JP4071445B2 - Transaction mediation system, transaction mediation apparatus and program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a transaction mediation system, a transaction mediation apparatus, a transaction mediation method, a recording medium, and a program, and more particularly to a technique for improving the security of commercial transactions performed via a network.
[0002]
[Prior art]
In recent years, higher functionality of mobile communication terminals including mobile phones has been advanced. Recently, mobile communication terminals have been developed that can perform payments in online shopping via the Internet or can perform payments in stores including vending machines.
By the way, when a user purchases a product by online shopping, the price of the product is settled by using a credit card number notified mainly via the Internet from the user.
In addition, when a payment is made at a store, the credit card number notified by the user may be used.
[0003]
[Problems to be solved by the invention]
However, there is a problem that the credit card number notified by the user is leaked because the security when notifying the credit card number is low, or the credit card number is abused by an unauthorized shop participating in online shopping. It was.
[0004]
Therefore, the present invention has been made in view of the above-described circumstances, and an object thereof is to provide a transaction mediation system, a transaction mediation device, a transaction mediation method, and a program that improve the security of commercial transactions performed via a network. To do.
[0005]
[Means for Solving the Problems]
In order to solve the above-described problem, the invention described in claim 1 includes a sales providing device that sells a product, a transaction mediating device that mediates a transaction related to the product, and a delivery management device that manages the delivery of the product. A transaction brokerage system comprising: a password transmitted from a communication terminal of a user requesting to purchase a product; And delivery product information about delivery products A password receiver for receiving the password and the received password And delivery product information And a delivery request unit that sends the password to the delivery management device when a judgment result indicating that the user is a valid user is received from the transaction mediation device. The delivery management device includes a delivery product information requesting unit that sends the password received from the sales providing device to the transaction mediation device, and is transmitted from the transaction mediation device in response to the request. Said A receiving unit that receives delivery merchandise information, wherein the transaction intermediary device issues, as the password, an issuance unit that temporarily issues a valid password, and a password transmission unit that transmits the issued password to the communication terminal And a user validity judgment unit that judges the validity of the user based on whether or not the password received from the sales providing device is valid, and when the user is judged to be valid in the judgment, A legitimate user notification transmitting unit that transmits a legitimate user notification indicating that the user is a valid user to the sales providing device; Received from the sales providing device Associated with the password Received from the sales providing device A storage unit that stores the delivery product information; and a transmission unit that extracts the delivery product information corresponding to the password received from the delivery management device and transmits the information to the delivery management device. The issuing unit of the transaction mediating apparatus issues the password, the password transmitting unit of the transaction mediating apparatus transmits the issued password to the communication terminal, and the user determination requesting unit of the sales providing apparatus Transmits the password received from the communication terminal and the delivery merchandise information to the transaction mediation apparatus, and the user validity judgment unit of the transaction mediation apparatus uses the password received from the sales providing apparatus is valid. The legitimacy of the user is determined based on whether or not there is, and the legitimate user notification transmission unit of the transaction mediating apparatus indicates that the user is a legitimate user when it is determined that the user is legitimate in the determination. A valid user notification is transmitted to the sales providing device, and the storage unit of the transaction mediating device is transmitted from the user determination requesting unit of the sales providing device. Stored in association with the delivery product information and the delivery request unit of the sales providing device receives the determination result that the user is a legitimate user from the transaction mediation device, the password The delivery product information request unit of the delivery management device transmits the password received from the sales providing device to the transaction mediating device, and the transmission unit of the delivery management device The delivery product information corresponding to the password received from the delivery management device is extracted from the storage unit and transmitted to the delivery management device, and the receiving unit of the delivery management device responds to the request with the transaction. Receive delivery product information sent from the intermediary device regarding the product to be delivered It is characterized by that.
The invention according to claim 2 The transaction brokerage system according to claim 1, Sell products Said Request sales equipment and product sales Said A transaction mediating apparatus that mediates transactions performed with a communication terminal, As the password, An issuance unit that issues a temporarily valid password; a password transmission unit that transmits the issued password to the communication terminal; and a reception unit that receives a password input in the communication terminal from the sales providing device; A user legitimacy judging unit for judging the legitimacy of the user based on whether or not the password received from the sales providing device is valid, and a legitimate user when the judgment shows that the user is legitimate A legitimate user notification transmitting unit that transmits a legitimate user notification indicating that the sales providing apparatus is, Received from the sales providing device In association with the password, Received from the sales providing device, When the password is received from the storage unit that stores the delivery product information related to the product to be delivered and the delivery management device that manages the delivery of the product, the delivery product information corresponding to the password is extracted from the storage unit, and A transmission unit that transmits to the delivery management device.
The invention according to claim 3 The transaction brokerage system according to claim 1, Sell products Said Request sales equipment and product sales Said A recording medium recording a program for controlling a transaction intermediary device that mediates a transaction performed with a communication terminal, wherein the transaction intermediary device issues a temporary valid password, and the issuance A password transmitting unit that transmits the password entered to the communication terminal, a receiving unit that receives the password input in the communication terminal from the sales providing device, and whether the password received from the sales providing device is valid A user legitimacy judgment unit that judges the legitimacy of the user, and a legitimate user notice indicating that the user is legitimate when the user is legitimate in the judgment. A legitimate user notification transmission unit that transmits Received from the sales providing device In association with the password, Received from the sales providing device, When the password is received from the storage unit that stores the delivery product information related to the product to be delivered and the delivery management device that manages the delivery of the product, the delivery product information corresponding to the password is extracted from the storage unit, and It is a program for functioning as a transmission unit that transmits to a delivery management apparatus.
[0044]
DETAILED DESCRIPTION OF THE INVENTION
Next, embodiments of the present invention will be described with reference to the drawings. Such an embodiment shows one aspect of the present invention and does not limit the present invention. In addition, the present invention can be arbitrarily changed within the scope of its technical idea.
