JP2025021818A - Information processing program, information processing device, information processing system, and information processing method - Google Patents

Abstract

To provide an authentication model for a user suitable to a settlement and remittance service using a certificate.SOLUTION: An authentication device (10) includes: an accepting unit which accepts a service request for requesting a service regarding a settlement and/or remittance using a certificate of a user; a verification unit which verifies authenticity of the user by using the certificate in response to the service request; a confirmation requesting unit which requests, from a second information processing device different from a first information processing device, a confirmation process for confirming the authenticity of the user; and a service processing unit which executes a process regarding the service with a first provider device for providing the service on the basis of a result of the verification using the certificate by the verification unit and a result of the confirmation process by the second information processing device in response to the request from the confirmation requesting unit.SELECTED DRAWING: Figure 5

Description

The present invention relates to an information processing program, an information processing device, an information processing system, and an information processing method.

Conventionally, payments are made using an identifier (hereinafter referred to as a "user identifier") that identifies a user, such as a credit card number, a bank account number, or a payment account. For example, Patent Document 1 describes making payments using a code generated based on a portion of a credit card number as a user identifier.

JP 2016-6637 A

However, conventional payment methods using user identifiers may not provide sufficient security. As the use of certificates (e.g., digital certificates and VCs (Verifiable Credentials)) as user identifiers expands in the future, a user authentication model suitable for payment and/or remittance services using such certificates (hereinafter referred to as "payment/remittance services") is desired.

This disclosure has been made in light of these circumstances, and one of its objectives is to provide an information processing program, information processing device, information processing system, and information processing method that can provide a user authentication model suitable for payment/remittance services that use certificates.

An information processing program according to one aspect of the present disclosure causes a computer as a first information processing device to function as: a reception unit that receives a service request for a service related to a payment and/or remittance using a user's certificate; a verification unit that verifies the legitimacy of the user using the certificate in response to the service request; a confirmation request unit that requests a second information processing device to perform a confirmation process to confirm the legitimacy of the user; and a service processing unit that executes a process related to the service between the first business device that provides the service and the first information processing device based on the result of the verification using the certificate by the verification unit and the result of the confirmation process by the second information processing device in response to a request from the confirmation request unit.

An information processing device according to another aspect of the present disclosure includes a reception unit that receives a service request for a service related to a payment and/or remittance using a user's certificate, a verification unit that verifies the legitimacy of the user using the certificate in response to the service request, a confirmation request unit that requests another information processing device to perform a confirmation process to confirm the legitimacy of the user, and a service processing unit that executes a process related to the provision of the service between the first carrier device that provides the service and the first carrier device that provides the service based on the result of the verification using the certificate by the verification unit and the result of the confirmation process by the other information processing device in response to the request from the confirmation request unit.

An information processing system according to another aspect of the present disclosure is an information processing system including a first information processing device and a second information processing device, the first information processing device including: a reception unit that receives a service request for a service related to a payment and/or remittance using a user's certificate;
the second information processing device comprises: a verification unit that verifies the legitimacy of the user using the certificate in response to the service request; a confirmation request unit that requests the second information processing device to perform a confirmation process to verify the legitimacy of the user; and a service processing unit that executes processing related to the service between the first business device providing the service and the first information processing device based on a result of the verification using the certificate by the verification unit and a result of the confirmation process by the second information processing device in response to a request from the confirmation request unit, wherein the second information processing device comprises: an acquisition unit that acquires first user information about the user from the user's terminal and acquires second user information about the user from a second business device that manages the user; and a confirmation processing unit that executes the confirmation process based on the first user information and the second user information in response to a request from the confirmation request unit.

An information processing method of an information processing device according to another aspect of the present disclosure includes the steps of: accepting a service request for a service related to a payment and/or remittance using a user's certificate; verifying the legitimacy of the user using the certificate in response to the service request; requesting another information processing device to perform a confirmation process to confirm the legitimacy of the user; and executing a process related to the service between the first business device that provides the service and the first business device that provides the service based on the result of the verification using the certificate by the verification unit and the result of the confirmation process by the other information processing device in response to the request from the confirmation request unit.

