WO2002084551A1

WO2002084551A1 - Post payment system using telephone number as a key

Info

Publication number: WO2002084551A1
Application number: PCT/JP2002/003582
Authority: WO
Inventors: Masaru Tamaoki; Akira Nakazawa
Original assignee: Yugengaisha Akki
Priority date: 2001-04-10
Filing date: 2002-04-10
Publication date: 2002-10-24

Abstract

A server system can identify an originator number upon connection via a communication line from a user terminal and includes a user database for storing user personal information and charging information, a black list database for storing black list information, and control means for performing user registration, authentication, charging, and the like. A user performs registration of personal information including a telephone number in the user database in advance, and accesses from the user terminal to notify an originator telephone number. Authentication is performed in accordance with the personal information including the originator telephone number. When the authentication is performed, a charge-free service can be provided. Charging information management is performed when the user is charged.

Description

Specification

Post-payment, settlement system with telephone number as key

Technical field

The present invention provides a server for online post-payment payment, which enables users to authenticate and receive a paid service immediately by using a nearby telephone and to provide a paid service while maintaining the anonymity of the user. About the system. Background art

Conventionally, when receiving a paid service using a communication line, or when receiving a paid service such as browsing paid content by connecting to the Internet using the Internet, a mobile phone, etc., a credit card etc. Postpayment settlement methods are being used.

In this case, it is usual to perform authentication based on personal information of the user. For example, such a technology is disclosed in Japanese Patent Laid-Open Publication No. Hei 11-3455264, “Cash Payment System and Payment Method”, which is a credit inquiry communication terminal required for payment by credit card. A technology for enabling payment to be settled without using a device is disclosed.

That is, after the payer communicates with the payment settlement institution using the mobile communication terminal device having a caller number sending function, the payment settlement institution specifies the payer based on the caller number. After that, the payment settlement institution authenticates the payer using a PIN, fingerprint, voiceprint or signature. Then, by transmitting and receiving data between the payer and the payment settlement institution, payment settlement, confirmation of the unpaid amount, and confirmation of the credit balance are performed.

However, according to the invention described above, the user must communicate with a payment settlement institution such as a credit card company, and the payment settlement period is directly received from the user. All information, such as whether or not such a paid service was used, is transmitted, which poses a problem from the viewpoint of privacy. But Cannot promote the use of users.

Also, in Japanese Patent Application Laid-Open No. 2001-455556, “User authentication method, user authentication system and recording medium”, a one-time password without using dedicated hardware for authentication or a similar method is used. A technique for providing a user authentication system and method has been disclosed.

According to the present invention, when the service supply device authenticates a pre-registered user, the telephone number of the user's telephone is registered before the authentication, and the user can use the telephone to register the CTI ( computer telephony integration) Make a call to the server. After the CTI server authenticates the user based on the called telephone number, the information processing device such as the CTI server generates a password and transmits it to both the user and the service supply device. The service supply device compares the transmitted password with the password entered by the user, and if both match, supplies the service to the user.

However, the above one-time password, which is very effective in terms of security 1 "life and confidentiality, is different every time a small paid service, such as browsing a paid information service or paid content. If passwords are issued and input is made, it will be difficult to manage passwords, etc., and it will not be possible to promote the use of users. Although it is desirable to reduce the risk for a paid service provider by paying in the future, it is sufficient to authenticate the user and determine the user's credibility without necessarily using a strict one-time password. Disclosure

Therefore, the present invention solves the above-mentioned problems, and provides authentication by using a nearby telephone so that a paid service can be immediately received, and a paid service can be provided while maintaining anonymity of the user. And to provide a server system for online postpaid payments.

It is also possible to collectively settle payments without transmitting all information such as what kind of paid service was used directly during the payment period. Provide a system that promotes use by users.

In addition, it provides a system that can authenticate users and judge the creditworthiness of users in order to reduce the risk to paid service providers by postpaid payment.

In order to solve the above problems, the invention according to claim 1 is a server system for accessing from a user terminal device provided connected to a communication line represented by the Internet,

The server system can determine the caller ID when connecting via the communication line from the user terminal device,

A user database that stores personal information and billing information of the user, a blacklist database that stores blacklist information used for authentication processing, and a control unit that performs user registration processing, authentication processing, billing processing, and the like.

A process in which the user registers personal information including a telephone number of a communication line used by the user terminal device in the user database in advance;

A process of accessing the server system from the user terminal device and notifying a caller telephone number;

The process of performing authentication based on the personal information including the notified caller's telephone number and, if authentication is performed normally, enabling the provision of paid services and the like, and the provision of paid services etc. It is characterized in that it is a server system for online post-payment payments.