[1] First embodiment
[1.1] Configuration of the first embodiment
[1.1.1] Configuration of online shopping system
In FIG. 1, the structure of the online shopping system which is one Embodiment of this invention is shown. As shown in FIG. 1, the online shopping system 1 includes a mobile phone 10, a mobile communication network 20, a transaction mediation server 30, the Internet 40, a shop server 50, a credit management server 60, and a delivery management server 70. It has.
[0045]
The mobile phone 10 performs wireless communication with the base station 21 of the mobile communication network 20. The mobile phone 10 is a communication terminal that can receive a call service and a packet communication service. The mobile phone 10 is equipped with a WWW (World Wide Web) browser. Thereby, the mobile phone 10 can display the Web page provided by the shop server 50 and receive various services.
[0046]
The mobile communication network 20 includes a base station 21, a mobile packet communication network, and a mobile telephone network. Here, the mobile packet communication network is a network that provides a packet communication service. The mobile packet communication network is connected to the Internet 40 via the gateway 22. The mobile telephone network is a network that provides a general mobile telephone service. The base stations 21 are scattered and installed in the communication service area of the mobile communication network 20. Then, the base station 21 performs wireless communication with the mobile phone 10 existing in the wireless cell of the base station.
[0047]
The shop server 50 stores information provided to the mobile phone 10 as, for example, an HTML (HyperText Markup Language) format file. In addition, the shop server 50 stores image data specified by a tag in the HTML document stored in the HTML file or application programs such as a Java applet and a Java application. Then, the shop server 50 provides the mobile phone 10 with information related to products for online shopping via the Internet 40 and the mobile communication network 20.
[0048]
The credit management server 60 is a server owned by a credit card company corresponding to a credit card number designated by the user as a billing destination for the price of goods.
The delivery management server 70 is a server owned by a delivery company that delivers a product for which a purchase application has been made by a user.
[0049]
The transaction mediation server 30 is a server that mediates transactions in online shopping performed between the shop server 50 and the mobile phone 10. Specifically, the validity of the user who applied for the purchase of the product from the mobile phone 10 is confirmed and notified to the shop server 50, or the product is delivered by a predetermined delivery company predetermined in the transaction mediation server 30. Or charge the merchandise for a credit card company that has been applied for and registered in advance by the user.
[0050]
[1.1.2] Configuration of mobile phone
Next, the hardware configuration of the mobile phone 10 will be described with reference to FIG.
As shown in FIG. 2, the mobile phone 10 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a wireless communication unit 14, a communication processing unit 15, and the like. The operation unit 16 and the display unit 17 are provided. Further, these units are connected to each other via a bus (BUS) 18.
The CPU 11 controls each unit connected via the bus 18 by executing various programs stored in the ROM 12 or the RAM 13.
[0051]
The ROM 12 stores various programs executed by the CPU 11 and control data. Examples of the various programs include an operating system for the mobile phone 10 and a WWW browser.
The RAM 13 is used as a work area for the CPU 11. For example, the RAM 13 temporarily stores Web pages provided from the shop server 50.
[0052]
The wireless communication unit 14 includes an antenna (not shown). The wireless communication unit 14 controls wireless data communication performed with the base station 21. Based on the control of the CPU 11, the wireless communication unit 14 transmits, for example, signals corresponding to various data such as data for requesting download to the base station 21 via the antenna. Further, the wireless communication unit 14 receives a signal transmitted from the base station 21 via an antenna. Then, the wireless communication unit 14 demodulates the received signal and acquires various data such as HTML file data, for example.
[0053]
The communication processing unit 15 performs communication processing such as call connection / disconnection processing based on the control of the CPU 11.
The operation unit 16 includes a plurality of keys for inputting characters, numbers, operation instructions, and the like. The operation unit 16 outputs an operation signal corresponding to the key operation to the CPU 11.
The display unit 17 includes a liquid crystal panel that is a display screen and a drive circuit that performs display control of the liquid crystal panel. Then, on the display screen of the display unit 17, for example, a Web page provided by the shop server 50 is displayed.
[0054]
[1.1.3] Configuration of transaction brokerage server
Next, the hardware configuration of the transaction mediation server 30 will be described with reference to FIG.
As shown in FIG. 3, the transaction mediation server 30 includes a CPU 31, a ROM 32, a RAM 33, a hard disk device 34, and a communication control unit 35. These units are connected to each other via a bus 36.
The CPU 31 controls each unit connected via the bus 36 by executing various programs stored in the ROM 32, RAM 33, or hard disk device 34.
[0055]
The ROM 32 stores various programs executed by the CPU 31, control data, and the like. Examples of the various programs include an operating system.
The RAM 33 is used as a work area for the CPU 31. For example, the RAM 33 temporarily stores an execution part of an application program stored in the hard disk, data used when the application program is executed, and the like.
The communication control unit 35 includes a connection interface with the mobile communication network 20 and a communication control circuit, and performs data communication with the mobile phone 10 and the shop server 50 via the mobile communication network 20.
[0056]
The hard disk device 34 stores a user information storage area 341, an application program storage area 342 (hereinafter referred to as an AP storage area 342), a temporary password storage area 343, and a product information storage area 344.
The user information storage area 341 is an area for storing information related to the user of the mobile phone 10 in a database. As shown in FIG. 4, the user information storage area 341 stores user information such as an authentication user ID, an authentication password, a user name, a subscriber number (telephone number), and a credit card number for settlement. Yes.
Here, the authentication user ID is an identifier assigned to identify each user of the mobile phone 10. This authentication user ID is used by the shop server 50 to identify each user when exchanging information about the user between the transaction mediation server 30 and the shop server 50. The authentication password is a password assigned to each user when subscribing to the packet communication service.
[0057]
The AP storage area 342 stores various application programs. As various applications, for example, the validity of the user who applied for the purchase of the product from the mobile phone 10 is confirmed and notified to the shop server 50, or the product is provided by a predetermined delivery company predetermined in the transaction mediation server 30. Or a credit company that has been applied for by a user and registered in advance and charged for the product.