According to one aspect of the present disclosure, it is possible to provide a user authentication model suitable for payment/remittance services using certificates.

1 is a diagram showing a schematic configuration of a settlement/remittance system according to an embodiment of the present invention. FIG. 2 is a diagram showing an example of the hardware configuration of each device in the settlement/remittance system according to the embodiment. FIG. 2 is a diagram illustrating an example of the functional configuration of the settlement/remittance system according to the present embodiment. FIG. 11 is a diagram illustrating an example of a certificate issuing operation according to the embodiment. FIG. 11 is a diagram showing an example of the operation of providing a payment/remittance service according to the embodiment.

Below, an information processing system according to one embodiment of the present invention will be described in detail with reference to the drawings. In addition, in the following description of the drawings, identical or similar parts are denoted by identical or similar reference numerals.

(overview)
An overview of an information processing system for providing a payment/remittance service according to this embodiment (hereinafter referred to as the "payment/remittance system") will be described with reference to Fig. 1. Fig. 1 is a diagram showing an overview of the payment/remittance system according to this embodiment.

As shown in FIG. 1, the payment/remittance system 1 includes an information processing device (hereinafter referred to as "authentication device") 10 that performs user authentication processing, an information processing device (hereinafter referred to as "user verification device") 20 that verifies the legitimacy of the user separately from the authentication processing, a terminal used by the user (hereinafter referred to as "user terminal") 30, a terminal for payment/remittance services (hereinafter referred to as "payment/remittance terminal") 40, an information processing device of a first business that provides payment/remittance services (hereinafter referred to as "first business device") 50, and an information processing device of a second business that manages users (hereinafter referred to as "second business device") 60. Note that FIG. 1 is merely an example, and each information processing device shown in FIG. 1 is not limited to one device, and may be composed of multiple devices (e.g., multiple servers).

The authentication device 10 (first information processing device) issues a certificate to a user and verifies the legitimacy of the user using the issued certificate. Here, the certificate may be, for example, an electronic certificate such as an x.509 certificate, or a verifiable certificate such as a VC (Verifiable Credential). The former electronic certificate includes information about the user of a public key issued by a certification authority, and is electronically signed by a private key issued by the certification authority. The private key is used to verify the legitimacy of the public key, thereby verifying the legitimacy of the user. The latter VC is also issued by a certification authority and is used to verify the legitimacy of the user, but differs from the former electronic certificate in that it includes personal information (e.g., gender, educational background, etc.). The authentication device 10 may be connected to a user verification device 20, a user terminal 30, and a first business device 50 via a network not shown.

The user verification device 20 (second information processing device) verifies the legitimacy of the user based on information about the user acquired from the user terminal 30 (hereinafter referred to as "first user information") and information about the user acquired from the second business device 60 (hereinafter referred to as "second user information"). The user verification device 20 may be provided by, for example, a trust service provider (TSP). The user verification device 20 may be connected to the authentication device 10, the user terminal 30, the payment/remittance terminal 40, and the second business device 60 via a network not shown.

The user terminal 30 is, for example, a smartphone, a tablet, a personal computer, a game console, VR (Virtual Reality) goggles, a VR headset, or other terminal. An app for a payment/remittance service may be installed in the user terminal 30. The user terminal 30 may hold a certificate as a user identifier. Alternatively, the certificate as a user identifier may be managed (stored or held) by the authentication device 10.

The payment/remittance terminal 40 is, for example, a smartphone, tablet, personal computer, game machine, POS (Point of Sales) terminal, cash register terminal, or other terminal. The payment/remittance terminal 40 may communicate with the user terminal 30 using terminal-to-terminal communication. Note that in FIG. 1, the payment/remittance terminal 40 is provided separately from the user terminal 30, but this is not limited to this. For example, the function of the payment/remittance terminal 40 may be provided by an app or the like installed on the user terminal 30, without providing the payment/remittance terminal 40.

The first business device 50 is an information processing device of a first business that provides a payment/remittance service. The first business is, for example, a credit card company, a financial institution, a payment agency, a funds transfer business, etc., but is not limited to these, and may be any business that provides a payment/remittance service. The first business device 50 may be connected to the authentication device 10 via a network (not shown).

