JP2002032572A - Authentication system, authentication method and settlement system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system which can accurately discriminate a wrong user from a normal registered user and also can prevent the wrong user from drawing the charges of purchased commodities or labor from the account of the registered user. SOLUTION: A registered image 41 including a face photo of the owner of a cellular phone 5 is transmitted to the phone 5 from a settlement substitute service site 8 and displayed on a screen 13 (potable terminal screen) of the phone 5. Thus, a supplier 3 can accurately discriminate a wrong user from a normal registered user to attain the accurate authentication from the registered owner's image 41.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a system for authenticating that a user is the same person as a registered user, and a settlement system to which the authentication system is applied.

[0002]

2. Description of the Related Art Conventionally, credit cards have been used to pay for goods or services from a purchaser to a provider. When accepting the payment by the credit card, the provider compares the signature written on the credit card with the signature written on the slip or the like by the purchaser, and the same person as the user who registered the purchaser Has been certified. Further, in the field of a billing system for billing users of various services on the Internet, a user who is accessing various services is authenticated as a registered user by using a user ID and a password. Such a configuration is known (see, for example, Japanese Patent No. 2939923).

[0003]

However, in the above-described conventional method of comparing signatures and authenticating that the purchaser is the same person as the registered user, the purchaser steals the credit card. When imitating a signature written on a credit card and signing a slip or the like, the provider may mistakenly identify the purchaser as the same user as the registered user, There is a security issue because the buyer must carry a credit card. Further, when an authentication method using a user ID and a password as disclosed in the above-mentioned Japanese Patent No. 2939723 is applied to payment of a price from a purchaser of goods or services to a provider, a registered user is There is a risk that the password is stolen, and if the user uses a simple number such as the date of birth as the password, others can easily estimate the password. For this reason, there is a possibility that an unauthorized user other than the registered user withdraws the purchase price of goods or services from the account of another person using the password of another person.

[0004] The present invention solves the above-mentioned problem, and enables an unauthorized user other than a registered user to be accurately distinguished from an authorized registered user. It is an object of the present invention to provide an authentication system, an authentication method, and a payment system that can prevent the purchase price of goods or services from being deducted from an account of the same.

[0005]

In order to achieve the above object, according to the first aspect of the present invention, a product or service desired by the owner is determined that the owner of the portable terminal is the same as the registered owner. Is a system that authenticates a provider that provides a mobile terminal, and a network that can transmit image data including a face photograph of the registered owner of the mobile terminal capable of transmitting and receiving various data to the mobile terminal or the terminal on the provider side. Site, and display on the screen an image based on the owner's image data transmitted from the site to the mobile terminal or the provider's terminal, and confirm that the owner of the mobile terminal is the same as the registered owner It is possible to authenticate the provider.

In the above configuration, image data including a photograph of the owner of the portable terminal registered in the portable terminal is transmitted from the site to the portable terminal or the terminal on the provider side, and the portable terminal or the provider is registered based on the image data. The terminal on the side displays an image including a photograph of the face of the registered owner of the mobile terminal on the screen. By looking at this screen display, it is possible to accurately determine whether the owner of the mobile terminal is the authorized owner or the unauthorized owner, and the provider can perform accurate authentication Becomes

Further, the site transmits the owner's image data to the portable terminal or the provider terminal when receiving the identification information about the owner of the portable terminal from the portable terminal or the provider terminal. It is desirable to do. Thus, the mobile terminal holder or the provider of the product / service can perform the simple operation of transmitting the identification information about the owner of the mobile terminal from the mobile terminal or the terminal on the provider side, and the mobile terminal Alternatively, an image including a photograph of the owner's face on the registration of the portable terminal can be displayed on the terminal on the provider side, and the above operation can be easily obtained.

According to a third aspect of the present invention, there is provided a method for authenticating to a provider providing goods or services desired by the owner that the owner of the portable terminal is the same as the registered owner. , By instructions from the mobile terminal or the provider's terminal,
Requesting transmission of image data including a face photograph of the owner of the mobile terminal from the site on the network to the mobile terminal or the provider's terminal; and Transmitting the image data to the mobile terminal or the provider side terminal, and receiving the image data transmitted by the transmitting step at the mobile terminal or the provider side terminal and displaying the owner image on the screen. It becomes. With this method, the same operation as described above can be obtained.

