity confirmation method using a CD on the identity confirmation DB management unit side in FIG. 2;

FIG. 6 is a flowchart for explaining a purchase amount settlement method according to a first embodiment of electronic commerce using the CD of FIG. 3;

FIG. 7 is a flowchart for explaining a purchase price settlement method according to a second embodiment of the electronic commerce using the CD of FIG. 3;

FIG. 8 is a flowchart for explaining a purchase amount settlement method according to a third embodiment of e-commerce using the CD of FIG. 3;

[Explanation of symbols]

 10, 100 CD 20, 200 User computer 30 Network 40 Information inquiry DB 50 Identity confirmation DB management unit 300 Electronic commerce management unit 310 Electronic gift certificate DB management unit 320 Shopping mall DB management unit

Continuation of front page (71) Applicant 500004829 Shinsong Center Bld g. 9th Floor, Youido-dong 25-12, Youngdeung ngpo-ku, Seoul, Korea F-term (reference)

Claims (16)

[Claims] 1. A CD for storing authentication information for accessing a specific site, and a request for identity confirmation by reading the authentication information stored on the CD for accessing the specific site. A computer receiving access authority to the specific site by a response signal, a DB storing authentication information of the CD, and referencing the DB when the authentication information is provided, and inserting the CD An identity confirmation system using a CD, comprising: a DB management unit that outputs a message indicating whether or not the computer is permitted to access the specific site. 2. The system according to claim 1, wherein the CD further includes auxiliary authentication information for the authentication information on an external surface. 3. A CD that stores authentication information, an electronic gift certificate DB management unit that has information on the amount of money for each authentication information that has been authorized for electronic commerce and outputs a transaction permission or refusal message, The authentication information is provided to the electronic gift certificate DB management unit to confirm whether or not the corresponding transaction is permitted. If the corresponding transaction is permitted, the request information on the corresponding article is used in response to the purchase request. A shopping mall DB management unit that updates the price information for each authentication information of the electronic gift certificate DB management unit and permits the corresponding transaction by the amount extraction information;
An electronic commerce system using a CD, comprising: 4. The electronic commerce system using a CD according to claim 3, wherein the CD further includes electronic catalog information on the electronic commerce article. 5. The electronic commerce system according to claim 4, wherein the electronic catalog information further includes an automatic execution unit for automatically connecting to the shopping mall DB management unit. . 6. The shopping mall D
The electronic commerce system using a CD according to claim 3, wherein a program for online connection is stored in the B management unit. 7. The shopping mall D
The electronic commerce system using a CD according to claim 3, further comprising a shopping web browser for transmitting the article information of the B management unit. 8. The method according to claim 3, wherein the CD further includes an encryption processing unit for encrypting the authentication information by applying a public key encryption algorithm. Electronic commerce system. 9. The electronic merchandise transaction system using a CD according to claim 3, wherein the CD further includes amount information encoded by an encryption technique. 10. The electronic commerce system according to claim 3, wherein the CD further includes auxiliary authentication information for the authentication information on an external surface. 11. A CD for storing authentication information, a computer for converting the authentication information into a network command and outputting the command, and checking the authentication information input via a network to access a specific site. Including an identity confirmation DB management unit that outputs a permission or refusal message,
(I) checking whether the authentication information read from the CD is valid if the authentication information is input after being converted into a network, and (ii) checking the authenticity of the authentication information read from the CD. Outputting a message indicating that access to the specific site is not possible if the authentication information is determined to be invalid in step (i); and (iii) verifying that the authentication information is valid in step (i). A step of permitting access to the specific site when it is checked that there is a certain site, an identification method using a CD. 12. The step (iii) includes: (iv) checking whether a site connection request signal has been input; and (v) waiting if the site connection request signal has not been input; 2. The method of claim 1, further comprising the step of: connecting the user computer to the requested site when the user input is input.
1. An identification method using the CD described in 1. 13. A step of: (a) granting access to an electronic commerce system when there is an access request and providing shopping mall information in cyber space; and (b) checking whether there is an article purchase request. And (c) checking the end of shopping if there is no goods purchase request, and (c) checking whether or not a CD containing authentication information is inserted if there is a goods purchase request in step (b). C
(D) comparing the read authentication information with the authentication information amount information stored in the electronic gift certificate DB management unit, and Checking whether there is any, and if at least one of them is invalid, outputting a transaction refusal message; and (e) permitting the transaction if the result of the comparison in step (d) is valid. Updating the difference information between the recorded amount information and the charged amount information to the amount information for each authentication information, and feeding back to step (b).
Payment method using. 14. The method of claim 13, wherein the step (a) further comprises the step of operating an electronic catalog stored through an electronic catalog automatic execution unit built in the CD. Payment method. 15. The method according to claim 13, wherein the step (d) is a step of comparing the read authentication information with authentication information amount information stored in an electronic gift certificate DB management unit. Payment method using the described CD. 16. (I) activating an electronic catalog function stored through an electronic catalog automatic execution unit built in the inserted CD and checking whether shopping is completed when receiving shopping mall information; (II) when there is an article purchase request in the step (I), permitting access to the shopping mall DB management unit, and reading out the built-in authentication information from the inserted CD; The read authentication information is compared with the price information for each authentication information stored in the electronic gift certificate DB management unit to check whether the information is defective. If at least one of the information is defective, a transaction refusal message is displayed. And (IV) if the authentication information read out in the above step (III) is normal, permitting the transaction and recording the amount information and the requested amount information To update the difference information of the new amount of money information,
And a step of feeding back to the step (II).