The second business device 60 is an information processing device of a second business that manages users. The second business is, for example, a system such as a credit card company, a financial institution, a payment agency, or a business that provides cashless payment, but is not limited to these and may be any business that manages user information. The second business device 60 may be connected to the user confirmation device 20 via a network not shown. In addition, the first business and the second business may be the same business, and the first business device 50 and the second business device 60 are not limited to separate information processing devices, but may be different functions of the same information processing device.

As shown in FIG. 1, the authentication device 10 and the user verification device 20 may constitute an information processing system (hereinafter referred to as the "authentication system") 2 that performs user authentication processing. The authentication system 2 eliminates the need for the first business device 50 itself, which provides the payment/remittance service, to perform authentication processing, making it easier to introduce a payment/remittance service using a certificate. Furthermore, in the authentication system 2, in addition to the certificate verification processing by the authentication device 10, the user verification processing by the user verification device 20 is performed, so that the user authentication processing is performed in two stages, thereby improving the security of the payment/remittance service that uses a certificate as a user identifier.

In FIG. 1, the network (not shown) that interconnects at least two of the authentication device 10, the user verification device 20, the user terminal 30, the payment/remittance terminal 40, the first business device 50, and the second business device 60 is a wireless and/or wired network, and may include at least one of the Internet, an intranet, and a bus.

(composition)
The configuration of the payment/remittance system 1 will be described with reference to Figures 2 and 3. Figure 2 is a diagram showing an example of the hardware configuration of each device in the payment/remittance system according to this embodiment. Each device in the payment/remittance system 1 (e.g., authentication device 10, user verification device 20, user terminal 30, payment/remittance terminal 40, first business device 50, second business device 60, etc.) has a processor 11 such as a CPU (Central Processing Unit) equivalent to a computing device, a memory unit 12, a transmission/reception unit 13, and an input/output unit 14. Each of these components is connected via a bus so as to be able to transmit and receive data to and from each other.

The processor 11 is, for example, a CPU, and controls each device in the payment/remittance system 1. The processor 11 may execute various processes described in this embodiment by reading and executing a program from the storage unit 12. Each device in the payment/remittance system 1 may include one or more processors 11. Each device may also be referred to as a computer.

The storage unit 12 is composed of storage such as a memory, a hard disk drive (HDD) and/or a solid state drive (SSD). The storage unit 12 may store various information necessary for the processor 11 to execute processing (e.g., an information processing program executed by the processor 11, etc.).

The transmitting/receiving unit 13 is a device that communicates via a network, and may include, for example, a network card, a communication module, a chip, an antenna, etc. The transmitting/receiving unit 13 may include a transmitting unit that transmits various information via the network, and/or a receiving unit that receives various information via the network.

The input/output unit 14 includes an input unit such as a keyboard, a touch panel, a mouse, and/or a microphone, and an output unit such as a display and/or a speaker. The input unit accepts input of various information from the user. The output unit may also include a display unit that displays various information to the user.

The hardware configuration described above is merely an example. Each device in the payment/remittance system 1 may omit some of the hardware shown in FIG. 2, or may include hardware not shown in FIG. 2. In addition, the hardware shown in FIG. 2 may be composed of one or more chips.

The hardware configuration described above is merely an example. Each information processing device may omit some of the hardware shown in FIG. 2, or may include hardware not shown in FIG. 2. The hardware shown in FIG. 2 may be configured with one or more chips. If the information processing device is configured with multiple devices, each device may include at least some of the hardware.

Figure 3 is a diagram showing an example of the functional configuration of a payment/remittance system according to this embodiment. Note that Figure 3 is merely an example, and each device in the payment/remittance system may of course have a configuration not shown.

<Authentication Device 10>
3, the authentication device 10 includes a reception unit 101, a confirmation request unit 102, an issuing unit 103, a verification unit 104, and a service processing unit 105. The reception unit 101, the confirmation request unit 102, the issuing unit 103, the verification unit 104, and the service processing unit 105 are realized by at least a part of an information processing program executed by the processor 11, the storage unit 12, the transmission/reception unit 13, and the input/output unit 14, which are included in the authentication device 10 and shown in FIG.