As shown in FIG. 5, the temporary password storage area 343 corresponds to the temporary password issued in response to a request from the mobile phone 10, the expiration date of the temporary password, the usage status of the temporary password, and the mobile phone 10 from which the temporary password has been issued. Temporary password information such as an authentication user ID is stored.
As shown in FIG. 6, the product information storage area 344 stores product information such as a product management number, an authentication user ID, a product ID, a product name, and a quantity. The product management number is a number for identifying the product to be purchased for each user.
[0058]
[1.2] Operation of the first embodiment
Next, an operation example from the procedure for purchasing a product performed in the online shopping system according to the first embodiment to the payment of the purchased product will be described with reference to FIG.
[0059]
First, as shown in FIG. 7, the authentication user ID and the authentication password input from the operation unit 16 of the mobile phone 10 are transmitted to the transaction mediation server 30 together with a temporary password issuance request (step S1).
The CPU 31 of the transaction mediation server 30 that has received the temporary password issue request performs a temporary password issue process. Then, the CPU 31 transmits the temporary password issued in the issuing process to the mobile phone 10 (step S2).
[0060]
Here, a temporary password issuing process will be described. First, the CPU 31 of the transaction mediation server 30 searches the user information storage area 341 based on the received authentication user ID, and extracts user information corresponding to the authentication user ID. Next, the CPU 31 compares the authentication password included in the extracted user information with the authentication password received from the mobile phone 10. In this comparison, when it is determined that the authentication passwords match, the CPU 31 issues a temporary password. The CPU 31 stores temporary password information including the issued temporary password and the expiration date of the temporary password in the temporary password storage area 343. Here, the expiration date of the password includes, for example, an expiration date determined in time units, an expiration date determined in days, and an expiration date determined in number of times of use. The expiration date may be fixed in the system, or may be set as desired by the user. In the present embodiment, it is assumed that the expiration date is set on the system side, for example, within one hour after the temporary password is issued and only once.
[0061]
Next, the CPU 11 of the mobile phone 10 that has received the temporary password from the transaction mediation server 30 connects to the shop server 50 participating in the online shopping system, and stores the product information stored in the connected shop server 50. It is displayed on the display unit 17. Then, the CPU 11 transmits the temporary password input from the operation unit 16 and the application information related to the product desired by the user to the shop server 50 (step S3).
The shop server 50 that has received the application information transmits the received temporary password to the transaction mediation server 30 and requests to determine the legitimacy of the user who has transmitted the application information (step S4).
[0062]
Next, the CPU 31 of the transaction mediation server 30 searches the temporary password storage area 343 based on the received temporary password, and extracts temporary password information corresponding to the temporary password. The CPU 31 determines whether or not the received temporary password is valid based on the expiration date and usage status included in the extracted temporary password information. Here, for example, a description will be given of a determination performed when the expiration date of the temporary password is set within one hour and only once after the temporary password is issued, and the usage status of the temporary password is unused. In this case, first, if the time of determination is within one hour after the temporary password is issued, it is determined that the temporary password is valid. In this case, the CPU 31 changes the usage status to “used” and updates it. As a result, the temporary password becomes invalid and cannot be used as a temporary password.
[0063]
When it is determined that the received temporary password is valid, the CPU 31 searches the user information storage area 341 based on the authentication user ID included in the temporary password information, and the user information corresponding to the authentication user ID. To extract. The CPU 31 transmits the credit card number included in the extracted user information to the credit management server 60 owned by the credit card company corresponding to the credit card number (step S5).
[0064]
Next, the credit management server 60 determines the validity of the credit card number based on the received credit card number. When the credit management server 60 determines that the credit card number is valid, the credit management server 60 determines whether or not it is possible to collect the price of the product purchased by the user from the designated account corresponding to the credit card number. In this determination, when it is determined that the price of the product purchased by the user can be collected from the specified account, the credit management server 60 sends a payment notice indicating that the price can be paid to the transaction mediation server 30. Transmit (step S6).
[0065]
The CPU 31 of the transaction mediation server 30 that has received the payable notification transmits a determination result indicating that it is a valid user to the shop server 50 (step S7).
Further, the CPU 31 of the transaction mediation server 30 generates product information and stores the generated product information in the product information storage area 344. Then, the CPU 31 transmits the merchandise management number included in the merchandise information to the mobile phone 10 together with an application confirmation notification indicating that the application for merchandise has been confirmed (step S8). The user can easily receive various services such as product confirmation and cancellation by inputting the received product management number from the mobile phone 10 and transmitting it to the shop server 50 or the like.
[0066]
Next, the shop server 50 transmits a temporary password to the delivery management server 70 together with the delivery request for the product (step S9).
The delivery management server 70 transmits the temporary password received from the shop server 50 to the transaction mediation server 30 together with a provision request for the product management number corresponding to the product to be delivered (step S10).
The transaction mediation server 30 searches the temporary password storage area 343 based on the temporary password received from the delivery management server 70 and extracts temporary password information corresponding to the temporary password. Then, the CPU 31 searches the product information storage area 344 based on the authentication user ID included in the extracted temporary password information, and extracts the product information corresponding to the authentication user ID. Next, the CPU 31 transmits a product management number included in the extracted product information to the delivery management server 70 (step S11).
[0067]
In this way, the delivery management server 30 does not receive information on the product to be delivered from the shop server 50, but transmits the temporary password received from the shop server 50 to the transaction mediation server 30, and corresponds to this temporary password. Information related to the product is received from the transaction mediation server 30. As a result, the delivery management server 30 can prevent an unauthorized delivery request from the shop server 50.
Thereafter, the CPU 31 deletes the extracted temporary password information from the temporary password storage area 343 in order to invalidate the extracted temporary password information.
[0068]
The delivery management server 70 registers the product management number received from the transaction mediation server 30, and performs a delivery procedure process for the product corresponding to the product management number. The goods are delivered to the user by this delivery procedure process (step S12).