Further, the invention of claim 4 is a system for performing payment for payment from the owner of the portable terminal to a provider who provides goods or services desired by the owner, and transmits and receives various data. A site on the network that can send image data including a photo of the owner of the registered mobile device, and collects money from the owner of the mobile device and pays the provider. A site on the provider side capable of transmitting and receiving various data, and when the site receives identification information about the owner of the mobile terminal from the mobile terminal or the provider side terminal, The owner's image data is transmitted to the terminal, the image is displayed on the screen, and when the provider receives the authentication data transmitted from the provider's terminal, collection and provision from the owner of the mobile terminal To the person It is intended to perform the processing on behalf of payment.

[0010] In this configuration, based on the image including the face photograph of the registered owner of the portable terminal displayed on the portable terminal or the terminal on the provider side, the provider determines the registered terminal of the portable terminal. It is possible to accurately authenticate that they are the same as the owner. As a result, if the owner of the mobile terminal is an unauthorized owner different from the registered owner, the site collects the purchase price of goods or services from the unauthorized owner from the registered owner of the mobile terminal. Can be prevented.

[0011]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 shows the concept of an authentication settlement system to which the present invention is applied. This authentication settlement system 1 is a purchaser 2 of a product or service (user in the figure)
A mobile phone 5 (a mobile terminal in the claims) owned by
POS (Point Of Sales) register 6 (provider-side terminal in claims: hereinafter abbreviated as POS register) having a communication function that can be used by provider 3 of goods or services, and a network capable of transmitting image data Electronic payment site 4 on
It is composed of As shown in the figure, the purchaser 2 having the mobile phone 5 notifies the provider 3 of the telephone number (TELNo) of the mobile phone 5 when purchasing goods or services at a store or the like. . The provider 3 uses the POS cash register 6 to send the telephone number notified by the buyer 2 to the electronic settlement site 4.
Send to When the information about the telephone number is received from the POS cash register 6, the electronic settlement site 4 outputs an image including a face photograph of the registered owner of the mobile phone 5 (identification information in the figure: hereinafter referred to as a face image). It is displayed on the screen of the mobile phone 5 or the POS register 6. The provider 3 confirms whether or not the purchaser 2 is the same as the registered owner of the mobile phone 5 based on the face image. If it is confirmed that the purchaser 2 is the same as the registered owner, the mobile phone 5
Alternatively, the POS register 6 transmits a response (authentication data according to claim 4) to the electronic settlement site 4 to the effect that authentication has been performed. When receiving the response to the effect that the authentication has been made, the electronic settlement site 4 acquires the purchaser 2 based on the prepaid contract or the account debit contract with the registered owner of the mobile phone 5 and the settlement contract with the provider 3. And collects the purchase price of the goods or services purchased from the registered owner's account or the like, and pays the collected price to the provider 3.

FIG. 2 shows a mechanism of settlement between the buyer 2 and the provider 3 in the authentication settlement system 1. Payment agent service site 8 and designated financial institution 9 of buyer in the figure
Corresponds to the electronic settlement site 4 in FIG. Buyer 2
As a prerequisite for introducing this settlement method, it is necessary to register a debit account of the person, the telephone number of the mobile phone 5, a personal identification number, etc. in the settlement agency service site 8, as shown in the figure. Further, the provider (seller) 3 introduces a terminal (POS cash register) 6 having a communication function designated by the payment agent service site 8, and then sets up a payment method and a user with the payment agent service site 8. It is necessary to make a contract for the agreement of visual authentication of.

Next, a process when the buyer 2 purchases goods or services from the provider 3 and a mechanism of settlement between the buyer 2 and the provider 3 by the settlement agency service site 8 and the designated financial institution 9. Will be described. The buyer 2 notifies the provider 3 of the telephone number of the mobile phone 5 he / she has, designates a desired product or service to the provider 3, and
The provider 3 sends the information "Sell to the person with this phone number" from the POS cash register 6 to the settlement agency service site 8.
The settlement agency service site 8 provides the POS cash register 6 of the provider 3.
Alternatively, after displaying the face image of the registered owner of the mobile phone 5 on the screen of the mobile phone 5 of the buyer 2, the POS of the provider 3 is displayed.
On the screen of the cash register 6, a message "Is this person a face like this?" Is displayed. Provider 3 is POS
When the cashier 6 sends the response information "Yes" to the settlement agency service site 8, the settlement agency service site 8 purchases the message "Do you want to buy this at this store for ¥?" Is displayed on the screen of the mobile phone 5 of the person 2. When the buyer 2 transmits response information indicating “yes” from the mobile phone 5 to the settlement agency service site 8, the settlement agency service site 8
Confirms the balance of the designated account at the designated financial institution 9 of the buyer 2, and then debits the goods or services purchased by the buyer 2 from the designated account. Then, the settlement agency service site 8 pays the provider 3 by the method specified by the provider 3 by subtracting the commission received by the settlement agency service site 8 from the deducted amount. However, if the balance of the designated account of the buyer 2 cannot be confirmed for some reason (for example, the balance of the designated account of another person cannot be introduced due to a legal problem), the settlement agency service site 8 sets the buyer 2 Deducts the price of the goods or services purchased by the buyer 2 from the money deposited in a specific operating company in a prepaid manner.