The reception unit 101 receives a service request for a payment/remittance service using a user's certificate. For example, the reception unit 101 may receive a service request from the payment/remittance terminal 40, but is not limited to this, and may receive a service request from the user terminal 30.

Here, the service request may include at least one of information about the user's certificate (hereinafter referred to as "certificate information") and information about a transaction using the payment/remittance service (hereinafter referred to as "transaction information"). The certificate information may be the certificate itself or a certificate identifier. The certificate information may include, for example, the user's public key, electronic signature, etc. The transaction information may include, for example, information about at least one of the transaction amount, the date and time of the transaction, the store or terminal where the transaction is conducted, the nature of the transaction, the product or service that is the subject of the transaction, the transaction identification number, etc.

The reception unit 101 may also receive an issuance request for requesting the issuance of a certificate. For example, the reception unit 101 may receive an issuance request from the user terminal 30.

The confirmation request unit 102 requests a confirmation process to confirm the legitimacy of the user from a user confirmation device 20 (second information processing device) different from the authentication device 10 (first information processing device). Specifically, the confirmation request unit 102 may transmit a confirmation request requesting the confirmation process to the user confirmation device 20 via the transmission/reception unit 13.

For example, the confirmation request unit 102 may request the user confirmation device 20 to perform a confirmation process to confirm the legitimacy of the user in response to an issuance request accepted by the acceptance unit 101. Also, the confirmation request unit 102 may request the user confirmation device 20 to perform a confirmation process to confirm the legitimacy of the user in response to a service request accepted by the acceptance unit 101.

The confirmation request unit 102 may also request the above confirmation process from the user confirmation device 20 based on the risk associated with the transaction using the payment/remittance service. Specifically, the confirmation request unit 102 may determine the risk based on transaction information included in the service request. For example, multiple risk levels are each pre-associated with transaction information (e.g., at least one of the transaction amount, the nature of the transaction, the product or service subject to the transaction, the store where the transaction is performed, and the terminal where the transaction is performed), and the confirmation request unit 102 may determine the risk level corresponding to the transaction information included in the service request from among the multiple risk levels, and determine the risk. Note that the method of determining the risk of a transaction is not limited to this, and the risk may be determined based on information about the user, for example.

When the risk of a transaction using the payment/remittance service is determined to be high, the confirmation request unit 102 may request the user confirmation device 20 to perform the above-mentioned confirmation process. On the other hand, when the risk is determined to be low, the confirmation request unit 102 may cancel the request for the above-mentioned confirmation process to the user confirmation device 20. The confirmation request unit 102 may determine how to request the user confirmation device 20 to perform the confirmation process based on the payment/remittance service, not limited to whether the risk is high or low. For example, the confirmation request unit 102 may determine whether to request the user confirmation device 20 to perform the confirmation process based on the type of risk (e.g., credit risk, exchange risk, etc.). The confirmation request unit 102 may also determine whether to request the user confirmation device 20 to perform the confirmation process based on the business providing the payment/remittance service. For example, the business providing the payment/remittance service may set in advance whether or not the confirmation process is required for the user confirmation device 20, and the confirmation request unit 102 may determine whether to request the user confirmation device 20 to perform the confirmation process based on the business providing the payment/remittance service according to the business's preset setting.

The issuing unit 103 issues a certificate to the user based on the result of the confirmation process by the user confirmation device 20 in response to a request from the confirmation request unit 102. The issuing unit 103 may transmit certificate information related to the issued certificate to the user terminal 30 via the transmitting/receiving unit 13. For example, if the validity of the user is confirmed by the confirmation process, the issuing unit 103 may issue the certificate to the user, and if the validity is denied, the issuing unit 103 may not issue the certificate to the user.

In response to a service request accepted by the acceptance unit 101, the verification unit 104 may verify the legitimacy of the user using the user's certificate.