When the delivery management server 70 receives data indicating that the delivery of the product has been completed, the delivery management server 70 transmits a delivery completion notification indicating that the delivery of the product has been completed to the transaction mediation server 30 (step S13).
Upon receiving the delivery completion notification, the transaction mediation server 30 transmits a payment request notification requesting payment for the price of the product to the credit management server 60 (step S14).
Based on the received payment request notification, the credit management server 60 performs a payment procedure for the merchandise for the shop server 50 to be paid (step S15).
[0069]
[1.3] Effects of the first embodiment
As described above, in the first embodiment, the validity of the user is determined based on the temporary password with the expiration date after the validity is determined based on the authentication password. Even if the user is stolen and used for unauthorized access, the range of unauthorized use can be reduced as much as possible.
[0070]
Further, in the online shopping system according to the first embodiment, the product is delivered from the delivery destination designated by the transaction brokerage server, and payment is made after confirming that the delivery of the product is completed. It is possible to prevent fraud by the shop side.
[0071]
Further, in the online shopping system according to the first embodiment, since the payment is made without notifying the shop server of the credit card number, it is possible to prevent unauthorized outflow and unauthorized use of the credit card number. It becomes.
From the above, since the reliability of the user and the shop side is improved, it is possible to increase the demand for online shopping.
[0072]
[1.4] Modification of the first embodiment
[1.4.1] First modification
In the first embodiment described above, the delivery company delivers the goods, but the present invention is not intended to be limited to this embodiment. For example, the shop side may deliver the product. In this case, the only shops that can participate in the online shopping system are those authorized by the transaction brokerage server. As a result, fraud by the shop side can be prevented in advance.
[0073]
The configuration of the online shopping system according to the first modification is a configuration in which the delivery server 70 is excluded from the configuration diagram shown in FIG. And the shop server 50 of the online shopping system which concerns on a 1st modification has the function which the delivery server 70 which concerns on 1st Embodiment has.
An operation example from the procedure for purchasing the product performed in the online shopping system according to the first modification to the payment of the purchased product will be described with reference to FIG. Steps similar to those in the operation example of the first embodiment shown in FIG. 7 are denoted by the same reference numerals and detailed description thereof is omitted.
[0074]
First, as shown in FIG. 8, the authentication user ID and the authentication password input from the operation unit 16 of the mobile phone 10 are transmitted to the transaction mediation server 30 together with a temporary password issuance request (step S1).
The CPU 31 of the transaction mediation server 30 that has received the temporary password issue request performs a temporary password issue process. Then, the CPU 31 transmits the temporary password issued in the issuing process to the mobile phone 10 (step S2).
[0075]
Next, the CPU 11 of the mobile phone 10 that has received the temporary password from the transaction mediation server 30 connects to the shop server 50 participating in the online shopping system, and stores the product information stored in the connected shop server 50. It is displayed on the display unit 17. Then, the CPU 11 transmits the temporary password input from the operation unit 16 and the application information related to the product desired by the user to the shop server 50 (step S3).
The shop server 50 that has received the application information transmits the received temporary password to the transaction mediation server 30 and requests to determine the legitimacy of the user who has transmitted the application information (step S4).
[0076]
Next, the CPU 31 of the transaction mediation server 30 searches the temporary password storage area 343 based on the received temporary password, and extracts temporary password information corresponding to the temporary password. The CPU 31 determines whether or not the received temporary password is valid from the expiration date and usage status included in the extracted temporary password information.
[0077]
When it is determined that the received temporary password is valid, the CPU 31 searches the user information storage area 341 based on the authentication user ID included in the temporary password information, and the user information corresponding to the authentication user ID. To extract. The CPU 31 transmits the credit card number included in the extracted user information to the credit management server 60 owned by the credit card company corresponding to the credit card number (step S5). Thereafter, the CPU 31 deletes the temporary password information from the temporary password storage area 343 in order to invalidate the extracted temporary password information.
[0078]
Next, the credit management server 60 determines the validity of the credit card number based on the received credit card number. When the credit management server 60 determines that the credit card number is valid, the credit management server 60 determines whether or not it is possible to collect the price of the product purchased by the user from the designated account corresponding to the credit card number. In this determination, when it is determined that the price of the product purchased by the user can be collected from the specified account, the credit management server 60 sends a payment notice indicating that the price can be paid to the transaction mediation server 30. Transmit (step S6).
[0079]
Next, the CPU 31 of the transaction mediation server 30 that has received the notice that payment is possible sends the merchandise management number to the shop server 50 together with the determination result that the user is a valid user (step S7a).
Further, the CPU 31 of the transaction mediation server 30 generates product information and stores the generated product information in the product information storage area 344. Then, the CPU 31 transmits the merchandise management number included in the merchandise information to the mobile phone 10 together with an application confirmation notification indicating that the application for merchandise has been confirmed (step S8).
[0080]
The shop server 70 registers the product management number received from the transaction mediation server 30, and performs a delivery procedure process for the product corresponding to the product management number. By this delivery procedure process, the product is delivered to the user (step S12a).
When the data indicating that the delivery of the product is completed is input, the shop server 70 transmits a delivery completion notification indicating that the delivery of the product is completed to the transaction mediation server 30 (step S13a).
Upon receiving the delivery completion notification, the transaction mediation server 30 transmits a payment request notification requesting payment for the price of the product to the credit management server 60 (step S14).
Based on the received payment request notification, the credit management server 60 performs a payment procedure for the merchandise for the shop server 50 to be paid (step S15).
[0081]
[1.4.2] Second modification
Further, in the first embodiment described above, the mobile phone 10 is used as a communication terminal, but the present invention is not intended to be limited to this embodiment. For example, a simple mobile phone having a function of performing wireless communication with the base station 21, and a mobile phone or a portable information terminal connected to the simple mobile phone may be used as the communication terminal. Further, a personal computer or a portable information terminal that can be connected to the transaction mediation server 30 and the shop server 50 via a network such as the Internet 40 and a LAN (Local Area Network) without passing through the mobile communication network 20 is used as a communication terminal. May be used.