FIG. 3 shows a configuration of an authentication and settlement system 1 according to a first embodiment that embodies the above concept. This authentication and settlement system 1 includes the above-described purchaser's mobile phone 5, the provider's POS cash register 6, a settlement agency service site 8, and various settlement systems 30 (designated in FIG. 2) operated by financial institutions such as banks. Financial institution 9). The mobile phone 5 includes a control circuit 11 that performs overall control, an antenna 12 that is used to transmit and receive data to and from the settlement agency service site 8, a liquid crystal display 13 that displays a face image of the owner of the mobile phone 5, and a telephone number. And the like, and a cursor key 15 and an enter key 16 for selecting various items displayed on the liquid crystal display 13. As the mobile phone 5, a model capable of receiving and displaying image data (model compatible with i-mode) is used. The POS register 6 includes a CPU 21 for controlling the entire apparatus, a data transmitting and receiving unit 22 for transmitting and receiving data to and from the settlement agency service site 8 and the like, a display 23 for displaying various information, and a bar for purchased goods or services. An input unit 24 for reading a code and inputting a telephone number of the mobile phone 5 and a storage unit 2 for storing data transmitted from the settlement agency service site 8 and the like.
Consists of five. The various payment systems 30 include a prepaid payment system 31 (a system of an operating company that manages money deposited by the prepaid system from the buyer 2),
The system includes a financial settlement system 32 (a banking system of a general financial institution such as a bank) and a communication settlement system 33 (a financial institution on a network having no stores). The mobile phone 5, the POS cash register 6, the payment agent service site 8, and the various payment systems 30 are interconnected by a communication line 35.

Next, the processing flow of the authentication and settlement system 1 according to the first embodiment will be described with reference to FIGS. 4 correspond to those in FIG. When the buyer 2 notifies the provider 3 of the telephone number of the mobile phone 5 possessed (S1), the provider 3
Enters this telephone number into the POS register 6 (S2),
The telephone number is transmitted from the data transmission / reception unit 22 of the POS register 6 to the settlement agency service site 8 (S3). Upon receiving this telephone number, the settlement agency service site 8 converts the face image data of the registered owner of the mobile phone 5 stored in the user identification information database (D / B) 38 into the purchaser 2
To the mobile phone 5 and display the registered owner's face image screen 41 on the liquid crystal display 13 (corresponding to the mobile terminal screen in FIG. 5) of the mobile phone 5 (S4), and provide it. The display 23 of the POS register 6 of the person 3 (PO in FIG. 5)
Confirmation message 4 on the "S cashier screen") "Please check the face photo displayed on the buyer's terminal"
2 is displayed (S5). On the other hand, the provider 3
When the face of the purchaser 2 is compared with the face image screen 41 of the registered owner of the mobile phone 5 and the buyer 2 can be identified as the registered owner, the POS register 6 Input unit 2
Then, "1 (OK)" is input using "4", and a response is made to the confirmation message 42 (S6).

The provider 3 inputs information (hereinafter, abbreviated as "purchase information") on the type and quantity of goods or services purchased by the buyer 2 from the input section 24 of the POS register 6 (S
7) When transmitting to the settlement agency service site 8, the settlement agency service site 8 sends a message for confirming the purchase approval of the buyer 2 to the mobile phone 5 of the buyer 2,
A confirmation message screen 43 is displayed on the liquid crystal display 13 of the mobile phone 5 (S8). On the contrary,
When the purchaser 2 selects “1 (Yes)” using the cursor key 15 and the enter key 16 of the mobile phone 5 and responds to the confirmation message 43 (S9), the settlement agency service site 8 sets the settlement contract Information database (D / B) 39
Of the buyer 2 in the various settlement systems 30 based on the content of
Of the goods or services purchased by the buyer 2 from the designated account, and transfers the amount obtained by subtracting the commission received by the settlement agency service site 8 from the withdrawn amount to the account designated by the provider 3. Then, the settlement agency service site 8 transmits the transaction completion information to the POS cash register 6, and displays the transaction completion information screen 44 on the display 23 of the POS cash register 6 (S10). In addition, the settlement system in which the designated account of the buyer 2 exists in the various settlement systems 30 transmits the formal settlement information to the mobile phone 5 of the buyer 2 and the POS register 6 of the provider 3 and transmits the settlement information. The information is displayed on the liquid crystal display 13 of the mobile phone 5 and the display 23 of the POS register 6 (S11, S12).