Further, in order to solve the above problem, the invention according to claim 2 is a server system for accessing from a user terminal device provided by being connected to a communication line represented by the Internet,

The user collects personal information including the telephone number of the communication line used by the user terminal device. A process of registering in the user database in advance;

Disconnecting the connection in the server system, making a call to the notified caller telephone number to establish the connection, and performing authentication;

If the authentication is performed normally, it enables the provision of a paid service and the like, and performs a process of managing billing information when a fee for the provision of a paid service and the like is generated. It is characterized by being a server system for online postpaid payment and settlement.

In order to solve the above-mentioned problems, in the invention described in claim 3, in the invention described in claim 1 or 2,

The process in which the user registers personal information including a telephone number of a communication line used for connection from the user terminal device in advance in the user database includes accessing the server-system from the user terminal, A process of transmitting personal information including a telephone number used by the terminal device;

A server system receiving the personal information, determining whether or not the user can be registered by referring to the blacklist database;

If it is determined that user registration is possible in the above determination, a process of generating authentication information such as a telephone number and a password for accessing the server system from the user terminal device and transmitting the authentication information to the user terminal. The server system for online post-payment settlement according to any one of claims 1 and 2, characterized in that it is a process comprising:

In order to solve the above-mentioned problems, in the invention described in claim 4, in the invention described in claims 1 to 3,

If the authentication is performed normally, the process for enabling the provision of the paid service or the like is a paid service or the like provided in a system provided by another company different from the server system,

If the authentication is successfully performed, a process of permitting access to a system provided by another provider that provides a paid service or the like; When a user receives a paid service or the like in a system provided by another provider from the user terminal device, a process of receiving the billing information from the system provided by the other provider;

And (c) storing the received billing information in the user database. The server system for online post-payment payment according to any one of claims 1 to 3, wherein And

Further, in order to solve the above problems, in the invention described in claim 5, in the invention described in claims 1 to 4,

In the server system, a process for storing payment information when a user receives payment for billing information and updating the billing information based on the payment information; The method according to any one of claims 1 to 4, wherein the personal information including the telephone number of the corresponding user is extracted and a process for enabling notification to the user is performed. It is characterized by being a server system. '

In order to solve the above-mentioned problems, in the invention described in claim 6, in the invention described in claim 5,

If the deposit amount does not reach the prescribed charge amount after the initial payment date or notification to the user and after the prescribed period, the user registration will be deleted or invalidated, and the corresponding user's telephone number will be entered. 6. The server system for online post-payment payment according to claim 5, wherein a process of extracting personal information including the user and storing the personal information of the user in the blacklist database is performed. It is characterized by.

In order to solve the above-mentioned problems, in the invention described in claim 7, in the invention described in claim 5,

If the deposit amount is less than the initial payment required date, the number of times is counted for each user and stored in the user database.If the number reaches the predetermined number, user registration And deleting the personal information, extracting personal information including the telephone number of the user, and storing the personal information of the user in the blacklist database. It is a server system for online post-payment payment described in the range 5 of the above. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a system configuration diagram showing a basic configuration of the present invention.

FIG. 2 is a flowchart showing a basic processing flow of the present invention.

FIG. 3 is a flowchart showing a basic processing flow of the present invention.

FIG. 4 is a flowchart showing a basic processing flow of the present invention.

FIG. 5 is an explanatory diagram showing an embodiment of the system of the present invention.

FIG. 6 is an explanatory diagram showing an embodiment of the system of the present invention. BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the system of the present invention will be described with reference to the drawings.

A server system for online post-payment and settlement according to the present invention is a server system for accessing from a user terminal device provided connected to a communication line represented by the Internet.

FIG. 1 is a system configuration diagram showing a basic configuration of the present invention. User terminal devices provided by users are shown in Fig. 1 as terminals and telephones that can be connected to the WEB. User terminal devices include mobile phones with a browser function that can be connected to the Internet, etc. Wireless communication terminals, portable information terminals, and computer terminals such as personal computers and workstations are used.

The computer terminal includes control means, storage means, input means, output means, display means, and the like. Computer networks, such as the Internet, are equipped with functions to send and receive connectives and data, and are usually equipped with application programs such as browsers, e-mail software, and single processors, and operating systems (〇S). It is a form.