[0082]
[2] Second embodiment
[2.1] Configuration of the second embodiment
[2.1.1] Configuration of shopping system
In FIG. 9, the structure of the shopping system which is one Embodiment of this invention is shown. As shown in FIG. 9, the shopping system 2 includes a mobile phone 10, a mobile communication network 20, a transaction mediation server 30, a vending machine 80, the Internet 40, and a credit management server 60.
The mobile phone 10, the mobile communication network 20, the Internet 40, and the credit management server 60 are configured in the same manner as the mobile phone 10, the mobile communication network 20, the Internet 40, and the credit management server 60 according to the first embodiment.
[0083]
The transaction mediation server 30 excludes the commodity information storage area 344 from the hard disk device 34 and the point that the temporary password storage information stored in the temporary password storage area 343 includes a base station code as position information. It is comprised similarly to the transaction mediation server 30 which concerns on 1st Embodiment. Here, the base station code stored in the temporary password storage information is a base station code included in the base station 21 corresponding to the wireless cell to which the mobile phone 10 belongs when requesting issuance of a temporary password.
The vending machine 80 includes a wireless device, and when the user selects and confirms a product from the vending machine 80, the wireless device connects to the transaction mediation server 30.
[0084]
[2.2] Operation of the second embodiment
Next, an operation example from the procedure for purchasing a product performed in the shopping system 2 according to the second embodiment to the provision of the purchased product will be described with reference to FIG.
[0085]
First, as shown in FIG. 10, the authentication user ID and the authentication password input from the operation unit 16 of the mobile phone 10 are transmitted to the transaction mediation server 30 together with a temporary password issuance request (step S1b).
The CPU 31 of the transaction mediation server 30 that has received the temporary password issue request performs a temporary password issue process. Then, the CPU 31 transmits the temporary password issued in the issuing process to the mobile phone 10 (step S2b).
The temporary password issuance process is the same as that of the first embodiment except that the base station code of the base station 21 corresponding to the wireless cell to which the mobile phone 10 belongs is stored in the base station code of the password storage area 343. It is the same.
[0086]
Next, CPU11 of the mobile telephone 10 which received the temporary password from the transaction mediation server 30 transmits the received temporary password with respect to the vending machine 80 registered into the shopping system 2 (step S3b). In addition, as a method of transmitting the temporary password to the vending machine 80, the temporary password may be directly input to the input unit of the vending machine and transmitted, or the temporary password is transmitted from the mobile phone 10 using infrared or Bluetooth. May be sent.
The vending machine 80 selected and confirmed by the user selects the desired product, transmits the temporary password received from the mobile phone 10 to the transaction mediation server 30, and requests to determine the legitimacy of the user who selected the product. (Step S4b).
[0087]
Next, the CPU 31 of the transaction mediation server 30 searches the temporary password storage area 343 based on the received temporary password, and extracts temporary password information corresponding to the temporary password. The CPU 31 determines an area corresponding to the base station code included in the extracted temporary password information and an area corresponding to the base station code included in the base station 21 corresponding to the wireless cell to which the vending machine belongs from the vending machine 80. Compare.
Then, as a result of this comparison, if the region corresponding to the base station code matches, the CPU 31 determines whether the received temporary password is valid based on the expiration date and usage status included in the extracted temporary password information. Judge whether or not.
[0088]
When it is determined that the received temporary password is valid, the CPU 31 searches the user information storage area 341 based on the authentication user ID included in the temporary password information, and the user information corresponding to the authentication user ID. To extract.
The CPU 31 transmits the credit card number included in the extracted user information to the credit management server 60 owned by the credit card company corresponding to the credit card number (step S5b). Thereafter, the CPU 31 deletes the temporary password information from the temporary password storage area 343 in order to invalidate the extracted temporary password information.
[0089]
Next, the credit management server 60 determines the validity of the credit card number based on the received credit card number. When the credit management server 60 determines that the credit card number is valid, the credit management server 60 determines whether or not it is possible to collect the price of the product purchased by the user from the designated account corresponding to the credit card number. In this determination, when it is determined that the price of the product purchased by the user can be collected from the designated account, the credit management server 60 performs a payment procedure for the price of the product to the vending machine 80 (step S6b).
Then, the credit management server 60 transmits a payment completion notification indicating that the payment of the price has been completed to the transaction mediation server 30 (step S7b).
The CPU 31 of the transaction mediation server 30 that has received the payment completion notification transmits a notification indicating that the user is a valid user to the vending machine 80 (step S8b).
Next, the vending machine 80 provides the user with a product selected by the user (step S9b).
[0090]
[2.3] Effects of the second embodiment
As described above, in the second embodiment, the validity of the user is determined based on the temporary password with the expiration date issued after the validity is determined by the password for authentication. Even if it is stolen by a third party and used for unauthorized access, the range of unauthorized use can be narrowed as much as possible.
[0091]
Further, in the shopping system 2 according to the second embodiment, the area corresponding to the base station code of the base station 21 corresponding to the wireless cell to which the mobile phone 10 has acquired the temporary password, and the vending machine 80 If the area corresponding to the base station code of the base station 21 corresponding to the wireless cell to which the mobile phone belongs does not match, the product cannot be purchased using the shopping system. Even if it is rarely used for unauthorized access, the range of unauthorized use can be reduced as much as possible.
[0092]
[2.4] Modification of Second Embodiment
[2.4.1] First modification
In the second embodiment described above, the vending machine 10 is connected to the transaction mediation server 30 via a mobile communication network by a wireless device, but the present invention is not intended to be limited to this embodiment. For example, the vending machine may be provided with a modem or DSU (Digital Service Unit) and connected to the transaction mediation server via the Internet 40 by wire. In this case, the base station code of the base station 21 corresponding to the wireless cell to which the vending machine belongs is registered in advance in the vending machine, and this base station code is transmitted when connecting to the transaction mediation server 30. Need to be done.