The service processing unit 105 executes processing related to the payment/remittance service with the first business device 50 based on the result of the verification using the certificate by the verification unit 104 and the result of the confirmation processing by the user confirmation device 20 in response to a request from the confirmation request unit 102. The processing related to the payment/remittance service may include, for example, at least one of an inquiry to the first business device 50 as to whether or not the payment/remittance service can be provided to the user, a response from the first business device 50 to the inquiry, and a result of the execution of the payment/remittance service.

Specifically, the service processing unit 105 may execute processing related to the payment/remittance service with the first business device 50 based on the result of the verification by the verification unit 104 using the certificate and the result of the verification process by the user verification device 20 in response to the request. On the other hand, the service processing unit 105 may execute processing related to the payment/remittance service with the first business device 50 based on the result of the verification by the verification unit 104 using the certificate, without using the result of the verification process by the user verification device 20.

<User Verification Device 20>
3, the user confirmation device 20 includes an acquisition unit 201, a confirmation processing unit 202, and a recording unit 203. The acquisition unit 201, the confirmation processing unit 202, and the recording unit 203 are realized by at least a part of the information processing program executed by the processor 11, the memory unit 12, the transmission/reception unit 13, and the input/output unit 14, which are included in the user confirmation device 20 and shown in FIG.

The acquisition unit 201 acquires first user information from the user terminal 30 and acquires second user information from the second business device 60. The first user information acquired from the user terminal 30 may include at least one of information on the user's account at the second business (hereinafter referred to as "account information") and information on the user's attributes (hereinafter referred to as "attribute information"). The account information may be, for example, at least one of a credit card number, an account number, and a payment token at the second business. The attribute information may include, for example, at least one of the user's name, address, and contact information. The second user information acquired from the second business device 60 may include at least one of the account information and the attribute information.

The acquisition unit 201 may acquire the first user information from the user terminal 30 and the second user information from the second business device 60 in response to a request from the confirmation request unit 102. Alternatively, the acquisition unit 201 may acquire the second user information from the second business device 60 in advance and store it in the memory unit 12 of the user confirmation device 20.

In response to a request from the confirmation request unit 102, the confirmation processing unit 202 performs a confirmation process to confirm the legitimacy of the user based on the first user information and the second user information. Specifically, in the confirmation process, the confirmation processing unit 202 may verify the legitimacy of the user by matching the first user information with the second user information. For example, in the confirmation process, the confirmation processing unit 202 may verify the legitimacy of the user by matching the account information included in the first user information with the account information included in the second user information.

The confirmation processing unit 202 may execute the above confirmation process based on the first user information acquired from the user terminal 30 in response to a request from the confirmation request unit 102 and the second user information acquired from the second business device 60 in response to a request from the confirmation request unit 102. Alternatively, the confirmation processing unit 202 may execute the above confirmation process based on the first user information acquired from the user terminal 30 in response to a request from the confirmation request unit 102 and the second user information held in the memory unit 12 of the user confirmation device 20.

The recording unit 203 records the confirmation history by the confirmation processing unit 202. For example, the recording unit 203 may associate the first user information acquired by the acquisition unit 201 with the result of the confirmation process by the confirmation processing unit 202 and store them in the storage unit 12.

(Operation)
The operation of the settlement/remittance system 1 according to this embodiment will be described with reference to FIGS.

<Certificate issuing process>
Fig. 4 is a diagram showing an example of a certificate issuing operation according to the present embodiment. Note that Fig. 4 is merely an example, and some steps (e.g., steps S102, S103, and S105) may be changed in order or may be performed at the same timing, or some steps (e.g., step S107) may be omitted.

As shown in FIG. 4, in step S101, the user terminal 30 transmits a certificate issuance request to the authentication device 10. In step S102, the authentication device 10 accepts the issuance request from the user terminal 30 and transmits the issuance request to the first business device 50 that provides a payment/remittance service. In step S103, in response to the issuance request from the user terminal 30, the authentication device 10 may transmit a confirmation request to the user verification device 20 to request a verification process to verify the legitimacy of the user.