In addition, user terminal devices include a wide range of devices such as Internet TVs, game devices, video conferencing systems, and other home appliances with network connection functions. Including.

The server system described above is shown as an administrator server in FIG. 1, and is usually provided by a system administrator who provides a postpaid system.

The general configuration of a server system consists of a www server, a database server, an application server, a mail server, and the like. Usually, application server, database server, authentication server, _w

It is composed of an EB server, a mail server as required, and other various devices.

Each of these servers includes a form provided on the same physical device, a form composed of physically plural devices, and a form composed of physically plural devices connected via a network. Various forms are included if functionally similar functions are realized.

The server system of the present invention includes storage means, control means, input means, output means, display means, and the like.

Next, the database server is provided with a user database that stores personal information and billing information of the user, and a blacklist database that stores blacklist information used for authentication processing.

The application server includes control means for performing user registration processing, authentication processing, billing processing, and the like.

The server system includes a program for performing a user registration process, an authentication process, a charging process, a blacklist registration process, and the like based on data transmitted from the user terminal device.

Next, an example of a basic processing flow of the present invention will be described.

FIG. 2, FIG. 3, and FIG. 4 are flowcharts showing a basic processing flow of the present invention. Note that the processing flow shown here is an example, and the present invention is not limited to this.

FIGS. 5 and 6 are explanatory diagrams showing an embodiment of the system of the present invention. First, processing for registering user information in the user database will be described. The information to be registered must be personal information including the telephone number of the communication line used by the user terminal device. Information.

At the time of registration, in FIG. 2, when the user terminal accesses the server system and requests a registration menu, the WWW server transmits a registration screen file to the user terminal and is displayed on the user terminal.

Next, using the input form on the registration screen, input the e-mail address, the telephone number of the communication line used by the user terminal device, the name, etc. as the user's personal information on the user terminal device. Send.

The server system receives the data including the personal information and extracts the telephone number data included in the personal information.

Next, the blacklist database is searched using the extracted telephone number as a key, and it is determined whether or not the input and transmitted telephone number exists in the data in the blacklist database.

If there is a corresponding phone number in the blacklist database, an error message is displayed without user registration.

In addition, here, in addition to the entered telephone number, a blacklist database is searched using personal information such as an e-mail address and name as a key, or a telephone number and personal information of a plurality of items such as an electronic mail address and name. The search may be performed by searching a blacklist database using as a key. For example, even if the same user tries to register with a different telephone number, it can be judged by the blacklist database, which is an effective method.

If the result of the determination is that the user has not been registered in the blacklist database, the process proceeds to the next registration process.

In the server system, a telephone number and password to be connected when using the paid service after user information registration are generated.

The password is a password composed of a combination of numerals, alphabets, symbols, and the like, and is generated by a predetermined logic using a random number or the like. In addition, the telephone number to be connected when using the paid service is the telephone number to connect to the Internet by dial-up connection or the telephone number of the telephone line that provides the paid service, and the user's area (area of area code Etc.) Assign to each one.

The generated password and the telephone number to be connected to the assigned user are stored in the user database together with other personal information.

In addition, the generated data including the passcode and the telephone number to be connected to the assigned user is transmitted to the user terminal device and displayed. Alternatively, the information may be transmitted and notified by electronic mail.

With the above processing, the user registration processing is completed.

Next, referring to FIG. 3, the flow of processing when a user who has been notified of the password and the connected telephone number after completing the user registration connects to the server system from the user terminal device and receives authentication will be described. explain.

First, a call is made from the user terminal device to the telephone number to be connected to the user assigned at the time of user registration. At this time, the call is made according to the setting for notifying the caller ID. For example, in the caller ID notification service provided by NTT (trademark), a call is made using the telephone number caller notification service (186) and used for authentication processing.

In the server system, it is determined whether or not the caller ID has been notified. If the caller ID has not been notified, the process ends without making a connection.

If the caller ID has been notified, it is determined whether or not the data of the corresponding telephone number is stored by referring to the user database using the notified caller number as a key. If it is not stored, the phone number is not registered as a user, and the process ends without making a connection.

If there is data of the corresponding telephone number, it is a telephone number registered as a user, and it is required to input a password to determine whether or not the user is the corresponding telephone number. Enters the password and sends it. The password received by the server system is compared with the password of the user of the corresponding telephone number in the user database, and if they match, the authentication and verification are normally performed.

If they do not match, the information is different from the registered user's personal information, so re-entry is required. If the authentication is successful, various paid services can be provided to the registered users.