[0093]
[2.4.2] Second modification
In the second embodiment described above, the CPU 31 of the transaction mediation server 30 determines whether the vending machine received from the vending machine 80 is the area corresponding to the base station code included in the temporary password information of the mobile phone 10. Although user authentication is performed based on whether or not the area corresponding to the base station code of the base station 21 corresponding to the wireless cell to which it belongs matches, the present invention is not intended to be limited to this embodiment. For example, the area corresponding to the base station code included in the temporary password information of the mobile phone and the area corresponding to the base station code of the base station corresponding to the wireless cell to which the vending machine received from the vending machine belongs are preliminarily set. The user may be authenticated depending on whether or not the user is within a predetermined area.
[0094]
[2.4.3] Third modification
Further, in the second embodiment described above, the CPU 31 of the transaction mediation server 30 first searches the temporary password storage area 343 based on the received temporary password, and adds the base station code included in the extracted temporary password information. The corresponding area is compared with the area corresponding to the base station code of the base station 21 corresponding to the wireless cell to which the vending machine belongs, received from the vending machine 80. Then, as a result of this comparison, if the region corresponding to the base station code matches, whether or not the received temporary password is usable is determined based on the expiration date and usage status included in the extracted temporary password information. Although determined, the present invention is not intended to be limited to this embodiment.
For example, the CPU 31 of the transaction mediation server 30 first searches the temporary password storage area 343 based on the received temporary password, and receives the temporary password received based on the expiration date and usage status included in the extracted temporary password information. It is determined whether or not can be used. Next, when it is determined that the temporary password can be used, the area corresponding to the base station code included in the extracted temporary password information and the wireless cell to which the vending machine received from the vending machine 80 belongs. You may compare with the area corresponding to the base station code which the corresponding base station 21 has.
[0095]
[3] Third embodiment
[3.1] Configuration of the third embodiment
[3.1.1] Configuration of shopping system
In FIG. 11, the structure of the shopping system which is one Embodiment of this invention is shown. As shown in FIG. 11, the shopping system 3 includes a mobile phone 10, a mobile communication network 20, a transaction mediation server 30, a store server 90, the Internet 40, and a prepaid DB server 23.
The mobile phone 10, the mobile communication network 20, and the Internet 40 are configured in the same manner as the mobile phone 10, the mobile communication network 20, and the Internet 40 according to the first embodiment.
[0096]
The transaction mediation server 30 excludes the commodity information storage area 344 from the hard disk device 34 and the point that the temporary password storage information stored in the temporary password storage area 343 includes a base station code as position information. It is comprised similarly to the transaction mediation server 30 which concerns on 1st Embodiment. Here, the base station code stored in the temporary password storage information is included in the base station 21 corresponding to the wireless cell to which the mobile phone 10 belongs when requesting issuance of a temporary password, as in the second embodiment. Base station code.
[0097]
The store server 90 is, for example, a server device installed in a convenience store. This convenience store is premised on being authorized in the transaction mediation server 30. As a result, fraud by the convenience store side can be prevented in advance.
In addition, the store server 90 can be connected to the Internet 40 using a wire. Then, the store server 90 connects to the transaction mediation server 30 via the Internet 40 when the temporary password presented when purchasing the product is input.
In the store server 90, the base station code of the base station 21 corresponding to the radio cell to which the store server belongs is registered in advance. The store server 90 also transmits this base station code when transmitting the temporary password to the transaction mediation server 30.
The prepaid DB server 23 is a server device including a prepaid database that manages the usage fee of the mobile phone 10 prepaid by the user. In the prepaid database, for example, prepaid information including an authentication user ID, a balance of the advance payment, and a use history of the advance payment is stored.
[0098]
[3.2] Operation of the third embodiment
Next, an operation example from the procedure for purchasing a product performed in the shopping system 3 according to the third embodiment to the provision of the purchased product will be described with reference to FIG.
[0099]
First, as shown in FIG. 12, the authentication user ID and the authentication password input from the operation unit 16 of the mobile phone 10 are transmitted to the transaction mediation server 30 together with a temporary password issuance request (step S1c).
The CPU 31 of the transaction mediation server 30 that has received the temporary password issue request performs a temporary password issue process. Then, the CPU 31 transmits the temporary password issued in the issuing process to the mobile phone 10 (step S2c).
The temporary password issuance process is the same as that of the first embodiment except that the base station code of the base station 21 corresponding to the wireless cell to which the mobile phone 10 belongs is stored in the base station code of the password storage area 343. It is the same.
[0100]
Next, when a user purchases a product at a convenience store, for example, the temporary password received from the transaction mediation server 30 is transmitted from the mobile phone 10 to the store server 90 registered in the shopping system 3 (step) S3c). As a method of transmitting the temporary password to the store server 90, the temporary password may be input directly to the input unit of the store server and transmitted, or the temporary password is transmitted from the mobile phone 10 using infrared or Bluetooth. May be.
The store server 90 transmits the temporary password received from the mobile phone 10 to the transaction mediation server 30, and requests to determine the legitimacy of the user who has offered to purchase the product (step S4c).
[0101]
Next, the CPU 31 of the transaction mediation server 30 searches the temporary password storage area 343 based on the received temporary password, and extracts temporary password information corresponding to the temporary password. The CPU 31 includes a region corresponding to the base station code included in the extracted temporary password information, and a region corresponding to the base station code of the base station 21 corresponding to the wireless cell to which the store server belongs, received from the store server 90. And compare. Then, as a result of this comparison, if the region corresponding to the base station code matches, the CPU 31 determines whether the received temporary password is valid based on the expiration date and usage status included in the extracted temporary password information. Judge whether or not.