In step S104, the user verification device 20 performs a process of acquiring the first user information between the user terminal 30 and the user verification device 20. For example, in response to a verification request from the authentication device 10, the user verification device 20 may transmit a request to the user terminal 30 to request the provision of the first user information, and acquire the first user information transmitted from the user terminal 30 in response to the request.

In step S105, the user verification device 20 performs a process of acquiring second user information between the user verification device 20 and the second business device 60. For example, in response to a confirmation request from the authentication device 10, the user verification device 20 may transmit a request for provision of second user information to the second business device 60, and acquire the second user information transmitted from the second business device 60 in response to the request for provision. Note that step S105 may be omitted, and the user verification device 20 may store the second user information acquired in advance from the second business device 60 in the memory unit 12.

In step S106, the user verification device 20 executes a verification process to verify the authenticity of the user based on the first user information from the user terminal 30 and the second user information from the second business device 60. Specifically, the user verification device 20 verifies the authenticity of the user by matching the first user information with the second user information.

In step S107, the user confirmation device 20 records the result of the confirmation process in step S106 in the storage unit 12. For example, the user confirmation device may associate the first user information acquired in step S104 with the result of the user confirmation process and record them in the storage unit 12. Although not shown, if the first user information acquired from the user terminal 30 matches the first user information recorded in the storage unit 12, the user confirmation device 20 may confirm the legitimacy of the user of the user terminal 30 based on the result of the past user confirmation process without matching the first user information with the second user information in step S106.

In step S108, the user verification device 20 transmits the result of the user verification process in step S106 (hereinafter referred to as the "verification result") to the authentication device 10. In step S109, the authentication device 10 transmits the verification result received in step S108 to the first business device 50 that provides the payment/remittance service.

In step S110, the first business device 50 providing a payment/remittance service determines whether or not to issue a certificate to the user based on the confirmation result received from the authentication device 10 in step S109. Based on the determination result, the first business device 50 transmits an instruction to issue the certificate to the authentication device 10.

In step S111, the authentication device 10 issues a certificate in response to an issuance instruction from the first business device 50, and transmits certificate information related to the issued certificate to the user terminal 30. For example, the authentication device 10 may transmit the certificate itself as the certificate information to the user terminal 30. Alternatively, the authentication device 10 may transmit an identifier of the certificate to the user terminal 30, and store the certificate in the memory unit 12 of the authentication device 10 in association with the user.

According to the above certificate issuing operation, the first business device 50 determines whether or not to issue a certificate to the user based on the result of the user verification device 20 verifying the user's legitimacy, and then the authentication device 10 issues a certificate to the user. Therefore, the certificate can be issued to the appropriate user, improving security.

<Payment/Remittance Service Provision Operation>
Fig. 5 is a diagram showing an example of the operation of providing a payment/remittance service according to this embodiment. Note that Fig. 5 is merely an example, and the order of some steps may be changed, steps may be performed at the same timing, or steps may be omitted. For example, steps S201, S205, S210, and S216 may be omitted.

As shown in FIG. 5, in step S201, the user terminal 30 transmits a service request to the payment/remittance terminal 40, requesting a payment/remittance service using the user's certificate. In step S202, the payment/remittance terminal 40 transmits the service request to the authentication device 10.

In step S203, the authentication device 10 accepts the service request and verifies the legitimacy of the user using the user's certificate. For example, the authentication device 10 recognizes the certificate based on the certificate information included in the service request. For example, the certificate information may be the certificate itself, or the user's certificate held by the authentication device 10 may be identified based on the certificate information.

In step S204, the user verification device 20 transmits the service request received in step S202 to the first business device 50. In step S205, the authentication device 10 judges the risk of the transaction related to the payment/remittance service. If the risk is judged to be high (step S205; YES), in step S206, the authentication device 10 transmits a verification request to the user verification device 20 to request user verification processing. On the other hand, if the risk is judged to be low (step S205; NO), the process proceeds to step S213.

In step S207, the user verification device 20 performs a process of acquiring the first user information between the user terminal 30 and the user verification device 20. For example, in response to a service request from the authentication device 10, the user verification device 20 may transmit a request for providing the first user information to the user terminal 30, and acquire the first user information transmitted from the user terminal 30 in response to the request for providing.