As described above, according to the authentication and settlement system 1 according to the first embodiment, the face image of the registered owner of the mobile phone 5 is transmitted from the settlement agency service site 8 to the mobile phone 5 and By displaying the image on the liquid crystal display 13 of the mobile phone 5, the provider 3
It is possible to easily and accurately determine whether the owner of the mobile phone 5 is the registered owner or an unauthorized user, and the provider can authenticate the purchaser 2 accurately. This prevents an unauthorized user from pretending to be a registered user and purchasing a product or service, and therefore prevents the unauthorized user from withdrawing the purchase price of the product or service from the registered user's account. Can be prevented.

By adopting the above-described authentication settlement method, settlement that is more secure for both the purchaser 2 and the provider 3 than card settlement can be realized. Further, the buyer 2 does not need to carry cash only by making a contract for settlement with the settlement agency service site 8. Furthermore, the buyer 2 can confirm the settlement contents in real time based on the confirmation message screen 43 and the official settlement information transmitted from the various settlement systems 30 when purchasing the goods or services.

Next, the processing flow of the authentication settlement system 1 according to the second embodiment will be described with reference to FIG.
The processes in and after in FIG. 6 are processes corresponding to the processes in and in FIG. 5, respectively. In the second embodiment, the settlement agency service site 8 displays the face image of the owner of the mobile phone 5 as:
The information is transmitted not to the mobile phone 5 of the purchaser 2 but to the POS register 6 of the provider 3 to be displayed on the display 23 thereof.
That is, the settlement agency service site 8 stores the POS cash register 6
When the telephone number transmitted from is received, the face photo confirmation screen 51 in which the face image screen 41 and the confirmation message 42 in FIG.
It is displayed on the display 23 of the cash register 6. On the other hand, the provider 3 displays the face photograph confirmation screen 51 and the purchaser 2
If the purchaser 2 can be authenticated as being the same as the registered owner by comparing with the face of the user, "1 (OK)" is input using the input unit 24 of the POS register 6, , A positive response is made to the confirmation message 42. Thereafter, the settlement agency service site 8 performs the same processing as in FIG. 5 described above to perform settlement of the purchase price between the buyer 2 and the provider 3, as shown in and.

The present invention is not limited to the above embodiment, and various modifications are possible. For example, the authentication and settlement system 1 according to the first and second embodiments has a configuration including both the mobile phone 5 and the POS cash register 6, but the authentication and settlement system is configured to use only one of the mobile phone and the POS cash register. May be transmitted and received from only one of the mobile phone and the POS register to the settlement agency service site. In the first and second embodiments, the telephone number of the mobile phone 5 is used as the identification information of the owner of the mobile phone 5 to be transmitted to the settlement agency service site 8. The identification information is not limited to this, and may be, for example, a user ID or the like, or may be a combination of a telephone number of the mobile phone 5 and a password. Further, the portable terminal owned by the purchaser 2 is not limited to a mobile phone, but may be any mobile-type information device having a communication function and a display function of characters and the like.
The terminal on the provider side is not limited to the POS register, but may be a general personal computer, for example.

[0021]

As described above, according to the first aspect of the present invention,
An image including a face photo of the owner registered in the mobile terminal is transmitted from the site to the mobile terminal or the provider's terminal, and the image including the face photo is displayed on the screen of the mobile terminal or the provider's terminal. By doing so, the provider can accurately determine an unauthorized user and a registered user based on the registered photograph of the owner. This allows
A fraudulent user can no longer pretend to be a registered user and purchase goods or services, thus preventing fraudulent users from debiting purchases of goods or services from a registered user's account. it can.

[0022] Further, when the site receives identification information on the owner of the portable terminal from the portable terminal or the provider terminal, the site transmits the owner image data to the portable terminal or the provider terminal. By doing so, the mobile terminal owner or the provider of goods / services can perform a simple operation of transmitting identification information about the owner of the mobile terminal from the mobile terminal or the provider's terminal, The terminal or the terminal on the provider side can display an image including a photo of the owner of the registered mobile terminal. Accordingly, it is possible to simplify the process for determining the user who has illegally acquired the portable terminal and the registered user who is the original owner of the portable terminal.