When it is determined that the received temporary password is valid, the CPU 31 searches the prepaid DB server 23 based on the authentication user ID included in the temporary password information, and the prepaid corresponding to the authentication user ID. Information is extracted (step S5c).
[0102]
The CPU 31 subtracts the price of the product for which the purchase is requested from the balance of the advance payment included in the extracted prepaid information (step S6c).
Then, the CPU 31 transmits a notification indicating that the user is a valid user to the store server 90 (step S7c). Furthermore, CPU31 performs the payment procedure of the price of goods, and transmits the information regarding payment of price with respect to the store server 90 (step S8c). Thereafter, the CPU 31 deletes the temporary password information from the temporary password storage area 343 in order to invalidate the extracted temporary password information.
Next, the store clerk at the convenience store hands over the product for which purchase is requested by the user to the user (step S9c).
[0103]
[3.3] Effects of the third embodiment
As described above, in the third embodiment, the same effects as those in the second embodiment are exhibited, and thus description thereof is omitted.
[0104]
[3.4] Modification of Third Embodiment
[3.4.1] First modification
In the third embodiment described above, the store server 90 is connected to the transaction mediation server 30 via the Internet 40 using a wired connection, but the present invention is not intended to be limited to this embodiment. For example, the store server 90 may be provided with a wireless device and connected to a transaction mediation server via a mobile communication network. In this case, when the store server connects to the transaction mediation server, the base station code of the base station 21 corresponding to the wireless cell to which the store server belongs is transmitted to the transaction mediation server.
[0105]
[3.4.2] Second modification
In the above-described third embodiment, the CPU 31 of the transaction mediation server 30 includes the area corresponding to the base station code included in the temporary password information of the mobile phone 10 and the wireless to which the store server received from the store server 90 belongs. The user is authenticated based on whether or not the area corresponding to the base station code of the base station 21 corresponding to the cell matches, but as in the case of the second embodiment, the present invention is applied to this embodiment. It is not a limited intention.
[0106]
[3.4.3] Third modification
In the third embodiment described above, the CPU 31 of the transaction mediation server 30 first searches the temporary password storage area 343 based on the received temporary password, and uses the extracted base password code as the base station code. The corresponding region is compared with the region corresponding to the base station code of the base station 21 corresponding to the wireless cell to which the store server belongs received from the store server 90. Then, as a result of this comparison, if the region corresponding to the base station code matches, whether or not the received temporary password is usable is determined based on the expiration date and usage status included in the extracted temporary password information. Although it is determined, as in the case of the second embodiment, the present invention is not intended to be limited to this embodiment.
[0107]
[4] Modification of each embodiment
[4.1] First modification
In each of the above-described embodiments, the mobile phone 10 transmits the authentication user ID when requesting the transaction mediation server 30 to issue a temporary password. However, the present invention is limited to this embodiment. Not intended. For example, a subscriber number (telephone number) may be transmitted instead of the authentication user ID. The subscriber number is a number that can be notified to the other party as a caller number when a call is made from the mobile phone 10. Therefore, when the subscriber number is transmitted, the input of the subscriber number can be omitted. Thereby, it becomes possible to simplify the operation to be performed by the user.
[0108]
[4.2] Second modification
Further, in each of the above-described embodiments, the case where a product is purchased from the mobile phone 10 is described, but the present invention is not intended to be limited to this embodiment. For example, a request for receiving service provision may be notified from the mobile phone 10 so that a desired service can be received from the shop server 50, the vending machine 80, or the store server 90 that has received the request.
[0109]
[4.3] Third modification
Further, in each of the above-described embodiments, when determining whether or not the temporary password is valid, the determination is based on the expiration date and the usage status included in the temporary password information. It is not intended to be limited to form. For example, the temporary password input by the user may be determined by comparing the temporary password input by the user with the temporary password stored in the temporary password storage area 343. Further, expiration date information may be included in the temporary password, and it may be determined whether or not the temporary password input by the user is valid based on the expiration date information.
[0110]
[4.4] Fourth modification
In each embodiment described above, when the temporary password information is invalidated, the temporary password information is deleted from the temporary password storage area 343. However, the present invention is not intended to be limited to this embodiment. For example, an invalid flag item indicating whether or not the temporary password information is invalid is included in the temporary password information, and when invalidating the temporary password information, a flag indicating that the invalid flag item is invalid May be stored.
[0111]
Note that the method for realizing the various functions of the transaction mediation server according to each of the above-described embodiments is limited to a case where a program for executing various functions performed in the transaction mediation server is stored in the transaction mediation server in advance and realized. I can't. For example, the program may be implemented by reading the program from a recording medium on which the program is recorded, or may be implemented by downloading the program to a transaction mediation server through an electric communication line.
[0112]
【The invention's effect】
As described above, according to the present invention, it is possible to improve the security of commercial transactions performed via a network.
[Brief description of the drawings]
FIG. 1 is a diagram showing a schematic configuration of an online shopping system according to a first embodiment.
FIG. 2 is a diagram showing a hardware configuration of the mobile phone shown in FIG.
FIG. 3 is a diagram showing a hardware configuration of the transaction mediation server shown in FIG. 1;
4 is a diagram showing a configuration of user information stored in a user information storage area shown in FIG. 3. FIG.
FIG. 5 is a diagram showing a configuration of temporary password information stored in a user temporary password storage area shown in FIG. 3;
6 is a diagram showing a configuration of product information stored in a product information storage area shown in FIG. 3. FIG.
FIG. 7 is a flowchart showing an operation example in the online shopping system according to the first embodiment.
FIG. 8 is a flowchart showing an operation example in the online shopping system according to the first modification of the first embodiment.
FIG. 9 is a diagram showing a schematic configuration of a shopping system according to a second embodiment.
FIG. 10 is a flowchart showing an operation example in the shopping system according to the second embodiment.
FIG. 11 is a diagram showing a schematic configuration of a shopping system according to a third embodiment.