In step S208, the user verification device 20 performs a process of acquiring second user information between the user verification device 20 and the second business device 60. For example, in response to a service request from the authentication device 10, the user verification device 20 may transmit a request for provision of second user information to the second business device 60, and acquire the second user information transmitted from the second business device 60 in response to the request for provision. Note that step S208 may be omitted, and the user verification device 20 may store the second user information acquired in advance from the second business device 60 in the memory unit 12.

In step S209, the user verification device 20 executes a verification process to verify the authenticity of the user based on the first user information from the user terminal 30 and the second user information from the second business device 60. Specifically, the user verification device 20 verifies the authenticity of the user by matching the first user information with the second user information.

In step S210, the user confirmation device 20 records the result of the confirmation process in step S209 in the storage unit 12. For example, the user confirmation device may associate the first user information acquired in step S207 with the result of the user confirmation process and record them in the storage unit 12. Although not shown, if the first user information acquired from the user terminal 30 matches the first user information recorded in the storage unit 12 (for example, the first user information stored in step S107 of FIG. 4), the user confirmation device 20 may confirm the legitimacy of the user of the user terminal 30 based on the result of the past user confirmation process without matching the first user information with the second user information in step S209.

In step S211, the user verification device 20 transmits the verification result of the user legitimacy in step S212 to the authentication device 10. In step S212, the authentication device 10 transmits the verification result received in step S211 to the first business device 50 that provides a payment/remittance service.

In step S213, the first business device 50 providing the payment/remittance service executes processing related to the payment/remittance service based on the confirmation result received from the authentication device 10 in step S212. In step S214, the first business device 50 transmits the result of the processing to the authentication device 10.

In step S215, the authentication device 10 transmits the results of the processing related to the payment/remittance service to the payment/remittance terminal 40. In step S216, the authentication device 10 transmits the results of the processing related to the payment/remittance service to the user terminal 30.

According to the above operation of providing a payment/remittance service, in addition to the certificate verification process by the authentication device 10, the user verification process by the user verification device 20 is performed, so that the user authentication process is performed in two stages, improving the security of the payment/remittance service using a certificate as a user identifier. Also, depending on the risk of the payment/remittance service, the user verification process by the user verification device 20 is skipped, so that improved security and more efficient processing can be achieved.

As described above, according to the payment/remittance system 1 of this embodiment, the first business device 50 that provides the payment/remittance service through the authentication system 2 does not need to perform authentication processing itself, making it easier to introduce a payment/remittance service using certificates. Furthermore, in the authentication system 2, in addition to the certificate verification processing by the authentication device 10, the user verification processing by the user verification device 20 is performed, so that the user authentication processing is performed in two stages, improving the security of the payment/remittance service that uses a certificate as a user identifier. Therefore, it is possible to provide a user authentication model that is suitable for a payment/remittance service that uses a certificate.

Other Embodiments
The terms "first" and "second" in the above embodiment are used for the convenience of explanation, and do not indicate an order, and may be interchanged as appropriate.

As described in the above embodiment, the certificate issued by the authentication device 10 may be held in the user terminal 30, or may be held and managed in a cloud (e.g., the authentication device 10 or another device on the network). For example, when a certificate issued to a user by the authentication device 10 is managed on a cloud, the certificate and the user may be stored in association with each other on the cloud. In this case, the certificate information in step S111 of FIG. 4 may include an identifier of the user to whom the certificate was issued. Also, the authentication device 10 may obtain and identify the certificate of the user managed on the cloud based on the user identifier included as certificate information in the service request accepted in step S203 of FIG. 5.

Alternatively, if the certificate issued to the user by the authentication device 10 is managed on a cloud, the certificate and the certificate identifier may be associated and stored on the cloud. In this case, the certificate information in step S111 of FIG. 4 may include the certificate identifier. Also, the authentication device 10 may obtain and identify the user's certificate managed on the cloud based on the certificate identifier included in the service request accepted in step S203 of FIG. 5.