After the authentication process is completed, the guidance "Registration is complete. Please access the service and enjoy it."

Also, as described in claim 4, if the authentication is performed normally, the process of permitting access to the system provided by another provider that provides paid services, etc. When a user receives a paid service or the like in a system provided by another provider, a process of receiving the charging information from a system provided by the other provider, and storing the received charging information in the user database. By performing the above-described processing, the authentication system of the present invention can be used in providing a paid service provided by a third party other than the business operator managing the server system of the present invention.

Paid services can be provided in various forms, such as providing paid audio content, providing paid information services, browsing paid websites, and purchasing products and services provided online. Can be used.

Billing information such as the amount charged for the paid service is stored in the user database.

Also, as described in Claim 4, when another provider provides a paid service, etc., the process of receiving the charging information from the system provided by the other provider, and the received charging information Is stored in the user database.

Next, a description will be given of another processing flow when the user who has been notified of the password and the connection telephone number after completing the user registration connects to the server system from the user terminal device and receives authentication.

In the invention according to claim 2, there is provided a server system for accessing from a user terminal device connected to a communication line represented by the Internet, wherein the server system includes a user terminal device. A user database that stores the user's personal information and billing information; a blacklist database that stores blacklist information used for authentication processing; Registration process, authentication process, section Control means for performing gold processing and the like. It is similar to the system described so far.

The process for the user to register personal information including the telephone number of the communication line used by the user terminal device in the user database in advance is omitted because it is common.

In the server system, it is determined whether or not the caller ID is notified. If the caller ID has not been notified, the process ends without making a connection.

If the caller ID is notified, disconnect the server system once. It is desirable for the user terminal device to keep the authentication screen displayed at this time.

Next, a call is made to the caller telephone number notified from the server system to establish a connection. The connection is normally established, and then authentication is performed by prompting for a password or the like.

A request for password entry is made, and the user enters and transmits a password at the user terminal device.

The password received by the server system is compared with the password of the user of the corresponding telephone number in the user database, and if they match, the authentication is normally performed.

If they do not match, the information is different from the personal information of the entered user and a re-entry is required.

If the authentication is successful, various paid services can be provided to the registered users.

After the authentication process is completed, the guidance "Registration is completed. Please access the service and enjoy it." Hereinafter, the provision of the fee-based service and the like and the billing process are omitted because they are common to the above.

Next, a process of confirming whether or not the user has made a deposit of a predetermined deposit amount and a process of registering the charging information in the blacklist database will be described with reference to FIG.

First, as a prerequisite for confirming whether or not the payment information has been paid by the payment date, the server system performs processing for storing the payment information when the user has received the payment information.

When payment processing is performed in the server system, the payment information is stored in the corresponding user database. In addition, when the settlement period for performing the settlement processing of a credit card company and the server system are connected through a computer network, the system receives the deposit information including the deposit amount and the deposit date for each user, and receives a user database. The data of the corresponding user is stored.

Alternatively, the server system administrator may make an input by using an input means such as a keyboard connected to the server system, and store the input.

Based on the deposit information, the ability to subtract and update the deposited data from the billing information to determine whether or not the deposit amount is equal to the prescribed billing amount, and determine whether the deposit amount is equal to the prescribed charge amount If not, extract personal information including the user's phone number from the user database. The extracted personal information data includes a telephone number that allows notification to the user and, if an e-mail address was registered at the time of user registration, this data is also included. ing. Next, when the server system administrator issues a notification such as a reminder of payment to the user based on the personal information, the date is stored in the user database for each corresponding billing information.

A predetermined period can be calculated from the date by the timekeeping means provided in the server system, but the predetermined period is a predetermined payment grace period, for example, one month. This is the period for registering the blacklist if it is not fulfilled. Alternatively, the period from the date of the initial payment required, instead of the date of issuing the dunning notice, can be calculated by the above-mentioned timing means.

Next, when a payment is made within the payment grace period, the server system performs processing for storing the payment information when the user has made a payment for the billing information in the same manner as described above.

In addition, the server system administrator uses a keyboard or other input device connected to the server system to input data to the server system administrator! / It may be memorized.

When the deposit grace period has elapsed, it is determined whether the deposit amount is equal to the predetermined charge amount.If the deposit amount is less than the predetermined charge amount, personal information including the telephone number of the corresponding user is determined. From the user database.

Next, the personal information of the extracted user is deleted from the user database. This invalidates the user registration. Alternatively, the information in the user database may not be deleted, but invalid data for which authentication processing is disabled may be stored so that the authentication currency cannot be used.