According to the third aspect of the present invention, in accordance with an instruction from the portable terminal or the terminal on the provider side, image data including a face photograph of the owner registered in the portable terminal is transferred from a site on the network to the portable terminal. Requesting transmission to the terminal or the terminal on the provider side; transmitting image data of the owner of the mobile terminal to the mobile terminal or the terminal on the provider side based on the request; and transmitting the image data. Receiving the image data at the portable terminal or the terminal on the provider side and displaying the image of the owner on the screen, the same effect as the above-described invention can be obtained.

Further, according to the invention of claim 4, when the site receives the identification information about the owner of the portable terminal from the portable terminal or the provider terminal, the site is connected to the portable terminal or the provider terminal. By transmitting the owner's image data and displaying the image on the screen, the provider can display the owner's face photograph on the mobile terminal or the registered terminal of the mobile terminal displayed on the provider's terminal. Based on this, it is possible to accurately authenticate that the owner of the mobile terminal is the same as the registered owner. In this way, if the owner of the mobile terminal is an unauthorized user different from the registered owner, the site will replace the purchase price of the goods or services purchased by this unauthorized user with the original owner of the mobile terminal. Can be prevented from being collected from a registered user.

[Brief description of the drawings]

FIG. 1 is a diagram showing the concept of an authentication settlement system to which the present invention is applied.

FIG. 2 is a view showing a mechanism of settlement between a buyer and a provider in the authentication settlement system.

FIG. 3 is a configuration diagram of an authentication settlement system according to the first embodiment of the present invention.

FIG. 4 is a diagram showing a flow of overall processing of the authentication and settlement system.

FIG. 5 is a diagram showing a flow of processing in a store in the authentication settlement system.

FIG. 6 is a diagram showing a flow of processing in a store in the authentication and settlement system according to the second embodiment of the present invention.

[Explanation of symbols]

1 Authentication Settlement System (Authentication System, Settlement System) 2 Purchaser (Mobile Terminal Owner) 3 Provider 5 Mobile Phone (Mobile Terminal) 6 POS Cash Register (Provider Terminal) 8 Payment Agency Service Site (Site)

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04L 9/00 673D F-term (Reference) 5B049 AA05 BB46 CC36 FF04 GG02 GG03 GG06 5B055 BB12 HB04 5B085 AE23 AE25 BE07 5J104 AA07 KA01 KA16 MA01 NA01 NA05 PA10

Claims (4)

[Claims] 1. A system for authenticating, to a provider that provides goods or services desired by the owner, that the owner of the portable terminal is the same as the registered owner, wherein transmission and reception of various data are performed. A site on a network capable of transmitting image data including a face photograph of the owner on the registration of a possible mobile terminal to the mobile terminal or the provider's terminal; Displaying an image based on the image data of the owner transmitted to the terminal on a screen, and enabling the provider to authenticate that the owner of the mobile terminal is the same as the registered owner. Characteristic authentication system. 2. When the site receives identification information about the owner of the portable terminal from the portable terminal or the provider terminal, the site stores the image data of the owner in the portable terminal or the provider terminal. The authentication system according to claim 1, wherein the authentication is transmitted. 3. A method for authenticating, to a provider providing goods or services desired by the owner, that the owner of the mobile terminal is the same as the registered owner, the mobile terminal or the provider Requesting transmission of image data including a face photograph of the registered owner of the mobile terminal from a site on the network to the mobile terminal or the terminal on the provider side according to an instruction from the terminal on the side of the mobile terminal; Transmitting the image data of the owner of the mobile terminal to the mobile terminal or the terminal on the provider side based on the following: receiving the image data transmitted by the transmitting step on the terminal on the mobile terminal or the provider side And displaying an image of the owner on the screen. 4. A system for performing payment for payment from an owner of a portable terminal to a provider providing goods or services desired by the owner, wherein registration of a portable terminal capable of transmitting and receiving various data is performed. A site on a network that can transmit image data including a photograph of the face of the owner on the network and collects money from the owner of the portable terminal and pays for the provider, The provider terminal capable of transmitting and receiving, when the site receives identification information about the owner of the mobile terminal from the mobile terminal or the provider terminal,
When the image data of the owner is transmitted to the mobile terminal or the terminal on the provider side, the image is displayed on the screen, and when the authentication data transmitted from the terminal on the provider side by the provider is received, A settlement system, which performs a process of collecting money from the owner of the portable terminal and paying the provider.