The above-described embodiments are intended to facilitate understanding of the present invention, and are not intended to limit the present invention. The elements of the embodiments, as well as their arrangements, materials, conditions, shapes, sizes, etc., are not limited to those exemplified, and may be modified as appropriate. Furthermore, configurations shown in different embodiments may be partially substituted or combined.

1...Payment/remittance system, 2...Authentication system, 10...Authentication device, 20...User verification device, 30...User terminal, 40...Payment/remittance terminal, 50...First business device, 60...Second business device, 11...Processor, 12...Memory unit, 13...Transmitter/receiver unit, 14...Input/output unit, 101...Acceptor unit, 102...Confirmation request unit, 103...Issuer unit, 104...Verification unit, 105...Service processing unit, 201...Acquisition unit, 202...Confirmation processing unit, 203...Recording unit

Claims (8)

A computer as a first information processing device,
a reception unit that receives a service request for a service related to a settlement and/or remittance using a user's certificate;
a verification unit that verifies the authenticity of the user by using the certificate in response to the service request;
a confirmation request unit that requests a second information processing device to perform a confirmation process for confirming the authenticity of the user;
and functioning as a service processing unit that executes processing related to the service between the first carrier device that provides the service and the second carrier device based on a result of the verification by the verification unit using the certificate and a result of the verification processing by the second information processing device in response to a request from the verification request unit.
Information processing program. the confirmation request unit requests the second information processing device to perform the confirmation process based on a risk of a transaction related to the service.
The information processing program according to claim 1. the confirmation request unit requests the second information processing device to perform the confirmation process when the risk is determined to be high;
the service processing unit executes a process related to the service between the service processing unit and the first business device based on a result of the verification by the verification unit and a result of the confirmation process by the second information processing device.
3. The information processing program according to claim 2. When the risk is determined to be low, the confirmation request unit cancels the request for the confirmation process to the second information processing device;
the service processing unit executes a process related to the service between the first business device and the service processing unit based on a result of the verification by the verification unit, not based on a result of the confirmation process by the second information processing device.
3. The information processing program according to claim 2. causing the computer to further function as an issuing unit that issues the certificate to the user;
the reception unit receives an issuance request for requesting issuance of the certificate;
the confirmation request unit requests the second information processing device to perform the confirmation process in response to the issuance request;
the issuing unit issues the certificate to the user based on a result of the confirmation process performed by the second information processing device in response to a request from the confirmation request unit.
The information processing program according to claim 1. a reception unit that receives a service request for a service related to a settlement and/or remittance using a user's certificate;
a verification unit that verifies the authenticity of the user by using the certificate in response to the service request;
a confirmation request unit for requesting another information processing device to perform a confirmation process for confirming the authenticity of the user;
a service processing unit that executes processing related to the provision of the service between the first carrier device that provides the service and the first carrier device based on a result of the verification by the verification unit using the certificate and a result of the verification processing by the other information processing device in response to a request from the verification request unit;
An information processing device comprising: An information processing system including a first information processing device and a second information processing device,
The first information processing device,
a reception unit that receives a service request for a service related to a settlement and/or remittance using a user's certificate;
a verification unit that verifies the authenticity of the user by using the certificate in response to the service request;
a confirmation request unit that requests the second information processing device to perform a confirmation process for confirming the authenticity of the user;
a service processing unit that executes a process related to the service between the first carrier device that provides the service and the second carrier device based on a result of the verification by the verification unit using the certificate and a result of the verification process by the second information processing device in response to a request from the verification request unit;
The second information processing device is
an acquisition unit that acquires first user information related to the user from a terminal of the user and acquires second user information related to the user from a second business device that manages the user;
a confirmation processing unit that executes the confirmation process based on the first user information and the second user information in response to a request from the confirmation request unit,
Information processing system. receiving a service request for a payment and/or remittance service using the user's certificate;
verifying the authenticity of the user using the certificate in response to the service request;
a step of requesting another information processing device to perform a verification process for verifying the authenticity of the user;
executing a process related to the service between the first carrier device providing the service and the first carrier device based on a result of the verification by the verification unit using the certificate and a result of the verification process by the other information processing device in response to a request from the verification request unit;
The information processing method of the information processing device.

Images