In addition, a process of storing the extracted personal information of the user in the blacklist database is performed. As a result, when the user attempts to register again, a process for rejecting the registration can be performed.

Further, as another form of the present embodiment, when the amount of payment is not sufficient on the initial payment required date, the number of times is counted for each user and stored in the user database. When the predetermined number of times is reached, the personal information of the corresponding user is extracted from the user database, and the extracted personal information of the user is deleted from the user database. This invalidates user registration. Also, the user database information is not deleted and the authentication process is disabled. It may be possible to store invalid data to prevent authentication currency from being used.

Further, a process of storing the extracted personal information of the user in the blacklist database is performed. As a result, when the user attempts to register again, a process for rejecting the registration can be performed.

In this case, if the deposit amount has not been fulfilled on the initial deposit due date, but the deposit has been made within the payment grace period, but the deposit has been delayed a predetermined number of times, You can delete or invalidate the user registration and refuse re-registration because you are worried about your trust. Industrial applicability

As described above in detail, according to the present invention, authentication can be performed by a nearby telephone or terminal device and a paid service can be immediately received, and a paid service can be obtained while maintaining anonymity of the user. To provide a server system for online post-payment payment.

It is also possible to collectively settle payments without transmitting all information such as what kind of paid service was used directly during the payment period, and promote users' usage while protecting privacy. A system can be provided.

In addition, it is possible to provide a system that can authenticate users and determine the creditworthiness of users in order to reduce the risk for paid service providers due to postpaid payments.

Claims

' The scope of the claims

1. A server system for accessing from a user terminal device provided connected to a communication line represented by the Internet,

A user database that stores user's personal information and charging information, a blacklist database that stores blacklist information used for authentication processing, and control means for performing user registration processing, authentication processing, charging processing, and the like.

The process of performing authentication based on the personal information including the notified caller's telephone number and, if authentication is performed normally, enabling the provision of paid services and the like, and the provision of paid services etc. A server system for online post-payment payments that specializes in processing for managing billing information in the event of occurrence.

2. A server system for accessing from a user terminal device provided connected to a communication line represented by the Internet,

Disconnect from the server system and make a call to the notified caller phone number To establish a connection and authenticate,

If the authentication is performed normally, it enables the provision of a paid service and the like, and performs a process of managing billing information when a fee for the provision of a paid service and the like is generated. Server system for online postpaid payments.

3. In the invention described in claims 1 or 2,

The process of registering the personal information including the telephone number of the communication line used by the user from the user terminal device in the user database in advance in the user database includes accessing the server system from the user terminal and using the user terminal device. Processing to transmit personal information including telephone numbers,

If it is determined that user registration is possible in the above determination, a process of generating authentication information such as a telephone number and a password for accessing the server system from the user terminal device and transmitting the authentication information to the user terminal. The Sano system for online post-payment settlement according to any one of claims 1 to 2, characterized by processing comprising:

4. In the invention described in claims 1-3,

If the authentication is performed normally, the processing for enabling the provision of the paid service or the like is a paid service or the like provided in a system provided by another business different from the server system described above.

If the authentication is successfully performed, a process of permitting access to a system provided by another provider that provides a paid service or the like;

When a user receives a paid service or the like in a system provided by another provider from the user terminal device, a process of receiving the billing information from the system provided by the other provider;

And storing the received billing information in the user database. The server system for online post-payment payment according to any one of claims 1 to 3, wherein:

5. In the invention described in claims 1-4, In the server system, a process for storing payment information when a user receives payment for billing information and updating the billing information based on the payment information; The method according to any one of claims 1 to 4, wherein the personal information including the telephone number of the corresponding user is extracted and a process for enabling notification to the user is performed. Server system.

6. In the invention described in claim 5,

If the deposit amount does not reach the prescribed charge amount after the initial payment date or notification to the user and after the prescribed period, the user registration will be deleted or invalidated, and the corresponding user's telephone number will be entered. 6. The server system for online post-pay payment according to claim 5, wherein a process for extracting personal information including the user and storing the personal information of the user in the blacklist database is performed.

7. In the invention described in claim 5,

If the deposit amount is less than the initial payment required date, the number of times is counted for each user and stored in the user database.If the number reaches the predetermined number, user registration And deleting personal information including the telephone number of the corresponding user, and storing the personal information of the user in the blacklist database. A server system for online postpaid payment as described in.