FIG. 12 is a flowchart showing an operation example in the shopping system according to the third embodiment.
[Explanation of symbols]
1 ... Online shopping system (transaction brokerage system),
2, 3 ... shopping system,
10: Mobile phone (communication terminal, mobile communication terminal),
11 ... CPU (sales request part),
20 ... mobile communication network,
21 ... Base station,
22 ... Gateway,
23 ... Prepaid DB server (price request management device, prepayment price management device),
30 ... Transaction mediation server (transaction mediation device),
31 ... CPU (user validity judgment part, payment judgment request part, judgment result transmission part, billing part, delivery product information transmission part, user judgment part, issue part, temporary password transmission part, temporary password invalid part, reception part, legitimacy User notification transmission unit, communication terminal position information extraction unit, position information determination unit, billing reception notification reception unit),
341: User information storage area,
342 ... AP storage area,
343 ... Temporary password storage area (storage unit, communication terminal location information file),
344 ... Product information storage area,
40 ... Internet,
50... Shop server (sales providing device, password receiving unit, user judgment requesting unit, user recognition unit, delivery requesting unit, delivery providing procedure unit, completion notification sending unit),
60. Credit management server (payment management device, payment request management device),
70 ... Delivery management server (delivery management device, delivery product information requesting unit, completion notification sending unit),
80 ... Vending machine (sales providing device),
90 ... Store server (sales providing device).

Claims (3)

A transaction mediation system comprising a sales providing device for selling products, a transaction mediating device for mediating transactions related to products, and a delivery management device for managing delivery of products,
The sales providing device includes:
A password received from a communication terminal of a user requesting to purchase a product and a password receiving unit that receives delivery product information about the product to be delivered ;
A user judgment request unit for transmitting the received password and delivery product information to the transaction mediating apparatus;
A delivery request unit that transmits the password to the delivery management device when receiving a determination result that the user is a legitimate user from the transaction mediation device;
The delivery management device comprises:
A delivery product information requesting unit that transmits the password received from the sales providing device to the transaction mediating device;
And a receiving unit that receives the delivery product information that will be transmitted from the brokerage system in response to the request,
The transaction intermediary device is:
As the password, an issuing unit that issues a temporarily valid password;
A password transmission unit for transmitting the issued password to the communication terminal;
A user legitimacy judging unit that judges legitimacy of the user based on whether or not the password received from the sales providing device is valid;
A legitimate user notification transmitting unit that transmits a legitimate user notice indicating that the user is a legitimate user to the sales providing device when the user is judged to be legitimate in the determination;
A storage unit that stores the delivery product information received from the sales providing apparatus in association with the password received from the sales providing apparatus ;
A delivery unit that extracts the delivery product information corresponding to the password received from the delivery management device and transmits the product information to the delivery management device;
The issuing unit of the transaction intermediary device issues the password,
The password transmission unit of the transaction mediation apparatus transmits the issued password to the communication terminal,
The user determination request unit of the sales providing device transmits the password received from the communication terminal and the delivery product information to the transaction mediating device,
The user legitimacy determination unit of the transaction intermediary apparatus determines the legitimacy of the user based on whether the password received from the sales providing apparatus is valid,
When the legitimate user notification transmitter of the transaction mediating apparatus determines that the user is legitimate in the judgment, the legitimate user notice indicating that the legitimate user is legitimate is transmitted to the sales providing apparatus,
The storage unit of the transaction intermediary device stores the password and the delivery product information transmitted from the user determination request unit of the sales providing device in association with each other,
When the delivery request unit of the sales providing device receives a determination result that the user is a valid user from the transaction mediation device, the password is transmitted to the delivery management device,
The delivery product information request unit of the delivery management device transmits the password received from the sales providing device to the transaction mediating device,
The transmission unit of the delivery management device extracts the delivery product information corresponding to the password received from the delivery management device from the storage unit and transmits it to the delivery management device;
The transaction mediation system, wherein the receiving unit of the delivery management device receives delivery product information about a product to be delivered, which is transmitted from the transaction mediation device in response to the request . In brokerage system according to claim 1, a brokerage system for mediating transactions conducted with the communication terminal requesting the sale the sales providing apparatus and products for performing product sales,
As the password, an issuing unit that issues a temporarily valid password;
A password transmission unit for transmitting the issued password to the communication terminal;
A receiving unit for receiving a password input in the communication terminal from the sales providing device;
A user legitimacy judging unit that judges legitimacy of the user based on whether or not the password received from the sales providing device is valid;
A legitimate user notification transmitting unit that transmits a legitimate user notification indicating that the user is a legitimate user to the sales providing device when the user is judged to be legitimate in the determination;
A storage unit that stores delivery product information related to the product to be delivered , received from the sales provision device , in association with the password received from the sales provision device ;
When receiving the password from the delivery management device that manages delivery of the product, a transmission unit that extracts the delivery product information corresponding to the password from the storage unit and transmits the information to the delivery management device;
A transaction mediating apparatus comprising: In brokerage system according to claim 1, records a program for controlling the brokerage system for mediating transactions conducted with the communication terminal requesting the sale of the sales providing apparatus and products for performing product sales Recording medium,
Transaction brokerage device,
An issuer that issues a temporarily valid password;
A password transmission unit for transmitting the issued password to the communication terminal;
A receiving unit for receiving a password input in the communication terminal from the sales providing device;
A user legitimacy judging unit that judges legitimacy of the user based on whether or not the password received from the sales providing device is valid;
A legitimate user notification transmitting unit that transmits a legitimate user notification indicating that the user is a legitimate user to the sales providing device when the user is judged to be legitimate in the determination;
A storage unit that stores delivery product information related to the product to be delivered , received from the sales provision device , in association with the password received from the sales provision device ;
When receiving the password from the delivery management device that manages delivery of the product, a transmission unit that extracts the delivery product information corresponding to the password from the storage unit and transmits the information to the delivery management device;
Program to make it function.

Images